Bug #69700 [NEW]: tests/lang/this_assignment.phpt memory errors

From: nikic Operating system: PHP version: 5.6Git-2015-05-24 (Git) Package: Scripting Engine problem Bug Type: Bug Bug description:tests/lang/this_assignment.phpt memory errors Description: ------------ From gcov: ==5934== Invalid read of size 8 ==5934== at 0x10B3C11: ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CONST_HANDLER (zend_vm_execute.h:23938) ==5934== by 0x100E4E5: execute_ex (zend_vm_execute.h:394) ==5934== by 0x100EFFE: zend_execute (zend_vm_execute.h:434) ==5934== by 0xF46C5B: zend_execute_scripts (zend.c:1389) ==5934== by 0xE48EBB: php_execute_script (main.c:2479) ==5934== by 0x114D47A: do_cli (php_cli.c:967) ==5934== by 0x114EEE9: main (php_cli.c:1334) ==5934== Address 0x11d52e70 is 16 bytes inside a block of size 40 free'd ==5934== at 0x4C27C24: free (vg_replace_malloc.c:473) ==5934== by 0xEECE24: _efree (zend_alloc.c:2222) ==5934== by 0xFF31A2: zend_objects_store_del (zend_objects_API.c:205) ==5934== by 0xF40F2D: _zval_dtor_func_for_ptr (zend_variables.c:116) ==5934== by 0x10F25B2: zend_assign_to_variable (zend_execute.h:104) ==5934== by 0x10F25B2: ZEND_ASSIGN_SPEC_CV_VAR_HANDLER (zend_vm_execute.h:33656) ==5934== by 0x100E4E5: execute_ex (zend_vm_execute.h:394) ==5934== by 0x100EFFE: zend_execute (zend_vm_execute.h:434) ==5934== by 0xF46C5B: zend_execute_scripts (zend.c:1389) ==5934== by 0xE48EBB: php_execute_script (main.c:2479) ==5934== by 0x114D47A: do_cli (php_cli.c:967) ==5934== by 0x114EEE9: main (php_cli.c:1334) ==5934== ==5934== Invalid read of size 8 ==5934== at 0x10B3CBA: ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CONST_HANDLER (zend_vm_execute.h:23944) ==5934== by 0x100E4E5: execute_ex (zend_vm_execute.h:394) ==5934== by 0x100EFFE: zend_execute (zend_vm_execute.h:434) ==5934== by 0xF46C5B: zend_execute_scripts (zend.c:1389) ==5934== by 0xE48EBB: php_execute_script (main.c:2479) ==5934== by 0x114D47A: do_cli (php_cli.c:967) ==5934== by 0x114EEE9: main (php_cli.c:1334) ==5934== Address 0x11d52e78 is 24 bytes inside a block of size 40 free'd ==5934== at 0x4C27C24: free (vg_replace_malloc.c:473) ==5934== by 0xEECE24: _efree (zend_alloc.c:2222) ==5934== by 0xFF31A2: zend_objects_store_del (zend_objects_API.c:205) ==5934== by 0xF40F2D: _zval_dtor_func_for_ptr (zend_variables.c:116) ==5934== by 0x10F25B2: zend_assign_to_variable (zend_execute.h:104) ==5934== by 0x10F25B2: ZEND_ASSIGN_SPEC_CV_VAR_HANDLER (zend_vm_execute.h:33656) ==5934== by 0x100E4E5: execute_ex (zend_vm_execute.h:394) ==5934== by 0x100EFFE: zend_execute (zend_vm_execute.h:434) ==5934== by 0xF46C5B: zend_execute_scripts (zend.c:1389) ==5934== by 0xE48EBB: php_execute_script (main.c:2479) ==5934== by 0x114D47A: do_cli (php_cli.c:967) ==5934== by 0x114EEE9: main (php_cli.c:1334) ==5934== ==5934== Invalid read of size 8 ==5934== at 0x10B3D30: ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CONST_HANDLER (zend_vm_execute.h:23952) ==5934== by 0x100E4E5: execute_ex (zend_vm_execute.h:394) ==5934== by 0x100EFFE: zend_execute (zend_vm_execute.h:434) ==5934== by 0xF46C5B: zend_execute_scripts (zend.c:1389) ==5934== by 0xE48EBB: php_execute_script (main.c:2479) ==5934== by 0x114D47A: do_cli (php_cli.c:967) ==5934== by 0x114EEE9: main (php_cli.c:1334) ==5934== Address 0x11d52e78 is 24 bytes inside a block of size 40 free'd ==5934== at 0x4C27C24: free (vg_replace_malloc.c:473) ==5934== by 0xEECE24: _efree (zend_alloc.c:2222) ==5934== by 0xFF31A2: zend_objects_store_del (zend_objects_API.c:205) ==5934== by 0xF40F2D: _zval_dtor_func_for_ptr (zend_variables.c:116) ==5934== by 0x10F25B2: zend_assign_to_variable (zend_execute.h:104) ==5934== by 0x10F25B2: ZEND_ASSIGN_SPEC_CV_VAR_HANDLER (zend_vm_execute.h:33656) ==5934== by 0x100E4E5: execute_ex (zend_vm_execute.h:394) ==5934== by 0x100EFFE: zend_execute (zend_vm_execute.h:434) ==5934== by 0xF46C5B: zend_execute_scripts (zend.c:1389) ==5934== by 0xE48EBB: php_execute_script (main.c:2479) ==5934== by 0x114D47A: do_cli (php_cli.c:967) ==5934== by 0x114EEE9: main (php_cli.c:1334) ==5934== ==5934== Invalid read of size 8 ==5934== at 0xFEED8F: zend_std_get_method (zend_object_handlers.c:1068) ==5934== by 0x10B3D71: ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CONST_HANDLER (zend_vm_execute.h:23952) ==5934== by 0x100E4E5: execute_ex (zend_vm_execute.h:394) ==5934== by 0x100EFFE: zend_execute (zend_vm_execute.h:434) ==5934== by 0xF46C5B: zend_execute_scripts (zend.c:1389) ==5934== by 0xE48EBB: php_execute_script (main.c:2479) ==5934== by 0x114D47A: do_cli (php_cli.c:967) ==5934== by 0x114EEE9: main (php_cli.c:1334) ==5934== Address 0x11d52e70 is 16 bytes inside a block of size 40 free'd ==5934== at 0x4C27C24: free (vg_replace_malloc.c:473) ==5934== by 0xEECE24: _efree (zend_alloc.c:2222) ==5934== by 0xFF31A2: zend_objects_store_del (zend_objects_API.c:205) ==5934== by 0xF40F2D: _zval_dtor_func_for_ptr (zend_variables.c:116) ==5934== by 0x10F25B2: zend_assign_to_variable (zend_execute.h:104) ==5934== by 0x10F25B2: ZEND_ASSIGN_SPEC_CV_VAR_HANDLER (zend_vm_execute.h:33656) ==5934== by 0x100E4E5: execute_ex (zend_vm_execute.h:394) ==5934== by 0x100EFFE: zend_execute (zend_vm_execute.h:434) ==5934== by 0xF46C5B: zend_execute_scripts (zend.c:1389) ==5934== by 0xE48EBB: php_execute_script (main.c:2479) ==5934== by 0x114D47A: do_cli (php_cli.c:967) ==5934== by 0x114EEE9: main (php_cli.c:1334) ==5934== -- Edit bug report at https://bugs.php.net/bug.php?id=69700&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=69700&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=69700&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=69700&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=69700&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=69700&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=69700&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=69700&r=needscript Try newer version: https://bugs.php.net/fix.php?id=69700&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=69700&r=support Expected behavior: https://bugs.php.net/fix.php?id=69700&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=69700&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=69700&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=69700&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=69700&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=69700&r=dst IIS Stability: https://bugs.php.net/fix.php?id=69700&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=69700&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=69700&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=69700&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=69700&r=mysqlcfg