Bug #68862 [NEW]: crash in php5ts.dll

From: Date: Tue, 20 Jan 2015 13:08:39 +0000
Subject: Bug #68862 [NEW]: crash in php5ts.dll
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-190072@lists.php.net to get a copy of this message
From:             chr dot schubert at gmx dot de
Operating system: Windows 7 / Windows 2008 R2
PHP version:      5.5.20
Package:          Reproducible crash
Bug Type:         Bug
Bug description:crash in php5ts.dll

Description:
------------
I am running a Windows (7 & 2008R2) web server which handles quite a few
requests from many different clients. The webserver is Apache 2.4.10
downloaded from https://www.apachelounge.com/download. It is used
together with PHP 5.5.20 (obtained from
http://windows.php.net/download#php-5.5-ts-VC11-x86)
installed as Apache
2.0 Handler (= Output in field Server API from phpinfo()).

When a php script is accessed from different Clients via the web Server,
it does not take long (~30seconds) until I receive an "Access Violation
error 0xc0000005" (This is if I run httpd -X. Otherwise corresponding
log entries occur)

After the Crash the backtrace points at varying positions in
php5ts.dll.

Only one module is being used by my php: php_oci8_11g.dll

I tried both the x86 and x64 Versions on multiple computers. It seems to
me that the x86 Version takes a bit longer to Crash. Any help is greatly
appreciated.

Changes made to php.ini (compared to php.ini-dist):
  extension=php_oci8_11g.dll
  date.timezone = "Europe/Berlin"
  date.default_latitude = 51.248532
  date.default_longitude = 6.704677

Test script:
---------------
Unfortunately, I cannot publish the php script we run. However, I am
happy to try out any suggestions.

I can only publish how the Clients Access the webserver:
<html>
<head>
<meta http-equiv="refresh" content="0">
</head>
<body>
<iframe src="http://webserver/script.php?event=PING"
/>
</body>
</html>

Expected result:
----------------
No Crash ;-)

Actual result:
--------------
-----------------------------------------
Visual Studio Backtrace 1:
-----------------------------------------
 	ntdll.dll!77112d47() 	
 	[Frames below may be incorrect and/or missing, no symbols loaded for
ntdll.dll]	
 	kernel32.dll!754cc484() 	
 	kernel32.dll!754cc484() 	
 	msvcr110.dll!611edac2() 	
>	php5ts.dll!timelib_time_dtor(timelib_time * t=0x0759a818)  Line 84 +
0x12 bytes	C
 	php5ts.dll!php_format_date(char * format=0x05e75e10, int format_len=3,
long ts=1421756704, int localtime=1, void * * * tsrm_ls=0x057ae6e0) 
Line 1251 + 0x8 bytes	C
 	php5ts.dll!php_date(int ht=1, _zval_struct * return_value=0x05e75b28,
_zval_struct * * return_value_ptr=0x00000000, _zval_struct *
this_ptr=0x00000000, int return_value_used=1, void * * *
tsrm_ls=0x057ae6e0, int localtime=1)  Line 1227	C
 	php5ts.dll!zif_date(int ht=1, _zval_struct * return_value=0x05e75b28,
_zval_struct * * return_value_ptr=0x00000000, _zval_struct *
this_ptr=0x00000000, int return_value_used=1, void * * *
tsrm_ls=0x057ae6e0)  Line 1356 + 0x1f bytes	C
 	php5ts.dll!zend_do_fcall_common_helper_SPEC(_zend_execute_data *
execute_data=0x00270000, void * * * tsrm_ls=0x075a7ad0)  Line 551	C
 	php5ts.dll!execute_ex(_zend_execute_data * execute_data=0x05e62064,
void * * * tsrm_ls=0x057ae6e0)  Line 363 + 0xf9 bytes	C
 	php5ts.dll!zend_execute(_zend_op_array * op_array=0x05ded728, void * *
* tsrm_ls=0x0000002c)  Line 388 + 0x1a6 bytes	C
 	php5ts.dll!zend_execute_scripts(int type=262983856, void * * *
tsrm_ls=0x00000008, _zval_struct * * retval=0x00000001, int
file_count=0, ...)  Line 1331	C
 	php5ts.dll!zend_set_timeout(long seconds=0, int
reset_signals=1027153623)  Line 1510	C
 	php5ts.dll!_emalloc(unsigned int size=)  Line 2430	C
 	php5ts.dll!php_auto_globals_create_files(const char * name=0x0000001a,
unsigned int name_len=265405876, void * * * tsrm_ls=0x0fd1ad87)  Line
720	C
 	php5ts.dll!_xmlGetGlobalState()  + 0x11 bytes	
 	0518f770()	
 	15ff016a()	

