#23212 [NEW]: Segfault in convert_to_string_ex()

From: mbr at freebsd dot org Operating system: FreeBSD 4.8 PHP version: 4CVS-2003-04-14 (stable) PHP Bug Type: XMLRPC-EPI related Bug description: Segfault in convert_to_string_ex() #0 0x2849784d in zif_strip_tags (ht=0, return_value=0x0, this_ptr=0xbfbff6b0, return_value_used=675793406) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/standard/string.c:3062 #1 0x2847ca65 in php_info_print_table_colspan_header (num_cols=0, header=0x0) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/standard/info.c:708 #2 0x284bf32d in XMLRPC_to_PHP (el=0x833c7d8) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/xmlrpc/xmlrpc-epi-php.c:618 #3 0x284bfecc in zif_xmlrpc_server_register_introspection_callback (ht=137611224, return_value=0x0, this_ptr=0x0, return_value_used=676069140) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/xmlrpc/xmlrpc-epi-php.c:1002 #4 0x284bff2a in zif_xmlrpc_server_register_introspection_callback (ht=137611224, return_value=0x28512f5f, this_ptr=0x17, return_value_used=134559025) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/xmlrpc/xmlrpc-epi-php.c:1011 #5 0x80537b8 in ap_invoke_handler () #6 0x80635cd in process_request_internal () #7 0x80638b5 in ap_internal_redirect () #8 0x282a4b21 in handle_dir () from /usr/local/libexec/apache/mod_dir.so #9 0x80537b8 in ap_invoke_handler () #10 0x80635cd in process_request_internal () #11 0x806362c in ap_process_request () #12 0x805c8fa in child_main () #13 0x805cb31 in make_child () #14 0x805cda0 in perform_idle_server_maintenance () #15 0x805d24d in standalone_main () #16 0x805d79f in main () #17 0x804fb9e in _start () (gdb) frame 0 #0 0x2849784d in zif_strip_tags (ht=0, return_value=0x0, this_ptr=0xbfbff6b0, return_value_used=675793406) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/standard/string.c:3062 3062 convert_to_string_ex(str); (gdb) list 3057 break; 3058 default: 3059 WRONG_PARAM_COUNT; 3060 break; 3061 } 3062 convert_to_string_ex(str); 3063 buf = estrndup(Z_STRVAL_PP(str), Z_STRLEN_PP(str)); 3064 retval_len = php_strip_tags(buf, Z_STRLEN_PP(str), NULL, allowed_tags, allowed_tags_len); 3065 RETURN_STRINGL(buf, retval_len, 0); 3066 } (gdb) p str $3 = (struct _zval_struct **) 0x2853f864 (gdb) p *str $4 = (struct _zval_struct *) 0x0 -- Edit bug report at http://bugs.php.net/?id=23212&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=23212&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=23212&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=23212&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=23212&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=23212&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=23212&r=support Expected behavior: http://bugs.php.net/fix.php?id=23212&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=23212&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=23212&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=23212&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=23212&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=23212&r=dst IIS Stability: http://bugs.php.net/fix.php?id=23212&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=23212&r=gnused