#27951 [Opn->Csd]: debug_backtrace crash after using ++ on unassigned overloaded object property
ID: 27951
Updated by: sniper@php.net
Reported By: calum at lasham dot com
-Status: Open
+Status: Closed
-Bug Type: Reproducible crash
+Bug Type: Zend Engine 2 problem
Operating System: Windows XP
PHP Version: 5CVS-2004-04-11 (dev)
New Comment:
This bug has been fixed in CVS.
Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
Thank you for the report, and for helping us make PHP better.
Seems to be fixed in CVS (at least on Linux..)
Previous Comments:
------------------------------------------------------------------------
[2004-04-11 11:13:44] calum at lasham dot com
expected result should be a backtrace
------------------------------------------------------------------------
[2004-04-11 11:11:08] calum at lasham dot com
Description:
------------
When using the ++ operator on an overloaded object property that's not
assigned a value, a debug_backtrace() in another unrelated object
causes a crash. See example code to reproduce the problem.
Note 1: The script executes correctly if, in the example code...
$foo->bar++;
is replaced with...
$x = $foo->bar;
$x++;
$foo->bar = $x;
Note 2: if the __set method in class Setter actually sets the variable
on the object the script executes correctly.
The bug appears in php5rc1 and the snapshot Built On: Apr 11, 2004
10:30 GMT. crash occurs when using php as apache module or from
command line.
Reproduce code:
---------------
<?php
class Setter {
function __get($nm){ }
function __set($nm, $val){ }
}
class Test {
function backtrace(){
debug_backtrace();
}
}
$foo = new Setter();
$foo->bar++;
$t = new Test();
$t->backtrace();
?>
Expected result:
----------------
"got exception" printed
Actual result:
--------------
apache service crash
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=27951&edit=1
Thread (3 messages)