Bug #78303 [NEW]: repeating crashes in php_basename with event-mpm+mod_php

From: Date: Wed, 17 Jul 2019 09:07:04 +0000
Subject: Bug #78303 [NEW]: repeating crashes in php_basename with event-mpm+mod_php
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-221823@lists.php.net to get a copy of this message 
From:             theultramage at gmail dot com
Operating system: FreeBSD 12.0
PHP version:      7.3.7
Package:          *General Issues
Bug Type:         Bug
Bug description:repeating crashes in php_basename with event-mpm+mod_php

Description:
------------
All components have been built with whatever thread safety flags were
available.  However, there seems to be a multithreading issue in the way
freebsd's libc is invoked, resulting in a null pointer call. This same
crash happens randomly, usually once every few days.

#0  0x0000000000000000 in ?? ()
#1  0x0000000800505e28 in mblen (s=0x8042d223b "p", n=1) at
/usr/src/lib/libc/locale/mblen.c:53
#2  0x0000000801663697 in php_basename () from
/usr/local/libexec/apache24/libphp7.so
#3  0x000000080166383d in php_basename () from
/usr/local/libexec/apache24/libphp7.so
#4  0x00000008017d3de1 in zend_execute () from
/usr/local/libexec/apache24/libphp7.so
#5  0x000000080178061b in execute_ex () from
/usr/local/libexec/apache24/libphp7.so
#6  0x00000008017808b6 in zend_execute () from
/usr/local/libexec/apache24/libphp7.so
#7  0x0000000801733894 in zend_execute_scripts () from
/usr/local/libexec/apache24/libphp7.so
#8  0x00000008016c02b9 in php_execute_script () from
/usr/local/libexec/apache24/libphp7.so
#9  0x0000000801801808 in zend_check_arg_type () from
/usr/local/libexec/apache24/libphp7.so
#10 0x000000000025a5f9 in ap_invoke_handler ()
#11 0x0000000000295c1f in ap_process_async_request ()
#12 0x000000000029254d in ap_process_http_connection ()
#13 0x0000000000272bf9 in ap_run_process_connection ()
#14 0x000000000029fb61 in process_socket ()
#15 0x000000000029f6d7 in worker_thread ()
#16 0x0000000800450767 in thread_start (curthread=0x803153000) at
/usr/src/lib/libthr/thread/thr_create.c:292
        set = {__bits = 0x7fffdfdfcfc8}

int mblen(const char *s, size_t n)
{
	return mblen_l(s, n, __get_locale());
}

int mblen_l(const char *s, size_t n, locale_t locale)
{
...
	rval = XLOCALE_CTYPE(locale)->__mbrtowc(NULL, s, n, &locale->mblen);
...
}



-- 
Edit bug report at https://bugs.php.net/bug.php?id=78303&edit=1
-- 
Try a snapshot (PHP 5.4):   https://bugs.php.net/fix.php?id=78303&r=trysnapshot54
Try a snapshot (PHP 5.5):   https://bugs.php.net/fix.php?id=78303&r=trysnapshot55
Try a snapshot (trunk):     https://bugs.php.net/fix.php?id=78303&r=trysnapshottrunk
Fixed in SVN:               https://bugs.php.net/fix.php?id=78303&r=fixed
Fixed in release:           https://bugs.php.net/fix.php?id=78303&r=alreadyfixed
Need backtrace:             https://bugs.php.net/fix.php?id=78303&r=needtrace
Need Reproduce Script:      https://bugs.php.net/fix.php?id=78303&r=needscript
Try newer version:          https://bugs.php.net/fix.php?id=78303&r=oldversion
Not developer issue:        https://bugs.php.net/fix.php?id=78303&r=support
Expected behavior:          https://bugs.php.net/fix.php?id=78303&r=notwrong
Not enough info:            https://bugs.php.net/fix.php?id=78303&r=notenoughinfo
Submitted twice:            https://bugs.php.net/fix.php?id=78303&r=submittedtwice
register_globals:           https://bugs.php.net/fix.php?id=78303&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=78303&r=php4
Daylight Savings:           https://bugs.php.net/fix.php?id=78303&r=dst
IIS Stability:              https://bugs.php.net/fix.php?id=78303&r=isapi
Install GNU Sed:            https://bugs.php.net/fix.php?id=78303&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=78303&r=float
No Zend Extensions:         https://bugs.php.net/fix.php?id=78303&r=nozend
MySQL Configuration Error:  https://bugs.php.net/fix.php?id=78303&r=mysqlcfg

Thread (11 messages)

« previous php.bugs (#221823) next »