Bug #69732 [NEW]: can induce segmentation fault with basic php code

From: will dot o dot west at gmail dot com Operating system: OSX / Ubuntu Trusty PHP version: 5.5.25 Package: Reproducible crash Bug Type: Bug Bug description:can induce segmentation fault with basic php code Description: ------------ The following snippet is a minimal reproduction of an segv found in a WordPress site, wherein a theme was stashing data in an undeclared field of the WP_Query object, which has a __get but no __set. Its not clear whether this worked as intended in any prior versions of php. Test script: --------------- <?php class wpq { private $unreferenced; public function __get($name) { return $this->$name; } } function ret_assoc() { return array('foo' => 'bar'); } $wpq = new wpq; $wpq->interesting =& ret_assoc(); $x = $wpq->interesting; printf("%s\n", $x); Expected result: ---------------- likely printing an empty string Actual result: -------------- Segmentation fault: 11 -- Edit bug report at https://bugs.php.net/bug.php?id=69732&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=69732&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=69732&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=69732&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=69732&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=69732&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=69732&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=69732&r=needscript Try newer version: https://bugs.php.net/fix.php?id=69732&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=69732&r=support Expected behavior: https://bugs.php.net/fix.php?id=69732&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=69732&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=69732&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=69732&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=69732&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=69732&r=dst IIS Stability: https://bugs.php.net/fix.php?id=69732&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=69732&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=69732&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=69732&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=69732&r=mysqlcfg