#32254 [Opn->Csd]: Nested try-catch blocks may cause segfault

From: Date: Sun, 20 Mar 2005 01:04:55 +0000
Subject: #32254 [Opn->Csd]: Nested try-catch blocks may cause segfault
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-75547@lists.php.net to get a copy of this message 
 ID:               32254
 Updated by:       sniper@php.net
 Reported By:      shulmanb at il dot ibm dot com
-Status:           Open
+Status:           Closed
 Bug Type:         Zend Engine 2 problem
 Operating System: Linux
 PHP Version:      5CVS-2005-03-09 (dev)
 New Comment:

This bug is then fixed if not happening anymore.
btw. It's really not wise to compile PHP with
--enable-maintainer-zts..



Previous Comments:
------------------------------------------------------------------------

[2005-03-10 08:01:27] shulmanb at il dot ibm dot com

Latest snapshot does not cause a segfault on Linux.

However, the probably related bug #32252 still happens on Windows with
latest snapshot, so it's probable that memory corruption still occurs.

------------------------------------------------------------------------

[2005-03-09 21:45:39] tony2001@php.net

Please try using this CVS snapshot:

  http://snaps.php.net/php5-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5.0-win32-latest.zip

Works fine here.

------------------------------------------------------------------------

[2005-03-09 14:52:58] shulmanb at il dot ibm dot com

Description:
------------
When compiled with --enable-maintainer-zts, having nested try-catch
blocks may cause segfaults in some cases.

In the following code fragment, commenting out the outer try-catch
block solves the segfault.

This DOES NOT HAPPEN when compiled with debug symbols.

This may be related to bug #32252 (for instance, if the index to $list
is positive, crash does not occur).

Reproduce code:
---------------
class a implements ArrayAccess {
    function offsetExists ($offset) { return false; }
    function offsetGet ($offset) { return null; }
    function offsetSet ($offset, $value) { throw new Exception
("Oops"); }
    function offsetUnset ($offset) { }
}
function test () {
    try {
        $list = new a();
        $caught = 0;
        try {
            $list[-1] = 123;
        } catch (Exception $e) {
            $caught = 1;
        }
        if (!$caught)
            return false;
        return true;
    }
    catch (Exception $e) {
        return false;
    }
}
print test();

Expected result:
----------------
The output should be "1"

Actual result:
--------------
Segmentation fault.

PHP was compiled without debug symbols. The stack trace provided by gdb
was:

#0  0x08184ecd in zend_hash_destroy (ht=0x8c579c08)
    at /root/php-5.0.3/Zend/zend_hash.c:524


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=32254&edit=1

Thread (4 messages)

« previous php.bugs (#75547) next »