Bug #72854 [Opn->Fbk]: PHP Crashes on duplicate destructor call
| From: | requinix@php.net | Date: | Tue, 16 Aug 2016 15:10:00 +0000 |
| Subject: | Bug #72854 [Opn->Fbk]: PHP Crashes on duplicate destructor call | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-203312@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=72854&edit=1
ID: 72854
Updated by: requinix@php.net
Reported by: php at abiusx dot com
Summary: PHP Crashes on duplicate destructor call
-Status: Open
+Status: Feedback
Type: Bug
Package: Class/Object related
Operating System: Mac OS X, Linux
PHP Version: 7.0.9
Block user comment: N
Private report: N
New Comment:
Running that php-emul stuff is a bit much for us to do. Some short repro code would be great - may
be hard for you to come up with though. I know you said you haven't been able to run it though
a debug version yet, but without the code then we'll need a backtrace (see http://bugs.php.net/bugs-generating-backtrace.php).
Previous Comments:
------------------------------------------------------------------------
[2016-08-16 14:47:39] php at abiusx dot com
Description:
------------
I have a very complicated code that runs for 4 minutes. The important thing the code does, is it
makes deep copies of data structures in PHP, does something, and discards the deep copy.
Many times when this happens, PHP segfaults (typically with memory violation) when the destructor of
a deep copied object is called, and a resource is involved in that object.
Examples are wp-db and phpmailer classes in Wordpress, both of which segfault PHP on their
destructor.
I still haven't had the chance to run PHP's debug version on it to figure out the details,
but now I'm sure the bug is there (and has been since PHP 7.0.0, also tested on PHP 5.4 and it
persists).
Test script:
---------------
github.com/abiusx/php-emul concolic mode on Wordpress and Joomla causes the crash.
The crash is not stack related, it is also deterministic.
Expected result:
----------------
No crash
Actual result:
--------------
Segfault (memory violation)
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=72854&edit=1