Bug #77447 [NEW]: PHP 7.3 built with ASAN crashes in zend_cpu_supports_avx2
| From: | hanno at hboeck dot de | Date: | Fri, 11 Jan 2019 14:59:05 +0000 |
| Subject: | Bug #77447 [NEW]: PHP 7.3 built with ASAN crashes in zend_cpu_supports_avx2 | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-218911@lists.php.net to get a copy of this message | ||
From: hanno at hboeck dot de
Operating system: Linux
PHP version: 7.3.1
Package: Reproducible crash
Bug Type: Bug
Bug description:PHP 7.3 built with ASAN crashes in zend_cpu_supports_avx2
Description:
------------
I'm unable to get PHP 7.3 to run with address sanitizer.
Reproduce:
./configure CFLAGS="-fsanitize=address -g" CXXFLAGS="-fsanitize=address
-g" LDFLAGS="-fsanitize=address" --enable-debug
make
./sapi/cli/php
leads to a segfault.
This problem does not happen with 7.2.x.
Address Sanitizer has been an extremely helpful tool to identify memory
corruption bugs and security issues in PHP, therefore this is
concerning, as it might hamper the ability of security researchers to
find bugs in PHP.
A stack trace from GDB shows this happens in the function
zend_cpu_supports_avx2(). AVX2 support is not available in PHP 7.2,
therefore I believe this explains the difference between 7.2 and 7.3.
Expected result:
----------------
No segfault with ASAN.
Actual result:
--------------
Segfault with ASAN.
--
Edit bug report at https://bugs.php.net/bug.php?id=77447&edit=1
--
Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=77447&r=trysnapshot54
Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=77447&r=trysnapshot55
Try a snapshot (trunk): https://bugs.php.net/fix.php?id=77447&r=trysnapshottrunk
Fixed in SVN: https://bugs.php.net/fix.php?id=77447&r=fixed
Fixed in release: https://bugs.php.net/fix.php?id=77447&r=alreadyfixed
Need backtrace: https://bugs.php.net/fix.php?id=77447&r=needtrace
Need Reproduce Script: https://bugs.php.net/fix.php?id=77447&r=needscript
Try newer version: https://bugs.php.net/fix.php?id=77447&r=oldversion
Not developer issue: https://bugs.php.net/fix.php?id=77447&r=support
Expected behavior: https://bugs.php.net/fix.php?id=77447&r=notwrong
Not enough info: https://bugs.php.net/fix.php?id=77447&r=notenoughinfo
Submitted twice: https://bugs.php.net/fix.php?id=77447&r=submittedtwice
register_globals: https://bugs.php.net/fix.php?id=77447&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=77447&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=77447&r=dst
IIS Stability: https://bugs.php.net/fix.php?id=77447&r=isapi
Install GNU Sed: https://bugs.php.net/fix.php?id=77447&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=77447&r=float
No Zend Extensions: https://bugs.php.net/fix.php?id=77447&r=nozend
MySQL Configuration Error: https://bugs.php.net/fix.php?id=77447&r=mysqlcfg