Bug #81607 [Opn->Ver]: Segmentation fault for opcache.enable_cli=1

Edit report at https://bugs.php.net/bug.php?id=81607&edit=1 ID: 81607 Updated by: nikic@php.net Reported by: mails at thomasbley dot de Summary: Segmentation fault for opcache.enable_cli=1 -Status: Open +Status: Verified Type: Bug Package: opcache Operating System: linux PHP Version: 8.1.0RC5 Block user comment: N Private report: N New Comment: Can at least confirm the segfault. The class entry read from CE cache is corrupted. Previous Comments: ------------------------------------------------------------------------ [2021-11-11 13:17:02] mails at thomasbley dot de seems this code causes the segfault: ./src/Psalm/Internal/Fork/Pool.php:352 $message = unserialize(base64_decode($serialized_message, true)); data is: O:39:"Psalm\Internal\Fork\ForkTaskDoneMessage":1:{s:4:"data";N;} interface ForkMessage { } class ForkTaskDoneMessage implements ForkMessage { /** @var mixed */ public $data; /** * @param mixed $data */ public function __construct($data) { $this->data = $data; } } ------------------------------------------------------------------------ [2021-11-11 12:54:53] mails at thomasbley dot de yes core-php.27635 #0 0x0000557656c14b67 in ?? () #1 0x0000557656c164fe in php_var_unserialize () #2 0x0000557656c0520a in php_unserialize_with_options () #3 0x0000557656c05457 in ?? () #4 0x0000557656cf4081 in execute_ex () #5 0x0000557656cfa24d in zend_execute () #6 0x0000557656c8b615 in zend_execute_scripts () #7 0x0000557656c288ca in php_execute_script () #8 0x0000557656d72e1e in ?? () #9 0x0000557656acdea8 in ?? () #10 0x00007f61a2a310b3 in __libc_start_main (main=0x557656acdaa0, argc=6, argv=0x7ffd37a1c568, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffd37a1c558) at ../csu/libc-start.c:308 #11 0x0000557656ace04e in _start () core-php.27636 #0 0x0000557656c81cc4 in instanceof_function_slow () #1 0x0000557656cadcfa in ?? () #2 0x0000557656cf29f6 in execute_ex () #3 0x0000557656cfa24d in zend_execute () #4 0x0000557656c8b615 in zend_execute_scripts () #5 0x0000557656c288ca in php_execute_script () #6 0x0000557656d72e1e in ?? () #7 0x0000557656acdea8 in ?? () #8 0x00007f61a2a310b3 in __libc_start_main (main=0x557656acdaa0, argc=6, argv=0x7ffd37a1c568, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffd37a1c558) at ../csu/libc-start.c:308 #9 0x0000557656ace04e in _start () core-php.27637 #0 0x0000557656c8dc74 in object_init_ex () #1 0x0000557656cc8495 in ?? () #2 0x0000557656cf147d in execute_ex () #3 0x0000557656cfa24d in zend_execute () #4 0x0000557656c8b615 in zend_execute_scripts () #5 0x0000557656c288ca in php_execute_script () #6 0x0000557656d72e1e in ?? () #7 0x0000557656acdea8 in ?? () #8 0x00007f61a2a310b3 in __libc_start_main (main=0x557656acdaa0, argc=6, argv=0x7ffd37a1c568, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffd37a1c558) at ../csu/libc-start.c:308 #9 0x0000557656ace04e in _start () core-php.27638 #0 0x0000557656c8dc74 in object_init_ex () #1 0x0000557656cc8495 in ?? () #2 0x0000557656cf147d in execute_ex () #3 0x0000557656cfa24d in zend_execute () #4 0x0000557656c8b615 in zend_execute_scripts () #5 0x0000557656c288ca in php_execute_script () #6 0x0000557656d72e1e in ?? () #7 0x0000557656acdea8 in ?? () #8 0x00007f61a2a310b3 in __libc_start_main (main=0x557656acdaa0, argc=6, argv=0x7ffd37a1c568, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffd37a1c558) at ../csu/libc-start.c:308 #9 0x0000557656ace04e in _start () core-php.27639 #0 0x0000557656c8dc74 in object_init_ex () #1 0x0000557656cc8495 in ?? () #2 0x0000557656cf147d in execute_ex () #3 0x0000557656cfa24d in zend_execute () #4 0x0000557656c8b615 in zend_execute_scripts () #5 0x0000557656c288ca in php_execute_script () #6 0x0000557656d72e1e in ?? () #7 0x0000557656acdea8 in ?? () #8 0x00007f61a2a310b3 in __libc_start_main (main=0x557656acdaa0, argc=6, argv=0x7ffd37a1c568, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffd37a1c558) at ../csu/libc-start.c:308 #9 0x0000557656ace04e in _start () ------------------------------------------------------------------------ [2021-11-11 12:05:44] cmb@php.net Thank you for the backtraces (although backtraces with debug symbols