[php-src] Issue #10041: reproducable segfault when recursing

From: Date: Fri, 02 Dec 2022 14:55:25 +0000
Subject: [php-src] Issue #10041: reproducable segfault when recursing
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-243035@lists.php.net to get a copy of this message
Issue: https://github.com/php/php-src/issues/10041 Author: birdspider ### Description The following code: ```php <?php class X { public function method4() { $a = function (){ $this->method4(); }; // I know this makes no sense array_map($a,[1]); } } ``` Resulted in this output: ``` $ php test.php Speicherzugriffsfehler (Speicherabzug geschrieben) # segfault ``` But I expected this output instead: ``` # not a segfault ``` https://3v4l.org/AajsP --- bt: ``` #0 0x000055555591d1ae in zend_create_closure_ex (res=0x7fffe5ec1380, func=0x7ffff4e03ac0, scope=0x7ffff4e03300, called_scope=0x7ffff4e03300, this_ptr=0x7fffe5ec1340, is_fake=false) at /usr/src/debug/php/php-8.1.13/Zend/zend_closures.c:677 #1 0x00005555558c3edf in zend_create_closure (this_ptr=<optimized out>, called_scope=<optimized out>, scope=<optimized out>, func=<optimized out>, res=<optimized out>) at /usr/src/debug/php/php-8.1.13/Zend/zend_closures.c:780 #2 ZEND_DECLARE_LAMBDA_FUNCTION_SPEC_CONST_HANDLER (execute_data=0x7fffe5ec1320) at /usr/src/debug/php/php-8.1.13/Zend/zend_vm_execute.h:5359 #3 0x0000555555905388 in execute_ex (ex=<optimized out>) at /usr/src/debug/php/php-8.1.13/Zend/zend_vm_execute.h:55581 #4 0x0000555555886c3c in zend_call_function (fci=<optimized out>, fci_cache=<optimized out>) at /usr/src/debug/php/php-8.1.13/Zend/zend_execute_API.c:908 #5 0x000055555578d212 in zif_array_map (execute_data=<optimized out>, return_value=0x7fffff7ff280) at /usr/src/debug/php/php-8.1.13/ext/standard/array.c:5955 #6 0x00005555558c0360 in ZEND_DO_ICALL_SPEC_RETVAL_UNUSED_HANDLER (execute_data=0x7fffe5ec11a0) at /usr/src/debug/php/php-8.1.13/Zend/zend_vm_execute.h:1235 #7 0x0000555555905388 in execute_ex (ex=<optimized out>) at /usr/src/debug/php/php-8.1.13/Zend/zend_vm_execute.h:55581 #8 0x0000555555886c3c in zend_call_function (fci=<optimized out>, fci_cache=<optimized out>) at /usr/src/debug/php/php-8.1.13/Zend/zend_execute_API.c:908 [snip 53000 lines] #53652 0x0000555555886c3c in zend_call_function (fci=<optimized out>, fci_cache=<optimized out>) at /usr/src/debug/php/php-8.1.13/Zend/zend_execute_API.c:908 #53653 0x000055555578d212 in zif_array_map (execute_data=<optimized out>, return_value=0x7fffffffa640) at /usr/src/debug/php/php-8.1.13/ext/standard/array.c:5955 #53654 0x00005555558c0360 in ZEND_DO_ICALL_SPEC_RETVAL_UNUSED_HANDLER (execute_data=0x7ffff4e13220) at /usr/src/debug/php/php-8.1.13/Zend/zend_vm_execute.h:1235 #53655 0x0000555555905388 in execute_ex (ex=<optimized out>) at /usr/src/debug/php/php-8.1.13/Zend/zend_vm_execute.h:55581 #53656 0x0000555555886c3c in zend_call_function (fci=<optimized out>, fci_cache=<optimized out>) at /usr/src/debug/php/php-8.1.13/Zend/zend_execute_API.c:908 #53657 0x000055555578d212 in zif_array_map (execute_data=<optimized out>, return_value=0x7fffffffa8b0) at /usr/src/debug/php/php-8.1.13/ext/standard/array.c:5955 #53658 0x00005555558c0360 in ZEND_DO_ICALL_SPEC_RETVAL_UNUSED_HANDLER (execute_data=0x7ffff4e130a0) at /usr/src/debug/php/php-8.1.13/Zend/zend_vm_execute.h:1235 #53659 0x0000555555905388 in execute_ex (ex=<optimized out>) at /usr/src/debug/php/php-8.1.13/Zend/zend_vm_execute.h:55581 #53660 0x000055555590b2dc in zend_execute (op_array=0x7ffff4e8b000, return_value=0x0) at /usr/src/debug/php/php-8.1.13/Zend/zend_vm_execute.h:60147 #53661 0x0000555555896445 in zend_execute (return_value=0x0, op_array=0x7ffff4e8b000) at /usr/src/debug/php/php-8.1.13/Zend/zend.c:1785 #53662 zend_execute_scripts (type=8, retval=0x0, file_count=3) at /usr/src/debug/php/php-8.1.13/Zend/zend.c:1799 #53663 0x000055555582e655 in php_execute_script (primary_file=<optimized out>) at /usr/src/debug/php/php-8.1.13/main/main.c:2541 #53664 0x000055555597f034 in do_cli (argc=2, argv=0x555556636fd0) at /usr/src/debug/php/php-8.1.13/sapi/cli/php_cli.c:965 #53665 0x0000555555641f12 in main (argc=2, argv=0x555556636fd0) at /usr/src/debug/php/php-8.1.13/sapi/cli/php_cli.c:1367 ``` ### PHP Version PHP 8.1.13 ### Operating System Archlinux

« previous php.bugs (#243035) next »