Dear Maintainer,
I tried to have a look at this segfault.
As far as I can see the issue here is a memory access after the
php heap, where this memory was allocated from, got unmapped.
Below are the backtraces for allocation [1], unmapping [2]
and the segfault [3].
Some more details in attached file.
Kind regards,
Bernhard
[1]
Breakpoint 69, 0x00005636fef8fa40 in timelib_strtotime (s=0x5636ff1ae641 "now",
len=len@entry=3, errors=errors@entry=0x7fffd2243b98, tzdb=0x5636ffcb14c0,
tz_get_wrapper=tz_get_wrapper@entry=0x5636fef86af0 <php_date_parse_tzfile_wrapper>) at
./ext/date/lib/parse_date.c:22046
22046 in.errors = timelib_malloc(sizeof(timelib_error_container));
1: x/i $pc
=> 0x5636fef8fa40 <timelib_strtotime+80>: mov %rax,0x60(%rsp)
(rr) bt
#0 0x00005636fef8fa40 in timelib_strtotime (s=0x5636ff1ae641 "now",
len=len@entry=3, errors=errors@entry=0x7fffd2243b98, tzdb=0x5636ffcb14c0,
tz_get_wrapper=tz_get_wrapper@entry=0x5636fef86af0 <php_date_parse_tzfile_wrapper>) at
./ext/date/lib/parse_date.c:22046
#1 0x00005636fef8c18c in php_date_initialize (dateobj=0x7f3a880d1a10,
time_str=0x0, time_str_len=<optimized out>, format=0x0, timezone_object=0x0,
ctor=1) at ./ext/date/php_date.c:2686
#2 0x00005636fef8c9e5 in zim_DateTime___construct (execute_data=0x7f3a8921f0c0,
return_value=<optimized out>) at ./ext/date/php_date.h:143
#3 0x00005636ff1a0b4b in ZEND_DO_FCALL_SPEC_RETVAL_UNUSED_HANDLER () at
./Zend/zend_vm_execute.h:984
#4 execute_ex (ex=0x7f3a89200040) at ./Zend/zend_vm_execute.h:55523
#5 0x00005636ff1a25e7 in zend_execute
(op_array=op_array@entry=0x7f3a880c0600, return_value=0x0,
return_value@entry=0x7f3a8921e9c0) at ./Zend/zend_vm_execute.h:60935
#6 0x00005636ff11b233 in zend_execute_scripts (type=type@entry=8,
retval=0x7f3a8921e9c0, retval@entry=0x0, file_count=file_count@entry=3) at
./Zend/zend.c:1568
#7 0x00005636ff0bb788 in php_execute_script (primary_file=<optimized out>)
at ./main/main.c:2637
#8 0x00005636ff1a4b9e in do_cli (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1000
#9 0x00005636fef80b9b in main (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1396
(rr) when
Current event: 4495
(rr) x/4xb 0x7f3a88055ca8
0x7f3a88055ca8: 0xb0 0xa1 0x0e 0x88
[2]
Breakpoint 70, munmap () at ../sysdeps/unix/syscall-template.S:78
78 ../sysdeps/unix/syscall-template.S: Datei oder Verzeichnis nicht
gefunden.
1: x/i $pc
=> 0x7f3a8b7e31d0 <munmap>: mov $0xb,%eax
(rr) bt
#0 munmap () at ../sysdeps/unix/syscall-template.S:78
#1 0x00005636ff0f26f7 in zend_mm_munmap (size=2097152, addr=<optimized
out>) at ./Zend/zend_alloc.c:777
#2 zend_mm_chunk_free (addr=<optimized out>, size=size@entry=2097152,
heap=<optimized out>) at ./Zend/zend_alloc.c:777
#3 0x00005636ff0f2b3a in zend_mm_shutdown (heap=0x7f3a89200040, full=0,
silent=<optimized out>) at ./Zend/zend_alloc.c:2301
#4 0x00005636ff0ba357 in php_request_shutdown (dummy=<optimized out>) at
./main/main.c:1951
#5 0x00005636ff1a3fda in do_cli (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1167
#6 0x00005636fef80b9b in main (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1396
(rr) when
Current event: 4620
(rr) x/4xb 0x7f3a88055ca8
0x7f3a88055ca8: 0x00 0x00 0x00 0x00
(rr) finish
Run till exit from #0 munmap () at ../sysdeps/unix/syscall-template.S:78
0x00005636ff0f26f7 in zend_mm_munmap (size=2097152, addr=<optimized out>)
at ./Zend/zend_alloc.c:777
777 zend_mm_munmap(addr, size);
1: x/i $pc
=> 0x5636ff0f26f7 <zend_mm_chunk_free+23>: test %eax,%eax
(rr) x/4xb 0x7f3a88055ca8
0x7f3a88055ca8: Cannot access memory at address 0x7f3a88055ca8
[3]
PHP Fatal error: Uncaught ErrorException: Notice: Unknown: Unexpected
characters at end of address: < (errflg=3) in Unknown:0
Stack trace:
#0 [internal function]:
Symfony\Component\ErrorHandler\ErrorHandler->handleError(8, 'Unknown:
Unexpe...', 'Unknown', 0, NULL)
#1 {main}
thrown in Unknown on line 0
Program received signal SIGSEGV, Segmentation fault.
