#21756 [NEW]: Accessing $_SERVER['PATH_INFO '] causes intermittent segfault in Apache

From: php@lost.co.nz Operating system: Linux/Apache (Debian 3.0r1) PHP version: 4.3.0 PHP Bug Type: Reproducible crash Bug description: Accessing $_SERVER['PATH_INFO '] causes intermittent segfault in Apache If the special global $_SERVER['PATH_INFO'] is accessed in scripts on either my test or production server when it is not set (on load of home page usually) it causes Apache to segfault intermittently (like 1/100 page views...). eg, this is what caused me grief: if( $_SERVER['PATH_INFO'] == 'whatever') include( 'whatever_else'); Wrapping in call to 'isset' stopped crashes: if( isset($_SERVER['PATH_INFO']) ) if( $_SERVER['PATH_INFO'] == 'whatever') include( 'whatever_else'); Was really hard to reproduce. In the end I sat at a split screen comparing the error to the access log, second by second. The error log was reporting ~100-300 segfaults a day untill I used the call to isset, when that dropped to zero. (After a fun 6 hours trying to catch it with gdb...) -- Edit bug report at http://bugs.php.net/?id=21756&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=21756&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=21756&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=21756&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=21756&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=21756&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=21756&r=support Expected behavior: http://bugs.php.net/fix.php?id=21756&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=21756&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=21756&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=21756&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=21756&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=21756&r=dst IIS Stability: http://bugs.php.net/fix.php?id=21756&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=21756&r=gnused