#35353 [NEW]: Segfault on REMOVE_POINTER_FROM_LIST with Zend Optimizer enabled

From: maddog2k at maddog2k dot net Operating system: Linux PHP version: 4CVS-2005-11-23 (snap) PHP Bug Type: Unknown/Other Function Bug description: Segfault on REMOVE_POINTER_FROM_LIST with Zend Optimizer enabled Description: ------------ Not sure whether this is the right place for Zend Optimizer problems, but I think it is since it's crashing from Zend/zend_alloc.c. If not, sorry for blaming it on PHP :) The problem is that Apache2 (2.0.54) childs still segfault with PHP 4CVS and PHP 5CVS, when Zend Optimizer is turned on (2.5.10a). This does not occur with PHP 4.3.xx REMOVE_POINTER_FROM_LIST(p) is 9 out of 10 times the cause of the segmentation faults, but it happens at different line numbers according to the backtraces. It looked to me like an memory-limit issue, but I compiled w/o this and it didn't make a change. Unfortunately, I haven't been able to find specific code that causes these crashes. Configure-line is pretty big, but it's a shared hosting machine in production... Configure Command => './configure' '--prefix=/usr/local/php4' '--with-apxs2=/usr/local/apache2/bin/apxs' '--disable-cgi' '--enable-safe-mode' '--with-openss l=/usr/local/ssl' '--with-pear' '--with-zlib' '--with-gettext' '--with-iconv=/usr' '--with-iconv-dir=/usr' '--enable-bcmath' '--enable-sockets' '--enable-cal endar' '--enable-mbstring=all' '--enable-mbregex' '--with-curl=/usr/local' '--enable-dba' '--enable-dbase' '--with-dom=/usr/local' '--with-dom-xslt=/usr/loca l' '--with-dom-exslt=/usr/local' '--with-xmlrpc' '--enable-ftp' '--with-gd' '--with-jpeg-dir' '--with-png-dir' '--with-ttf' '--with-freetype-dir=/usr' '--ena ble-gd-native-ttf' '--with-imap=../imap-2004g' '--with-imap-ssl=/usr/local/ssl' '--with-ldap' '--with-mcrypt=/usr/local' '--with-mime-magic' '--with-mhash=/u sr/local' '--with-mysql=/usr/local/mysql' '--with-pgsql=/usr/local/pgsql' '--with-pdflib=/usr/local' '--with-swf=../swf/dist/' '--enable-wddx' '--enable-xslt ' '--with-xslt-sablot=/usr/local' '--with-expat' '--with-expat-dir=/usr/local' '--enable-exif' '--with-bz2' '--with-zip' Note that it happens both in curent 5 and 4 CVS... Also, I haven't been able to find 'Zend/' on cvs.php.net Is it hidden or so ? :) Reproduce code: --------------- Unfortunately none. Actual result: -------------- (only 1 backtrace line this time :) #0 0x407ecff6 in _efree (ptr=0x83fe0b4) at /opt/install/apache-2.0.54_apache-1.3.34_php-4.4.2-RC2-dev-WideXS-03_php-5.1.0/php-4.4.2/Zend/zend_alloc.c:259 259 REMOVE_POINTER_FROM_LIST(p); -- Edit bug report at http://bugs.php.net/?id=35353&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=35353&r=trysnapshot4 Try a CVS snapshot (php5.0): http://bugs.php.net/fix.php?id=35353&r=trysnapshot50 Try a CVS snapshot (php5.1): http://bugs.php.net/fix.php?id=35353&r=trysnapshot51 Fixed in CVS: http://bugs.php.net/fix.php?id=35353&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=35353&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=35353&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=35353&r=needscript Try newer version: http://bugs.php.net/fix.php?id=35353&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=35353&r=support Expected behavior: http://bugs.php.net/fix.php?id=35353&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=35353&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=35353&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=35353&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=35353&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=35353&r=dst IIS Stability: http://bugs.php.net/fix.php?id=35353&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=35353&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=35353&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=35353&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=35353&r=mysqlcfg