might be more helpful). Anyhow, does it also segfault when pcov is disabled? ------------------------------------------------------------------------ [2021-11-11 11:55:53] mails at thomasbley dot de core-php.19219 #0 0x00005601a80bfcc4 in instanceof_function_slow () #1 0x00005601a80ebcfa in ?? () #2 0x00005601a8138d10 in zend_vm_call_opcode_handler () #3 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #4 0x00005601a7ef24f0 in ?? () #5 0x00005601a8138d10 in zend_vm_call_opcode_handler () #6 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #7 0x00005601a7ef27a2 in ?? () #8 0x00005601a8138d10 in zend_vm_call_opcode_handler () #9 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #10 0x00005601a7ef27a2 in ?? () #11 0x00005601a8138d10 in zend_vm_call_opcode_handler () #12 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #13 0x00005601a7ef27a2 in ?? () #14 0x00005601a8138d10 in zend_vm_call_opcode_handler () #15 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #16 0x00005601a7ef27a2 in ?? () #17 0x00005601a8138d10 in zend_vm_call_opcode_handler () #18 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #19 0x00005601a7ef27a2 in ?? () #20 0x00005601a8138d10 in zend_vm_call_opcode_handler () #21 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #22 0x00005601a7ef27a2 in ?? () #23 0x00005601a8138d10 in zend_vm_call_opcode_handler () #24 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #25 0x00005601a7ef27a2 in ?? () #26 0x00005601a8138d10 in zend_vm_call_opcode_handler () #27 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #28 0x00005601a7ef27a2 in ?? () #29 0x00005601a8138d10 in zend_vm_call_opcode_handler () #30 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #31 0x00005601a7ef27a2 in ?? () #32 0x00005601a8138d10 in zend_vm_call_opcode_handler () #33 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #34 0x00005601a7ef24f0 in ?? () #35 0x00005601a8138d10 in zend_vm_call_opcode_handler () #36 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #37 0x00005601a7ef24f0 in ?? () #38 0x00005601a8138d10 in zend_vm_call_opcode_handler () #39 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #40 0x00005601a7ef24f0 in ?? () #41 0x00005601a8138d10 in zend_vm_call_opcode_handler () #42 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #43 0x00005601a7ef27a2 in ?? () #44 0x00005601a8138d10 in zend_vm_call_opcode_handler () #45 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #46 0x00005601a7ef24f0 in ?? () #47 0x00005601a8138d10 in zend_vm_call_opcode_handler () #48 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #49 0x00005601a7ef27a2 in ?? () #50 0x00005601a8138d10 in zend_vm_call_opcode_handler () #51 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #52 0x00005601a7ef27a2 in ?? () #53 0x00005601a8138d10 in zend_vm_call_opcode_handler () #54 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #55 0x00005601a7ef24f0 in ?? () #56 0x00005601a8138d10 in zend_vm_call_opcode_handler () #57 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #58 0x00005601a7ef24f0 in ?? () #59 0x00005601a8138d10 in zend_vm_call_opcode_handler () #60 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #61 0x00005601a7ef24f0 in ?? () #62 0x00005601a8138d10 in zend_vm_call_opcode_handler () #63 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #64 0x00005601a813824d in zend_execute () #65 0x00005601a80c9615 in zend_execute_scripts () #66 0x00005601a80668ca in php_execute_script () #67 0x00005601a81b0e1e in ?? () #68 0x00005601a7f0bea8 in ?? () #69 0x00007ff8639610b3 in __libc_start_main (main=0x5601a7f0baa0, argc=7, argv=0x7ffd53709558, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffd53709548) at ../csu/libc-start.c:308 #70 0x00005601a7f0c04e in _start () core-php.19220 #0 0x00005601a80cbc74 in object_init_ex () #1 0x00005601a8106495 in ?? () #2 0x00005601a8138d10 in zend_vm_call_opcode_handler () #3 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #4 0x00005601a7ef24f0 in ?? () #5 0x00005601a8138d10 in zend_vm_call_opcode_handler () #6 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #7 0x00005601a7ef27a2 in ?? () #8 0x00005601a8138d10 in zend_vm_call_opcode_handler () #9 