0x00005636fefac749 in timelib_error_container_dtor (errors=0x7f3a88055ca8)
at ./ext/date/lib/timelib.c:156
156 for (i = 0; i < errors->warning_count; i++) {
1: x/i $pc
=> 0x5636fefac749 <timelib_error_container_dtor+9>: mov
0x14(%rdi),%edi
2: /x $rax = 0x0
3: /x $rsp = 0x7fffd2247350
(rr) bt
#0 0x00005636fefac749 in timelib_error_container_dtor
(errors=0x7f3a88055ca8) at ./ext/date/lib/timelib.c:156
#1 0x00005636fef82e9c in zm_shutdown_date (type=<optimized out>,
module_number=<optimized out>) at ./ext/date/php_date.c:945
#2 0x00005636ff120397 in module_destructor
(module=module@entry=0x5636ffb3ace0) at ./Zend/zend_API.c:2575
#3 0x00005636ff119e6c in module_destructor_zval (zv=<optimized out>) at
./Zend/zend.c:745
#4 0x00005636ff12ada3 in _zend_hash_del_el_ex (prev=<optimized out>, p=<optimized
out>, idx=1, ht=<optimized out>) at ./Zend/zend_hash.c:1182
#5 _zend_hash_del_el (p=0x5636ffb900f0, idx=1, ht=0x5636ff31b260
<module_registry>) at ./Zend/zend_hash.c:1205
#6 zend_hash_graceful_reverse_destroy (ht=ht@entry=0x5636ff31b260
<module_registry>) at ./Zend/zend_hash.c:1659
#7 0x00005636ff11ec8c in zend_destroy_modules () at ./Zend/zend_API.c:2013
#8 0x00005636ff11ac43 in zend_shutdown () at ./Zend/zend.c:976
#9 0x00005636ff0bb3aa in php_module_shutdown () at ./main/main.c:2496
#10 php_module_shutdown () at ./main/main.c:2470
#11 0x00005636fef80bf7 in main (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1411
(rr) when
Current event: 4714
(rr) x/4xb 0x7f3a88055ca8
0x7f3a88055ca8: Cannot access memory at address 0x7f3a88055ca8
# single-use Buster/stable amd64 qemu VM 2021-03-28
echo "set enable-bracketed-paste off" >> /etc/inputrc; bash
apt update
# to speedup testing
mv /etc/manpath.config /etc/manpath.config.renamed
apt install libeatmydata1
export LD_PRELOAD=/usr/lib/x86_64-linux-gnu/libeatmydata.so
apt dist-upgrade
apt install systemd-coredump gdb rr valgrind php7.3-imap php php-fdomdocument
php-pear \
php7.3-cli-dbgsym
apt build-dep php7.3-cli
mkdir /home/benutzer/source/php7.3-cli/orig -p
cd /home/benutzer/source/php7.3-cli/orig
apt source php7.3-cli
cd
wget
"https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=984920;filename=dummy-application.tar.gz;msg=5";
-O dummy-application.tar.gz
tar -zxf dummy-application.tar.gz
benutzer@debian:~/dummy$ bin/console about
Array
(
[0] => stdClass Object
(
[mailbox] => invalid
[host] =>
)
[1] => stdClass Object
(
[mailbox] => UNEXPECTED_DATA_AFTER_ADDRESS
[host] => .SYNTAX-ERROR.
