Bug #76427 [Opn->Csd]: Segfault in zend_objects_store_put

Edit report at https://bugs.php.net/bug.php?id=76427&edit=1 ID: 76427 Updated by: laruence@php.net Reported by: thekid@php.net Summary: Segfault in zend_objects_store_put -Status: Open +Status: Closed Type: Bug Package: Reproducible crash Operating System: Linux PHP Version: 7.3.0alpha1 Block user comment: N Private report: N New Comment: Automatic comment on behalf of laruence@gmail.com Revision: http://git.php.net/?p=php-src.git;a=commit;h=ffaee27478a9cb338e40edeb5acf233f9cb67111 Log: Fixed bug #76427 (Segfault in zend_objects_store_put) Previous Comments: ------------------------------------------------------------------------ [2018-06-08 01:23:38] thekid@php.net Here's the stack trace from GDB: Program received signal SIGSEGV, Segmentation fault. 0x000000000078f6d2 in zend_objects_store_put (object=object@entry=0x7ffffadc2310) at .../devel/php-src/Zend/zend_objects_API.c:141 141 EG(objects_store).free_list_head = GET_OBJ_BUCKET_NUMBER(EG(objects_store).object_buckets[handle]); (gdb) bt #0 0x000000000078f6d2 in zend_objects_store_put (object=object@entry=0x7ffffadc2310) at .../devel/php-src/Zend/zend_objects_API.c:141 #1 0x000000000078a2ca in zend_object_std_init (object=0x7ffffadc2310, ce=0x7ffffaef34d0) at .../devel/php-src/Zend/zend_objects.c:36 #2 0x000000000078a6e6 in zend_objects_new (ce=ce@entry=0x7ffffaef34d0) at .../devel/php-src/Zend/zend_objects.c:161 #3 0x0000000000759481 in _object_and_properties_init (arg=arg@entry=0x7ffffb6236f0, class_type=class_type@entry=0x7ffffaef34d0, properties=properties@entry=0x0) at .../devel/php-src/Zend/zend_API.c:1359 #4 0x0000000000759567 in _object_init_ex (arg=arg@entry=0x7ffffb6236f0, class_type=class_type@entry=0x7ffffaef34d0) at .../devel/php-src/Zend/zend_API.c:1374 #5 0x00000000007d7ea4 in ZEND_NEW_SPEC_CONST_UNUSED_HANDLER () at .../devel/php-src/Zend/zend_vm_execute.h:8720 #6 0x00000000007dfc2a in execute_ex (ex=0x7ffffadc2310) at .../devel/php-src/Zend/zend_vm_execute.h:55311 #7 0x0000000000749188 in zend_call_function (fci=0x7ffffb6234d0, fci@entry=0x7ffffffda4d0, fci_cache=<optimized out>, fci_cache@entry=0x0) at .../devel/php-src/Zend/zend_execute_API.c:786 #8 0x0000000000749505 in _call_user_function_ex (object=object@entry=0x0, function_name=<optimized out>, retval_ptr=retval_ptr@entry=0x7ffffb621820, param_count=<optimized out>, params=<optimized out>, no_separation=no_separation@entry=1) at .../devel/php-src/Zend/zend_execute_API.c:628 #9 0x000000000077fee5 in zim_Closure___invoke (execute_data=<optimized out>, return_value=0x7ffffb621820) at .../devel/php-src/Zend/zend_closures.c:54 #10 0x00000000007e6d40 in ZEND_DO_FCALL_SPEC_RETVAL_USED_HANDLER () at .../devel/php-src/Zend/zend_vm_execute.h:1102 #11 execute_ex (ex=0x7ffffadc2310) at .../devel/php-src/Zend/zend_vm_execute.h:54505 #12 0x0000000000784006 in zend_generator_resume (orig_generator=orig_generator@entry=0x7ffffaa15080) at .../devel/php-src/Zend/zend_generators.c:772 #13 0x0000000000784f30 in zend_generator_ensure_initialized (generator=<optimized out>) at .../devel/php-src/Zend/zend_generators.c:817 ---Type <return> to continue, or q <return> to quit--- #14 zend_generator_rewind (generator=<optimized out>) at .../devel/php-src/Zend/zend_generators.c:826 #15 zend_generator_iterator_rewind (iterator=<optimized out>) at .../devel/php-src/Zend/zend_generators.c:1124 #16 0x000000000079f3d2 in zend_fe_reset_iterator (array_ptr=array_ptr@entry=0x7ffffb6215d0, by_ref=by_ref@entry=0) at .../devel/php-src/Zend/zend_execute.c:3215 #17 0x00000000007ab52b in ZEND_FE_RESET_R_SPEC_CV_HANDLER () at .../devel/php-src/Zend/zend_vm_execute.h:37145 #18 0x00000000007e113d in execute_ex (ex=0x7ffffadc2310) at .../devel/php-src/Zend/zend_vm_execute.h:58397 #19 0x0000000000749188 in zend_call_function (fci=0x7ffffb621570, fci@entry=0x7ffffffda820, fci_cache=<optimized out>, fci_cache@entry=0x7ffffffda800) at .../devel/php-src/Zend/zend_execute_API.c:786 #20 0x0000000000628571 in reflection_method_invoke (execute_data=<optimized out>, return_value=0x7ffffb621400, variadic=<optimized out>) at .../devel/php-src/ext/reflection/php_reflection.c:3208 #21 0x00000000007e6d40 in ZEND_DO_FCALL_SPEC_RETVAL_USED_HANDLER () at .../devel/php-src/Zend/zend_vm_execute.h:1102 #22 execute_ex (ex=0x7ffffadc2310) at .../devel/php-src/Zend/zend_vm_execute.h:54505 #23 0x00000000007e799a in zend_execute (op_array=0x7ffffb67e2a0, op_array@entry=0x7ffffb7b9060, return_value=return_value@entry=0x7ffffb620f10) at .../devel/php-src/Zend/zend_vm_execute.h:59905 #24 0x00000000007578f3 in zend_execute_scripts (type=type@entry=8, retval=0x7ffffb620f10, retval@entry=0x0, file_count=file_count@entry=3) at .../devel/php-src/Zend/zend.c:1564 #25 0x00000000006f6d70 in php_execute_script (primary_file=primary_file@entry=0x7ffffffdced0) at .../devel/php-src/main/main.c:2467 #26 0x00000000007e9db9 in do_cli (argc=8, argv=0x1185820) at .../devel/php-src/sapi/cli/php_cli.c:1011 #27 0x000000000043b58c in main (argc=8, argv=0x1185820) at .../devel/php-src/sapi/cli/php_cli.c:1404 ------------------------------------------------------------------------ [2018-06-08 00:50:24] thekid@php.net Description: ------------ Running the test suite for the project https://github.com/xp-framework/compiler causes a segmentation fault, see https://github.com/xp-framework/compiler/issues/35 Test script: --------------- Haven't been able to reproduce this with a short script, sorry! Expected result: ---------------- Test suite runs fine, as does with most recent PHP 7.2 Actual result: -------------- Crash ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=76427&edit=1