Bug #75282 [Opn]: xmlrpc_encode_request() crashes with "zend_mm_heap corrupted"

Edit report at https://bugs.php.net/bug.php?id=75282&edit=1 ID: 75282 User updated by: marina at moodle dot com Reported by: marina at moodle dot com Summary: xmlrpc_encode_request() crashes with "zend_mm_heap corrupted" Status: Open Type: Bug Package: XMLRPC-EPI related Operating System: Ubuntu PHP Version: 7.2.0RC3 Block user comment: N Private report: N New Comment: Thanks Ondrej, everything works for me now as I commented also on https://github.com/oerdnj/deb.sury.org/issues/724 Nikic, we are gradually moving away from xmlrpc in Moodle but there is still some functionality that depends on it, unfortunately. Previous Comments: ------------------------------------------------------------------------ [2017-10-24 18:53:50] ondrej@php.net Maybe don't revert is as whole, but just wrap the free vs efree in ext/xmlrpc/xmlrpc-epi-php.c into #if XMLRPC_MODULE_TYPE == builtin/external ? ------------------------------------------------------------------------ [2017-10-24 18:48:55] ondrej@php.net Thanks, that's considerate. I know it isn't easy with the distro packagers :). ------------------------------------------------------------------------ [2017-10-24 18:18:59] nikic@php.net Right, https://github.com/php/php-src/commit/3a0872d08fc71d9bb9ec3d431260f838725d3b8d needs to be reverted. I had assumed libxmlrpc is abandonware, but seemingly it isn't. ------------------------------------------------------------------------ [2017-10-24 17:20:36] ondrej@php.net Debian and Ubuntu (and I guess Fedora, but I have just asked @remi) doesn't use embedded libraries. So the xmlrpc.so definitely use the non-patched system library. ------------------------------------------------------------------------ [2017-10-24 09:34:36] nikic@php.net Looks to me like there is a mismatch in the used allocator. libxmlrpc was patched to use ZMM in https://github.com/php/php-src/commit/3a0872d08fc71d9bb9ec3d431260f838725d3b8d. Could it be that Debian handles this library somehow differently and uses a non-patched version? ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=75282 -- Edit this bug report at https://bugs.php.net/bug.php?id=75282&edit=1