#21538 [Opn->Csd]: GTK: ctree insert_node segfaults with too many element in text array

ID: 21538 Updated by: alan_k@php.net -Summary: GTK: possible memory leak in ctree insert_node code. Reported By: alan@akbkhome.com -Status: Open +Status: Closed Bug Type: Reproducible crash Operating System: linux debian PHP Version: 4.3.0 New Comment: This bug has been fixed in CVS. In case this was a PHP problem, snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. In case this was a documentation problem, the fix will show up soon at http://www.php.net/manual/. In case this was a PHP.net website problem, the change will show up on the PHP.net site and on the mirror sites in short time. Thank you for the report, and for helping us make PHP better. change title & fix it. Previous Comments: ------------------------------------------------------------------------ [2003-01-09 01:44:25] alan@akbkhome.com PHP-GTK 0.5.1 (I dont think anything major changed in this area on 0.5.2????) to reproduce try pear install http://devel.akbkhome.com/GTK_VarDump-0.1.tgz the package includes a test file test1.php, just run it with php test1.php it attempts to var_dump globals (dont worry recursion is handled..)... try expanding the globals recursive element a few times, then press the OK button - I get the following segfault... if somebody can reproduce it, it would atleast prove im not mad here :) I tested this on another machine, which had the zend memory lead debugging on (and an earlier dev version of PHP4.3), indicating there was a 4 byte leak in in gtk+.overides in the gtk_ctree_insert_node section at this line.. text = emalloc(sizeof(gchar *) * columns); however couldnt get it to crash :( (gdb) run /usr/share/pear/tests/GTK_VarDump/tests/test1.php Starting program: /usr/bin/php /usr/share/pear/tests/GTK_VarDump/tests/test1.php Program received signal SIGSEGV, Segmentation fault. 0x402a8e5a in free () from /lib/libc.so.6 (gdb) bt #0 0x402a8e5a in free () from /lib/libc.so.6 #1 0x08129ad9 in _efree (ptr=0x8520cf4) at /usr/src/php/php-4.3.0/Zend/zend_alloc.c:235 #2 0x0813d360 in zend_hash_apply_deleter (ht=0x81b5460, p=0x8520cf4) at /usr/src/php/php-4.3.0/Zend/zend_hash.c:633 #3 0x0813d51b in zend_hash_apply_with_argument (ht=0x81b5460, apply_func=0x813e644 <clean_module_resource>, argument=0x8476270) at /usr/src/php/php-4.3.0/Zend/zend_hash.c:708 #4 0x0813e6a8 in zend_clean_module_rsrc_dtors_cb (ld=0x8476258, module_number=0xbffff320) at /usr/src/php/php-4.3.0/Zend/zend_list.c:249 #5 0x0813d50a in zend_hash_apply_with_argument (ht=0x81b1080, apply_func=0x813e660 <zend_clean_module_rsrc_dtors_cb>, argument=0xbffff320) at /usr/src/php/php-4.3.0/Zend/zend_hash.c:707 #6 0x0813e6f5 in zend_clean_module_rsrc_dtors (module_number=28) at /usr/src/php/php-4.3.0/Zend/zend_list.c:260 #7 0x0813b6b0 in module_destructor (module=0x823e5f0) at /usr/src/php/php-4.3.0/Zend/zend_API.c:1117 #8 0x0813d2ac in zend_hash_apply_deleter (ht=0x81b5600, p=0x823e5c0) at /usr/src/php/php-4.3.0/Zend/zend_hash.c:598 #9 0x0813d493 in zend_hash_apply (ht=0x81b5600, apply_func=0x813b78c <module_registry_cleanup>) at /usr/src/php/php-4.3.0/Zend/zend_hash.c:689 #10 0x08138a40 in zend_deactivate_modules () at /usr/src/php/php-4.3.0/Zend/zend.c:634 #11 0x0810fdcd in php_request_shutdown (dummy=0x0) at /usr/src/php/php-4.3.0/main/main.c:928 #12 0x0815267d in main (argc=2, argv=0xbffffa94) at /usr/src/php/php-4.3.0/sapi/cli/php_cli.c:803 (gdb) ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=21538&edit=1