Bug #9235: Core dump when execute phpinfo() function if PHP run as apache module

From: ishigaki-ml@factory.gr.jp Operating system: FreeBSD 2.2.8-RELEASE / linux-2.2.17 PHP version: 3.0.17 PHP Bug Type: Reproduceable crash Bug description: Core dump when execute phpinfo() function if PHP run as apache module <?php $aa = is_array($HTTP_POST_VARS); phpinfo(); ?> That's all. FreeBSD : exit signal Bus error (10) Linux : SEGV There is no crash if $aa = is_array($HTTP_POST_VARS); changes to $aa = is_array($HTTP_GET_VARS); Environment(FreeBSD): FreeBSD 2.2.8-RELEASE Apache 1.3.14 ./configure \ --enable-module=most --enable-module=auth_db --disable-module=auth_dbm \ --enable-shared=max PHP 3.0.18 (not 3.0.17) ./configure \ --with-apxs=(path) \ --enable-sysvsem \ --enable-sysvshm \ --with-config-file-path=(path) \ --without-gd PostgreSQL 6.4.2 Environment(Linux): Vine 2.0 based linux-2.2.17 Apache-1.3.12 ./configure --enable-module=so --enable-module=rewrite php-3.0.15-i18n-ja ./configure --with-pgsql --enable-track-vars \ --with-apxs=/usr/local/apache/bin/apxs --enable-i18n \ --enable-mbregex --enable-versioning postgresql-7.0.3 ./configure --enable-multibyte=EUC_JP rpm -qa|grep -w gd gd-1.8.3-0vl1 gd-devel-1.8.3-0vl1 gd-progs-1.8.3-0vl1 php3.ini is same as php3.ini-dist It corruped at next of following line (functions/info.c) if (_php3_hash_find(GLOBAL(active_symbol_table), "HTTP_POST_VARS", sizeof("HTTP_POST_VARS"), (void **) &data) != FAILURE) { _php3_hash_find says the value is FOUND but ... data->type says NOT IS_HASH Why?