PHP 4.0 Bug #4957: php coredump (calling NULL pointer)

From: lucascrt@negaverse.org Operating system: Linux 2.2.16 PHP version: 4.0.0 Release PHP Bug Type: Reproduceable crash Bug description: php coredump (calling NULL pointer) './configure' '--with-mysql' '--with-imap=/root/php/imap-4.7c' '--with-apxs=/usr/apache/sbin/apxs' '--enable-track-vars' (The backtrace is from an httpd with php4 statically linked to php4, but the same crash happens reproducibly with the above command line as well): (gdb) run -X Starting program: /usr/apache/sbin/./httpd_debug -X Program received signal SIGSEGV, Segmentation fault. 0x0 in ?? () (gdb) where #0 0x0 in ?? () #1 0x80ecd2e in array_data_compare (a=0xbfff111c, b=0xbfff1118) at array.c:272 #2 0x808294c in zend_hash_minmax (ht=0x84645ec, compar=0x80ecd08 <array_data_compare>, flag=0, pData=0xbfff1158) at zend_hash.c:1085 #3 0x80edfa2 in php_if_min (ht=1, return_value=0x847101c, this_ptr=0x0, return_value_used=1) at array.c:862 #4 0x80e325e in execute (op_array=0x8265f7c) at ./zend_execute.c:1574 #5 0x806deb1 in php_execute_script (primary_file=0xbffff698) at main.c:1200 #6 0x8088ff5 in apache_php_module_main (r=0x82622d4, fd=35, display_source_mode=0) at sapi_apache.c:93 #7 0x806a3c6 in send_php () #8 0x806a408 in send_parsed_php () #9 0x810289f in ap_invoke_handler () #10 0x8115c11 in process_request_internal () #11 0x8115c70 in ap_process_request () #12 0x810d3bd in child_main () #13 0x810d548 in make_child () #14 0x810d6a3 in startup_children () #15 0x810dc90 in standalone_main () #16 0x810e4ef in main () #17 0x400e7cb3 in __libc_start_main (main=0x810e0cc <main>, argc=2, argv=0xbffff854, init=0x8068644 <_init>, fini=0x817daa0 <_fini>, rtld_fini=0x4000a350 <_dl_fini>, stack_end=0xbffff84c) at ../sysdeps/generic/libc-start.c:78