Bug #77434 [NEW]: php-fpm workers are segfaulting in zend_gc_addref

From: bugs dot php dot net at mundpropaganda dot net Operating system: Archlinux PHP version: 7.3Git-2019-01-09 (Git) Package: opcache Bug Type: Bug Bug description:php-fpm workers are segfaulting in zend_gc_addref Description: ------------ So I created a snapshot from the current PHP-7.3 branch (as of c4c6b80) to try out the patches for #77289. While doing so I might have found another bug: When I try to use the "Advanced Editor" plugin in the BBS software Vanilla with an empty cache (the app's internal caching engine that is) the button row is missing. On subsequent hits to the same route the php-fpm workers are sefaulting. Diff of the resulting HTML code with the missing button row of that first render: https://gist.github.com/kkkrist/8741e7fb9a28c6196497602732a22e14 Related php code: https://github.com/vanilla/vanilla/blob/Vanilla_2.6.4/plugins/editor/views/editor.php Backtrace: #0 0x00005647c1105df4 in zend_gc_addref (p=0x7f7df80f1e40) at /home/krist/tmp/php-7.3.2/Zend/zend_types.h:991 #1 0x00005647c1105f17 in zval_addref_p (pz=0x7f7dfaa87638) at /home/krist/tmp/php-7.3.2/Zend/zend_types.h:1025 #2 0x00005647c110cac0 in zend_fetch_dimension_address_read (result=0x7f7e0141ff30, container=0x7f7dfaa87338, dim=0x7f7e0141fe80, dim_type=8, type=0, support_strings=1, slow=0) at /home/krist/tmp/php-7.3.2/Zend/zend_execute.c:1945 #3 0x00005647c110d0d1 in zend_fetch_dimension_address_read_R (container=0x7f7dfaa87338, dim=0x7f7e0141fe80, dim_type=8) at /home/krist/tmp/php-7.3.2/Zend/zend_execute.c:2050 #4 0x00005647c11242c8 in ZEND_FETCH_DIM_R_SPEC_CONST_CV_HANDLER () at /home/krist/tmp/php-7.3.2/Zend/zend_vm_execute.h:9941 #5 0x00005647c117f318 in execute_ex (ex=0x7f7e0141fc30) at /home/krist/tmp/php-7.3.2/Zend/zend_vm_execute.h:56351 #6 0x00005647c1091836 in zend_call_function (fci=0x7ffdd8c63bb0, fci_cache=0x7ffdd8c63b90) at /home/krist/tmp/php-7.3.2/Zend/zend_execute_API.c:756 #7 0x00005647c0ec535a in zif_call_user_func_array (execute_data=0x7f7e0141fbc0, return_value=0x7f7e0141fb90) at /home/krist/tmp/php-7.3.2/ext/standard/basic_functions.c:4942 #8 0x00005647c1111a4c in ZEND_DO_FCALL_BY_NAME_SPEC_RETVAL_USED_HANDLER () at /home/krist/tmp/php-7.3.2/Zend/zend_vm_execute.h:892 #9 0x00005647c117e511 in execute_ex (ex=0x7f7e0141f030) at /home/krist/tmp/php-7.3.2/Zend/zend_vm_execute.h:55433 #10 0x00005647c1183b03 in zend_execute (op_array=0x7f7e01479000, return_value=0x0) at /home/krist/tmp/php-7.3.2/Zend/zend_vm_execute.h:60833 #11 0x00005647c10a95da in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /home/krist/tmp/php-7.3.2/Zend/zend.c:1568 #12 0x00005647c100fa58 in php_execute_script (primary_file=0x7ffdd8c66320) at /home/krist/tmp/php-7.3.2/main/main.c:2630 #13 0x00005647c1196def in main (argc=3, argv=0x7ffdd8c667b8) at /home/krist/tmp/php-7.3.2/sapi/fpm/fpm/fpm_main.c:1950 Thanks for looking into it, it's greatly appreciated! –Christian -- Edit bug report at https://bugs.php.net/bug.php?id=77434&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=77434&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=77434&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=77434&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=77434&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=77434&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=77434&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=77434&r=needscript Try newer version: https://bugs.php.net/fix.php?id=77434&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=77434&r=support Expected behavior: https://bugs.php.net/fix.php?id=77434&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=77434&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=77434&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=77434&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=77434&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=77434&r=dst IIS Stability: https://bugs.php.net/fix.php?id=77434&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=77434&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=77434&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=77434&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=77434&r=mysqlcfg