PHP 4.0 Bug #2804: Core dump in zend hash cleanup routines

From: fhj@mvsci.com Operating system: Linux 2.2.9 PHP version: 4.0 Beta 3 PHP Bug Type: Reproduceable crash Bug description: Core dump in zend hash cleanup routines We are seeing core dumps during the Zend hash cleanup routines when loading fairly complex PHP/4b3 pages that include the following: - Lots of included files - Lots of FastTemplate replacements - Lots of class definitions Attached is a gdb backtrace. Please contact us if you would like access to a live environment for debugging. #0 0x404f879b in chunk_free (ar_ptr=0x40588580, p=0x82b9bc8) at malloc.c:3030 #1 0x404f8505 in __libc_free (mem=0x82ba208) at malloc.c:2932 #2 0x806a04e in _efree (ptr=0x82ba230, __zend_filename=0x812a280 "zend_hash.c", __zend_lineno=744, __zend_orig_filename=0x0, __zend_orig_lineno=0) at zend_alloc.c:182 #3 0x8076224 in zend_hash_destroy (ht=0x82b99d8) at zend_hash.c:744 #4 0x8072caa in _zval_dtor (zvalue=0x82b9a38, __zend_filename=0x812981c "zend_execute_API.c", __zend_lineno=215) at zend_variables.c:68 #5 0x806e83e in _zval_ptr_dtor (zval_ptr=0x82baf00, __zend_filename=0x8129d67 "zend_variables.c", __zend_lineno=182) at zend_execute_API.c:215 #6 0x8072eb5 in _zval_ptr_dtor_wrapper (zval_ptr=0x82baf00) at zend_variables.c:182 #7 0x80761da in zend_hash_destroy (ht=0x82b9180) at zend_hash.c:739 #8 0x8072caa in _zval_dtor (zvalue=0x82baf38, __zend_filename=0x812981c "zend_execute_API.c", __zend_lineno=215) at zend_variables.c:68 #9 0x806e83e in _zval_ptr_dtor (zval_ptr=0x82bafd0, __zend_filename=0x8129d67 "zend_variables.c", __zend_lineno=182) at zend_execute_API.c:215 #10 0x8072eb5 in _zval_ptr_dtor_wrapper (zval_ptr=0x82bafd0) at zend_variables.c:182 ---Type <return> to continue, or q <return> to quit--- #11 0x80761da in zend_hash_destroy (ht=0x8257770) at zend_hash.c:739 #12 0x8072caa in _zval_dtor (zvalue=0x82b3008, __zend_filename=0x812981c "zend_execute_API.c", __zend_lineno=215) at zend_variables.c:68 #13 0x806e83e in _zval_ptr_dtor (zval_ptr=0x8258e34, __zend_filename=0x8129d67 "zend_variables.c", __zend_lineno=182) at zend_execute_API.c:215 #14 0x8072eb5 in _zval_ptr_dtor_wrapper (zval_ptr=0x8258e34) at zend_variables.c:182 #15 0x80761da in zend_hash_destroy (ht=0x82b3048) at zend_hash.c:739 #16 0x8072cc8 in _zval_dtor (zvalue=0x8286c00, __zend_filename=0x812981c "zend_execute_API.c", __zend_lineno=215) at zend_variables.c:74 #17 0x806e83e in _zval_ptr_dtor (zval_ptr=0x8286bac, __zend_filename=0x8129d67 "zend_variables.c", __zend_lineno=182) at zend_execute_API.c:215 #18 0x8072eb5 in _zval_ptr_dtor_wrapper (zval_ptr=0x8286bac) at zend_variables.c:182 #19 0x80761da in zend_hash_destroy (ht=0x826ed58) at zend_hash.c:739 #20 0x8072cc8 in _zval_dtor (zvalue=0x8286c98, __zend_filename=0x812981c "zend_execute_API.c", __zend_lineno=215) at zend_variables.c:74 #21 0x806e83e in _zval_ptr_dtor (zval_ptr=0x8286c4c, __zend_filename=0x8129d67 "zend_variables.c", __zend_lineno=182) at zend_execute_API.c:215 #22 0x8072eb5 in _zval_ptr_dtor_wrapper (zval_ptr=0x8286c4c) at zend_variables.c:182 #23 0x80761da in zend_hash_destroy (ht=0x817421c) at zend_hash.c:739 #24 0x806e6f6 in shutdown_executor () at zend_execute_API.c:134 #25 0x8073668 in zend_deactivate () at zend.c:438 #26 0x8065290 in php_request_shutdown (dummy=0x0) at main.c:767 #27 0x80d6c6e in run_cleanups () #28 0x80d549d in ap_clear_pool () #29 0x80d5511 in ap_destroy_pool () #30 0x80d548c in ap_clear_pool () #31 0x80e483f in child_main () #32 0x80e4e8c in make_child () #33 0x80e5206 in perform_idle_server_maintenance () #34 0x80e5735 in standalone_main () #35 0x80e5ce3 in main () #36 0x404b7cb3 in __libc_start_main (main=0x80e59ac <main>, argc=3, argv=0xbffff834, init=0x804c1c0 <_init>, fini=0x81222ac <_fini>, rtld_fini=0x4000a350 <_dl_fini>, stack_end=0xbffff82c) at ../sysdeps/generic/libc-start.c:78