#21478 [Ver]: Zend/zend_alloc.c :: shutdown_memory_manager produces segfault

ID: 21478 Updated by: black@php.net Reported By: pollita@php.net Status: Verified Bug Type: Scripting Engine problem Operating System: linux PHP Version: 4CVS-2003-01-06 (dev) New Comment: sniper, yes, i wasn't able to reproduce it on php4.3.2rc1 i did have one segfault it normal operation mode (not inside gdb), but i couldnt reproduce it in any way or form similar to the process of reproducing on the latest -STABLE or 4.5-dev snapshots as far as i can tell 4.3-dev and 4.5-dev are subject to this.. im not even going to guess what goes on in 5.0-dev yet.. btw, there is a slight difference between the backtrace ilia got above and mine, so it might be an unrelated problem... still the same scope and behaviour thou. Previous Comments: ------------------------------------------------------------------------ [2003-03-18 20:08:32] sniper@php.net [To: black@php.net] Did I understand correctly that you can't reproduce this with 4.3.2RC1, but you CAN reproduce it with the latest stable snapshot?? This might mean that some tools on the machine generating the snapshots are bad versions.. (the RC1 source package was generated on my machine :) ------------------------------------------------------------------------ [2003-03-18 13:45:09] black@php.net ok, i cant reproduce the behaviour on my part on as low as php-4.3.2RC1 (this one works flawlessly, as far as i can tell). ------------------------------------------------------------------------ [2003-03-18 12:42:44] black@php.net seems to be identical on the last 4.3-STABLE snapshot from ~20 minutes ago, i guess its the same on 4.5 i will try to track down the 4.3.1 source version and try if it crashes there too, i kinda hope it doesn't. ------------------------------------------------------------------------ [2003-03-18 11:34:19] black@php.net (gdb) frame 0 #0 _zval_ptr_dtor (zval_ptr=0x0) at /root/src/php4-standard/Zend/zend_execute_API.c:289 289 (*zval_ptr)->refcount--; (gdb) frame 1 #1 0x4036240c in zend_hash_destroy (ht=0x814131c) at /root/src/php4-standard/Zend/zend_hash.c:543 543 ht->pDestructor(q->pData); maybe checking zval_ptr for null would be a nice idea? (this is another bt, same output just the final pointer is 0x0) ------------------------------------------------------------------------ [2003-03-18 10:58:28] black@php.net Program received signal SIGSEGV, Segmentation fault. _zval_ptr_dtor (zval_ptr=0x73) at /root/src/php4-standard/Zend/zend_execute_API.c:289 289 (*zval_ptr)->refcount--; (gdb) bt #0 _zval_ptr_dtor (zval_ptr=0x73) at /root/src/php4-standard/Zend/zend_execute_API.c:289 #1 0x4036240c in zend_hash_destroy (ht=0x8138f14) at /root/src/php4-standard/Zend/zend_hash.c:543 #2 0x4035d1e2 in _zval_dtor (zvalue=0x809fb1c) at /root/src/php4-standard/Zend/zend_variables.c:51 #3 0x40356fb9 in _zval_ptr_dtor (zval_ptr=0x8147a10) at /root/src/php4-standard/Zend/zend_execute_API.c:291 #4 0x4036240c in zend_hash_destroy (ht=0x4040f56c) at /root/src/php4-standard/Zend/zend_hash.c:543 #5 0x40356db0 in shutdown_executor () at /root/src/php4-standard/Zend/zend_execute_API.c:186 #6 0x4035e0be in zend_deactivate () at /root/src/php4-standard/Zend/zend.c:649 #7 0x40337cb3 in php_request_shutdown (dummy=0x0) at /root/src/php4-standard/main/main.c:942 #8 0x4036e9fe in apache_php_module_main (r=0x8104d44, display_source_mode=0) at /root/src/php4-standard/sapi/apache/sapi_apache.c:61 #9 0x4036f3b7 in send_php (r=0x8104d44, display_source_mode=0, filename=0x0) at /root/src/php4-standard/sapi/apache/mod_php4.c:610 #10 0x4036f565 in send_parsed_php (r=0x8104d44) at /root/src/php4-standard/sapi/apache/mod_php4.c:625 #11 0x08053b34 in ap_invoke_handler () #12 0x0806368c in ap_some_auth_required () #13 0x080636e8 in ap_process_request () #14 0x0805ce2b in ap_child_terminate () #15 0x0805cfbc in ap_child_terminate () #16 0x0805d0d9 in ap_child_terminate () #17 0x0805d5b5 in ap_child_terminate () #18 0x0805dcbd in main () #19 0x400dfa51 in __libc_start_main () from /lib/libc.so.6 this would be the same as the description to/for the problem described here... i suspect that it has something to do with either not cleaning ob_start() buffers manually, or something with header("Location: ") (or a combination of both).. that atleast is regarding my problem this backtrace is from the latest php4-200303181430, but i can also reproduce it on the -STABLE branch (ill post the bt later). ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/21478 -- Edit this bug report at http://bugs.php.net/?id=21478&edit=1