#27611 [Opn]: segfault in xbuf_format_converter

From: Date: Mon, 15 Mar 2004 22:09:28 +0000
Subject: #27611 [Opn]: segfault in xbuf_format_converter
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-56528@lists.php.net to get a copy of this message
 ID:               27611
 User updated by:  jan at horde dot org
 Reported By:      jan at horde dot org
 Status:           Open
 Bug Type:         Reproducible crash
 Operating System: Linux
 PHP Version:      5CVS-2004-03-15 (dev)
 New Comment:

The line that appeared in the backtrace looks like:

if (is_a($date, 'Kronolith_Date')) {

If I comment it out, it still segfaults, but with a different bt:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 20318)]
0x406b31c7 in xbuf_format_converter (xbuf=0xbfe010b0,
    fmt=0x40892d27 "%sobject(%s)#%d (%d) {\n",
---Type <return> to continue, or q <return> to quit---
    ap=0xbfe01104 "É,\211@È\030ÓA\214\003")
    at /home/jan/cvs/php5/main/spprintf.c:179
179     {
(gdb) bt
#0  0x406b31c7 in xbuf_format_converter (xbuf=0xbfe010b0,
    fmt=0x40892d27 "%sobject(%s)#%d (%d) {\n",
    ap=0xbfe01104 "É,\211@È\030ÓA\214\003")
    at /home/jan/cvs/php5/main/spprintf.c:179
#1  0x406b45c9 in vspprintf (pbuf=0xbfe010e8, max_len=0,
    format=0x40892d27 "%sobject(%s)#%d (%d) {\n",
    ap=0xbfe01104 "É,\211@È\030ÓA\214\003")
    at /home/jan/cvs/php5/main/spprintf.c:725
#2  0x406af365 in php_printf (format=0x40892d27 "%sobject(%s)#%d (%d)
{\n")
    at /home/jan/cvs/php5/main/main.c:397
#3  0x4067ccc0 in php_var_dump (struc=0x41cde8bc, level=1)
    at /home/jan/cvs/php5/ext/standard/var.c:111
#4  0x4067cea6 in zif_var_dump (ht=1, return_value=0x41d32a28,
this_ptr=0x0,
    return_value_used=0) at /home/jan/cvs/php5/ext/standard/var.c:156
#5  0x4071eb2d in zend_do_fcall_common_helper
(execute_data=0xbfe01270,
    opline=0x80d6db8, op_array=0x81daba0)
    at /home/jan/cvs/php5/Zend/zend_execute.c:2648
#6  0x4071f27d in zend_do_fcall_handler (execute_data=0xbfe01270,
    opline=0x80d6db8, op_array=0x81daba0)
    at /home/jan/cvs/php5/Zend/zend_execute.c:2777
#7  0x4071af4a in execute (op_array=0x81daba0)
    at /home/jan/cvs/php5/Zend/zend_execute.c:1339


Previous Comments:
------------------------------------------------------------------------

[2004-03-15 17:07:57] jan at horde dot org

Description:
------------
I'm still looking where and when exactly this happens, but here's
already the backtrace.

Actual result:
--------------
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 20180)]
0x406b31c7 in xbuf_format_converter (xbuf=0xbfe01190,
    fmt=0x408b59e0 "is_a(): Deprecated. Please use the instanceof
operator",
ap=0xbfe01298 "ø\022à¿]Bp@\020") at
/home/jan/cvs/php5/main/spprintf.c:179
179     {

