PHP 4.0 Bug #7686: Segmentation fault in complex pages when using sessions

From: paul@rydell.com Operating system: Red Hat Linux release 6.2 PHP version: 4.0.3pl1 PHP Bug Type: *Session related Bug description: Segmentation fault in complex pages when using sessions Complex script that uses 2 include files and does many MySQL selects. Once I added in some session support and started storing some user preferences in an array I put into the session I started getting segmentation faults. Compile info: #PHP ./configure --with-mysql=/usr/local/mysql \ --with-apache=../apache_1.3.14 \ --enable-track-vars --enable-debug #Apache ./configure \ --activate-module=src/modules/php4/libphp4.a \ --enable-module=php4 \ --prefix=/usr/local/apache Backtrace: (gdb) run -X Starting program: /usr/local/apache/bin/httpd -X (no debugging symbols found)... Program received signal SIGSEGV, Segmentation fault. 0x401370b9 in chunk_free (ar_ptr=0x401cbd60, p=0x882322e0) at malloc.c:3094 3094 malloc.c: No such file or directory. (gdb) bt #0 0x401370b9 in chunk_free (ar_ptr=0x401cbd60, p=0x882322e0) at malloc.c:3094 #1 0x40136fba in __libc_free (mem=0x82322e8) at malloc.c:3023 #2 0x80cdaec in _efree () #3 0x80d80e4 in _zval_dtor () #4 0x80d3c4f in destroy_op_array () #5 0x80d3b69 in destroy_zend_function () #6 0x80dba77 in zend_hash_clean () #7 0x80dbbbf in zend_hash_apply () #8 0x80d2618 in shutdown_executor () #9 0x80d8a87 in zend_deactivate () #10 0x807b59d in php_request_shutdown () #11 0x80797ea in sapi_apache_send_headers () #12 0x81029ae in ap_run_cleanup () #13 0x81011dd in ap_clear_pool () #14 0x8101251 in ap_destroy_pool () #15 0x81011cc in ap_clear_pool () #16 0x811099f in ap_child_terminate () #17 0x8110f3c in ap_child_terminate () #18 0x8111099 in ap_child_terminate () #19 0x81116c6 in ap_child_terminate () #20 0x8111e53 in main () #21 0x400f59cb in __libc_start_main (main=0x8111b0c <main>, argc=2, argv=0xbffffb14, init=0x80606dc <_init>, fini=0x813f79c <_fini>, rtld_fini=0x4000ae60 <_dl_fini>, stack_end=0xbffffb0c) at ../sysdeps/generic/libc-start.c:92 I can provide script but it is very lengthy. Hopefully the backtrace can give some information. Thanks much. -- Edit Bug report at: http://bugs.php.net/?id=7686&edit=1