)
)
-------------------- -------------------------------------------
Symfony
-------------------- -------------------------------------------
Version 5.2.3
Long-Term Support No
End of maintenance 07/2021 (in +125 days)
End of life 07/2021 (in +125 days)
-------------------- -------------------------------------------
Kernel
-------------------- -------------------------------------------
Type App\Kernel
Environment dev
Debug true
Charset UTF-8
Cache directory ./var/cache/dev (339 KiB)
Build directory ./var/cache/dev (339 KiB)
Log directory ./var/log (0 B)
-------------------- -------------------------------------------
PHP
-------------------- -------------------------------------------
Version 7.3.27-1~deb10u1
Architecture 64 bits
Intl locale n/a
Timezone Europe/Berlin (2021-03-28T11:54:38+02:00)
OPcache true
APCu false
Xdebug false
-------------------- -------------------------------------------
PHP Fatal error: Uncaught ErrorException: Notice: Unknown: Unexpected
characters at end of address: < (errflg=3) in Unknown:0
Stack trace:
#0 [internal function]:
Symfony\Component\ErrorHandler\ErrorHandler->handleError(8, 'Unknown:
Unexpe...', 'Unknown', 0, NULL)
#1 {main}
thrown in Unknown on line 0
Speicherzugriffsfehler (Speicherabzug geschrieben)
root@debian:~# coredumpctl list
TIME PID UID GID SIG COREFILE EXE
Sun 2021-03-28 11:54:38 CEST 8738 1000 1000 11 present /usr/bin/php7.3
root@debian:~# coredumpctl gdb 8738
PID: 8738 (php)
UID: 1000 (benutzer)
GID: 1000 (benutzer)
Signal: 11 (SEGV)
Timestamp: Sun 2021-03-28 11:54:38 CEST (1min 1s ago)
Command Line: php bin/console about
Executable: /usr/bin/php7.3
Control Group: /user.slice/user-1000.slice/session-3.scope
Unit: session-3.scope
Slice: user-1000.slice
Session: 3
Owner UID: 1000 (benutzer)
Boot ID: eedd0dd38d554e81b54c0b4f62188092
Machine ID: 33f18f39d2a9438eb75b0ed52848afcd
Hostname: debian
Storage:
/var/lib/systemd/coredump/core.php.1000.eedd0dd38d554e81b54c0b4f62188092.8738.1616925278000000.lz4
Message: Process 8738 (php) of user 1000 dumped core.
Stack trace of thread 8738:
#0 0x000055a7a6c83749 n/a (php7.3)
#1 0x000055a7a6c59e9c n/a (php7.3)
#2 0x000055a7a6df7397 n/a (php7.3)
#3 0x000055a7a6df0e6c n/a (php7.3)
#4 0x000055a7a6e01da3 zend_hash_graceful_reverse_destroy
(php7.3)
#5 0x000055a7a6df1c43 n/a (php7.3)
#6 0x000055a7a6d923aa php_module_shutdown (php7.3)
#7 0x000055a7a6c57bf7 n/a (php7.3)
#8 0x00007fee6627b09b __libc_start_main (libc.so.6)
#9 0x000055a7a6c57cfa _start (php7.3)
...
warning: core file may not match specified executable file.
[New LWP 8738]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `php bin/console about'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 0x000055a7a6c83749 in ?? ()
(gdb) bt
#0 0x000055a7a6c83749 in ?? ()
#1 0x000055a7a6c59e9c in ?? ()
#2 0x000055a7a6df7397 in ?? ()
#3 0x000055a7a6df0e6c in ?? ()
#4 0x000055a7a6e01da3 in zend_hash_graceful_reverse_destroy ()
#5 0x000055a7a6df1c43 in ?? ()
#6 0x000055a7a6d923aa in php_module_shutdown ()
#7 0x000055a7a6c57bf7 in ?? ()
#8 0x00007fee6627b09b in __libc_start_main (main=0x55a7a6c57750, argc=3,
argv=0x7ffc20bf1248, init=<optimized out>, fini=<optimized out>,
rtld_fini=<optimized out>, stack_end=0x7ffc20bf1238) at ../csu/libc-start.c:308
#9 0x000055a7a6c57cfa in _start ()
Core was generated by `php bin/console about'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 0x000055a7a6c83749 in timelib_error_container_dtor (errors=0x7fee62a55ca8)
at ./ext/date/lib/timelib.c:156
156 ./ext/date/lib/timelib.c: Datei oder Verzeichnis nicht gefunden.
