Bug #77447 [NEW]: PHP 7.3 built with ASAN crashes in zend_cpu_supports_avx2

From: Date: Fri, 11 Jan 2019 14:59:05 +0000
Subject: Bug #77447 [NEW]: PHP 7.3 built with ASAN crashes in zend_cpu_supports_avx2
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-218911@lists.php.net to get a copy of this message
From: hanno at hboeck dot de Operating system: Linux PHP version: 7.3.1 Package: Reproducible crash Bug Type: Bug Bug description:PHP 7.3 built with ASAN crashes in zend_cpu_supports_avx2 Description: ------------ I'm unable to get PHP 7.3 to run with address sanitizer. Reproduce: ./configure CFLAGS="-fsanitize=address -g" CXXFLAGS="-fsanitize=address -g" LDFLAGS="-fsanitize=address" --enable-debug make ./sapi/cli/php leads to a segfault. This problem does not happen with 7.2.x. Address Sanitizer has been an extremely helpful tool to identify memory corruption bugs and security issues in PHP, therefore this is concerning, as it might hamper the ability of security researchers to find bugs in PHP. A stack trace from GDB shows this happens in the function zend_cpu_supports_avx2(). AVX2 support is not available in PHP 7.2, therefore I believe this explains the difference between 7.2 and 7.3. Expected result: ---------------- No segfault with ASAN. Actual result: -------------- Segfault with ASAN. -- Edit bug report at https://bugs.php.net/bug.php?id=77447&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=77447&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=77447&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=77447&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=77447&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=77447&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=77447&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=77447&r=needscript Try newer version: https://bugs.php.net/fix.php?id=77447&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=77447&r=support Expected behavior: https://bugs.php.net/fix.php?id=77447&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=77447&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=77447&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=77447&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=77447&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=77447&r=dst IIS Stability: https://bugs.php.net/fix.php?id=77447&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=77447&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=77447&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=77447&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=77447&r=mysqlcfg

« previous php.bugs (#218911) next »