Bug #68937 [Opn]: Segfault in curl_multi_exec

Edit report at https://bugs.php.net/bug.php?id=68937&edit=1 ID: 68937 Updated by: danack@php.net Reported by: danack@php.net Summary: Segfault in curl_multi_exec Status: Open Type: Bug Package: cURL related Operating System: Centos 64bit PHP Version: master-Git-2015-01-28 (Git) Block user comment: N Private report: N New Comment: Hi Laruence, No, I'm not able to reduce it to a simple script. This is testing the Amazon AWS SDK, which is massive and I don't think it would be trivial to reproduce this bug outside of that SDK. However there are instructions on how to setup the example in the test script: // Download https://github.com/aws/aws-sdk-php and stick this file // in the root directory and do a composer update. Previous Comments: ------------------------------------------------------------------------ [2015-01-29 11:38:24] laruence@php.net are you able to refine it to a simple script? I can not find the "autoload.php" in your example thanks ------------------------------------------------------------------------ [2015-01-29 09:24:38] mbeccati@php.net It looks like ch->handlers->read->res is NULL inside curl_read Also, with 5.6 curl_read is called with: "PUT /rpm.example.com/LICENSE.md HTTP/1.1\r\nHost: s3-eu-..." whereas master's curl_read gets "PUT / HTTP/1.1\r\nHost: s3-eu-..." ------------------------------------------------------------------------ [2015-01-28 20:23:58] danack@php.net Description: ------------ Segfault occurs in curl_multi_exec when testing simple script. Test script: --------------- Test script here: https://gist.github.com/Danack/ce6be556842d645ab0ce It uses the Amazon PHP sdk. Expected result: ---------------- Code should not segfault Actual result: -------------- ==8799== Invalid read of size 4 ==8799== at 0x56BF53: curl_read (zend_types.h:696) ==8799== by 0x5C29F26: Curl_fillreadbuffer (in /usr/lib64/libcurl.so.4.1.1) ==8799== by 0x5C2B04B: Curl_readwrite (in /usr/lib64/libcurl.so.4.1.1) ==8799== by 0x5C31745: ??? (in /usr/lib64/libcurl.so.4.1.1) ==8799== by 0x5C31DB2: curl_multi_perform (in /usr/lib64/libcurl.so.4.1.1) ==8799== by 0x573369: zif_curl_multi_exec (multi.c:222) ==8799== by 0x8C600B: ZEND_DO_FCALL_SPEC_HANDLER (zend_vm_execute.h:596) ==8799== by 0x86F39F: execute_ex (zend_vm_execute.h:352) ==8799== by 0x824F0B: zend_call_function (zend_execute_API.c:835) ==8799== by 0x853E7C: zend_call_method (zend_interfaces.c:101) ==8799== by 0x86741F: zend_std_call_user_call (zend_object_handlers.c:912) ==8799== by 0x8C600B: ZEND_DO_FCALL_SPEC_HANDLER (zend_vm_execute.h:596) ==8799== Address 0x0 is not stack'd, malloc'd or (recently) free'd ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=68937&edit=1