Bug #69406 [Com]: PHP crashes with 0xC00000005 (EACCESS): dangling pointer and double free?

Edit report at https://bugs.php.net/bug.php?id=69406&edit=1 ID: 69406 Comment by: jan dot starke at t-systems dot com Reported by: jan dot starke at t-systems dot com Summary: PHP crashes with 0xC00000005 (EACCESS): dangling pointer and double free? Status: No Feedback Type: Bug Package: Reproducible crash Operating System: Windows PHP Version: 5.6.7 Assigned To: yohgaki Block user comment: N Private report: N New Comment: We're still investigating this issue. I will reactivate this ticket when we found something new... Regards, Jan Previous Comments: ------------------------------------------------------------------------ [2015-05-03 04:22:20] php-bugs at lists dot php dot net No feedback was provided. The bug is being suspended because we assume that you are no longer experiencing the problem. If this is not the case and you are able to provide the information that was requested earlier, please do so and change the status of the bug back to "Re-Opened". Thank you. ------------------------------------------------------------------------ [2015-04-24 07:11:53] yohgaki@php.net Applied from PHP-5.5 upto master. https://github.com/php/php-src/commit/e881017a7556061a8cff084bc823319270d4044e @jan, when you could test how it goes, please update this bug report. Thank you. ------------------------------------------------------------------------ [2015-04-24 06:59:05] yohgaki@php.net I couldn't reproduce crash with invalid save_path setting, but this is possible patch. It does not harm any, so I may commit it see if it works. [yohgaki@dev github-php-src]$ git diff diff --git a/ext/session/mod_files.c b/ext/session/mod_files.c index 195104f..9dbe507 100644 --- a/ext/session/mod_files.c +++ b/ext/session/mod_files.c @@ -325,6 +325,7 @@ PS_CLOSE_FUNC(files) if (data->lastkey) { efree(data->lastkey); + data->lastkey = NULL; } efree(data->basedir); ------------------------------------------------------------------------ [2015-04-10 09:33:44] laruence@php.net yohgaki, could you please take care of this? ------------------------------------------------------------------------ [2015-04-09 09:40:12] jan dot starke at t-systems dot com fixed typo in my email address, sorry ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=69406 -- Edit this bug report at https://bugs.php.net/bug.php?id=69406&edit=1