#34731 [NEW]: segmentation fault during request shutdown
| From: | novicky at aarongroup dot cz | Date: | Tue, 04 Oct 2005 13:59:21 +0000 |
| Subject: | #34731 [NEW]: segmentation fault during request shutdown | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-85998@lists.php.net to get a copy of this message | ||
From: novicky at aarongroup dot cz
Operating system: All
PHP version: 5CVS-2005-10-04 (CVS)
PHP Bug Type: OCI8 related
Bug description: segmentation fault during request shutdown
Description:
------------
There is an incorrect session destructor registration. The pointer
registered by zend_list_insert points to a memory block which is then
released by efree. This can lead to segmentation fault when destructor is
called. A proposed patch follows (the same problem is id development
branch)
--- php5-STABLE-200510041238/ext/oci8/oci8.c.ORIG 2005-10-04
15:39:42.301952856 +0200
+++ php5-STABLE-200510041238/ext/oci8/oci8.c 2005-10-04
15:40:58.979935427 +0200
@@ -2879,7 +2879,6 @@
)
);
- session->num = zend_list_insert(session, le_session);
session->is_open = 1;
mutex_lock(mx_lock);
@@ -2892,6 +2891,7 @@
}
mutex_unlock(mx_lock);
+ session->num = zend_list_insert(session, le_session);
oci_debug("_oci_open_session new sess=%d
user=%s",session->num,username);
return session;
--
Edit bug report at http://bugs.php.net/?id=34731&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=34731&r=trysnapshot4
Try a CVS snapshot (php5.0): http://bugs.php.net/fix.php?id=34731&r=trysnapshot50
Try a CVS snapshot (php5.1): http://bugs.php.net/fix.php?id=34731&r=trysnapshot51
Fixed in CVS: http://bugs.php.net/fix.php?id=34731&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=34731&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=34731&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=34731&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=34731&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=34731&r=support
Expected behavior: http://bugs.php.net/fix.php?id=34731&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=34731&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=34731&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=34731&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=34731&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=34731&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=34731&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=34731&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=34731&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=34731&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=34731&r=mysqlcfg