#25289 [Opn->Fbk]: PHP segmentation fault

ID: 25289 Updated by: sniper@php.net Reported By: skissane at ics dot mq dot edu dot au -Status: Open +Status: Feedback Bug Type: Reproducible crash Operating System: RedHat Linux 9 PHP Version: 4.3.3 New Comment: Please provide a short script (max 20 lines), without any external dependancies, such as database or includes(). (_one_ script, not dozens) Previous Comments: ------------------------------------------------------------------------ [2003-08-28 07:19:19] skissane at ics dot mq dot edu dot au Description: ------------ PHP segfaults. Reproduce code: --------------- Reproduce code can be found at: http://www.iips.mq.edu.au/bugs/ File datamodel/cms-datamodel-php.php causes crash. Through trial and error (insertion of "echo" and "exit" statements, I believe I have isolated the segfault to the function ObjectGenerator_PHP::_generateEnums() in the file appgen/ObjectGenerator_PHP.inc, but not 100% sure). Segfault occurs both on command line php and through Apache. PHP was compiled myself using: './configure' '--with-apxs2=/usr/sbin/apxs' '--with-mysql=/usr/' '--without-mssql' '--with-ldap' '--with-curl=/usr' Expected result: ---------------- No segfault Actual result: -------------- Starting program: /usr/local/bin/php cms-datamodel-php.php Program received signal SIGSEGV, Segmentation fault. 0x42074760 in _int_free () from /lib/tls/libc.so.6 (gdb) bt #0 0x42074760 in _int_free () from /lib/tls/libc.so.6 #1 0x42073786 in free () from /lib/tls/libc.so.6 #2 0x08104302 in _efree (ptr=0x82cd0bc) at /home/skissane/php-4.3.3/Zend/zend_alloc.c:265 #3 0x0810a85a in _zval_ptr_dtor (zval_ptr=0x8312c48) at zend_execute.h:44 #4 0x08115e70 in zend_hash_destroy (ht=0x832c41c) at /home/skissane/php-4.3.3/Zend/zend_hash.c:553 #5 0x08110aae in _zval_dtor (zvalue=0xbfffa9e0) at /home/skissane/php-4.3.3/Zend/zend_variables.c:51 #6 0x0811f611 in execute (op_array=0x81eaf7c) at /home/skissane/php-4.3.3/Zend/zend_execute.c:1452 #7 0x0811e653 in execute (op_array=0x81eadd4) at /home/skissane/php-4.3.3/Zend/zend_execute.c:1660 #8 0x0811e653 in execute (op_array=0x81a2004) at /home/skissane/php-4.3.3/Zend/zend_execute.c:1660 #9 0x08111fd5 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /home/skissane/php-4.3.3/Zend/zend.c:885 #10 0x080ecb87 in php_execute_script (primary_file=0xbfffddc0) at /home/skissane/php-4.3.3/main/main.c:1723 #11 0x081234bb in main (argc=2, argv=0xbfffde44) at /home/skissane/php-4.3.3/sapi/cli/php_cli.c:818 #12 0x420156a4 in __libc_start_main () from /lib/tls/libc.so.6 (gdb) frame 6 #6 0x0811f611 in execute (op_array=0x81eaf7c) at /home/skissane/php-4.3.3/Zend/zend_execute.c:1452 1452 zendi_zval_dtor(EX(Ts)[EX(opline)->op1.u.var].tmp_var); (gdb) ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=25289&edit=1