Bug #17584 Updated: segmentation fault with imagefill and tiles

ID: 17584 Updated by: ryan@kaneda.net Reported By: ryan@kaneda.net -Status: Feedback +Status: Open Bug Type: GD related Operating System: FreeBSD 4.5-STABLE PHP Version: 4.2.1 New Comment: I'm using gd 2.0.1 with libpng 1.2.0. I'm installing all of it through FreeBSD ports, so if you may want to try reproducing there. Previous Comments: ------------------------------------------------------------------------ [2002-06-05 15:26:49] sniper@php.net This looks like some other bug which turned out to be a bug in libpng (iirc). What version do you have there? (and did you link PHP with the same libpng??) I can't reproduce this with libpng 1.2.0 and GD 1.8.4. ------------------------------------------------------------------------ [2002-06-05 15:21:25] ryan@kaneda.net okay, sorry about that. Here's the *real* bt: Program received signal SIGSEGV, Segmentation fault. 0x286c3df5 in gdImageSetPixel () from /usr/local/lib/libgd.so.4 (gdb) bt #0 0x286c3df5 in gdImageSetPixel () from /usr/local/lib/libgd.so.4 #1 0x286c3b06 in gdImageSetPixel () from /usr/local/lib/libgd.so.4 #2 0x286c528b in gdImageFilledRectangle () from /usr/local/lib/libgd.so.4 #3 0x284097f2 in zif_imagefilledrectangle (ht=6, return_value=0x81a6268, this_ptr=0x0, return_value_used=0, tsrm_ls=0x812ba30) at gd.c:2004 #4 0x283caaa3 in execute (op_array=0x8127c28, tsrm_ls=0x812ba30) at ./zend_execute.c:1598 #5 0x283db37a in zend_execute_scripts (type=8, tsrm_ls=0x812ba30, retval=0x0, file_count=3) at zend.c:810 #6 0x283eaac2 in php_execute_script (primary_file=0xbfbff8dc, tsrm_ls=0x812ba30) at main.c:1381 #7 0x283e6ea6 in php_output_filter (f=0x818d350, bb=0x818dd48) at sapi_apache2.c:401 (gdb) frame 4 #4 0x283caaa3 in execute (op_array=0x8127c28, tsrm_ls=0x812ba30) at ./zend_execute.c:1598 1598 ((zend_internal_function *) EX(function_state).function)->handler(EX(opline)->extended_value, EX(Ts)[EX(opline)->result.u.var].var.ptr, EX(object).ptr, return_value_used TSRMLS_CC); ---- Better? ------------------------------------------------------------------------ [2002-06-05 14:38:32] ryan@kaneda.net Oh crap... disregard that. That's on a non debug php build. Give me a second to redo the backtrace. heh. ------------------------------------------------------------------------ [2002-06-05 14:29:33] ryan@kaneda.net Okay, I hope this is what we're looking for: Program received signal SIGSEGV, Segmentation fault. 0x286b9df5 in gdImageSetPixel () from /usr/local/lib/libgd.so.4 (gdb) bt #0 0x286b9df5 in gdImageSetPixel () from /usr/local/lib/libgd.so.4 #1 0x286b9b06 in gdImageSetPixel () from /usr/local/lib/libgd.so.4 #2 0x286bb28b in gdImageFilledRectangle () from /usr/local/lib/libgd.so.4 #3 0x284049ad in ssl_expr_yytext () from /usr/local/libexec/apache2/libphp4.so #4 0x283cb0fd in ssl_expr_yytext () from /usr/local/libexec/apache2/libphp4.so #5 0x283da622 in ssl_expr_yytext () from /usr/local/libexec/apache2/libphp4.so #6 0x283e822a in ssl_expr_yytext () from /usr/local/libexec/apache2/libphp4.so #7 0x283e49b6 in ssl_expr_yytext () from /usr/local/libexec/apache2/libphp4.so #8 0x806dbb7 in ap_pass_brigade () #9 0x8073f18 in default_handler () #10 0x80646f4 in ap_run_handler () #11 0x8064b85 in ap_invoke_handler () #12 0x8062006 in ap_process_request () #13 0x805e13d in ap_process_http_connection () #14 0x806c278 in ap_run_process_connection () #15 0x806c4ff in ap_process_connection () #16 0x80633ab in child_main () #17 0x8063468 in make_child () #18 0x806355a in startup_children () #19 0x806388f in ap_mpm_run () #20 0x80686de in main () #21 0x805dd8d in _start () --- Am I mistaken, is this a gd library error and not a php error? The script executed was the same posted in the original report. Let me know if there's anything else needed. ------------------------------------------------------------------------ [2002-06-03 20:16:24] sniper@php.net Thank you for this bug report. To properly diagnose the problem, we need a backtrace to see what is happening behind the scenes. To find out how to generate a backtrace, please read http://bugs.php.net/bugs-generating-backtrace.php Once you have generated a backtrace, please submit it to this bug report and change the status back to "Open". Thank you for helping us make PHP better. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/17584 -- Edit this bug report at http://bugs.php.net/?id=17584&edit=1