#37188 [NEW]: Wrong value of include_path causes 'Official' PHP4.4.2, PHP 4.4.3.3dev to crash

From: Date: Mon, 24 Apr 2006 22:27:46 +0000
Subject: #37188 [NEW]: Wrong value of include_path causes 'Official' PHP4.4.2, PHP 4.4.3.3dev to crash
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-96182@lists.php.net to get a copy of this message 
From:             phpclub_ru at bougakov dot com
Operating system: Windows XP Home, SP2
PHP version:      4.4.2
PHP Bug Type:     Reproducible crash
Bug description:  Wrong value of include_path causes 'Official' PHP4.4.2, PHP 4.4.3.3dev
to crash

Description:
------------
PHP 4.4.3.3 from snaps.php.net (php4-STABLE-200604220230), as well as
'official' PHP 4.4.2 available in the 'Downloads' section of php.net
crashes with the following message:

####################### cut here #################################

AppName: php.exe	 AppVer: 4.4.3.3	 ModName: ntdll.dll
ModVer: 5.1.2600.2180	 Offset: 00010f2b

Unhandled exception at 0x7c910f2b in php.exe: 0xC0000005: Access violation
reading location 0x0009000d.


####################### / cut here #################################

My system is XP Home SP2, Apache 1.3.33
Bug reproduces all times when I open one PHP script (can't reproduce it
here since it is a part of large obfuscated project of other developer;
you can download it here:
http://e2.ilyabirman.ru/download/e2_oranda_te_v1454_distr.zip,
126Kb).

Doesn't reproduce on PHP 4.3.11. mod_php is affected as well as CGI
version.

Crash is caused by the wrong setting in php.ini:

valid example: 
include_path = ".;c:/path/with/some/cyrillic/letters/"

example that causes PHP to crash:
include_path = "c:/path/with/some/cyrillic/letters/"


Reproduce code:
---------------
Code that demonstrates the crash:
http://e2.ilyabirman.ru/download/e2_oranda_te_v1454_distr.zip,
126Kb

Expected result:
----------------
PHP should report or just ignore the wrong setting, not to crash.

Actual result:
--------------
MS Visual Studio 2003 EA debugger displays the following:


####################### cut here #################################

malloc.c, line 212:

#ifndef _WIN64
        if (__active_heap != __SYSTEM_HEAP)
            size = (size + BYTES_PER_PARA - 1) & ~(BYTES_PER_PARA - 1);
#endif  /* _WIN64 */
        return HeapAlloc(_crtheap, 0, size);
}  //             <== THIS IS LINE 212

#else  /* WINHEAP */

        /* try to find a big enough free block
         */

####################### / cut here #################################



Call stack:

####################### cut here #################################
--> 	 	ntdll.dll!7c910f2b() 	
 	ntdll.dll!7c910d5c() 	
 	php.exe!004024d9() 	
 	php.exe!004024d9() 	
 	php4ts.dll!100b68f0() 	
 	php4ts.dll!100042fa() 	
 	ntdll.dll!7c91056d() 	
 	php4ts.dll!100b64ec() 	
 	php4ts.dll!100c6810() 	
 	php.exe!004024d9() 	
 	php.exe!004024d9() 	
 	php.exe!004024d9() 	
 	php.exe!004024d9() 	
 	php.exe!004024d9() 	
 	php.exe!004024d9() 	
 	php.exe!004024d9() 	
 	php.exe!00402c6e() 	
 	ntdll.dll!7c9106eb() 	
>	msvcr71.dll!_heap_alloc(unsigned int size=1)  Line 212	C
 	msvcr71.dll!_setargv()  Line 143	C

####################### / cut here #################################

Autos:

####################### cut here #################################
	_crtheap	0x00380000	void *
	size	1	unsigned int
####################### / cut here #################################





-- 
Edit bug report at http://bugs.php.net/?id=37188&edit=1
-- 
Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=37188&r=trysnapshot44
Try a CVS snapshot (PHP 5.1): http://bugs.php.net/fix.php?id=37188&r=trysnapshot51
Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=37188&r=trysnapshot60
Fixed in CVS:                 http://bugs.php.net/fix.php?id=37188&r=fixedcvs
Fixed in release:             http://bugs.php.net/fix.php?id=37188&r=alreadyfixed
Need backtrace:               http://bugs.php.net/fix.php?id=37188&r=needtrace
Need Reproduce Script:        http://bugs.php.net/fix.php?id=37188&r=needscript
Try newer version:            http://bugs.php.net/fix.php?id=37188&r=oldversion
Not developer issue:          http://bugs.php.net/fix.php?id=37188&r=support
Expected behavior:            http://bugs.php.net/fix.php?id=37188&r=notwrong
Not enough info:              http://bugs.php.net/fix.php?id=37188&r=notenoughinfo
Submitted twice:              http://bugs.php.net/fix.php?id=37188&r=submittedtwice
register_globals:             http://bugs.php.net/fix.php?id=37188&r=globals
PHP 3 support discontinued:   http://bugs.php.net/fix.php?id=37188&r=php3
Daylight Savings:             http://bugs.php.net/fix.php?id=37188&r=dst
IIS Stability:                http://bugs.php.net/fix.php?id=37188&r=isapi
Install GNU Sed:              http://bugs.php.net/fix.php?id=37188&r=gnused
Floating point limitations:   http://bugs.php.net/fix.php?id=37188&r=float
No Zend Extensions:           http://bugs.php.net/fix.php?id=37188&r=nozend
MySQL Configuration Error:    http://bugs.php.net/fix.php?id=37188&r=mysqlcfg

Thread (15 messages)

« previous php.bugs (#96182) next »