#27902 [NEW]: array manipulation and references segfaults php
| From: | mvali at urania dot ee | Date: | Wed, 07 Apr 2004 10:47:23 +0000 |
| Subject: | #27902 [NEW]: array manipulation and references segfaults php | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-57666@lists.php.net to get a copy of this message | ||
From: mvali at urania dot ee
Operating system: Red Hat 8, Fedora Core 1
PHP version: 4.3.6RC1
PHP Bug Type: Reproducible crash
Bug description: array manipulation and references segfaults php
Description:
------------
This is testded with 4.2.1, 4.3.4 and 4.3.6RC2, the script
produces a segfault.
PHP is compiled with-apxs2 or with apache 1.3 with no
special parameters to ./configure.
The script produces segfaults both on console
php interpretator or when loaded with apache server.
Reproduce code:
---------------
<?php
class AClass {
function AClass($v) {$this->v = $v;}
function func() {return $this->v;}
}
function & func($mall) {
if (is_array($mall))
return array ("b" => func($mall["b"]));
else
return $mall->func();
}
function random($staatus="OK\n") {
$a1 = array();
$a2 = func(array("b" => new AClass($staatus)));
$a1 = array(array_merge(array(), $a2));
$important = 0;
return array_values($a1);
}
$out = random();
echo $out[0]["b"];
?>
Expected result:
----------------
It should print 'OK'
Actual result:
--------------
echo receives a segfault.
--
Edit bug report at http://bugs.php.net/?id=27902&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=27902&r=trysnapshot4
Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=27902&r=trysnapshot5
Fixed in CVS: http://bugs.php.net/fix.php?id=27902&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=27902&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=27902&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=27902&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=27902&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=27902&r=support
Expected behavior: http://bugs.php.net/fix.php?id=27902&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=27902&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=27902&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=27902&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=27902&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=27902&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=27902&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=27902&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=27902&r=float