----------------------------------
Visual Studio Backtrace 2
----------------------------------
>	ntdll.dll!77112d47() 	
 	[Frames below may be incorrect and/or missing, no symbols loaded for
ntdll.dll]	
 	ntdll.dll!77112cf8() 	
 	kernel32.dll!754cc484() 	
 	msvcr110.dll!611edac2() 	
 	msvcr110.dll!611f310f() 	
 	msvcr110.dll!611edaff() 	
 	php5ts.dll!seek_to_tz_position(const unsigned char * * tzf=0x052bf684,
char * timezone=0x0027bf50, const _timelib_tzdb * tzdb=0x0ff43e98)  Line
269 + 0x9 bytes	C
 	php5ts.dll!timelib_parse_tzfile(char * timezone=0x0027bf50, const
_timelib_tzdb * tzdb=0x0ff43e98)  Line 320 + 0x13 bytes	C
 	php5ts.dll!php_date_parse_tzfile(char * formal_tzname=0x0027bf50,
const _timelib_tzdb * tzdb=0x0ff43e98, void * * * tsrm_ls=0x0226bae8) 
Line 912 + 0xa bytes	C
 	php5ts.dll!get_timezone_info(void * * * tsrm_ls=0x0226bae8)  Line 987
+ 0x19 bytes	C
 	php5ts.dll!php_format_date(char * format=0x05595d68, int format_len=3,
long ts=1421758713, int localtime=1, void * * * tsrm_ls=0x0226bae8) 
Line 1241	C
 	php5ts.dll!php_date(int ht=1, _zval_struct * return_value=0x05595ab0,
_zval_struct * * return_value_ptr=0x00000000, _zval_struct *
this_ptr=0x00000000, int return_value_used=1, void * * *
tsrm_ls=0x0226bae8, int localtime=1)  Line 1227	C
 	php5ts.dll!zif_date(int ht=1, _zval_struct * return_value=0x05595ab0,
_zval_struct * * return_value_ptr=0x00000000, _zval_struct *
this_ptr=0x00000000, int return_value_used=1, void * * *
tsrm_ls=0x0226bae8)  Line 1356 + 0x1f bytes	C
 	php5ts.dll!zend_do_fcall_common_helper_SPEC(_zend_execute_data *
execute_data=0x001c0000, void * * * tsrm_ls=0x0688bd28)  Line 551	C
 	php5ts.dll!execute_ex(_zend_execute_data * execute_data=0x0558397c,
void * * * tsrm_ls=0x0226bae8)  Line 363 + 0xf9 bytes	C
 	php5ts.dll!zend_execute(_zend_op_array * op_array=0x0a13d728, void * *
* tsrm_ls=0x0000002c)  Line 388 + 0x1a6 bytes	C
 	php5ts.dll!zend_execute_scripts(int type=263508144, void * * *
tsrm_ls=0x00000008, _zval_struct * * retval=0x00000001, int
file_count=0, ...)  Line 1331	C
 	php5ts.dll!zend_set_timeout(long seconds=0, int
reset_signals=1027153623)  Line 1510	C
 	php5ts.dll!_emalloc(unsigned int size=)  Line 2430	C
 	php5ts.dll!php_auto_globals_create_files(const char * name=0x0000001a,
unsigned int name_len=265930164, void * * * tsrm_ls=0x0fd9ad87)  Line
720	C
 	php5ts.dll!_xmlGetGlobalState()  + 0x11 bytes	
 	052bfa38()	
 	15ff016a()	


-- 
Edit bug report at https://bugs.php.net/bug.php?id=68862&edit=1
-- 
Try a snapshot (PHP 5.4):   https://bugs.php.net/fix.php?id=68862&r=trysnapshot54
Try a snapshot (PHP 5.5):   https://bugs.php.net/fix.php?id=68862&r=trysnapshot55
Try a snapshot (trunk):     https://bugs.php.net/fix.php?id=68862&r=trysnapshottrunk
Fixed in SVN:               https://bugs.php.net/fix.php?id=68862&r=fixed
Fixed in release:           https://bugs.php.net/fix.php?id=68862&r=alreadyfixed
Need backtrace:             https://bugs.php.net/fix.php?id=68862&r=needtrace
Need Reproduce Script:      https://bugs.php.net/fix.php?id=68862&r=needscript
Try newer version:          https://bugs.php.net/fix.php?id=68862&r=oldversion
Not developer issue:        https://bugs.php.net/fix.php?id=68862&r=support
Expected behavior:          https://bugs.php.net/fix.php?id=68862&r=notwrong
Not enough info:            https://bugs.php.net/fix.php?id=68862&r=notenoughinfo
Submitted twice:            https://bugs.php.net/fix.php?id=68862&r=submittedtwice
register_globals:           https://bugs.php.net/fix.php?id=68862&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=68862&r=php4
Daylight Savings:           https://bugs.php.net/fix.php?id=68862&r=dst
IIS Stability:              https://bugs.php.net/fix.php?id=68862&r=isapi
Install GNU Sed:            https://bugs.php.net/fix.php?id=68862&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=68862&r=float
No Zend Extensions:         https://bugs.php.net/fix.php?id=68862&r=nozend
MySQL Configuration Error:  https://bugs.php.net/fix.php?id=68862&r=mysqlcfg



Thread (3 messages)

« previous php.bugs (#190072) next »