Bug #77466 [Com]: random segfault after fatal error

Edit report at https://bugs.php.net/bug.php?id=77466&edit=1 ID: 77466 Comment by: bossdpnew at gmail dot com Reported by: webox955 at gmail dot com Summary: random segfault after fatal error Status: Wont fix Type: Bug Package: FPM related Operating System: Centos 7 PHP Version: 5.6.40 Block user comment: N Private report: N New Comment: dp boss new is the latest chart and result website you can see the latest result (old Mumbai chart: https://dpbossnew.net/old-main-mumbai-jodi-chart)gist.github.com Previous Comments: ------------------------------------------------------------------------ [2022-11-16 09:25:21] ommseowork at gmail dot com play Satta Matka online with the latest chart and result (play Matka online: https://www.oldmainmumbai.com)gist.github.com ------------------------------------------------------------------------ [2020-11-14 02:33:30] nsetak at gmail dot com PHP 5.6 is no longer supported. Some issues related to memory limit errors have been fixed in later versions. thanks. https://www.elso7ba.com https://www.mtba5i.com https://www.el7lwa.com http://banatmasr.net ------------------------------------------------------------------------ [2019-01-17 13:38:03] webox955 at gmail dot com test script: #!/bin/bash echo "Zend/tests/bug47353.phpt" REQUEST_METHOD=GET SCRIPT_FILENAME="/flush.php" SCRIPT_NAME="flush.php" cgi-fcgi -bind -connect /var/run/php-fpm/listen.sock exit 0 <?php echo memory_get_usage(true); ini_set('memory_limit','40M'); echo ":".ini_get('memory_limit')."\n"; sleep(4); register_shutdown_function(function() { new stdClass; }); $ary = []; while (true) { echo memory_get_usage()."\n"; $ary[] = new stdClass; echo memory_get_usage(true); } ?> patch: diff -up ./Zend/zend_objects_API.c.old ./Zend/zend_objects_API.c --- ./Zend/zend_objects_API.c.old 2019-01-16 15:05:03.487365313 +0300 +++ ./Zend/zend_objects_API.c 2019-01-16 15:06:31.750081871 +0300 @@ -114,8 +114,10 @@ ZEND_API zend_object_handle zend_objects EG(objects_store).free_list_head = EG(objects_store).object_buckets[handle].bucket.free_list.next; } else { if (EG(objects_store).top == EG(objects_store).size) { - EG(objects_store).size <<= 1; - EG(objects_store).object_buckets = (zend_object_store_bucket *) erealloc(EG(objects_store).object_buckets, EG(objects_store).size * sizeof(zend_object_store_bucket)); + zend_uint new_size = 2 * EG(objects_store).size; + EG(objects_store).object_buckets = (zend_object_store_bucket *) erealloc(EG(objects_store).object_buckets, new_size * sizeof(zend_object_store_bucket)); + /* Assign size after realloc, in case it fails */ + EG(objects_store).size = new_size; } handle = EG(objects_store).top++; } backport from https://bugs.php.net/bug.php?id=76846&edit=3 original commit: https://github.com/php/php-src/commit/45cdcb2d0be89fe7bc404dd150240ec83f5de401 no diff in autotest betwein original 5.6.40 & patched version. test script on original version generate segfault, after this patch working fine ------------------------------------------------------------------------ [2019-01-16 10:08:27] webox955 at gmail dot com Hi! I can't find this bug, can you paste link, please? ------------------------------------------------------------------------ [2019-01-16 09:51:20] nikic@php.net PHP 5.6 is no longer supported. Some issues related to memory limit errors have been fixed in later versions. If this issue still reproduces in PHP 7.2, we can reopen this. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=77466 -- Edit this bug report at https://bugs.php.net/bug.php?id=77466&edit=1