(gdb) bt
#0 0x000055a7a6c83749 in timelib_error_container_dtor (errors=0x7fee62a55ca8)
at ./ext/date/lib/timelib.c:156
#1 0x000055a7a6c59e9c in zm_shutdown_date (type=<optimized out>,
module_number=<optimized out>) at ./ext/date/php_date.c:945
#2 0x000055a7a6df7397 in module_destructor
(module=module@entry=0x55a7a7925570) at ./Zend/zend_API.c:2575
#3 0x000055a7a6df0e6c in module_destructor_zval (zv=<optimized out>) at
./Zend/zend.c:745
#4 0x000055a7a6e01da3 in _zend_hash_del_el_ex (prev=<optimized out>,
p=<optimized out>, idx=1, ht=<optimized out>) at ./Zend/zend_hash.c:1182
#5 _zend_hash_del_el (p=0x55a7a797a970, idx=1, ht=0x55a7a6ff2260
<module_registry>) at ./Zend/zend_hash.c:1205
#6 zend_hash_graceful_reverse_destroy (ht=ht@entry=0x55a7a6ff2260
<module_registry>) at ./Zend/zend_hash.c:1659
#7 0x000055a7a6df5c8c in zend_destroy_modules () at ./Zend/zend_API.c:2013
#8 0x000055a7a6df1c43 in zend_shutdown () at ./Zend/zend.c:976
#9 0x000055a7a6d923aa in php_module_shutdown () at ./main/main.c:2496
#10 php_module_shutdown () at ./main/main.c:2470
#11 0x000055a7a6c57bf7 in main (argc=3, argv=0x55a7a78f78a0) at
./sapi/cli/php_cli.c:1411
https://sources.debian.org/src/php7.3/7.3.27-1~deb10u1/ext/date/lib/timelib.c/#L156
156 for (i = 0; i < errors->warning_count; i++) {
(gdb) info local
i = 0
(gdb) print errors
$1 = (timelib_error_container *) 0x7fee62a55ca8
(gdb) print *errors
Cannot access memory at address 0x7fee62a55ca8
(gdb) display/i $pc
1: x/i $pc
=> 0x55a7a6c83749 <timelib_error_container_dtor+9>: mov 0x14(%rdi),%edi
(gdb) print/x $rdi
$2 = 0x7fee62a55ca8
(gdb) up
#1 0x000055a7a6c59e9c in zm_shutdown_date (type=<optimized out>,
module_number=<optimized out>) at ./ext/date/php_date.c:945
945 ./ext/date/php_date.c: Datei oder Verzeichnis nicht gefunden.
(gdb) info local
No locals.
(gdb) print last_errors
No symbol "last_errors" in current context.
https://sources.debian.org/src/php7.3/7.3.27-1~deb10u1/ext/date/php_date.c/#L945
945 timelib_error_container_dtor(DATEG(last_errors));
echo 1 > /proc/sys/kernel/perf_event_paranoid
benutzer@debian:~/dummy$ rr record bin/console about
rr: Saving execution to trace directory
`/home/benutzer/.local/share/rr/console-1'.
Array
...
#1 {main}
thrown in Unknown on line 0
Speicherzugriffsfehler
benutzer@debian:~/dummy$ rr replay /home/benutzer/.local/share/rr/console-1
...
0x00007f5341294090 in _start () from /lib64/ld-linux-x86-64.so.2
(rr) cont
Continuing.
Program stopped.
0x0000000070000002 in ?? ()
(rr) kill
Kill the program being debugged? (y or n) y
[Inferior 1 (process 11735) killed]
(rr) q
benutzer@debian:~/dummy$ rr replay -g 300
/home/benutzer/.local/share/rr/console-1
...
---> Reached target process 11735 at event 301.
--------------------------------------------------
Reading symbols from /lib64/ld-linux-x86-64.so.2...Reading symbols from
/usr/lib/debug/.build-id/f2/5dfd7b95be4ba386fd71080accae8c0732b711.debug...done.
done.
