Bug #73030 [NEW]: segfault in zval_delref_p while running symfony integration tests

From: jean-tiare dot le-bigot at corp dot ovh dot com Operating system: Debian Wheezy PHP version: 7.1.0RC1 Package: Reproducible crash Bug Type: Bug Bug description:segfault in zval_delref_p while running symfony integration tests Description: ------------ ## Configure line ./buildconf --force ./configure \ --with-openssl \ --with-mysqli=mysqlnd \ --with-pdo-mysql=mysqlnd \ --prefix=$HOME/usr \ --enable-fpm \ --enable-opcache \ --enable-debug \ --with-gd \ --enable-intl \ --with-jpeg-dir=/usr \ --with-png-dir=/usr \ --enable-gd-native-ttf=/usr \ --with-png-dir=/usr \ --enable-wddx \ --with-config-file-path=$HOME/usr/etc \ --enable-sigchild \ --enable-short-tags \ --disable-rpath \ --enable-libgcc \ --with-zlib=/usr \ --enable-bcmath \ --enable-calendar \ --with-curl=/usr \ --with-gdbm=/usr \ --enable-ftp \ --with-gettext=/usr \ --with-imap \ --with-kerberos \ --with-imap-ssl \ --with-mcrypt=/usr \ --with-mhash=/usr \ --with-jpeg-dir=/usr \ --enable-exif \ --enable-sysvsem \ --enable-sysvshm \ --enable-sysvmsg \ --enable-zip \ --enable-inline-optimization \ --enable-soap \ --enable-mbstring \ --enable-mbregex \ --with-gnu-ld \ --with-libxml-dir \ --enable-shared=yes \ --enable-static=yes \ --with-xsl=/usr \ --enable-sockets \ --with-xmlrpc \ --with-iconv \ --with-imagick \ --enable-pdo \ --with-pdo-pgsql=/usr \ --with-xpm-dir=/usr \ --with-pcre-regex \ --with-freetype-dir=/usr \ --with-pspell \ --with-pgsql=/usr \ --with-bz2 \ --with-gmp \ EXTENSION_DIR=$HOME/usr/lib/php-extensions ## GDB backtrace: Program received signal SIGSEGV, Segmentation fault. 0x0000000000b41631 in zval_delref_p (pz=0x7faeeb81a050) at /home/jlebigot/dev/php-7.1.0RC1/Zend/zend_types.h:834 834 return --GC_REFCOUNT(Z_COUNTED_P(pz)); (gdb) bt #0 0x0000000000b41631 in zval_delref_p (pz=0x7faeeb81a050) at /home/jlebigot/dev/php-7.1.0RC1/Zend/zend_types.h:834 #1 0x0000000000b41cae in i_zval_ptr_dtor (zval_ptr=0x7faeeb81a050, __zend_filename=0x11b0bf0 "/home/jlebigot/dev/php-7.1.0RC1/Zend/zend_vm_execute.h", __zend_lineno=899) at /home/jlebigot/dev/php-7.1.0RC1/Zend/zend_variables.h:47 #2 0x0000000000b4bb34 in ZEND_DO_FCALL_BY_NAME_SPEC_RETVAL_USED_HANDLER (execute_data=0x7faeeb819f90) at /home/jlebigot/dev/php-7.1.0RC1/Zend/zend_vm_execute.h:899 #3 0x0000000000b4a832 in execute_ex (ex=0x7faeeb819d30) at /home/jlebigot/dev/php-7.1.0RC1/Zend/zend_vm_execute.h:432 #4 0x0000000000ad4c46 in zend_call_function (fci=0x7ffdb8b38b50, fci_cache=0x7ffdb8b38b20) at /home/jlebigot/dev/php-7.1.0RC1/Zend/zend_execute_API.c:825 #5 0x0000000000867fb3 in reflection_method_invoke (execute_data=0x7faeeb819cc0, return_value=0x7faeeb819990, variadic=0) at /home/jlebigot/dev/php-7.1.0RC1/ext/reflection/php_reflection.c:3326 #6 0x0000000000868119 in zim_reflection_method_invokeArgs (execute_data=0x7faeeb819cc0, return_value=0x7faeeb819990) at /home/jlebigot/dev/php-7.1.0RC1/ext/reflection/php_reflection.c:3359 #7 0x0000000000b4c387 in ZEND_DO_FCALL_SPEC_RETVAL_USED_HANDLER (execute_data=0x7faeeb819790) at /home/jlebigot/dev/php-7.1.0RC1/Zend/zend_vm_execute.h:1097 #8 0x0000000000b4a832 in execute_ex (ex=0x7faeeb815030) at /home/jlebigot/dev/php-7.1.0RC1/Zend/zend_vm_execute.h:432 #9 0x0000000000b4a983 in zend_execute (op_array=0x7faeeb882000, return_value=0x0) at /home/jlebigot/dev/php-7.1.0RC1/Zend/zend_vm_execute.h:474 #10 0x0000000000aec47b in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /home/jlebigot/dev/php-7.1.0RC1/Zend/zend.c:1464 #11 0x0000000000a5b470 in php_execute_script (primary_file=0x7ffdb8b3c200) at /home/jlebigot/dev/php-7.1.0RC1/main/main.c:2533 #12 0x0000000000bd5258 in do_cli (argc=7, argv=0x1a97780) at /home/jlebigot/dev/php-7.1.0RC1/sapi/cli/php_cli.c:990 #13 0x0000000000bd6236 in main (argc=7, argv=0x1a97780) at /home/jlebigot/dev/php-7.1.0RC1/sapi/cli/php_cli.c:1378 (gdb) print pz->value.counted $3 = (zend_refcounted *) 0x0 ## Step to reproduce: git clone https://github.com/symfony/symfony.git cd symfony ./phpunit -v --debug --filter testSetContentJsonSerializeError -- Edit bug report at https://bugs.php.net/bug.php?id=73030&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=73030&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=73030&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=73030&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=73030&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=73030&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=73030&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=73030&r=needscript Try newer version: https://bugs.php.net/fix.php?id=73030&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=73030&r=support Expected behavior: https://bugs.php.net/fix.php?id=73030&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=73030&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=73030&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=73030&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=73030&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=73030&r=dst IIS Stability: https://bugs.php.net/fix.php?id=73030&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=73030&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=73030&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=73030&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=73030&r=mysqlcfg