Bug #54296 [Fbk->NoF]: Crash in SQLite3Stmt internal object destructor

Edit report at https://bugs.php.net/bug.php?id=54296&edit=1 ID: 54296 Updated by: php-bugs@lists.php.net Reported by: decoder-php at own-hero dot net Summary: Crash in SQLite3Stmt internal object destructor -Status: Feedback +Status: No Feedback Type: Bug Package: Reproducible crash Operating System: Linux x86-64 PHP Version: 5.3.5 Assigned To: cmb Private report: N New Comment: No feedback was provided. The bug is being suspended because we assume that you are no longer experiencing the problem. If this is not the case and you are able to provide the information that was requested earlier, please do so and change the status of the bug back to "Re-Opened". Thank you. Previous Comments: ------------------------------------------------------------------------ [2021-02-12 11:37:40] cmb@php.net Can anyone still reproduce this segfault with any of the actively supported PHP versions[1]? [1] <https://www.php.net/supported-versions.php> ------------------------------------------------------------------------ [2021-01-09 20:40:28] sji at sj-i dot dev cannot reproduce this on 8.0.1-debug ------------------------------------------------------------------------ [2011-03-23 02:03:10] felipe@php.net It seems a bit related to bug #53626. ------------------------------------------------------------------------ [2011-03-17 15:48:26] decoder-php at own-hero dot net Description: ------------ The attached code crashes on PHP5.3.5 (debug build). Test script: --------------- <?php $db = new SQLite3(':memory:'); $db->exec('CREATE TABLE test (whatever INTEGER)'); $db->exec('INSERT INTO test (whatever) VALUES (1)'); $result = $db->query('SELECT * FROM test'); while ($row = $result->fetchArray(SQLITE3_NUM)) { var_dump($$result->columnName(0)); } ?> Actual result: -------------- ==30655== Invalid read of size 8 ==30655== at 0x7C5DEA: zend_llist_del_element (zend_llist.c:97) ==30655== by 0x49EF70: php_sqlite3_stmt_object_free_storage (sqlite3.c:1936) ==30655== by 0x800A1C: zend_objects_store_free_object_storage (zend_objects_API.c:92) ==30655== by 0x7C1326: shutdown_executor (zend_execute_API.c:302) ==30655== by 0x7D2685: zend_deactivate (zend.c:890) ==30655== by 0x75C7B5: php_request_shutdown (main.c:1633) ==30655== by 0x8B7FEB: main (php_cli.c:1374) ==30655== Address 0x5a5a5a5a5a5a5a5a is not stack'd, malloc'd or (recently) free'd ==30655== ==30655== ==30655== Process terminating with default action of signal 11 (SIGSEGV) ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=54296&edit=1