#24956 [NEW]: GDlib crash running stable code

From: danielsabsay at pacbell dot net Operating system: MacOS 10.2.6 PHP version: 4.3.2 PHP Bug Type: Reproducible crash Bug description: GDlib crash running stable code Description: ------------ Using installation package for MacOS X. Code using GD functions causes crash. There are 3 crash log summaries. GD library is version 2.0.12 Actual result: -------------- Thread 0 Crashed: #0 0x01d1b9ec in fontTest (gdft.c:337) #1 0x90004a44 in malloc_zone_malloc #2 0x01d1b828 in gdCacheGet (gdcache.c:108) #3 0x01d1c518 in gdImageStringFTEx (gdft.c:855) #4 0x01d1c3a8 in gdImageStringFT (gdft.c:784) #5 0x03817130 in php_imagettftext_common (gd.c:3068) #6 0x03963144 in execute (zend_execute.c:1606) #7 0x0396330c in execute (zend_execute.c:1652) #8 0x03954f84 in zend_execute_scripts (zend.c:870) #9 0x03929860 in php_execute_script (main.c:1673) #10 0x03967bc8 in php_handler (sapi_apache2.c:525) #11 0x0001ee64 in ap_run_handler (config.c:195) #12 0x0001f5ec in ap_invoke_handler (config.c:403) #13 KERN_INVALID_ADDRESS (0x0001) at 0x2f747265 Thread 0 Crashed: #0 0x01d1b81c in gdCacheGet (gdcache.c:108) #1 0x01d1c518 in gdImageStringFTEx (gdft.c:855) #2 0x01d1c3a8 in gdImageStringFT (gdft.c:784) #3 0x03817130 in php_imagettftext_common (gd.c:3068) #4 0x03963144 in execute (zend_execute.c:1606) #5 0x0396330c in execute (zend_execute.c:1652) #6 0x03954f84 in zend_execute_scripts (zend.c:870) #7 0x03929860 in php_execute_script (main.c:1673) #8 0x03967bc8 in php_handler (sapi_apache2.c:525) #9 0x0001ee64 in ap_run_handler (config.c:195) #10 0x0001f5ec in ap_invoke_handler (config.c:403) #11 0x00007cb4 in ap_process_request (http_request.c:292) #12 0x00002cec in ap_proc in gdCacheDelete (gdcache.c:90) #1 0x01d1c348 in gdFreeFontCache (gdft.c:773) #2 0x0380beec in zm_deactivate_gd (gd.c:384) #3 0x03957c48 in module_registry_cleanup (zend_API.c:1175) #4 0x0395a0e4 in zend_hash_apply (zend_hash.c:688) #5 0x03954830 in zend_deactivate_modules (zend.c:635) #6 0x039280f8 in php_request_shutdown (main.c:974) #7 0x03967bec in php_handler (sapi_apache2.c:542) #8 0x0001ee64 in -- Edit bug report at http://bugs.php.net/?id=24956&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=24956&r=trysnapshot4 Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=24956&r=trysnapshot5 Fixed in CVS: http://bugs.php.net/fix.php?id=24956&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=24956&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=24956&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=24956&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=24956&r=support Expected behavior: http://bugs.php.net/fix.php?id=24956&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=24956&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=24956&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=24956&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=24956&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=24956&r=dst IIS Stability: http://bugs.php.net/fix.php?id=24956&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=24956&r=gnused