#0  0x406b31c7 in xbuf_format_converter (xbuf=0xbfe01190,
    fmt=0x408b59e0 "is_a(): Deprecated. Please use the instanceof
operator",
    ap=0xbfe01298 "ø\022à¿]Bp@\020") at
/home/jan/cvs/php5/main/spprintf.c:179
#1  0x406b45c9 in vspprintf (pbuf=0xbfe011fc, max_len=1024,
    format=0x408b59e0 "is_a(): Deprecated. Please use the instanceof
operator", ap=0xbfe01298 "ø\022à¿]Bp@\020") at
/home/jan/cvs/php5/main/spprintf.c:725
#2  0x406afc3d in php_error_cb (type=2048,
    error_filename=0x4187cbbc
"/home/jan/headhorde/kronolith/lib/Kronolith.php", error_lineno=87,
    format=0x408b59e0 "is_a(): Deprecated. Please use the instanceof
operator", args=0xbfe01298 "ø\022à¿]Bp@\020") at
/home/jan/cvs/php5/main/main.c:656
#3  0x406f80f1 in zend_error (type=2048,
    format=0x408b59e0 "is_a(): Deprecated. Please use the instanceof
operator")
    at /home/jan/cvs/php5/Zend/zend.c:907
#4  0x40704278 in zif_is_a (ht=2, return_value=0x41d6da2c,
this_ptr=0x0,
    return_value_used=1)
    at /home/jan/cvs/php5/Zend/zend_builtin_functions.c:652
#5  0x4071eb2d in zend_do_fcall_common_helper
(execute_data=0xbfe01420,
    opline=0x41704310, op_array=0x4188663c)
    at /home/jan/cvs/php5/Zend/zend_execute.c:2648
#6  0x4071f27d in zend_do_fcall_handler (execute_data=0xbfe01420,
    opline=0x41704310, op_array=0x4188663c)
    at /home/jan/cvs/php5/Zend/zend_execute.c:2777
#7  0x4071af4a in execute (op_array=0x4188663c)
    at /home/jan/cvs/php5/Zend/zend_execute.c:1339
#8  0x4071ecc6 in zend_do_fcall_common_helper
(execute_data=0xbfe04490,
    opline=0x41b59244, op_array=0x41b40264)
    at /home/jan/cvs/php5/Zend/zend_execute.c:2677
#9  0x4071f16f in zend_do_fcall_by_name_handler
(execute_data=0xbfe04490,
    opline=0x41b59244, op_array=0x41b40264)
    at /home/jan/cvs/php5/Zend/zend_execute.c:2759
#10 0x4071af4a in execute (op_array=0x41b40264)
    at /home/jan/cvs/php5/Zend/zend_execute.c:1339
#11 0x4071ecc6 in zend_do_fcall_common_helper
(execute_data=0xbfe07500,

and so on...

#518 0x40720da5 in zend_include_or_eval_handler
(execute_data=0xbfffca50,
    opline=0x80d9580, op_array=0x80d33c4)
    at /home/jan/cvs/php5/Zend/zend_execute.c:3492
#519 0x4071af4a in execute (op_array=0x80d33c4)
    at /home/jan/cvs/php5/Zend/zend_execute.c:1339

#520 0x406f871e in zend_execute_scripts (type=8, retval=0x0,
file_count=3)
    at /home/jan/cvs/php5/Zend/zend.c:1044
#521 0x406b219e in php_execute_script (primary_file=0xbfffedc0)
    at /home/jan/cvs/php5/main/main.c:1655
#522 0x40726a44 in apache_php_module_main (r=0x81d27e0,
display_source_mode=0)
    at /home/jan/cvs/php5/sapi/apache/sapi_apache.c:54
#523 0x407279e5 in send_php (r=0x81d27e0, display_source_mode=0,
    filename=0x81d2ed8 "/home/jan/headhorde//kronolith/index.php")
    at /home/jan/cvs/php5/sapi/apache/mod_php5.c:621
#524 0x40727a5e in send_parsed_php (r=0x81d27e0)
    at /home/jan/cvs/php5/sapi/apache/mod_php5.c:636

#525 0x080557d7 in ap_invoke_handler ()
#526 0x0806aab0 in process_request_internal ()
---Type <return> to continue, or q <return> to quit---
#527 0x4042edb6 in handle_dir () from /usr/lib/apache/mod_dir.so
#528 0x080557d7 in ap_invoke_handler ()
#529 0x0806aab0 in process_request_internal ()
#530 0x0806ad41 in ap_process_request ()
#531 0x080626f1 in child_main ()
#532 0x0806289a in make_child ()
#533 0x080629d6 in startup_children ()
#534 0x0806347b in standalone_main ()
#535 0x08063c36 in main ()


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=27611&edit=1


Thread (8 messages)

« previous php.bugs (#56528) next »