#36188 [NEW]: Segfault because of faulty error handler code

From: jsjohnst@php.net Operating system: FreeBSD 4.x PHP version: 5.1.2 PHP Bug Type: Reproducible crash Bug description: Segfault because of faulty error handler code Description: ------------ With a poorly written custom PHP error handler it's possible to segfault PHP. Of course fixing the code prevents the sefault, but userland code shouldn't segfault PHP. P.S. - I realize xdebug and APC are both running, but I was told to file the bug report by Rasmus so I am. Reproduce code: --------------- Version #1: http://www.jeremyjohnstone.com/code/bugs.php.net/segfault_error_handler.phps Version #2 (slightly different reason+crash location, but also segfaults): http://www.jeremyjohnstone.com/code/bugs.php.net/segfault_error_handler2.phps Expected result: ---------------- Well, the above code is bad, so one would expect something bad to happen, just not a segfault of PHP because of faulty userland code. Actual result: -------------- Backtrace for code sample #1: http://www.jeremyjohnstone.com/code/bugs.php.net/backtrace.txt Backtrace for code sample #2: http://www.jeremyjohnstone.com/code/bugs.php.net/backtrace2.txt -- Edit bug report at http://bugs.php.net/?id=36188&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=36188&r=trysnapshot44 Try a CVS snapshot (PHP 5.1): http://bugs.php.net/fix.php?id=36188&r=trysnapshot51 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=36188&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=36188&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=36188&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=36188&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=36188&r=needscript Try newer version: http://bugs.php.net/fix.php?id=36188&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=36188&r=support Expected behavior: http://bugs.php.net/fix.php?id=36188&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=36188&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=36188&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=36188&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=36188&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=36188&r=dst IIS Stability: http://bugs.php.net/fix.php?id=36188&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=36188&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=36188&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=36188&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=36188&r=mysqlcfg