Bug #900: Segfault in read_next_token from token_cache.c:174

From: elefler@cvdls.ucdavis.edu Operating system: Solaris 2.x PHP version: 3.0.5 PHP Bug Type: Reproduceable crash Bug description: Segfault in read_next_token from token_cache.c:174 o Apache segfaults on a very large PHP script. PHP files are parsed and output stops while running a large for-loop. Only a partial page is returned. o Did not notice problem in 3.0.2a o PHP options from httpd.conf php3_user_dir www php3_memory_limit 64000000 php3_max_execution_time 600 php3_safe_mode Off php3_include_path ./:/usr/home/httpd/php-lib... o PHP 3.0.5 compiled into Apache+Raven 1.3.3: --with-apache=../apache_1.3.3 --with-gd=../gd1.3 --with-oracle --with-mysql=/u01/app/mysql --with-ldap=/usr/local --with-zlib --with-dbase --enable-debugger o Output from gdb: Program received signal SIGSEGV, Segmentation fault. read_next_token (tcm=0x16fd34, token=0xefffc804, phplval=0xefffe5f0) at token_cache.c:174 174 return (*token)->token_type; (gdb) bt #0 read_next_token (tcm=0x16fd34, token=0xefffc804, phplval=0xefffe5f0) at token_cache.c:174 #1 0x35e94 in phplex (phplval=0xefffe5f0) at main.c:435 #2 0x6e808 in phpparse () at /usr/lib/bison.simple:387 #3 0x3784c in php3_parse (yyin=0x171e08) at main.c:1465 #4 0x37b60 in apache_php3_module_main (r=0x1ab660, fd=23, display_source_mode=0, preprocessed=0) at main.c:1845 #5 0x349b8 in send_php3 () #6 0x34a40 in send_parsed_php3 () #7 0x9f314 in ap_invoke_handler () #8 0xb998c in process_request_internal () #9 0xb9a0c in ap_process_request () #10 0xae904 in child_main () #11 0xaeb74 in make_child () #12 0xaed78 in startup_children () #13 0xaf698 in standalone_main () #14 0xb0194 in main () -- PHP Development Mailing List http://www.php.net/ To unsubscribe send an empty message to php-dev-unsubscribe@lists.php.net For help: php-dev-help@lists.php.net