(Fwd) [PHP-DEV] PHP 4.0 Bug #8425: PHP crashes if I include a

hi, > Operating system: Windows NT 4.0 > PHP version: 4.0.4 > PHP Bug Type: Reproduceable crash > Bug description: PHP crashes if I include a page that uses xml > parser. my php 4.0.4 (apache 1.3.14 module, linux 2.2.14) crashes too, when parsing xml files: (gdb) run -X Starting program: /usr/local/apache/src/./httpd.php404 -X Program received signal SIGSEGV, Segmentation fault. 0x80e355f in call_user_function_ex (function_table=0x8219ec0, object_pp=0x82bbf40, function_name=0x82b7f9c, retval_ptr_ptr=0xbfffa244, param_count=3, params=0x82b8454, no_separation=1, symbol_table=0x0) at zend_execute_API.c:365 365 if (Z_TYPE_PP(object_pp) != IS_OBJECT) { (gdb) bt #0 0x80e355f in call_user_function_ex (function_table=0x8219ec0, object_pp=0x82bbf40, function_name=0x82b7f9c, retval_ptr_ptr=0xbfffa244, param_count=3, params=0x82b8454, no_separation=1, symbol_table=0x0) at zend_execute_API.c:365 #1 0x80e33d5 in call_user_function (function_table=0x8219ec0, object_pp=0x82bbf40, function_name=0x82b7f9c, retval_ptr=0x82b84d4, param_count=3, params=0xbfffa2c4) at zend_execute_API.c:325 #2 0x80d4409 in xml_call_handler (parser=0x82bbf0c, handler=0x82b7f9c, argc=3, argv=0xbfffa2c4) at xml.c:361 #3 0x80d4bd1 in _xml_startElementHandler (userData=0x82bbf0c, name=0x824a594 "BACKSLASH", attributes=0x82bc148) at xml.c:648 #4 0x80d8313 in doContent (parser=0x82bbf70, startTagLevel=0, enc=0x819ccc0, s=0x82bf6f9 "<backslash\nxmlns:backslash=\"http://slashdot.org/backslash.dtd\">\n\ n\t< story>\n\t\t<title>Debian Hurd Still Coming</title>\n\t\t<url>http://slashdot.org/article. pl?sid=00/12/05/1319242</url>\n\t\t<time>2000-12-05 "..., end=0x82c0564 "", nextPtr=0x0) at xmlparse.c:1268 #5 0x80d7b4f in contentProcessor (parser=0x82bbf70, start=0x82bf6f9 "<backslash\nxmlns:backslash=\"http://slashdot.org/backslash.dtd\">\n\ n\t<story>\n\t\t<title>Debian Hurd Still Coming</title>\n\t\t<url>http://slashdot.org/arti cle.pl?sid=00/12/05/1319242</url>\n\t\t<time>2000-12-05 "..., end=0x82c0564 "", endPtr=0x0) at xmlparse.c:957 #6 0x80d991c in prologProcessor (parser=0x82bbf70, s=0x82bf6e4 "<?xml version=\"1.0\"?><backslash\nxmlns:backslash=\"http://slashdot.org/ backslash.dtd\">\n\n\t<story>\n\t\t<title>Debian Hurd Still Coming</title>\n\t\t<url>http: //slashdot.org/article.pl?sid=00/12/05/1319242</url"..., end=0x82c0564 "", nextPtr=0x0) at xmlparse.c:2036 #7 0x80d9700 in prologInitProcessor (parser=0x82bbf70, s=0x82bf6e4 "<?xml version=\"1.0\"?><backslash\nxmlns:backslash=\"http://slashdot.org/ backslash.dtd\">\n\n\t<story>\n\t\t<title>Debian Hurd Still Coming</title>\n\t\t<url>http: //slashdot.org/article.pl?sid=00/12/05/1319242</url"..., end=0x82c0564 "", nextPtr=0x0) at xmlparse.c:1967 #8 0x80d76af in php_XML_Parse (parser=0x82bbf70, s=0x82bf6e4 "<?xml version=\"1.0\"?><backslash\nxmlns:backslash=\"http://slashdot.org/ backslash.dtd\">\n\n\t<story>\n\t\t<title>Debian Hurd Still Coming</title>\n\t\t<url>http: //slashdot.org/article.pl?sid=00/12/05/1319242</url"..., len=3712, isFinal=1) at xmlparse.c:779 #9 0x80d5e80 in php_if_xml_parse (ht=3, return_value=0x82b4fb4, this_ptr=0x0, return_value_used=1) at xml.c:1221 #10 0x81161e5 in execute (op_array=0x82a7df0) at ./zend_execute.c:1519 #11 0x81163de in execute (op_array=0x8230dec) at ./zend_execute.c:1559 #12 0x80eadb8 in zend_execute_scripts (type=8, file_count=3) at zend.c:729 #13 0x806b461 in php_execute_script (primary_file=0xbffff758) at main.c:1221 #14 0x80f7b17 in apache_php_module_main (r=0x822aa54, display_source_mode=0) at sapi_apache.c:89 #15 0x8068a66 in send_php () #16 0x8068aa0 in send_parsed_php () #17 0x8141c23 in ap_invoke_handler () #18 0x81581a9 in process_request_internal () #19 0x8158614 in ap_internal_redirect () #20 0x813145d in handle_dir () #21 0x8141c23 in ap_invoke_handler () #22 0x81581a9 in process_request_internal () #23 0x815820c in ap_process_request () #24 0x814e879 in child_main () #25 0x814ea38 in make_child () #26 0x814ebc3 in startup_children () #27 0x814f264 in standalone_main () #28 0x814fae3 in main () #29 0x40520313 in __libc_start_main (main=0x814f700 <main>, argc=2, argv=0xbffff984, init=0x8066278 <_init>, fini=0x8178a68 <_fini>, rtld_fini=0x4000ac70 <_dl_fini>, stack_end=0xbffff97c) at ../sysdeps/generic/libc-start.c:90 lg, stefan