[php-src] Issue #13134: i_zval_ptr_dtor - segfault
| From: | rbro | Date: | Fri, 12 Jan 2024 21:44:04 +0000 |
| Subject: | [php-src] Issue #13134: i_zval_ptr_dtor - segfault | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-246253@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/13134
Author: rbro
### Description
I am receiving the below segfault in PHP 8.2.14 and 8.3.1. I haven't been able to create a
script to reproduce the issue, but I was hoping this backtrace would help. If not, I will try to
narrow it down more.
```
Thread 1 "php-fpm" received signal SIGSEGV, Segmentation fault.
i_zval_ptr_dtor (zval_ptr=0x7f4cf291b1e8) at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_variables.h:43
43 if (!GC_DELREF(ref)) {
(gdb) bt
#0 i_zval_ptr_dtor (zval_ptr=0x7f4cf291b1e8) at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_variables.h:43
#1 zend_array_destroy (ht=0x7f4cf2922818) at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_hash.c:1832
#2 0x000055ac03825e68 in i_zval_ptr_dtor (zval_ptr=0x7f4cf2912e80) at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_variables.h:44
#3 zend_array_destroy (ht=0x7f4cf29224d0) at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_hash.c:1840
#4 0x000055ac03825d3c in i_zval_ptr_dtor (zval_ptr=0x7f4cf2889988) at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_variables.h:44
#5 zend_array_destroy (ht=0x7f4cf2922bd0) at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_hash.c:1832
#6 0x000055ac038262dd in i_zval_ptr_dtor (zval_ptr=0x7f4cf28851e0) at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_variables.h:44
#7 zend_symtable_clean (ht=ht@entry=0x7f4cf28d6ea8) at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_hash.c:1960
#8 0x000055ac0387949d in zend_clean_and_cache_symbol_table (symbol_table=0x7f4cf28d6ea8)
at /usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_execute.c:3866
#9 0x000055ac0387cf52 in zend_leave_helper_SPEC () at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_vm_execute.h:1144
#10 0x000055ac0387ea2e in execute_ex (ex=0x0) at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_vm_execute.h:57328
#11 0x000055ac03888c85 in zend_execute (op_array=0x7f4cf2802000, return_value=0x0)
at /usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend_vm_execute.h:61604
#12 0x000055ac03813850 in zend_execute_scripts (type=type@entry=8, retval=retval@entry=0x0,
file_count=file_count@entry=3)
at /usr/src/debug/php-8.3.1-1.el9.remi.x86_64/Zend/zend.c:1881
#13 0x000055ac037a79ca in php_execute_script (primary_file=<optimized out>) at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/main/main.c:2501
#14 0x000055ac03642683 in main (argc=<optimized out>, argv=<optimized out>) at
/usr/src/debug/php-8.3.1-1.el9.remi.x86_64/sapi/fpm/fpm/fpm_main.c:1920
```
I can only reproduce it over php-fpm (happens with opcache both on or off). I haven't been
able to get it with cli.
Please let me know if this isn't enough, and I will try to narrow it down further.
Thank you for your help.
### PHP Version
PHP 8.2.14 and 8.3.1
### Operating System
_No response_