#21105 [NEW]: Child segfault running mash()

From: ncsml@openmodes.com Operating system: Linux (Redhat 7.3) PHP version: 4.3.0RC3 PHP Bug Type: Reproducible crash Bug description: Child segfault running mash() PHP 4.3.0RC3 compiled --with-mhash (not dso) using mhash 0.8.17 segfaults when running this script: <? $passwd="password"; echo "Hashing of $passwd: " . base64_encode(mhash(MHASH_MD5, $passwd)) . "<br>"; ?> (Does not segfault with MHASH_SHA1) Apache 1.3.27 mod_ssl 2.8.11 PHP 4.3.0RC3 glibc 2.2.25-40 gcc-2.96-112 mhash 0.8.17 (static) php ./configure: ./configure --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib --libexecdir=/usr/libexec --localstatedir=/var --sharedstatedir=/usr/com --mandir=/usr/share/man --infodir=/usr/share/info --with-config-file-path=/etc --with-dom=/usr --with-exec-dir=/usr/bin --with-gettext --with-regex=system --with-layout=GNU --enable-magic-quotes --without-oci8 --with-mhash --with-imap=shared --with-openssl --with-imap-ssl --with-kerberos=/usr/kerberos --with-ldap=shared --with-mysql=shared,/usr --with-apxs=/usr/sbin/apxs --enable-debug --with-zlib Backtrace: Program received signal SIGSEGV, Segmentation fault. 0x4207af66 in chunk_free () from /lib/i686/libc.so.6 (gdb) bt #0 0x4207af66 in chunk_free () from /lib/i686/libc.so.6 #1 0x4207ad14 in free () from /lib/i686/libc.so.6 #2 0x4033795a in mhash_free (ptr=0x81ca550) at mhash.c:548 #3 0x4070dace in zif_mhash (ht=2, return_value=0x81d20bc, this_ptr=0x0, return_value_used=1) at /usr/src/redhat/php-4.3.0RC3/ext/mhash/mhash.c:185 #4 0x4080a65b in execute (op_array=0x81cd79c) at /usr/src/redhat/php-4.3.0RC3/Zend/zend_execute.c:1596 #5 0x407f879c in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /usr/src/redhat/php-4.3.0RC3/Zend/zend.c:864 #6 0x407c106b in php_execute_script (primary_file=0xbffff6f0) at /usr/src/redhat/php-4.3.0RC3/main/main.c:1552 #7 0x4080f63a in apache_php_module_main (r=0x808ced8, display_source_mode=0) at /usr/src/redhat/php-4.3.0RC3/sapi/apache/sapi_apache.c:55 #8 0x40810504 in send_php (r=0x808ced8, display_source_mode=0, filename=0x808e9e0 "/var/www/modesmail/admin/phpcrash.php") at /usr/src/redhat/php-4.3.0RC3/sapi/apache/mod_php4.c:556 #9 0x40810571 in send_parsed_php (r=0x808ced8) at /usr/src/redhat/php-4.3.0RC3/sapi/apache/mod_php4.c:571 #10 0x080547dd in ap_invoke_handler () #11 0x0806769c in process_request_internal () #12 0x08067713 in ap_process_request () #13 0x0805f867 in child_main () #14 0x0805fa0a in make_child () #15 0x0805fb4d in startup_children () #16 0x080601a0 in standalone_main () #17 0x08060aa3 in main () #18 0x42017589 in __libc_start_main () from /lib/i686/libc.so.6 -- Edit bug report at http://bugs.php.net/?id=21105&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=21105&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=21105&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=21105&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=21105&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=21105&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=21105&r=support Expected behavior: http://bugs.php.net/fix.php?id=21105&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=21105&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=21105&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=21105&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=21105&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=21105&r=dst IIS Stability: http://bugs.php.net/fix.php?id=21105&r=isapi