Bug #69293 [Com]: NEW segfault when using SoapClient::__setSoapHeader (bisected, regression)

From: Date: Fri, 27 Mar 2015 09:09:02 +0000
Subject: Bug #69293 [Com]: NEW segfault when using SoapClient::__setSoapHeader (bisected, regression)
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-191636@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=69293&edit=1

 ID:                 69293
 Comment by:         vlajos at gmail dot com
 Reported by:        andre at tomt dot net
 Summary:            NEW segfault when using SoapClient::__setSoapHeader
                     (bisected, regression)
 Status:             Closed
 Type:               Bug
 Package:            SOAP related
 Operating System:   Linux Ubuntu 14.04 x86_64
 PHP Version:        5.5Git-2015-03-24 (Git)
 Assigned To:        laruence
 Block user comment: N
 Private report:     N

 New Comment:

Could you please reopen this? Or should I create a similar one for the 5.4 versions?


Previous Comments:
------------------------------------------------------------------------
[2015-03-26 15:13:20] vlajos at gmail dot com

We have something similar...
The original test script fails on this system:

# php -v
PHP 5.4.39 (cli) (built: Mar 20 2015 08:09:55)
Copyright (c) 1997-2014 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2014 Zend Technologies

# cat /etc/redhat-release 
Red Hat Enterprise Linux Server release 5.11 (Tikanga)

(gdb) bt
#0  0x00002af73124a073 in master_to_xml_int (encode=0x2af731479d78, data=0x2af729fbc810, style=2,
parent=0x1abd9f30, check_class_map=<value optimized out>)
    at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:466
#1  0x00002af73124db52 in to_xml_object (type=0x2af73147a8a0, data=0x2af729fba9f8, style=2,
parent=<value optimized out>) at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:2070
#2  0x00002af731249c84 in master_to_xml_int (encode=0x2af73147a8a0, data=0x2af729fba9f8, style=2,
parent=0x1abd9e90, check_class_map=704362160)
    at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:528
#3  0x00002af731249fc9 in master_to_xml_int (encode=0x2af731479d78, data=0x2af729fbb680, style=2,
parent=0x1abd9e90, check_class_map=1)
    at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:447
#4  0x00002af73124db52 in to_xml_object (type=0x2af731479d78, data=0x2af729fbc930, style=2,
parent=<value optimized out>) at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:2070
#5  0x00002af731249c84 in master_to_xml_int (encode=0x2af731479d78, data=0x2af729fbc930, style=2,
parent=0x1abd9ae0, check_class_map=704362160)
    at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:528
#6  0x00002af731249c84 in master_to_xml_int (encode=0x2af731479b80, data=0x2af729fbc930, style=2,
parent=0x1abd9ae0, check_class_map=704362160)
    at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:528
#7  0x00002af731238e7b in serialize_function_call (this_ptr=0x2af729fc0c58, function=0x2af729fc44a8,
function_name=<value optimized out>, uri=<value optimized out>, 
    arguments=0x2af729fc0c50, arg_count=1, version=1, soap_headers=0x2af729fbe998) at
/usr/src/debug/php-5.4.39/ext/soap/soap.c:4358
#8  0x00002af731242e6b in do_soap_call (this_ptr=0x2af729fbbc00, function=0x2af729fc5f30
"GetAtomicNumber", function_len=<value optimized out>, arg_count=1,
real_args=0x2af729fc0c50, 
    return_value=0x2af729fc5fd8, location=0x2af729fc3a20 "http://www.webservicex.net/periodictable.asmx",
soap_action=0x0, call_uri=0x0, soap_headers=0x2af729fbe998, output_headers=0x0)
    at /usr/src/debug/php-5.4.39/ext/soap/soap.c:2708
#9  0x00002af7312438f3 in zim_SoapClient___call (ht=<value optimized out>,
return_value=0x2af729fc5fd8, return_value_ptr=<value optimized out>, this_ptr=0x2af729fbbc00, 
    return_value_used=<value optimized out>) at /usr/src/debug/php-5.4.39/ext/soap/soap.c:2924
#10 0x00000000005ca7cc in zend_call_function (fci=0x7fff6a71e190, fci_cache=0x7fff6a71e1e0) at
/usr/src/debug/php-5.4.39/Zend/zend_execute_API.c:978
#11 0x00000000005eed0f in zend_call_method (object_pp=0x7fff6a71e2b0, obj_ce=0x1abbddc0,
fn_proxy=0x1abbdf18, function_name=0x6e3bcb "__call", function_name_len=6, 
    retval_ptr_ptr=0x7fff6a71e2c0, param_count=2, arg1=0x2af729fc5f00, arg2=0x2af729fbea20) at
/usr/src/debug/php-5.4.39/Zend/zend_interfaces.c:97
#12 0x00000000005fcd0d in zend_std_call_user_call (ht=<value optimized out>,
return_value=0x2af729fbe778, return_value_ptr=<value optimized out>, this_ptr=0x2af729fbbc00, 
    return_value_used=<value optimized out>) at
/usr/src/debug/php-5.4.39/Zend/zend_object_handlers.c:893
#13 0x000000000060659a in zend_do_fcall_common_helper_SPEC (execute_data=0x2af729f88060) at
/usr/src/debug/php-5.4.39/Zend/zend_vm_execute.h:643
#14 0x000000000060c3ce in execute (op_array=0x2af729fbb2b8) at
/usr/src/debug/php-5.4.39/Zend/zend_vm_execute.h:410
#15 0x00000000005d6bfe in zend_execute_scripts (type=8, retval=0x0, file_count=3) at
/usr/src/debug/php-5.4.39/Zend/zend.c:1329
#16 0x000000000057c2e8 in php_execute_script (primary_file=0x7fff6a720a50) at
/usr/src/debug/php-5.4.39/main/main.c:2502
#17 0x000000000067eccd in do_cli (argc=2, argv=0x7fff6a721d88) at
/usr/src/debug/php-5.4.39/sapi/cli/php_cli.c:989
#18 0x000000000067f64d in main (argc=2, argv=0x7fff6a721d88) at
/usr/src/debug/php-5.4.39/sapi/cli/php_cli.c:1365

------------------------------------------------------------------------
[2015-03-25 18:00:09] andre at tomt dot net

Confirming the fix returns things to a working state for 5.5

Thanks

------------------------------------------------------------------------
[2015-03-25 09:51:47] kaplan@php.net

Please also apply to PHP-5.4 branch.

------------------------------------------------------------------------
[2015-03-25 05:19:41] laruence@php.net

The fix for this bug has been committed.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.

 For Windows:

http://windows.php.net/snapshots/
 
Thank you for the report, and for helping us make PHP better.



------------------------------------------------------------------------
[2015-03-25 05:18:49] laruence@php.net

fixed in https://github.com/php/php-src/commit/a5d45bae

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=69293


--
Edit this bug report at https://bugs.php.net/bug.php?id=69293&edit=1


Thread (15 messages)

« previous php.bugs (#191636) next »