Bug #77434 [Opn]: php-fpm workers are segfaulting in zend_gc_addref

Edit report at https://bugs.php.net/bug.php?id=77434&edit=1 ID: 77434 User updated by: bugs dot php dot net at mundpropaganda dot net Reported by: bugs dot php dot net at mundpropaganda dot net Summary: php-fpm workers are segfaulting in zend_gc_addref Status: Open Type: Bug Package: opcache Operating System: Archlinux PHP Version: 7.3Git-2019-01-09 (Git) Block user comment: N Private report: N New Comment: Forgot to mention: When I disable opcache, the problem goes away. Also by downgrading back to PHP 7.2 (with opcache enabled) Previous Comments: ------------------------------------------------------------------------ [2019-01-09 14:15:53] bugs dot php dot net at mundpropaganda dot net Description: ------------ So I created a snapshot from the current PHP-7.3 branch (as of c4c6b80) to try out the patches for #77289. While doing so I might have found another bug: When I try to use the "Advanced Editor" plugin in the BBS software Vanilla with an empty cache (the app's internal caching engine that is) the button row is missing. On subsequent hits to the same route the php-fpm workers are sefaulting. Diff of the resulting HTML code with the missing button row of that first render: https://gist.github.com/kkkrist/8741e7fb9a28c6196497602732a22e14 Related php code: https://github.com/vanilla/vanilla/blob/Vanilla_2.6.4/plugins/editor/views/editor.php Backtrace: #0 0x00005647c1105df4 in zend_gc_addref (p=0x7f7df80f1e40) at /home/krist/tmp/php-7.3.2/Zend/zend_types.h:991 #1 0x00005647c1105f17 in zval_addref_p (pz=0x7f7dfaa87638) at /home/krist/tmp/php-7.3.2/Zend/zend_types.h:1025 #2 0x00005647c110cac0 in zend_fetch_dimension_address_read (result=0x7f7e0141ff30, container=0x7f7dfaa87338, dim=0x7f7e0141fe80, dim_type=8, type=0, support_strings=1, slow=0) at /home/krist/tmp/php-7.3.2/Zend/zend_execute.c:1945 #3 0x00005647c110d0d1 in zend_fetch_dimension_address_read_R (container=0x7f7dfaa87338, dim=0x7f7e0141fe80, dim_type=8) at /home/krist/tmp/php-7.3.2/Zend/zend_execute.c:2050 #4 0x00005647c11242c8 in ZEND_FETCH_DIM_R_SPEC_CONST_CV_HANDLER () at /home/krist/tmp/php-7.3.2/Zend/zend_vm_execute.h:9941 #5 0x00005647c117f318 in execute_ex (ex=0x7f7e0141fc30) at /home/krist/tmp/php-7.3.2/Zend/zend_vm_execute.h:56351 #6 0x00005647c1091836 in zend_call_function (fci=0x7ffdd8c63bb0, fci_cache=0x7ffdd8c63b90) at /home/krist/tmp/php-7.3.2/Zend/zend_execute_API.c:756 #7 0x00005647c0ec535a in zif_call_user_func_array (execute_data=0x7f7e0141fbc0, return_value=0x7f7e0141fb90) at /home/krist/tmp/php-7.3.2/ext/standard/basic_functions.c:4942 #8 0x00005647c1111a4c in ZEND_DO_FCALL_BY_NAME_SPEC_RETVAL_USED_HANDLER () at /home/krist/tmp/php-7.3.2/Zend/zend_vm_execute.h:892 #9 0x00005647c117e511 in execute_ex (ex=0x7f7e0141f030) at /home/krist/tmp/php-7.3.2/Zend/zend_vm_execute.h:55433 #10 0x00005647c1183b03 in zend_execute (op_array=0x7f7e01479000, return_value=0x0) at /home/krist/tmp/php-7.3.2/Zend/zend_vm_execute.h:60833 #11 0x00005647c10a95da in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /home/krist/tmp/php-7.3.2/Zend/zend.c:1568 #12 0x00005647c100fa58 in php_execute_script (primary_file=0x7ffdd8c66320) at /home/krist/tmp/php-7.3.2/main/main.c:2630 #13 0x00005647c1196def in main (argc=3, argv=0x7ffdd8c667b8) at /home/krist/tmp/php-7.3.2/sapi/fpm/fpm/fpm_main.c:1950 Thanks for looking into it, it's greatly appreciated! –Christian ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=77434&edit=1