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #10 0x00005601a7ef27a2 in ?? () #11 0x00005601a8138d10 in zend_vm_call_opcode_handler () #12 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #13 0x00005601a7ef24f0 in ?? () #14 0x00005601a8138d10 in zend_vm_call_opcode_handler () #15 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #16 0x00005601a7ef24f0 in ?? () #17 0x00005601a8138d10 in zend_vm_call_opcode_handler () #18 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #19 0x00005601a7ef24f0 in ?? () #20 0x00005601a8138d10 in zend_vm_call_opcode_handler () #21 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #22 0x00005601a813824d in zend_execute () #23 0x00005601a80c9615 in zend_execute_scripts () #24 0x00005601a80668ca in php_execute_script () #25 0x00005601a81b0e1e in ?? () #26 0x00005601a7f0bea8 in ?? () #27 0x00007ff8639610b3 in __libc_start_main (main=0x5601a7f0baa0, argc=7, argv=0x7ffd53709558, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffd53709548) at ../csu/libc-start.c:308 #28 0x00005601a7f0c04e in _start () core-php.19221 #0 0x00005601a80cbc74 in object_init_ex () #1 0x00005601a8106495 in ?? () #2 0x00005601a8138d10 in zend_vm_call_opcode_handler () #3 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #4 0x00005601a7ef24f0 in ?? () #5 0x00005601a8138d10 in zend_vm_call_opcode_handler () #6 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #7 0x00005601a7ef27a2 in ?? () #8 0x00005601a8138d10 in zend_vm_call_opcode_handler () #9 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #10 0x00005601a7ef27a2 in ?? () #11 0x00005601a8138d10 in zend_vm_call_opcode_handler () #12 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #13 0x00005601a7ef24f0 in ?? () #14 0x00005601a8138d10 in zend_vm_call_opcode_handler () #15 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #16 0x00005601a7ef24f0 in ?? () #17 0x00005601a8138d10 in zend_vm_call_opcode_handler () #18 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #19 0x00005601a7ef24f0 in ?? () #20 0x00005601a8138d10 in zend_vm_call_opcode_handler () #21 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #22 0x00005601a813824d in zend_execute () #23 0x00005601a80c9615 in zend_execute_scripts () #24 0x00005601a80668ca in php_execute_script () #25 0x00005601a81b0e1e in ?? () #26 0x00005601a7f0bea8 in ?? () #27 0x00007ff8639610b3 in __libc_start_main (main=0x5601a7f0baa0, argc=7, argv=0x7ffd53709558, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffd53709548) at ../csu/libc-start.c:308 #28 0x00005601a7f0c04e in _start () core-php.19222 #0 0x00005601a80cbc74 in object_init_ex () #1 0x00005601a8106495 in ?? () #2 0x00005601a8138d10 in zend_vm_call_opcode_handler () #3 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #4 0x00005601a7ef24f0 in ?? () #5 0x00005601a8138d10 in zend_vm_call_opcode_handler () #6 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #7 0x00005601a7ef27a2 in ?? () #8 0x00005601a8138d10 in zend_vm_call_opcode_handler () #9 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #10 0x00005601a7ef27a2 in ?? () #11 0x00005601a8138d10 in zend_vm_call_opcode_handler () #12 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #13 0x00005601a7ef24f0 in ?? () #14 0x00005601a8138d10 in zend_vm_call_opcode_handler () #15 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #16 0x00005601a7ef24f0 in ?? () #17 0x00005601a8138d10 in zend_vm_call_opcode_handler () #18 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #19 0x00005601a7ef24f0 in ?? () #20 0x00005601a8138d10 in zend_vm_call_opcode_handler () #21 0x00007ff860169d28 in php_pcov_execute_ex () from /usr/lib/php/20210902/pcov.so #22 0x00005601a813824d in zend_execute () #23 0x00005601a80c9615 in zend_execute_scripts () #24 0x00005601a80668ca in php_execute_script () #25 0x00005601a81b0e1e in ?? () #26 0x00005601a7f0bea8 in ?? () #27 0x00007ff8639610b3 in __libc_start_main (main=0x5601a7f0baa0, argc=7, argv=0x7ffd53709558, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffd53709548) at ../csu/libc-start.c:308 #28 0x00005601a7f0c04e in _start () ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=81607 -- Edit this bug report at https://bugs.php.net/bug.php?id=81607&edit=1