Bug #17584 Updated: segmentation fault with imagefill and tiles

ID: 17584 Updated by: derick@php.net Reported By: ryan@kaneda.net Status: Closed Bug Type: GD related Operating System: FreeBSD 4.5-STABLE PHP Version: 4.2.1 New Comment: Just want to add that there is a known incompatibility between libpnh 1.2.x and libgd 2.x Derick Previous Comments: ------------------------------------------------------------------------ [2002-06-05 19:30:18] sniper@php.net As you propably are aware, GD 2.0.1 is BETA. And the original author of GD hasn't updated it for a long long time..that's why there will be a bundled patched GD library in PHP 4.3.0. I fixed (hopefully correctly too, it works for me :) this segfault in the bundled GD library now. You can grab the patched gd.c file from here to test it: http://cvs.php.net/co.php/php4/ext/gd/libgd/gd.c?r=1.4&p=1 The patch is here: http://cvs.php.net/diff.php/php4/ext/gd/libgd/gd.c?r1=1.3&r2=1.4&ty=u --Jani ------------------------------------------------------------------------ [2002-06-05 17:16:53] ryan@kaneda.net I'm using gd 2.0.1 with libpng 1.2.0. I'm installing all of it through FreeBSD ports, so if you may want to try reproducing there. ------------------------------------------------------------------------ [2002-06-05 15:26:49] sniper@php.net This looks like some other bug which turned out to be a bug in libpng (iirc). What version do you have there? (and did you link PHP with the same libpng??) I can't reproduce this with libpng 1.2.0 and GD 1.8.4. ------------------------------------------------------------------------ [2002-06-05 15:21:25] ryan@kaneda.net okay, sorry about that. Here's the *real* bt: Program received signal SIGSEGV, Segmentation fault. 0x286c3df5 in gdImageSetPixel () from /usr/local/lib/libgd.so.4 (gdb) bt #0 0x286c3df5 in gdImageSetPixel () from /usr/local/lib/libgd.so.4 #1 0x286c3b06 in gdImageSetPixel () from /usr/local/lib/libgd.so.4 #2 0x286c528b in gdImageFilledRectangle () from /usr/local/lib/libgd.so.4 #3 0x284097f2 in zif_imagefilledrectangle (ht=6, return_value=0x81a6268, this_ptr=0x0, return_value_used=0, tsrm_ls=0x812ba30) at gd.c:2004 #4 0x283caaa3 in execute (op_array=0x8127c28, tsrm_ls=0x812ba30) at ./zend_execute.c:1598 #5 0x283db37a in zend_execute_scripts (type=8, tsrm_ls=0x812ba30, retval=0x0, file_count=3) at zend.c:810 #6 0x283eaac2 in php_execute_script (primary_file=0xbfbff8dc, tsrm_ls=0x812ba30) at main.c:1381 #7 0x283e6ea6 in php_output_filter (f=0x818d350, bb=0x818dd48) at sapi_apache2.c:401 (gdb) frame 4 #4 0x283caaa3 in execute (op_array=0x8127c28, tsrm_ls=0x812ba30) at ./zend_execute.c:1598 1598 ((zend_internal_function *) EX(function_state).function)->handler(EX(opline)->extended_value, EX(Ts)[EX(opline)->result.u.var].var.ptr, EX(object).ptr, return_value_used TSRMLS_CC); ---- Better? ------------------------------------------------------------------------ [2002-06-05 14:38:32] ryan@kaneda.net Oh crap... disregard that. That's on a non debug php build. Give me a second to redo the backtrace. heh. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/17584 -- Edit this bug report at http://bugs.php.net/?id=17584&edit=1