Bug #77465 [Com]: Segfault with PHP built-in server

From: Date: Wed, 16 Jan 2019 13:45:06 +0000
Subject: Bug #77465 [Com]: Segfault with PHP built-in server
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-218996@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=77465&edit=1 ID: 77465 Comment by: girgias@php.net Reported by: girgias@php.net Summary: Segfault with PHP built-in server Status: Open Type: Bug Package: Built-in web server Operating System: WSL with Ubuntu 18.04 PHP Version: 7.3.1 Block user comment: N Private report: N New Comment: Run the bt command after the SIGSEGV and got this output: Starting program: /usr/bin/php -S localhost:8000 -t public/ -d display_errors=1 [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". PHP 7.3.1-1+ubuntu18.04.1+deb.sury.org+1 Development Server started at Wed Jan 16 14:43:38 2019 Listening on http://localhost:8000 Document root is /mnt/c/Dev/Sites/personal/public Press Ctrl-C to quit. Program received signal SIGSEGV, Segmentation fault. 0x00000000080eb66f in ?? () (gdb) bt #0 0x00000000080eb66f in ?? () #1 0x000000000831fc68 in execute_ex () #2 0x00007ffffa12f335 in xdebug_execute_ex (execute_data=0x7ffffa61f240) at ./build-7.3/xdebug.c:1868 #3 0x00000000080e7db3 in ?? () #4 0x000000000831fc68 in execute_ex () #5 0x00007ffffa12f335 in xdebug_execute_ex (execute_data=0x7ffffa61f1f0) at ./build-7.3/xdebug.c:1868 #6 0x00000000080e7db3 in ?? () #7 0x000000000831fc68 in execute_ex () #8 0x00007ffffa12f335 in xdebug_execute_ex (execute_data=0x7ffffa61f0f0) at ./build-7.3/xdebug.c:1868 #9 0x00000000080e7db3 in ?? () #10 0x000000000831fc68 in execute_ex () #11 0x00007ffffa12f335 in xdebug_execute_ex (execute_data=0x7ffffa61f030) at ./build-7.3/xdebug.c:1868 #12 0x0000000008326393 in zend_execute () #13 0x0000000008297a52 in zend_execute_scripts () #14 0x0000000008237d60 in php_execute_script () #15 0x000000000832ece2 in ?? () #16 0x000000000832fc04 in ?? () #17 0x000000000833015c in ?? () #18 0x0000000008330cce in ?? () #19 0x00000000080f0752 in ?? () #20 0x00007ffffd1f1b97 in __libc_start_main (main=0x80f0420, argc=7, argv=0x7ffffffee3b8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffffffee3a8) at ../csu/libc-start.c:310 #21 0x00000000080f09da in _start () (gdb) Hope this helps Previous Comments: ------------------------------------------------------------------------ [2019-01-16 13:33:12] nikic@php.net After you see the SIGSEGV, can you please run "bt" in gdb to show the rest of the backtrace? ------------------------------------------------------------------------ [2019-01-16 13:29:52] girgias@php.net Just checked again and seems like my test script only works after it segfaults once. (Which I find confusing but whatever). Will try to dig up the original issue once again. However, the original segfault error I got is still: Program received signal SIGSEGV, Segmentation fault. 0x00000000080eb66f in ?? () But not sure that provides any help because the error message is less than ideal. ------------------------------------------------------------------------ [2019-01-16 13:07:21] cmb@php.net I see memory leaks, but no segfault (current master; debug build): [Wed Jan 16 14:00:14 2019] 127.0.0.1:64505 Accepted [Wed Jan 16 14:00:14 2019] 127.0.0.1:64506 Accepted [Wed Jan 16 14:00:14 2019] 127.0.0.1:64505 [200]: /77465.php [Wed Jan 16 14:00:14 2019] Script: '/mnt/c/Users/cmb/php-dev/77465.php' /mnt/c/Users/cmb/php-dev/php-src/Zend/zend_string.h(132) : Freeing 0x00007fd2b20640c0 (32 bytes), script=/mnt/c/Users/cmb/php-dev/77465.php [Wed Jan 16 14:00:14 2019] Script: '/mnt/c/Users/cmb/php-dev/77465.php' /mnt/c/Users/cmb/php-dev/php-src/ext/date/php_date.c(945) : Freeing 0x00007fd2b2065240 (56 bytes), script=/mnt/c/Users/cmb/php-dev/77465.php [Wed Jan 16 14:00:14 2019] Script: '/mnt/c/Users/cmb/php-dev/77465.php' /mnt/c/Users/cmb/php-dev/php-src/Zend/zend_hash.c(144) : Freeing 0x00007fd2b2069480 (320 bytes), script=/mnt/c/Users/cmb/php-dev/77465.php [Wed Jan 16 14:00:14 2019] Script: '/mnt/c/Users/cmb/php-dev/77465.php' /mnt/c/Users/cmb/php-dev/php-src/ext/date/lib/parse_tz.c(244) : Freeing 0x00007fd2b206c000 (4 bytes), script=/mnt/c/Users/cmb/php-dev/77465.php [Wed Jan 16 14:00:14 2019] Script: '/mnt/c/Users/cmb/php-dev/77465.php' /mnt/c/Users/cmb/php-dev/php-src/ext/date/lib/parse_tz.c(488) : Freeing 0x00007fd2b206c028 (4 bytes), script=/mnt/c/Users/cmb/php-dev/77465.php [Wed Jan 16 14:00:14 2019] Script: '/mnt/c/Users/cmb/php-dev/77465.php' /mnt/c/Users/cmb/php-dev/php-src/ext/date/lib/parse_tz.c(354) : Freeing 0x00007fd2b206c050 (1 bytes), script=/mnt/c/Users/cmb/php-dev/77465.php [Wed Jan 16 14:00:14 2019] Script: '/mnt/c/Users/cmb/php-dev/77465.php' /mnt/c/Users/cmb/php-dev/php-src/ext/date/lib/parse_tz.c(228) : Freeing 0x00007fd2b206e000 (20 bytes), script=/mnt/c/Users/cmb/php-dev/77465.php [Wed Jan 16 14:00:14 2019] Script: '/mnt/c/Users/cmb/php-dev/77465.php' /mnt/c/Users/cmb/php-dev/php-src/ext/date/lib/parse_tz.c(487) : Freeing 0x00007fd2b2074000 (160 bytes), script=/mnt/c/Users/cmb/php-dev/77465.php /mnt/c/Users/cmb/php-dev/php-src/Zend/zend_alloc.c(2605) : Actual location (location was relayed) === Total 8 memory leaks detected === [Wed Jan 16 14:00:14 2019] 127.0.0.1:64505 Closing [Wed Jan 16 14:00:14 2019] 127.0.0.1:64508 Accepted [Wed Jan 16 14:00:15 2019] 127.0.0.1:64508 Closed without sending a request; it was probably just an unused speculative preconnection [Wed Jan 16 14:00:15 2019] 127.0.0.1:64508 Closing [Wed Jan 16 14:00:15 2019] 127.0.0.1:64506 Closed without sending a request; it was probably just an unused speculative preconnection [Wed Jan 16 14:00:15 2019] 127.0.0.1:64506 Closing ------------------------------------------------------------------------ [2019-01-16 11:30:58] girgias@php.net So this is not related to Guzzle, it segfault during an instantiation of an object. This example code: <?php $object = new stdClass(); Will output the following gdb trace: gdb --args php -S localhost:8000 -t public/ -d display_errors=1 GNU gdb (Ubuntu 8.1-0ubuntu3) 8.1.0.20180409-git Copyright (C) 2018 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from php...(no debugging symbols found)...done. (gdb) r Starting program: /usr/bin/php -S localhost:8000 -t public/ -d display_errors=1 [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". PHP 7.3.1-1+ubuntu18.04.1+deb.sury.org+1 Development Server started at Wed Jan 16 12:29:10 2019 Listening on http://localhost:8000 Document root is /mnt/c/Dev/Sites/test-bug/public Press Ctrl-C to quit. [Wed Jan 16 12:29:15 2019] 127.0.0.1:57012 [200]: / [Wed Jan 16 12:29:16 2019] 127.0.0.1:57013 [404]: /favicon.ico - No such file or directory Program received signal SIGPIPE, Broken pipe. 0x00007ffffd2f2c4d in __libc_send (fd=5, buf=0x8ace8f8, len=55, flags=0) at ../sysdeps/unix/sysv/linux/send.c:28 28 ../sysdeps/unix/sysv/linux/send.c: No such file or directory. (gdb) ------------------------------------------------------------------------ [2019-01-16 11:23:59] girgias@php.net Okay, I think I have narrowed down from where the problem comes. Or it comes from Guzzle ("guzzlehttp/psr7": "^1.5") Or it comes from first instantiating an object. gdb backtrace for the following code example: <?php require '../vendor/autoload.php'; $response = new GuzzleHttp\Psr7\Response(200, [], 'Hello World'); gdb output: gdb --args php -S localhost:8000 -t public/ -d display_errors=1 GNU gdb (Ubuntu 8.1-0ubuntu3) 8.1.0.20180409-git Copyright (C) 2018 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from php...(no debugging symbols found)...done. (gdb) r Starting program: /usr/bin/php -S localhost:8000 -t public/ -d display_errors=1 [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". PHP 7.3.1-1+ubuntu18.04.1+deb.sury.org+1 Development Server started at Wed Jan 16 12:19:29 2019 Listening on http://localhost:8000 Document root is /mnt/c/Dev/Sites/test-bug/public Press Ctrl-C to quit. [Wed Jan 16 12:19:30 2019] 127.0.0.1:56899 [200]: / [Wed Jan 16 12:19:30 2019] 127.0.0.1:56900 [404]: /favicon.ico - No such file or directory Program received signal SIGPIPE, Broken pipe. 0x00007ffffd2f2c4d in __libc_send (fd=5, buf=0x8a1aaf8, len=55, flags=0) at ../sysdeps/unix/sysv/linux/send.c:28 28 ../sysdeps/unix/sysv/linux/send.c: No such file or directory. I will try to figure out if it's only related to Guzzle or if it's a general problem. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=77465 -- Edit this bug report at https://bugs.php.net/bug.php?id=77465&edit=1

« previous php.bugs (#218996) next »