Bug #71474 [NEW]: Crash because of VM stack corruption on Magento2
| From: | dmitry@php.net | Date: | Thu, 28 Jan 2016 08:36:32 +0000 |
| Subject: | Bug #71474 [NEW]: Crash because of VM stack corruption on Magento2 | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-198934@lists.php.net to get a copy of this message | ||
From: dmitry@php.net
Operating system: Linux
PHP version: 7.0.2
Package: Reproducible crash
Bug Type: Bug
Bug description:Crash because of VM stack corruption on Magento2
Description:
------------
The following commands lead to crash.
$ cd /var/www/html/magento2
$ bin/magento indexer:reindex
backtrace:
Program received signal SIGABRT, Aborted.
#0 0x00007ffff64bacc9 in __GI_raise (sig=sig@entry=6)
at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1 0x00007ffff64be0d8 in __GI_abort () at abort.c:89
#2 0x00007ffff64b3b86 in __assert_fail_base (
fmt=0x7ffff6604830 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n",
assertion=assertion@entry=0xeab648 "(executor_globals.vm_stack_top)
> (zval *) (executor_globals.vm_stack) &&
(executor_globals.vm_stack_end) > (zval *) (executor_globals.vm_stack)
&& (executor_globals.vm_stack_top) <= (executor_globals"...,
file=file@entry=0xeab620 "/usr/src/php-src/Zend/zend_execute.h",
line=line@entry=275,
function=function@entry=0xead5a0 <__PRETTY_FUNCTION__.8106>
"zend_vm_stack_free_call_frame_ex") at assert.c:92
#3 0x00007ffff64b3c32 in __GI___assert_fail (
assertion=0xeab648 "(executor_globals.vm_stack_top) > (zval *)
(executor_globals.vm_stack) && (executor_globals.vm_stack_end) > (zval
*) (executor_globals.vm_stack) && (executor_globals.vm_stack_top) <=
(executor_globals"...,
file=0xeab620 "/usr/src/php-src/Zend/zend_execute.h", line=275,
function=0xead5a0 <__PRETTY_FUNCTION__.8106>
"zend_vm_stack_free_call_frame_ex") at assert.c:101
#4 0x00000000008fc6d3 in zend_vm_stack_free_call_frame_ex
(call_info=66,
call=0x7fffe8ab2ee0) at /usr/src/php-src/Zend/zend_execute.h:275
#5 0x00000000008fc6fb in zend_vm_stack_free_call_frame
(call=0x7fffe8ab2ee0)
at /usr/src/php-src/Zend/zend_execute.h:280
#6 0x00000000009057f9 in ZEND_DO_FCALL_SPEC_HANDLER ()
at /usr/src/php-src/Zend/zend_vm_execute.h:925
#7 0x0000000000904342 in execute_ex (ex=0x7fffe8ab2ce0)
at /usr/src/php-src/Zend/zend_vm_execute.h:414
#8 0x000000000088e5e1 in dtrace_execute_ex
(execute_data=0x7fffe8ab2ce0)
at /usr/src/php-src/Zend/zend_dtrace.c:83
#9 0x00000000009052ff in ZEND_DO_FCALL_SPEC_HANDLER ()
at /usr/src/php-src/Zend/zend_vm_execute.h:800
#10 0x0000000000904342 in execute_ex (ex=0x7fffe8ab2bd0)
at /usr/src/php-src/Zend/zend_vm_execute.h:414
#11 0x000000000088e5e1 in dtrace_execute_ex
(execute_data=0x7fffe8ab2bd0)
at /usr/src/php-src/Zend/zend_dtrace.c:83
#12 0x00000000009052ff in ZEND_DO_FCALL_SPEC_HANDLER ()
Test script:
---------------
<?php
class foo {
function __call($name, $args) {
$a = $b = $c = $d = $e = $f = 1;
}
}
function test($n, $x) {
// var_dump($n);
if ($n > 0) {
$x->bug();
test($n - 1, $x);
}
}
test(3000, new foo());
echo "OK\n";
?>
Expected result:
----------------
OK
Actual result:
--------------
php: /.../zend_execute.h:275: zend_vm_stack_free_call_frame_ex:
Assertion `(executor_globals.vm_stack_top) > (zval *)
(executor_globals.vm_stack) && (executor_globals.vm_stack_end) > (zval
*) (executor_globals.vm_stack) && (executor_globals.vm_stack_top) <=
(executor_globals.vm_stack_end)' failed.
Aborted (core dumped)
--
Edit bug report at https://bugs.php.net/bug.php?id=71474&edit=1
--
Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=71474&r=trysnapshot54
Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=71474&r=trysnapshot55
Try a snapshot (trunk): https://bugs.php.net/fix.php?id=71474&r=trysnapshottrunk
Fixed in SVN: https://bugs.php.net/fix.php?id=71474&r=fixed
Fixed in release: https://bugs.php.net/fix.php?id=71474&r=alreadyfixed
Need backtrace: https://bugs.php.net/fix.php?id=71474&r=needtrace
Need Reproduce Script: https://bugs.php.net/fix.php?id=71474&r=needscript
Try newer version: https://bugs.php.net/fix.php?id=71474&r=oldversion
Not developer issue: https://bugs.php.net/fix.php?id=71474&r=support
Expected behavior: https://bugs.php.net/fix.php?id=71474&r=notwrong
Not enough info: https://bugs.php.net/fix.php?id=71474&r=notenoughinfo
Submitted twice: https://bugs.php.net/fix.php?id=71474&r=submittedtwice
register_globals: https://bugs.php.net/fix.php?id=71474&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=71474&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=71474&r=dst
IIS Stability: https://bugs.php.net/fix.php?id=71474&r=isapi
Install GNU Sed: https://bugs.php.net/fix.php?id=71474&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=71474&r=float
No Zend Extensions: https://bugs.php.net/fix.php?id=71474&r=nozend
MySQL Configuration Error: https://bugs.php.net/fix.php?id=71474&r=mysqlcfg