Bug #77590 [NEW]: SIGSEGV in zend_hash_str_find_bucket

From: gravydish at gmail dot com Operating system: Fedora 29 PHP version: 7.2.15 Package: Built-in web server Bug Type: Bug Bug description:SIGSEGV in zend_hash_str_find_bucket Description: ------------ This is on PHP 7.2.14, I will retest with 7.2.15 when it is available for Fedora. However, according to the release notes, I do not see this particular issue addressed in 7.2.15. I get a SIGSEGV and this backtrace for rendering a particular page in my software. I have not been able to narrow it down to a specific line of PHP code yet, but reviewing the PHP source code referenced from the backtrace, it seems to be originating outside of PHP interpretation. Following the backtrace, I see that the zend_hash_str_find_bucket function is inlined, so it must be one of the lines of the inlined function which is failing some assumption, but I'm currently unable to provide a more-specific backtrace. What can I do to provide better direction for this bug? Cheers, Jared Actual result: -------------- #0 0x0000555555820153 in zend_hash_str_find_bucket (h=9223372037048248209, len=3, str=0x5555558c29aa "UTC", ht=0x7ffff6e04738) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/Zend/zend_hash.c:1971 #1 zend_hash_str_find (ht=0x7ffff6e04738, str=0x5555558c29aa "UTC", len=3) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/Zend/zend_hash.c:1971 #2 0x0000555555668220 in zend_hash_str_find_ptr (len=<optimized out>, str=0x5555558c29aa "UTC", ht=<optimized out>) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/Zend/zend_hash.h:753 #3 php_date_parse_tzfile (formal_tzname=0x5555558c29aa "UTC", tzdb=0x555555bb2fd0) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/ext/date/php_date.c:949 #4 0x000055555566a0ce in get_timezone_info () at /usr/src/debug/php-7.2.14-1.fc29.x86_64/ext/date/php_date.c:1028 #5 0x000055555566b4b8 in php_format_date (format=format@entry=0x55555592010c "r", format_len=format_len@entry=1, ts=1549653057, localtime=localtime@entry=1) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/ext/date/php_date.c:1283 #6 0x00005555558b87c0 in append_essential_headers (buffer=buffer@entry=0x7fffffffc1b0, client=client@entry=0x555555b10360, persistent=persistent@entry=1) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/sapi/cli/php_cli_server.c:359 #7 0x00005555558bb824 in php_cli_server_begin_send_static (client=0x555555b10360, server=0x555555a2edc0 <server>) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/sapi/cli/php_cli_server.c:2043 #8 php_cli_server_dispatch (client=0x555555b10360, server=0x555555a2edc0 <server>) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/sapi/cli/php_cli_server.c:2184 #9 php_cli_server_recv_event_read_request (server=0x555555a2edc0 <server>, client=0x555555b10360) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/sapi/cli/php_cli_server.c:2379 #10 0x00005555558bbdf4 in php_cli_server_do_event_for_each_fd_callback (_params=_params@entry=0x7fffffffc300, fd=fd@entry=5, event=event@entry=1) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/sapi/cli/php_cli_server.c:2462 #11 0x00005555558bca1b in php_cli_server_poller_iter_on_active (poller=0x555555a2edc8 <server+8>, callback=0x5555558bbda0 <php_cli_server_do_event_for_each_fd_callback>, opaque=0x7fffffffc300) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/sapi/cli/php_cli_server.c:846 #12 php_cli_server_do_event_for_each_fd (whandler=0x5555558b9d90 <php_cli_server_send_event>, rhandler=0x5555558bb520 <php_cli_server_recv_event_read_request>, server=0x555555a2edc0 <server>) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/sapi/cli/php_cli_server.c:2480 #13 php_cli_server_do_event_loop (server=0x555555a2edc0 <server>) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/sapi/cli/php_cli_server.c:2490 #14 do_cli_server (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/sapi/cli/php_cli_server.c:2612 #15 0x0000555555661b18 in main (argc=3, argv=0x555555a4ae50) at /usr/src/debug/php-7.2.14-1.fc29.x86_64/sapi/cli/php_cli.c:1406 -- Edit bug report at https://bugs.php.net/bug.php?id=77590&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=77590&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=77590&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=77590&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=77590&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=77590&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=77590&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=77590&r=needscript Try newer version: https://bugs.php.net/fix.php?id=77590&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=77590&r=support Expected behavior: https://bugs.php.net/fix.php?id=77590&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=77590&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=77590&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=77590&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=77590&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=77590&r=dst IIS Stability: https://bugs.php.net/fix.php?id=77590&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=77590&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=77590&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=77590&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=77590&r=mysqlcfg