Bug #74546 [NEW]: SIGILL in ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_CONST_HANDLER()
From: brian dot carpenter at gmail dot com
Operating system: Debian 8 x64
PHP version: 7.1Git-2017-05-05 (Git)
Package: Reproducible crash
Bug Type: Bug
Bug description:SIGILL in ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_CONST_HANDLER()
Description:
------------
Triggered in commit 1466a0f, compiled with afl-gcc on Debian 8 x64.
Test script:
---------------
https://drive.google.com/file/d/0B3Tl4QiWJUt8dnpucXlpUXlDWWM/view?usp=sharing
Expected result:
----------------
No crash.
Actual result:
--------------
Program received signal SIGILL, Illegal instruction.
0x0000000001eff115 in ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_CONST_HANDLER
()
at /home/geeknik/php-src/Zend/zend_vm_execute.h:5721
5721 SAVE_OPLINE();
(gdb) bt
#0 0x0000000001eff115 in
ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_CONST_HANDLER ()
at /home/geeknik/php-src/Zend/zend_vm_execute.h:5721
#1 0x0000000001ec3903 in execute_ex (ex=<optimized out>)
at /home/geeknik/php-src/Zend/zend_vm_execute.h:429
#2 0x0000000002394d3a in zend_execute
(op_array=op_array@entry=0x7ffff2889000,
return_value=return_value@entry=0x0)
at /home/geeknik/php-src/Zend/zend_vm_execute.h:474
#3 0x0000000001c35c5d in zend_execute_scripts (type=type@entry=8,
retval=retval@entry=0x0, file_count=file_count@entry=3)
at /home/geeknik/php-src/Zend/zend.c:1537
#4 0x0000000001946830 in php_execute_script (primary_file=<optimized
out>)
at /home/geeknik/php-src/main/main.c:2548
#5 0x00000000023a2c6c in do_cli (argc=-225931263, argv=0x2f678c1
<executor_globals+1>)
at /home/geeknik/php-src/sapi/cli/php_cli.c:997
#6 0x00000000004730c2 in main (argc=-225931263, argv=0x2f2bf40
<cli_sapi_module>)
at /home/geeknik/php-src/sapi/cli/php_cli.c:1390
--
Edit bug report at https://bugs.php.net/bug.php?id=74546&edit=1
--
Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=74546&r=trysnapshot54
Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=74546&r=trysnapshot55
Try a snapshot (trunk): https://bugs.php.net/fix.php?id=74546&r=trysnapshottrunk
Fixed in SVN: https://bugs.php.net/fix.php?id=74546&r=fixed
Fixed in release: https://bugs.php.net/fix.php?id=74546&r=alreadyfixed
Need backtrace: https://bugs.php.net/fix.php?id=74546&r=needtrace
Need Reproduce Script: https://bugs.php.net/fix.php?id=74546&r=needscript
Try newer version: https://bugs.php.net/fix.php?id=74546&r=oldversion
Not developer issue: https://bugs.php.net/fix.php?id=74546&r=support
Expected behavior: https://bugs.php.net/fix.php?id=74546&r=notwrong
Not enough info: https://bugs.php.net/fix.php?id=74546&r=notenoughinfo
Submitted twice: https://bugs.php.net/fix.php?id=74546&r=submittedtwice
register_globals: https://bugs.php.net/fix.php?id=74546&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=74546&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=74546&r=dst
IIS Stability: https://bugs.php.net/fix.php?id=74546&r=isapi
Install GNU Sed: https://bugs.php.net/fix.php?id=74546&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=74546&r=float
No Zend Extensions: https://bugs.php.net/fix.php?id=74546&r=nozend
MySQL Configuration Error: https://bugs.php.net/fix.php?id=74546&r=mysqlcfg
Thread (2 messages)
- brian dot carpenter at gmail dot com