Bug #79821 [NEW]: Segfault in zend_get_properties_for

From: changochen1 at gmail dot com Operating system: PHP version: 8.0Git-2020-07-09 (Git) Package: Scripting Engine problem Bug Type: Bug Bug description:Segfault in zend_get_properties_for Description: ------------ Stack dump: --- MemorySanitizer:DEADLYSIGNAL ==90629==ERROR: MemorySanitizer: SEGV on unknown address 0x0001000000c1 (pc 0x0000016f0d06 bp 0x2fff3f021520 sp 0x7fff3f021510 T90629) ==90629==The signal is caused by a READ memory access. #0 0x16f0d05 in zend_get_properties_for /home/yongheng/php_clean/Zend/zend_object_handlers.c:1783:22 #1 0xfbd6ec in php_var_dump /home/yongheng/php_clean/ext/standard/var.c:153:11 #2 0xfbe156 in php_array_element_dump /home/yongheng/php_clean/ext/standard/var.c:47:2 #3 0xfbe156 in php_var_dump /home/yongheng/php_clean/ext/standard/var.c:136 #4 0xfbe156 in php_array_element_dump /home/yongheng/php_clean/ext/standard/var.c:47:2 #5 0xfbe156 in php_var_dump /home/yongheng/php_clean/ext/standard/var.c:136 #6 0xfbe156 in php_array_element_dump /home/yongheng/php_clean/ext/standard/var.c:47:2 #7 0xfbe156 in php_var_dump /home/yongheng/php_clean/ext/standard/var.c:136 #8 0xfbf671 in zif_var_dump /home/yongheng/php_clean/ext/standard/var.c:217:3 #9 0x15763b2 in ZEND_DO_ICALL_SPEC_RETVAL_UNUSED_HANDLER /home/yongheng/php_clean/Zend/zend_vm_execute.h:1226:2 #10 0x13ed9df in execute_ex /home/yongheng/php_clean/Zend/zend_vm_execute.h:51800:7 #11 0x13ee1d4 in zend_execute /home/yongheng/php_clean/Zend/zend_vm_execute.h:56094:2 #12 0x1338298 in zend_execute_scripts /home/yongheng/php_clean/Zend/zend.c:1667:4 #13 0x10c2327 in php_execute_script /home/yongheng/php_clean/main/main.c:2537:14 #14 0x171f571 in do_cli /home/yongheng/php_clean/sapi/cli/php_cli.c:955:5 #15 0x171b94f in main /home/yongheng/php_clean/sapi/cli/php_cli.c:1353:18 #16 0x7f42389fbb96 in __libc_start_main /build/glibc-OTsEL5/glibc-2.27/csu/../csu/libc-start.c:310 #17 0x440419 in _start (/home/yongheng/php_clean/asan/sapi/cli/php+0x440419) MemorySanitizer can not provide additional info. SUMMARY: MemorySanitizer: SEGV /home/yongheng/php_clean/Zend/zend_object_handlers.c:1783:22 in zend_get_properties_for ==90629==ABORTING --- Test script: --------------- <? for ( ;;$a ++ ) switch ( $a ) { case $b = array ( $b, array ( & $_FILES ) ) : case 3 : break 2 ; } ob_start ( function () {$_FILES [] []=$buffer ;}, 20 ) ; foreach ( $b as $c ) var_dump ( $c ) ; -- Edit bug report at https://bugs.php.net/bug.php?id=79821&edit=1 -- Fix committed: https://bugs.php.net/fix.php?id=79821&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=79821&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=79821&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=79821&r=needscript Try newer version: https://bugs.php.net/fix.php?id=79821&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=79821&r=support Expected behavior: https://bugs.php.net/fix.php?id=79821&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=79821&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=79821&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=79821&r=globals PHP version support discontinued: https://bugs.php.net/fix.php?id=79821&r=phptooold Daylight Savings: https://bugs.php.net/fix.php?id=79821&r=dst IIS Stability: https://bugs.php.net/fix.php?id=79821&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=79821&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=79821&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=79821&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=79821&r=mysqlcfg