Reading symbols from /usr/bin/../lib/rr/librrpreload.so...done.
0x00007f3a8c2e06f3 in __mmap64 (offset=28672, fd=3, flags=2066, prot=3,
len=8192, addr=0x7f3a8c288000) at ../sysdeps/unix/sysv/linux/mmap64.c:52
52 ../sysdeps/unix/sysv/linux/mmap64.c: Datei oder Verzeichnis nicht
gefunden.
(rr) set width 0
(rr) set pagination off
(rr) directory /home/benutzer/source/php7.3-cli/orig/php7.3-7.3.27
Source directories searched:
/home/benutzer/source/php7.3-cli/orig/php7.3-7.3.27:$cdir:$cwd
(rr) cont
Continuing.
Array
...
PHP Fatal error: Uncaught ErrorException: Notice: Unknown: Unexpected
characters at end of address: < (errflg=3) in Unknown:0
Stack trace:
#0 [internal function]:
Symfony\Component\ErrorHandler\ErrorHandler->handleError(8, 'Unknown:
Unexpe...', 'Unknown', 0, NULL)
#1 {main}
thrown in Unknown on line 0
Program received signal SIGSEGV, Segmentation fault.
0x00005636fefac749 in timelib_error_container_dtor (errors=0x7f3a88055ca8) at
./ext/date/lib/timelib.c:156
156 for (i = 0; i < errors->warning_count; i++) {
1: x/i $pc
=> 0x5636fefac749 <timelib_error_container_dtor+9>: mov 0x14(%rdi),%edi
(rr) bt
#0 0x00005636fefac749 in timelib_error_container_dtor (errors=0x7f3a88055ca8)
at ./ext/date/lib/timelib.c:156
#1 0x00005636fef82e9c in zm_shutdown_date (type=<optimized out>,
module_number=<optimized out>) at ./ext/date/php_date.c:945
#2 0x00005636ff120397 in module_destructor
(module=module@entry=0x5636ffb3ace0) at ./Zend/zend_API.c:2575
#3 0x00005636ff119e6c in module_destructor_zval (zv=<optimized out>) at
./Zend/zend.c:745
#4 0x00005636ff12ada3 in _zend_hash_del_el_ex (prev=<optimized out>,
p=<optimized out>, idx=1, ht=<optimized out>) at ./Zend/zend_hash.c:1182
#5 _zend_hash_del_el (p=0x5636ffb900f0, idx=1, ht=0x5636ff31b260
<module_registry>) at ./Zend/zend_hash.c:1205
#6 zend_hash_graceful_reverse_destroy (ht=ht@entry=0x5636ff31b260
<module_registry>) at ./Zend/zend_hash.c:1659
#7 0x00005636ff11ec8c in zend_destroy_modules () at ./Zend/zend_API.c:2013
#8 0x00005636ff11ac43 in zend_shutdown () at ./Zend/zend.c:976
#9 0x00005636ff0bb3aa in php_module_shutdown () at ./main/main.c:2496
#10 php_module_shutdown () at ./main/main.c:2470
#11 0x00005636fef80bf7 in main (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1411
(rr) when
Current event: 4714
(rr) print errors
$1 = (timelib_error_container *) 0x7f3a88055ca8
(rr) print *errors
Cannot access memory at address 0x7f3a88055ca8
(rr) list
151
152 void timelib_error_container_dtor(timelib_error_container *errors)
153 {
154 int i;
155
156 for (i = 0; i < errors->warning_count; i++) {
157 timelib_free(errors->warning_messages[i].message);
158 }
159 timelib_free(errors->warning_messages);
160 for (i = 0; i < errors->error_count; i++) {
(rr) display/x $rdi
2: /x $rdi = 0x7f3a88055ca8
(rr) reverse-stepi
Program received signal SIGSEGV, Segmentation fault.
