Bug #71474 [Opn->Asn]: Crash because of VM stack corruption on Magento2

Edit report at https://bugs.php.net/bug.php?id=71474&edit=1 ID: 71474 Updated by: dmitry@php.net Reported by: dmitry@php.net Summary: Crash because of VM stack corruption on Magento2 -Status: Open +Status: Assigned Type: Bug Package: Reproducible crash Operating System: Linux PHP Version: 7.0.2 -Assigned To: +Assigned To: dmitry Block user comment: N Private report: N Previous Comments: ------------------------------------------------------------------------ [2016-01-28 08:36:26] dmitry@php.net Description: ------------ The following commands lead to crash. $ cd /var/www/html/magento2 $ bin/magento indexer:reindex backtrace: Program received signal SIGABRT, Aborted. #0 0x00007ffff64bacc9 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #1 0x00007ffff64be0d8 in __GI_abort () at abort.c:89 #2 0x00007ffff64b3b86 in __assert_fail_base ( fmt=0x7ffff6604830 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=assertion@entry=0xeab648 "(executor_globals.vm_stack_top) > (zval *) (executor_globals.vm_stack) && (executor_globals.vm_stack_end) > (zval *) (executor_globals.vm_stack) && (executor_globals.vm_stack_top) <= (executor_globals"..., file=file@entry=0xeab620 "/usr/src/php-src/Zend/zend_execute.h", line=line@entry=275, function=function@entry=0xead5a0 <__PRETTY_FUNCTION__.8106> "zend_vm_stack_free_call_frame_ex") at assert.c:92 #3 0x00007ffff64b3c32 in __GI___assert_fail ( assertion=0xeab648 "(executor_globals.vm_stack_top) > (zval *) (executor_globals.vm_stack) && (executor_globals.vm_stack_end) > (zval *) (executor_globals.vm_stack) && (executor_globals.vm_stack_top) <= (executor_globals"..., file=0xeab620 "/usr/src/php-src/Zend/zend_execute.h", line=275, function=0xead5a0 <__PRETTY_FUNCTION__.8106> "zend_vm_stack_free_call_frame_ex") at assert.c:101 #4 0x00000000008fc6d3 in zend_vm_stack_free_call_frame_ex (call_info=66, call=0x7fffe8ab2ee0) at /usr/src/php-src/Zend/zend_execute.h:275 #5 0x00000000008fc6fb in zend_vm_stack_free_call_frame (call=0x7fffe8ab2ee0) at /usr/src/php-src/Zend/zend_execute.h:280 #6 0x00000000009057f9 in ZEND_DO_FCALL_SPEC_HANDLER () at /usr/src/php-src/Zend/zend_vm_execute.h:925 #7 0x0000000000904342 in execute_ex (ex=0x7fffe8ab2ce0) at /usr/src/php-src/Zend/zend_vm_execute.h:414 #8 0x000000000088e5e1 in dtrace_execute_ex (execute_data=0x7fffe8ab2ce0) at /usr/src/php-src/Zend/zend_dtrace.c:83 #9 0x00000000009052ff in ZEND_DO_FCALL_SPEC_HANDLER () at /usr/src/php-src/Zend/zend_vm_execute.h:800 #10 0x0000000000904342 in execute_ex (ex=0x7fffe8ab2bd0) at /usr/src/php-src/Zend/zend_vm_execute.h:414 #11 0x000000000088e5e1 in dtrace_execute_ex (execute_data=0x7fffe8ab2bd0) at /usr/src/php-src/Zend/zend_dtrace.c:83 #12 0x00000000009052ff in ZEND_DO_FCALL_SPEC_HANDLER () Test script: --------------- <?php class foo { function __call($name, $args) { $a = $b = $c = $d = $e = $f = 1; } } function test($n, $x) { // var_dump($n); if ($n > 0) { $x->bug(); test($n - 1, $x); } } test(3000, new foo()); echo "OK\n"; ?> Expected result: ---------------- OK Actual result: -------------- php: /.../zend_execute.h:275: zend_vm_stack_free_call_frame_ex: Assertion `(executor_globals.vm_stack_top) > (zval *) (executor_globals.vm_stack) && (executor_globals.vm_stack_end) > (zval *) (executor_globals.vm_stack) && (executor_globals.vm_stack_top) <= (executor_globals.vm_stack_end)' failed. Aborted (core dumped) ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=71474&edit=1