Bug #77466 [Com]: random segfault after fatal error

Edit report at https://bugs.php.net/bug.php?id=77466&edit=1 ID: 77466 Comment by: bhatihistory3045 at gmail dot com Reported by: webox955 at gmail dot com Summary: random segfault after fatal error Status: Wont fix Type: Bug Package: FPM related Operating System: Centos 7 PHP Version: 5.6.40 Block user comment: N Private report: N New Comment: do you want to know the latest rathore itihas history visit our site (rathore itihas : https://rathoreitihas.blogspot.com)gist.github.com (prabath satta matka result : https://rathoreitihas.blogspot.com/2022/11/prabhat-satta-matka.html)gist.github.com Previous Comments: ------------------------------------------------------------------------ [2022-11-16 09:29:26] bossdpnew at gmail dot com dp boss new is the latest chart and result website you can see the latest result (old Mumbai chart: https://dpbossnew.net/old-main-mumbai-jodi-chart)gist.github.com ------------------------------------------------------------------------ [2022-11-16 09:25:21] ommseowork at gmail dot com play Satta Matka online with the latest chart and result (play Matka online: https://www.oldmainmumbai.com)gist.github.com ------------------------------------------------------------------------ [2020-11-14 02:33:30] nsetak at gmail dot com PHP 5.6 is no longer supported. Some issues related to memory limit errors have been fixed in later versions. thanks. https://www.elso7ba.com https://www.mtba5i.com https://www.el7lwa.com http://banatmasr.net ------------------------------------------------------------------------ [2019-01-17 13:38:03] webox955 at gmail dot com test script: #!/bin/bash echo "Zend/tests/bug47353.phpt" REQUEST_METHOD=GET SCRIPT_FILENAME="/flush.php" SCRIPT_NAME="flush.php" cgi-fcgi -bind -connect /var/run/php-fpm/listen.sock exit 0 <?php echo memory_get_usage(true); ini_set('memory_limit','40M'); echo ":".ini_get('memory_limit')."\n"; sleep(4); register_shutdown_function(function() { new stdClass; }); $ary = []; while (true) { echo memory_get_usage()."\n"; $ary[] = new stdClass; echo memory_get_usage(true); } ?> patch: diff -up ./Zend/zend_objects_API.c.old ./Zend/zend_objects_API.c --- ./Zend/zend_objects_API.c.old 2019-01-16 15:05:03.487365313 +0300 +++ ./Zend/zend_objects_API.c 2019-01-16 15:06:31.750081871 +0300 @@ -114,8 +114,10 @@ ZEND_API zend_object_handle zend_objects EG(objects_store).free_list_head = EG(objects_store).object_buckets[handle].bucket.free_list.next; } else { if (EG(objects_store).top == EG(objects_store).size) { - EG(objects_store).size <<= 1; - EG(objects_store).object_buckets = (zend_object_store_bucket *) erealloc(EG(objects_store).object_buckets, EG(objects_store).size * sizeof(zend_object_store_bucket)); + zend_uint new_size = 2 * EG(objects_store).size; + EG(objects_store).object_buckets = (zend_object_store_bucket *) erealloc(EG(objects_store).object_buckets, new_size * sizeof(zend_object_store_bucket)); + /* Assign size after realloc, in case it fails */ + EG(objects_store).size = new_size; } handle = EG(objects_store).top++; } backport from https://bugs.php.net/bug.php?id=76846&edit=3 original commit: https://github.com/php/php-src/commit/45cdcb2d0be89fe7bc404dd150240ec83f5de401 no diff in autotest betwein original 5.6.40 & patched version. test script on original version generate segfault, after this patch working fine ------------------------------------------------------------------------ [2019-01-16 10:08:27] webox955 at gmail dot com Hi! I can't find this bug, can you paste link, please? ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=77466 -- Edit this bug report at https://bugs.php.net/bug.php?id=77466&edit=1