Bug #68937 [NEW]: Segfault in curl_multi_exec

From: danack Operating system: Centos 64bit PHP version: master-Git-2015-01-28 (Git) Package: cURL related Bug Type: Bug Bug description:Segfault in curl_multi_exec Description: ------------ Segfault occurs in curl_multi_exec when testing simple script. Test script: --------------- Test script here: https://gist.github.com/Danack/ce6be556842d645ab0ce It uses the Amazon PHP sdk. Expected result: ---------------- Code should not segfault Actual result: -------------- ==8799== Invalid read of size 4 ==8799== at 0x56BF53: curl_read (zend_types.h:696) ==8799== by 0x5C29F26: Curl_fillreadbuffer (in /usr/lib64/libcurl.so.4.1.1) ==8799== by 0x5C2B04B: Curl_readwrite (in /usr/lib64/libcurl.so.4.1.1) ==8799== by 0x5C31745: ??? (in /usr/lib64/libcurl.so.4.1.1) ==8799== by 0x5C31DB2: curl_multi_perform (in /usr/lib64/libcurl.so.4.1.1) ==8799== by 0x573369: zif_curl_multi_exec (multi.c:222) ==8799== by 0x8C600B: ZEND_DO_FCALL_SPEC_HANDLER (zend_vm_execute.h:596) ==8799== by 0x86F39F: execute_ex (zend_vm_execute.h:352) ==8799== by 0x824F0B: zend_call_function (zend_execute_API.c:835) ==8799== by 0x853E7C: zend_call_method (zend_interfaces.c:101) ==8799== by 0x86741F: zend_std_call_user_call (zend_object_handlers.c:912) ==8799== by 0x8C600B: ZEND_DO_FCALL_SPEC_HANDLER (zend_vm_execute.h:596) ==8799== Address 0x0 is not stack'd, malloc'd or (recently) free'd -- Edit bug report at https://bugs.php.net/bug.php?id=68937&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=68937&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=68937&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=68937&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=68937&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=68937&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=68937&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=68937&r=needscript Try newer version: https://bugs.php.net/fix.php?id=68937&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=68937&r=support Expected behavior: https://bugs.php.net/fix.php?id=68937&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=68937&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=68937&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=68937&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=68937&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=68937&r=dst IIS Stability: https://bugs.php.net/fix.php?id=68937&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=68937&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=68937&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=68937&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=68937&r=mysqlcfg