Bug #70288 [Asn->Csd]: Apache crash related to ZEND_SEND_REF

Edit report at https://bugs.php.net/bug.php?id=70288&edit=1 ID: 70288 Updated by: laruence@php.net Reported by: bensor987 at neuf dot fr Summary: Apache crash related to ZEND_SEND_REF -Status: Assigned +Status: Closed Type: Bug Package: Scripting Engine problem Operating System: Windows 7 Pro PHP Version: 7.0Git-2015-08-18 (snap) Assigned To: laruence Block user comment: N Private report: N New Comment: Automatic comment on behalf of laruence Revision: http://git.php.net/?p=php-src.git;a=commit;h=e543769fa44fada6883537ab6684a993f45de3d9 Log: Fixed bug #70288 (Apache crash related to ZEND_SEND_REF) Previous Comments: ------------------------------------------------------------------------ [2015-08-18 10:40:07] laruence@php.net change title ------------------------------------------------------------------------ [2015-08-18 09:43:32] laruence@php.net okey, this actually is not a simplexml specifical problem, it's in engine.. assign to me ------------------------------------------------------------------------ [2015-08-18 08:01:48] bensor987 at neuf dot fr Description: ------------ I've managed to locate this very tricky bug. It makes my Apache crash. It happens when : - Using simplexml_load_file() - Using a function, where the SimpleXML arg is "referenced" It doesn't happen when I don't reference the arg or if I use simplexml_load_string(). See the test script for example. I'm testing on snap "php-master-ts-windows-vc14-x86-r531fa70" (can't test on a more recent snap, Apache crashes on service startup), with Apache/2.4.12 (Win32) Test script: --------------- ==segfault.xml== <Menu> <Node title=""> </Node> </Menu> ==PHP script== <?php $xml = simplexml_load_file('segfault.xml'); function test(&$xml) { var_dump($xml); } test($xml->Node); Expected result: ---------------- Dump of the SimpleXML object Actual result: -------------- Crash ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=70288&edit=1