Bug #72090 [NEW]: AddressSanitizer: SEGV on unknown address 0x00000000 gdImageFlipVertical

From: fernando at null-life dot com Operating system: Linux PHP version: 5.6.20 Package: GD related Bug Type: Bug Bug description:AddressSanitizer: SEGV on unknown address 0x00000000 gdImageFlipVertical Description: ------------ Run with ASAN Test script: --------------- <?php $var1 = imagecreatetruecolor ( 10, 10); imagegd($var1); imageflip($var1,2); Expected result: ---------------- Not crash Actual result: -------------- ASAN:SIGSEGV ================================================================= ==1805==ERROR: AddressSanitizer: SEGV on unknown address 0x00000000 (pc 0xb2a4147f bp 0xbf832b60 sp 0xbf832b24 T0) #0 0xb2a4147e in gdImageFlipVertical (/usr/lib/i386-linux-gnu/libgd.so.3+0xf47e) #1 0xb2ac02e8 in zif_imageflip /home/fmunozs/phpgit/php56/ext/gd/gd.c:4944 #2 0x9a7c718 in zend_do_fcall_common_helper_SPEC /home/fmunozs/phpgit/php56/Zend/zend_vm_execute.h:558 #3 0x9640316 in execute_ex /home/fmunozs/phpgit/php56/Zend/zend_vm_execute.h:363 #4 0x9a6c9c8 in zend_execute /home/fmunozs/phpgit/php56/Zend/zend_vm_execute.h:388 #5 0x9470b59 in zend_execute_scripts /home/fmunozs/phpgit/php56/Zend/zend.c:1341 #6 0x91acc6b in php_execute_script /home/fmunozs/phpgit/php56/main/main.c:2613 #7 0x9a8648a in do_cli /home/fmunozs/phpgit/php56/sapi/cli/php_cli.c:994 #8 0x808a502 in main /home/fmunozs/phpgit/php56/sapi/cli/php_cli.c:1378 #9 0xb6e2f645 in __libc_start_main (/lib/i386-linux-gnu/libc.so.6+0x18645) #10 0x808aaba (/home/fmunozs/phpgit/php56/sapi/cli/php+0x808aaba) -- Edit bug report at https://bugs.php.net/bug.php?id=72090&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=72090&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=72090&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=72090&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=72090&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=72090&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=72090&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=72090&r=needscript Try newer version: https://bugs.php.net/fix.php?id=72090&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=72090&r=support Expected behavior: https://bugs.php.net/fix.php?id=72090&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=72090&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=72090&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=72090&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=72090&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=72090&r=dst IIS Stability: https://bugs.php.net/fix.php?id=72090&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=72090&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=72090&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=72090&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=72090&r=mysqlcfg