Bug #68754 [Opn->Fbk]: AV with mysqli doc ref

From: Date: Mon, 09 Aug 2021 10:33:52 +0000
Subject: Bug #68754 [Opn->Fbk]: AV with mysqli doc ref
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-235695@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=68754&edit=1 ID: 68754 Updated by: cmb@php.net Reported by: mattficken@php.net Summary: AV with mysqli doc ref -Status: Open +Status: Feedback Type: Bug Package: MySQLi related Operating System: Windows PHP Version: 5.6.4 -Assigned To: +Assigned To: cmb Block user comment: N Private report: N New Comment: Does this still happen with any of the actively supported PHP versions[1]? [1] <https://www.php.net/supported-versions.php> Previous Comments: ------------------------------------------------------------------------ [2015-01-05 22:42:31] mattficken@php.net Description: ------------ mysqli extension calls php_error_docref which calls efree resulting in AV (null pointer read). Stack traces of user-mode application crashes on Windows can (with user consent) be reported to Microsoft (see Windows Error Reporting and Watson). This bug is based on one of those reports. Reported on 5.6.0 (could affect 5.6.4) php-cgi X86 NTS. Watson #73492878194 Actual result: -------------- 0170e350 0fc6e2bb php5!_efree+0x165 [c:\php-sdk\php56\vc11\x86\php-5.6.0\zend\zend_alloc.c @ 2440] 0170e398 0fc6d71b php5!php_verror+0x1bb [c:\php-sdk\php56\vc11\x86\php-5.6.0\main\main.c @ 944] 0170e3b0 6ed88b4c php5!php_error_docref0+0x1b [c:\php-sdk\php56\vc11\x86\php-5.6.0\main\main.c @ 958] 0170e3d8 6ed8ce70 php_mysqli!php_mysqli_throw_sql_exception+0x3c [c:\php-sdk\php56\vc11\x86\php-5.6.0\ext\mysqli\mysqli_exception.c @ 51] 0170e454 6ed86697 php_mysqli!mysqli_common_connect+0xb800 [c:\php-sdk\php56\vc11\x86\php-5.6.0\ext\mysqli\mysqli_nonapi.c @ 250] 0170e46c 0fc638c2 php_mysqli!zif_mysqli_real_connect+0x17 [c:\php-sdk\php56\vc11\x86\php-5.6.0\ext\mysqli\mysqli_api.c @ 1947] 0170e4c0 0fc63093 php5!zend_do_fcall_common_helper_SPEC+0x122 [c:\php-sdk\php56\vc11\x86\php-5.6.0\zend\zend_vm_execute.h @ 558] 0170e4f8 0fc874ee php5!execute_ex+0x2a3 [c:\php-sdk\php56\vc11\x86\php-5.6.0\zend\zend_vm_execute.h @ 363] 0170e51c 0fc8734e php5!zend_execute+0x14e [c:\php-sdk\php56\vc11\x86\php-5.6.0\zend\zend_vm_execute.h @ 388] 0170e550 0fc8894c php5!zend_execute_scripts+0xde [c:\php-sdk\php56\vc11\x86\php-5.6.0\zend\zend.c @ 1330] 0170e74c 00000000 php5!php_execute_script+0x14c [c:\php-sdk\php56\vc11\x86\php-5.6.0\main\main.c @ 2584] ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=68754&edit=1

« previous php.bugs (#235695) next »