#23212 [Fbk]: Segfault in convert_to_string_ex()

ID: 23212 Updated by: sniper@php.net Reported By: mbr at freebsd dot org Status: Feedback Bug Type: Strings related Operating System: FreeBSD 4.8 PHP Version: 4CVS-2003-04-14 (stable) New Comment: Still waiting for the repro script.. Previous Comments: ------------------------------------------------------------------------ [2003-04-17 06:32:28] moriyoshi@php.net Please provide a minimal and self-contained snippet so we can reproduce the problem. ------------------------------------------------------------------------ [2003-04-14 15:53:20] mbr at freebsd dot org #0 0x2849784d in zif_strip_tags (ht=0, return_value=0x0, this_ptr=0xbfbff6b0, return_value_used=675793406) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/standard/string.c:3062 #1 0x2847ca65 in php_info_print_table_colspan_header (num_cols=0, header=0x0) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/standard/info.c:708 #2 0x284bf32d in XMLRPC_to_PHP (el=0x833c7d8) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/xmlrpc/xmlrpc-epi-php.c:618 #3 0x284bfecc in zif_xmlrpc_server_register_introspection_callback (ht=137611224, return_value=0x0, this_ptr=0x0, return_value_used=676069140) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/xmlrpc/xmlrpc-epi-php.c:1002 #4 0x284bff2a in zif_xmlrpc_server_register_introspection_callback (ht=137611224, return_value=0x28512f5f, this_ptr=0x17, return_value_used=134559025) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/xmlrpc/xmlrpc-epi-php.c:1011 #5 0x80537b8 in ap_invoke_handler () #6 0x80635cd in process_request_internal () #7 0x80638b5 in ap_internal_redirect () #8 0x282a4b21 in handle_dir () from /usr/local/libexec/apache/mod_dir.so #9 0x80537b8 in ap_invoke_handler () #10 0x80635cd in process_request_internal () #11 0x806362c in ap_process_request () #12 0x805c8fa in child_main () #13 0x805cb31 in make_child () #14 0x805cda0 in perform_idle_server_maintenance () #15 0x805d24d in standalone_main () #16 0x805d79f in main () #17 0x804fb9e in _start () (gdb) frame 0 #0 0x2849784d in zif_strip_tags (ht=0, return_value=0x0, this_ptr=0xbfbff6b0, return_value_used=675793406) at /usr/ports/www/mod_php43-imp/work/php-4.3.2/ext/standard/string.c:3062 3062 convert_to_string_ex(str); (gdb) list 3057 break; 3058 default: 3059 WRONG_PARAM_COUNT; 3060 break; 3061 } 3062 convert_to_string_ex(str); 3063 buf = estrndup(Z_STRVAL_PP(str), Z_STRLEN_PP(str)); 3064 retval_len = php_strip_tags(buf, Z_STRLEN_PP(str), NULL, allowed_tags, allowed_tags_len); 3065 RETURN_STRINGL(buf, retval_len, 0); 3066 } (gdb) p str $3 = (struct _zval_struct **) 0x2853f864 (gdb) p *str $4 = (struct _zval_struct *) 0x0 ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=23212&edit=1