Bug #72147 [Fbk->NoF]: Segmentation fault in /lib/x86_64-linux-gnu/libpcre.so.3 called by php_free_pcr

Edit report at https://bugs.php.net/bug.php?id=72147&edit=1 ID: 72147 Updated by: php-bugs@lists.php.net Reported by: tom60 at op dot pl Summary: Segmentation fault in /lib/x86_64-linux-gnu/libpcre.so.3 called by php_free_pcr -Status: Feedback +Status: No Feedback Type: Bug Package: Reproducible crash Operating System: Debian Jessie 64 bit PHP Version: 7.0.6 Private report: N New Comment: No feedback was provided. The bug is being suspended because we assume that you are no longer experiencing the problem. If this is not the case and you are able to provide the information that was requested earlier, please do so and change the status of the bug back to "Re-Opened". Thank you. Previous Comments: ------------------------------------------------------------------------ [2016-05-12 09:58:00] ab@php.net Thank you for this bug report. To properly diagnose the problem, we need a short but complete example script to be able to reproduce this bug ourselves. A proper reproducing script starts with <?php and ends with ?>, is max. 10-20 lines long and does not require any external resources such as databases, etc. If the script requires a database to demonstrate the issue, please make sure it creates all necessary tables, stored procedures etc. Please avoid embedding huge scripts into the report. Unfortunately preg_match("/a/", "abc") doesn't repro any crash, but we need a reproducer. Thanks ------------------------------------------------------------------------ [2016-05-10 13:07:36] ckiendl at backfactory dot de We seem to have the same issue using PHP 7.0.6-1~dotdeb+8.1 Server version: Apache/2.4.10 (Debian) Server built: Nov 28 2015 14:05:48 Linux [hostname redacted] 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt25-1 (2016-03-06) x86_64 GNU/Linux libpcre3 version: 2:8.35-3.3+deb8u4 Reproducible errors in the vein of *** Error in `apache2': munmap_chunk(): invalid pointer: 0x00007f... with the default settings, immediately working after I changed the configuration to pcre.jit=0. ------------------------------------------------------------------------ [2016-05-09 19:29:03] zulrang at gmail dot com Experiencing the same issue on SPARCv9/Solaris 11 using pcre 8.38 $ pcre-config --version 8.38 ./configure --disable-all --disable-cgi --disable-phpdbg --disable-opcache --disable-libgcc make test fails with a Bus Error Can also reproduce: Failing script: $ sapi/cli/php -r 'preg_match("/a/", "abc");' Result: Bus Error Disabling pcre.jit fixes the issue. ------------------------------------------------------------------------ [2016-05-05 12:49:55] tom60 at op dot pl Looks like setting pcre.jit=0 eliminates the segmentation faults. It's worth looking into this issue, as the crash occurs on PHP 7.0.6 with the default settings (pcre.jit=1) on the most recent version of Debian Jessie with libpcre3:amd64 2:8.35-3.3+deb8u4. ------------------------------------------------------------------------ [2016-05-03 21:54:20] tom60 at op dot pl As for PCRE settings, we use the defaults: pcre.backtrack_limit 1000000 pcre.jit 1 pcre.recursion_limit 100000 I noticed that "pcre.jit" was introduced in PHP 7, I will try to disable it and see if the situation improves. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=72147 -- Edit this bug report at https://bugs.php.net/bug.php?id=72147&edit=1