#33167 [Opn->Fbk]: pg_fetch_array can cause a segfault

ID: 33167 Updated by: sniper@php.net Reported By: jsnell at networkninja dot com -Status: Open +Status: Feedback Bug Type: PostgreSQL related Operating System: Debian (dotdeb), gentoo PHP Version: 5.0.4 New Comment: Please try using this CVS snapshot: http://snaps.php.net/php5-latest.tar.gz For Windows: http://snaps.php.net/win32/php5-win32-latest.zip I'm pretty sure that leak/crash is fixed now. Previous Comments: ------------------------------------------------------------------------ [2005-05-30 07:58:06] jsnell at networkninja dot com While the snapshot solved my original case, I'm still having problems with similar code. I haven't quite narrowed it down yet as even changing the position of an echo seems to affect the outcome. PHP 5.1.0-dev (cli) (built: May 28 2005 13:09:48) Copyright (c) 1997-2005 The PHP Group Zend Engine v2.1.0-dev, Copyright (c) 1998-2004 Zend Technologies [Switching to Thread -1213082528 (LWP 16161)] 0xb7d4f0a1 in mallopt () from /lib/tls/libc.so.6 (gdb) bt #0 0xb7d4f0a1 in mallopt () from /lib/tls/libc.so.6 #1 0xb7d4ef6e in mallopt () from /lib/tls/libc.so.6 #2 0xb7d4ddcb in free () from /lib/tls/libc.so.6 #3 0x081da1e6 in shutdown_memory_manager (silent=1, full_shutdown=0) at /usr/src/php5-src/php5-200505280230/Zend/zend_alloc.c:511 #4 0x081b677d in php_request_shutdown (dummy=0x0) at /usr/src/php5-src/php5-200505280230/main/main.c:1248 #5 0x0825e8f0 in main (argc=2, argv=0xbfffe824) at /usr/src/php5-src/php5-200505280230/sapi/cli/php_cli.c:1134 ------------------------------------------------------------------------ [2005-05-28 20:21:11] jsnell at networkninja dot com works fine with PHP Version 5.1.0-dev in both cgi and mod forms. ------------------------------------------------------------------------ [2005-05-28 04:47:26] jsnell at networkninja dot com No segfault with the --enable-debug Instead I get: /usr/src/php5-src/php5-5.0.4/ext/pgsql/pgsql.c(1440) : Freeing 0x0856003C (16 bytes), script=breaker.php === Total 1 memory leaks detected === which is: /usr/src/php5-src/php5-5.0.4/ext/pgsql/pgsql.c Also, if the value is manipulated or copied in any way such as casting to int and then recasting to float, the problem seems to go away. ------------------------------------------------------------------------ [2005-05-28 01:07:20] tony2001@php.net Also, try it with the latest snapshot available at http://snaps.php.net ------------------------------------------------------------------------ [2005-05-28 01:05:42] tony2001@php.net Please compile PHP with --enable-debug and generate GDB backtrace once more. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/33167 -- Edit this bug report at http://bugs.php.net/?id=33167&edit=1