Bug #69293 [Com]: NEW segfault when using SoapClient::__setSoapHeader (bisected, regression)

Edit report at https://bugs.php.net/bug.php?id=69293&edit=1 ID: 69293 Comment by: karl at debisschop dot net Reported by: andre at tomt dot net Summary: NEW segfault when using SoapClient::__setSoapHeader (bisected, regression) Status: Closed Type: Bug Package: SOAP related Operating System: Linux Ubuntu 14.04 x86_64 PHP Version: 5.5Git-2015-03-24 (Git) Assigned To: laruence Block user comment: N Private report: N New Comment: requinix - it seems the problem is that a security fix has broken the SOAP module because the applied patch had a flaw. It's not about making changes to 5.4 -- it's about making changes to the flaws in the security patch. Is there no room to fix the patch or are we to make the SOAP system potentially unusable because policy prohibits us from applying a corrected patch? Previous Comments: ------------------------------------------------------------------------ [2015-03-27 10:21:12] requinix@php.net As of a few months ago, 5.4 is only intended to get security fixes. http://php.net/supported-versions.php ------------------------------------------------------------------------ [2015-03-27 09:09:01] vlajos at gmail dot com Could you please reopen this? Or should I create a similar one for the 5.4 versions? ------------------------------------------------------------------------ [2015-03-26 15:13:20] vlajos at gmail dot com We have something similar... The original test script fails on this system: # php -v PHP 5.4.39 (cli) (built: Mar 20 2015 08:09:55) Copyright (c) 1997-2014 The PHP Group Zend Engine v2.4.0, Copyright (c) 1998-2014 Zend Technologies # cat /etc/redhat-release Red Hat Enterprise Linux Server release 5.11 (Tikanga) (gdb) bt #0 0x00002af73124a073 in master_to_xml_int (encode=0x2af731479d78, data=0x2af729fbc810, style=2, parent=0x1abd9f30, check_class_map=<value optimized out>) at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:466 #1 0x00002af73124db52 in to_xml_object (type=0x2af73147a8a0, data=0x2af729fba9f8, style=2, parent=<value optimized out>) at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:2070 #2 0x00002af731249c84 in master_to_xml_int (encode=0x2af73147a8a0, data=0x2af729fba9f8, style=2, parent=0x1abd9e90, check_class_map=704362160) at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:528 #3 0x00002af731249fc9 in master_to_xml_int (encode=0x2af731479d78, data=0x2af729fbb680, style=2, parent=0x1abd9e90, check_class_map=1) at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:447 #4 0x00002af73124db52 in to_xml_object (type=0x2af731479d78, data=0x2af729fbc930, style=2, parent=<value optimized out>) at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:2070 #5 0x00002af731249c84 in master_to_xml_int (encode=0x2af731479d78, data=0x2af729fbc930, style=2, parent=0x1abd9ae0, check_class_map=704362160) at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:528 #6 0x00002af731249c84 in master_to_xml_int (encode=0x2af731479b80, data=0x2af729fbc930, style=2, parent=0x1abd9ae0, check_class_map=704362160) at /usr/src/debug/php-5.4.39/ext/soap/php_encoding.c:528 #7 0x00002af731238e7b in serialize_function_call (this_ptr=0x2af729fc0c58, function=0x2af729fc44a8, function_name=<value optimized out>, uri=<value optimized out>, arguments=0x2af729fc0c50, arg_count=1, version=1, soap_headers=0x2af729fbe998) at /usr/src/debug/php-5.4.39/ext/soap/soap.c:4358 #8 0x00002af731242e6b in do_soap_call (this_ptr=0x2af729fbbc00, function=0x2af729fc5f30 "GetAtomicNumber", function_len=<value optimized out>, arg_count=1, real_args=0x2af729fc0c50, return_value=0x2af729fc5fd8, location=0x2af729fc3a20 "http://www.webservicex.net/periodictable.asmx", soap_action=0x0, call_uri=0x0, soap_headers=0x2af729fbe998, output_headers=0x0) at /usr/src/debug/php-5.4.39/ext/soap/soap.c:2708 #9 0x00002af7312438f3 in zim_SoapClient___call (ht=<value optimized out>, return_value=0x2af729fc5fd8, return_value_ptr=<value optimized out>, this_ptr=0x2af729fbbc00, return_value_used=<value optimized out>) at /usr/src/debug/php-5.4.39/ext/soap/soap.c:2924 #10 0x00000000005ca7cc in zend_call_function (fci=0x7fff6a71e190, fci_cache=0x7fff6a71e1e0) at /usr/src/debug/php-5.4.39/Zend/zend_execute_API.c:978 #11 0x00000000005eed0f in zend_call_method (object_pp=0x7fff6a71e2b0, obj_ce=0x1abbddc0, fn_proxy=0x1abbdf18, function_name=0x6e3bcb "__call", function_name_len=6, retval_ptr_ptr=0x7fff6a71e2c0, param_count=2, arg1=0x2af729fc5f00, arg2=0x2af729fbea20) at /usr/src/debug/php-5.4.39/Zend/zend_interfaces.c:97 #12 0x00000000005fcd0d in zend_std_call_user_call (ht=<value optimized out>, return_value=0x2af729fbe778, return_value_ptr=<value optimized out>, this_ptr=0x2af729fbbc00, return_value_used=<value optimized out>) at /usr/src/debug/php-5.4.39/Zend/zend_object_handlers.c:893 #13 0x000000000060659a in zend_do_fcall_common_helper_SPEC (execute_data=0x2af729f88060) at /usr/src/debug/php-5.4.39/Zend/zend_vm_execute.h:643 #14 0x000000000060c3ce in execute (op_array=0x2af729fbb2b8) at /usr/src/debug/php-5.4.39/Zend/zend_vm_execute.h:410 #15 0x00000000005d6bfe in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /usr/src/debug/php-5.4.39/Zend/zend.c:1329 #16 0x000000000057c2e8 in php_execute_script (primary_file=0x7fff6a720a50) at /usr/src/debug/php-5.4.39/main/main.c:2502 #17 0x000000000067eccd in do_cli (argc=2, argv=0x7fff6a721d88) at /usr/src/debug/php-5.4.39/sapi/cli/php_cli.c:989 #18 0x000000000067f64d in main (argc=2, argv=0x7fff6a721d88) at /usr/src/debug/php-5.4.39/sapi/cli/php_cli.c:1365 ------------------------------------------------------------------------ [2015-03-25 18:00:09] andre at tomt dot net Confirming the fix returns things to a working state for 5.5 Thanks ------------------------------------------------------------------------ [2015-03-25 09:51:47] kaplan@php.net Please also apply to PHP-5.4 branch. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=69293 -- Edit this bug report at https://bugs.php.net/bug.php?id=69293&edit=1