PHP 4.0 Bug #4626: number_format("string", int) crashes

From: simenbrekken@online.no Operating system: Windows 2000 Professional (SELECT) PHP version: 4.0.0 Release PHP Bug Type: Reproduceable crash Bug description: number_format("string", int) crashes PHP Code producing the error: <? $int = "string"; echo number_format($int, 2); ?> Dr. Watson error log extract for crash: Application exception occurred: App: (pid=1436) When: 26.05.2000 @ 22:58:31.458 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: SIMEN User Name: Simen Brekken Number of Processors: 1 Processor Type: x86 Family 6 Model 6 Stepping 0 Windows 2000 Version: 5.0 Current Build: 2195 Service Pack: None Current Type: Uniprocessor Free Registered Organization: marchFIRST Registered Owner: Simen Brekken *----> Task List <----* 0 Idle.exe 8 System.exe 164 smss.exe 192 csrss.exe 188 winlogon.exe 240 services.exe 252 lsass.exe 412 svchost.exe 440 SPOOLSV.exe 472 svchost.exe 508 regsvc.exe 532 mstask.exe 596 winmgmt.exe 828 explorer.exe 912 devldr32.exe 984 Ahqtb.exe 1052 linksts.exe 1064 Winamp.exe 1092 point32.exe 1024 internat.exe 680 VPlus.exe 952 UEDIT32.exe 816 IEXPLORE.exe 1112 Apache.exe 1148 Apache.exe 1004 IEXPLORE.exe 1372 IEXPLORE.exe 916 mirc32.exe 1452 notepad.exe 1492 drwtsn32.exe 1436 php.exe 1480 drwtsn32.exe 0 _Total.exe (00400000 - 00404000) (77F80000 - 77FF9000) (10000000 - 100E0000) (77E80000 - 77F36000) (75050000 - 75058000) (75030000 - 75044000) (78000000 - 78046000) (77DB0000 - 77E0A000) (77D40000 - 77DAF000) (75020000 - 75028000) (77A50000 - 77B45000) (77F40000 - 77F7C000) (77E10000 - 77E75000) (65340000 - 653D5000) (1F7D0000 - 1F804000) (76B30000 - 76B6E000) (77C70000 - 77CBA000) (77B50000 - 77BDA000) (775A0000 - 777E0000) (780A0000 - 780B2000) (1F8C0000 - 1F8D6000) (00E60000 - 00E65000) (6E420000 - 6E426000) (75E60000 - 75E7A000) State Dump for Thread Id 0x5f8 eax=10079fe0 ebx=003458e8 ecx=00000000 edx=00000031 esi=00000000 edi=00d84a58 eip=10079fe5 esp=0012fe44 ebp=780010ed iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: zval_ptr_dtor 10079fe0 56 push esi 10079fe1 8b742408 mov esi,[esp+0x8] ss:00d3d41b=???????? FAULT ->10079fe5 8b06 mov eax,[esi] ds:00000000=???????? 10079fe7 66ff480a dec word ptr [eax+0xa] ds:10c875b7=???? 10079feb 8b06 mov eax,[esi] ds:00000000=???????? 10079fed 668b480a mov cx,[eax+0xa] ds:10c875b7=???? 10079ff1 6685c9 test cx,cx 10079ff4 7513 jnz zend_register_list_destructors_ex+0xa9 (1007f009) 10079ff6 50 push eax 10079ff7 e864bbffff call zval_dtor (10075b60) 10079ffc 8b06 mov eax,[esi] ds:00000000=???????? 10079ffe 50 push eax 10079fff e89cffffff call safe_free_zval_ptr (10079fa0) 1007a004 83c408 add esp,0x8 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 780010ED 325068FF 6A687803 647800F5 000000A1 89645000 !zval_ptr_dtor 6AEC8B55 00000000 00000000 00000000 00000000 00000000 <nosymbols> *----> Raw Stack Dump <----* 0012fe44 00 00 00 00 67 1e 07 10 - 00 00 00 00 58 58 34 00 ....g.......XX4. 0012fe54 f8 57 34 00 f8 6f 34 00 - c8 3b 34 00 1b 9e 07 10 .W4..o4..;4..... 0012fe64 e8 58 34 00 a0 77 0d 10 - f0 9e 07 10 c8 52 34 00 .X4..w.......R4. 0012fe74 f8 57 34 00 10 7b 07 10 - f8 57 34 00 c8 52 34 00 .W4..{...W4..R4. 0012fe84 f8 57 34 00 c8 52 34 00 - b9 50 00 10 c8 52 34 00 .W4..R4..P...R4. 0012fe94 f8 57 34 00 01 00 00 00 - 05 00 00 00 00 00 00 00 .W4............. 0012fea4 04 00 00 00 03 00 00 00 - 34 42 02 78 c8 3b 34 00 ........4B.x.;4. 0012feb4 4c ff 12 00 58 3a 34 00 - c3 19 40 00 00 00 00 00 L...X:4...@..... 0012fec4 00 00 00 00 00 00 00 00 - 00 f0 fd 7f 00 00 00 00 ................ 0012fed4 00 00 00 00 04 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee4 17 00 00 00 10 35 13 00 - 40 ce 03 78 00 f0 fd 7f .....5..@..x.... 0012fef4 4d bf f8 77 00 00 13 00 - 03 00 00 00 f8 2e 34 00 M..w..........4. 0012ff04 00 00 00 00 98 f5 d7 00 - 00 32 03 78 ff ff ff ff .........2.x.... 0012ff14 00 00 00 00 01 00 00 00 - 00 00 00 00 01 00 00 00 ................ 0012ff24 58 3a 34 00 c8 3b 34 00 - 58 ff 12 00 00 00 00 00 X:4..;4.X....... 0012ff34 00 00 00 00 f8 57 34 00 - f8 6f 34 00 01 00 00 00 .....W4..o4..... 0012ff44 00 00 00 00 c8 52 34 00 - c0 ff 12 00 3b 1f 40 00 .....R4.....;.@. 0012ff54 01 00 00 00 58 3a 34 00 - a0 29 34 00 00 30 40 00 ....X:4..)4..0@. 0012ff64 04 30 40 00 a4 ff 12 00 - 94 ff 12 00 a0 ff 12 00 .0@............. 0012ff74 00 00 00 00 98 ff 12 00 - 08 30 40 00 0c 30 40 00 .........0@..0@.