Bug #79782 [NEW]: Segfault in cleanup_unfinished_calls

From: changochen1 at gmail dot com Operating system: PHP version: 8.0Git-2020-07-04 (Git) Package: Scripting Engine problem Bug Type: Bug Bug description:Segfault in cleanup_unfinished_calls Description: ------------ Cmdline: php -f poc In debug build, it triggered assertion `(executor_globals.exception)' failed. Stack dump: --- MemorySanitizer:DEADLYSIGNAL ==229074==ERROR: MemorySanitizer: SEGV on unknown address 0x7fa0046c45dc (pc 0x0000013ea448 bp 0x000000000000 sp 0x7ffefbc8faf0 T229074) ==229074==The signal is caused by a READ memory access. #0 0x13ea447 in cleanup_unfinished_calls /home/yongheng/php_clean/Zend/zend_execute.c #1 0x158fe8a in ZEND_HANDLE_EXCEPTION_SPEC_HANDLER /home/yongheng/php_clean/Zend/zend_vm_execute.h:2572:2 #2 0x13ec04f in execute_ex /home/yongheng/php_clean/Zend/zend_vm_execute.h:51852:7 #3 0x13ec844 in zend_execute /home/yongheng/php_clean/Zend/zend_vm_execute.h:56146:2 #4 0x1337c58 in zend_execute_scripts /home/yongheng/php_clean/Zend/zend.c:1667:4 #5 0x10c1cd7 in php_execute_script /home/yongheng/php_clean/main/main.c:2579:14 #6 0x171abf1 in do_cli /home/yongheng/php_clean/sapi/cli/php_cli.c:958:5 #7 0x1716fcf in main /home/yongheng/php_clean/sapi/cli/php_cli.c:1357:18 #8 0x7f9b4553ab96 in __libc_start_main /build/glibc-OTsEL5/glibc-2.27/csu/../csu/libc-start.c:310 #9 0x440309 in _start (/home/yongheng/php_clean/asan/sapi/cli/php+0x440309) MemorySanitizer can not provide additional info. SUMMARY: MemorySanitizer: SEGV /home/yongheng/php_clean/Zend/zend_execute.c in cleanup_unfinished_calls --- Test script: --------------- <? vprintf(die(function(){})); -- Edit bug report at https://bugs.php.net/bug.php?id=79782&edit=1 -- Fix committed: https://bugs.php.net/fix.php?id=79782&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=79782&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=79782&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=79782&r=needscript Try newer version: https://bugs.php.net/fix.php?id=79782&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=79782&r=support Expected behavior: https://bugs.php.net/fix.php?id=79782&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=79782&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=79782&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=79782&r=globals PHP version support discontinued: https://bugs.php.net/fix.php?id=79782&r=phptooold Daylight Savings: https://bugs.php.net/fix.php?id=79782&r=dst IIS Stability: https://bugs.php.net/fix.php?id=79782&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=79782&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=79782&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=79782&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=79782&r=mysqlcfg