Bug #73440 [Opn->Fbk]: core dump when zend_destroy_property_info is called

From: Date: Wed, 02 Nov 2016 07:46:49 +0000
Subject: Bug #73440 [Opn->Fbk]: core dump when zend_destroy_property_info is called
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-205137@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=73440&edit=1

 ID:                 73440
 Updated by:         laruence@php.net
 Reported by:        yywangzheng at 126 dot com
 Summary:            core dump when zend_destroy_property_info is called
-Status:             Open
+Status:             Feedback
 Type:               Bug
 Package:            opcache
 Operating System:   centos 7.1
 PHP Version:        5.6.27
 Block user comment: N
 Private report:     N

 New Comment:

Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc. If the script requires a 
database to demonstrate the issue, please make sure it creates 
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.




Previous Comments:
------------------------------------------------------------------------
[2016-11-02 04:50:14] yywangzheng at 126 dot com

Description:
------------
#0  zend_destroy_property_info (property_info=0x0)
    at /src/php-5.6.27/ext/opcache/zend_accelerator_util_funcs.c:219
No locals.
#1  0x00000000008543b8 in zend_hash_destroy (ht=0x7f640625d750)
    at /src/php-5.6.27/Zend/zend_hash.c:548
        p = 0x0
        q = 0x7f640625dfd8
#2  0x000000000083a5b6 in destroy_zend_class (pce=<optimized out>)
    at /src/php-5.6.27/Zend/zend_opcode.c:303
        ce = 0x7f640625d6e0
#3  0x0000000000852e16 in i_zend_hash_bucket_delete (p=0x552fae0, ht=0x1f15c50)
    at /src/php-5.6.27/Zend/zend_hash.c:182
No locals.
#4  zend_hash_bucket_delete (ht=ht@entry=0x1f15c50, p=p@entry=0x552fae0)
    at /src/php-5.6.27/Zend/zend_hash.c:192
No locals.
#5  0x00000000008548ea in zend_hash_reverse_apply (ht=0x1f15c50, 
    apply_func=apply_func@entry=0x835a30 <clean_non_persistent_class>)
    at /src/php-5.6.27/Zend/zend_hash.c:733
        result = 1
        p_last = 0x552fa90
        p = 0x552fae0
#6  0x00000000008361b3 in shutdown_executor ()
---Type <return> to continue, or q <return> to quit---
    at /src/php-5.6.27/Zend/zend_execute_API.c:300
        __orig_bailout = 0x7fff48c30dd0
        __bailout = {{__jmpbuf = {18548672, 2408040186032662389, 0, 
              140734414147329, 0, 140067576603728, -2407874094099355787, 
              2408040160359982965}, __mask_was_saved = 0, __saved_mask = {
              __val = {2408038309018052469, 16038869976030904320, 
                2408038405528463221, 36418072, 38, 36532536, 36520632, 
                36532584, 36520632, 0, 1, 18547152, 18548408, 140734414147329, 
                8672014, 18548320}}}}
#7  0x0000000000846732 in zend_deactivate () at /src/php-5.6.27/Zend/zend.c:960
No locals.
#8  0x00000000007e51b1 in php_request_shutdown (dummy=dummy@entry=0x0)
    at /src/php-5.6.27/main/main.c:1899
        report_memleaks = 1 '\001'
#9  0x0000000000441928 in main (argc=<optimized out>, argv=<optimized out>)
    at /src/php-5.6.27/sapi/fpm/fpm/fpm_main.c:2017
        primary_script = <optimized out>
        __orig_bailout = 0x0
        __bailout = {{__jmpbuf = {0, -2407874094905710731, 4, 140734414147444, 
              4294967295, 0, -2407874093971429515, 2408038538697484149}, 
            __mask_was_saved = 0, __saved_mask = {__val = {
                0 <repeats 16 times>}}}}
        exit_status = 0
---Type <return> to continue, or q <return> to quit---
        c = <optimized out>
        use_extended_info = 0
        file_handle = {type = ZEND_HANDLE_FILENAME, 
          filename = 0x7f640625f458 "H\364%\006d\177", opened_path = 0x0, 
          handle = {fd = 103366168, fp = 0x7f6406293e18, stream = {
              handle = 0x7f6406293e18, isatty = 0, mmap = {len = 138, pos = 0, 
                map = 0x0, 
                buf = 0x7f64062bf000 <Address 0x7f64062bf000 out of bounds>, 
                old_handle = 0x0, old_closer = 0x0}, 
              reader = 0x7fc850 <_php_stream_read>, 
              fsizer = 0x7e2bc0 <php_zend_stream_fsizer>, 
              closer = 0x7e2ba0 <php_zend_stream_mmap_closer>}}, 
          free_filename = 0 '\000'}
        orig_optind = 1
        orig_optarg = 0x0
        ini_entries_len = <optimized out>
        max_requests = 0
        requests = 275
        fcgi_fd = <optimized out>
        request = {listen_socket = 0, fd = 4, id = 1, keep = 0, closed = 0, 
          in_len = 0, in_pad = 0, out_hdr = 0x7fff48c30fa0, 
          out_pos = 0x7fff48c3107e "MT\r\nCache-Control: no-store, no-cache, must-revalidate,
post-check=0, pre-check=0\r\nPragma: no-cache\r\nContent-type: tex---Type <return> to
continue, or q <return> to quit---
t/html; charset=UTF-8\r\n\r\n[]", 
          out_buf = "\001\006\000\001\001g\001\000Status: 500 Internal Server Error\r\nExpires:
Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0,
pre-check=0\r\nPragma: no-cache\r\nContent-type: text/h"..., reserved = '\000'
<repeats 15 times>, env = 0x7f640625e040}
        fpm_config = 0x7fff48c34f74 ""
        fpm_prefix = 0x0
        fpm_pid = 0x0
        test_conf = 0
        force_daemon = 0
        force_stderr = 0
        php_information = 0
        php_allow_to_run_as_root = 0
        __func__ = "main"



------------------------------------------------------------------------



--
Edit this bug report at https://bugs.php.net/bug.php?id=73440&edit=1


Thread (4 messages)

« previous php.bugs (#205137) next »