#32685 [Fbk]: Segfault when using assignment by reference within function

From: Date: Tue, 12 Apr 2005 18:37:21 +0000
Subject: #32685 [Fbk]: Segfault when using assignment by reference within function
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-77181@lists.php.net to get a copy of this message 
 ID:               32685
 Updated by:       helly@php.net
 Reported By:      david at davidheath dot org
 Status:           Feedback
 Bug Type:         Reproducible crash
 Operating System: mandrake linux 10.1
 PHP Version:      4.3.11
 New Comment:

Two questions:

1) Does it also crash when you replace file reading by assignment from
string?

2) Did you try 5.0 or HEAD?


Previous Comments:
------------------------------------------------------------------------

[2005-04-12 18:46:23] tony2001@php.net

Please try using this CVS snapshot:

  http://snaps.php.net/php4-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php4-win32-STABLE-latest.zip

Can't reproduce with latest CVS.

------------------------------------------------------------------------

[2005-04-12 18:16:17] david at davidheath dot org

Description:
------------
The attached program always segfaults. I have stripped out as much code
as possible whilst ensuring that it still segfaults, I'm afraid I
haven't been able to make the repro code any simpler. The problem is
either something to do with the assignment by reference on line 11 in
the test2::exists() method, or otherwise something to do with the use
of unserialize(). 

I'm using the standard build of php4.3.11 with no special modules.


Reproduce code:
---------------
$ wget http://www.davidheath.org/php_bug/crash.php.txt
$ wget http://www.davidheath.org/php_bug/testfile
$ mv crash.php.txt crash.php
$ php crash.php


Expected result:
----------------
no segfault, no output at all

Actual result:
--------------
[heathd@localhost dh]$ /usr/local/php4.3.11/bin/php.4.3.11 crash.php
Content-type: text/html
X-Powered-By: PHP/4.3.11

Segmentation fault (core dumped)



When I run with debug build, it doesn't segfault:

[heathd@localhost dh]$ /usr/local/php4.3.11_debug/bin/php.4.3.11
crash.php
Content-type: text/html
X-Powered-By: PHP/4.3.11

/home/heathd/downloads/php-4.3.11/Zend/zend_execute.c(279) :  Freeing
0x081EA8A4 (12 bytes), script=crash.php
/home/heathd/downloads/php-4.3.11/Zend/zend_execute.c(282) :  Freeing
0x081EA704 (28 bytes), script=crash.php
/home/heathd/downloads/php-4.3.11/Zend/zend_variables.c(111) : Actual
location (location was relayed)



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=32685&edit=1

Thread (11 messages)

« previous php.bugs (#77181) next »