Bug #68166 [Fbk->NoF]: Exception with invalid character causes segfault

Edit report at https://bugs.php.net/bug.php?id=68166&edit=1 ID: 68166 Updated by: php-bugs@lists.php.net Reported by: sjon at hortensius dot net Summary: Exception with invalid character causes segfault -Status: Feedback +Status: No Feedback Type: Bug Package: Reproducible crash Operating System: archlinux PHP Version: 5.6.1 Private report: N New Comment: No feedback was provided. The bug is being suspended because we assume that you are no longer experiencing the problem. If this is not the case and you are able to provide the information that was requested earlier, please do so and change the status of the bug back to "Re-Opened". Thank you. Previous Comments: ------------------------------------------------------------------------ [2014-10-13 13:23:08] sjon at hortensius dot net Also; please tail your error-log while testing this; I have confirmed the messages on 2 machines (1 of them it also outputs the exception, but also the exhausted message in the error-log) ------------------------------------------------------------------------ [2014-10-13 12:59:47] sjon at hortensius dot net Could this depend on php-fpm somehow? That seems to be 100% broken here ------------------------------------------------------------------------ [2014-10-13 12:54:32] bwoebi@php.net I couldn't reproduce that issue at the command line nor via 3v4l.org http://3v4l.org/Sqbeg Are there any further environment specific things one needs to respect to reproduce? ------------------------------------------------------------------------ [2014-10-06 13:52:32] sjon at hortensius dot net with a non-debug build; we'd get: Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 140044069608296 bytes) in Unknown on line 0 and: kernel: traps: php-fpm[12013] general protection ip:61b538 sp:7fffb5870ab0 error:0 in php-fpm[400000+7b1000] ------------------------------------------------------------------------ [2014-10-06 13:47:57] sjon at hortensius dot net Description: ------------ Since 5.6; we have problems with segfaults that are reducible to a single line. Test script: --------------- throw new Exception(iconv('utf-8', 'iso-8859-1', 'ß'), 0); Actual result: -------------- child 13790 said into stderr: "[Mon Oct 6 15:39:37 2014] Script: '/srv/crash.php'" child 13790 said into stderr: "---------------------------------------" child 13790 said into stderr: "/root/php/src/php-5.6.1/main/main.c(1166) : Block 0x7fffd3054b78 status:" child 13790 said into stderr: "Invalid pointer: ((size=0x0002b5a5) != (next.prev=0xd30800e800000000))" child 13790 said into stderr: "Invalid pointer: ((prev=0x00000001) != (prev.size=0x0002b5a5))" child 13790 said into stderr: "---------------------------------------" child 13790 said into stderr: "/srv/crash.php(2) : Fatal error - Uncaught exception 'Exception' with message '�' in /srv/crash.php:2" child 13790 said into stderr: "Stack trace:" child 13790 said into stderr: "#0 {main}" child 13790 said into stderr: " thrown" ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=68166&edit=1