0x00005636fefac749 in timelib_error_container_dtor (errors=0x7f3a88055ca8) at
./ext/date/lib/timelib.c:156
156 for (i = 0; i < errors->warning_count; i++) {
1: x/i $pc
=> 0x5636fefac749 <timelib_error_container_dtor+9>: mov 0x14(%rdi),%edi
2: /x $rdi = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac745 156 for (i = 0; i < errors->warning_count;
i++) {
1: x/i $pc
=> 0x5636fefac745 <timelib_error_container_dtor+5>: sub $0x8,%rsp
2: /x $rdi = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac744 156 for (i = 0; i < errors->warning_count;
i++) {
1: x/i $pc
=> 0x5636fefac744 <timelib_error_container_dtor+4>: push %rbx
2: /x $rdi = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac741 156 for (i = 0; i < errors->warning_count;
i++) {
1: x/i $pc
=> 0x5636fefac741 <timelib_error_container_dtor+1>: mov %rdi,%rbp
2: /x $rdi = 0x7f3a88055ca8
(rr) reverse-stepi
156 for (i = 0; i < errors->warning_count; i++) {
1: x/i $pc
=> 0x5636fefac740 <timelib_error_container_dtor>: push %rbp
2: /x $rdi = 0x7f3a88055ca8
(rr) reverse-stepi
zm_shutdown_date (type=<optimized out>, module_number=<optimized out>) at
./ext/date/php_date.c:945
945 timelib_error_container_dtor(DATEG(last_errors));
1: x/i $pc
=> 0x5636fef82e97 <zm_shutdown_date+23>: callq 0x5636fefac740
<timelib_error_container_dtor>
2: /x $rdi = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fef82e95 944 if (DATEG(last_errors)) {
1: x/i $pc
=> 0x5636fef82e95 <zm_shutdown_date+21>: je 0x5636fef82e9c
<zm_shutdown_date+28>
2: /x $rdi = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fef82e92 944 if (DATEG(last_errors)) {
1: x/i $pc
=> 0x5636fef82e92 <zm_shutdown_date+18>: test %rdi,%rdi
2: /x $rdi = 0x7f3a88055ca8
(rr) reverse-stepi
944 if (DATEG(last_errors)) {
1: x/i $pc
=> 0x5636fef82e8b <zm_shutdown_date+11>: mov 0x3944c6(%rip),%rdi
# 0x5636ff317358 <date_globals+24>
2: /x $rdi = 0x5636ffc1c130
(rr) undisp 2
(rr) print date_globals
$3 = {default_timezone = 0x5636ffb16f18 "", timezone = 0x0, tzcache =
0x7f3a880d1460, last_errors = 0x7f3a88055ca8, timezone_valid = 0}
(rr) print date_globals.last_errors
$4 = (timelib_error_container *) 0x7f3a88055ca8
(rr) print &(date_globals.last_errors)
$5 = (timelib_error_container **) 0x5636ff317358 <date_globals+24>
(rr) watch *0x5636ff317358
Hardware watchpoint 1: *0x5636ff317358
(rr) reverse-cont
Continuing.
Hardware watchpoint 1: *0x5636ff317358
Old value = -2012914520
New value = -2012307096
update_errors_warnings (last_errors=0x7f3a88055ca8) at
./ext/date/php_date.c:2647
2647 DATEG(last_errors) = last_errors;
1: x/i $pc
=> 0x5636fef8bfe8 <php_date_initialize+168>: mov %r14,0x38b369(%rip)
# 0x5636ff317358 <date_globals+24>
(rr) bt
#0 update_errors_warnings (last_errors=0x7f3a88055ca8) at
./ext/date/php_date.c:2647
#1 php_date_initialize (dateobj=0x7f3a880d1a10, time_str=0x0,
time_str_len=<optimized out>, format=0x0, timezone_object=0x0, ctor=1) at
./ext/date/php_date.c:2690
#2 0x00005636fef8c9e5 in zim_DateTime___construct
(execute_data=0x7f3a8921f0c0, return_value=<optimized out>) at
./ext/date/php_date.h:143
#3 0x00005636ff1a0b4b in ZEND_DO_FCALL_SPEC_RETVAL_UNUSED_HANDLER () at
./Zend/zend_vm_execute.h:984
#4 execute_ex (ex=0x7f3a880ea168) at ./Zend/zend_vm_execute.h:55523
#5 0x00005636ff1a25e7 in zend_execute (op_array=op_array@entry=0x7f3a880c0600,
return_value=0x0, return_value@entry=0x7f3a8921e9c0) at
./Zend/zend_vm_execute.h:60935
#6 0x00005636ff11b233 in zend_execute_scripts (type=type@entry=8,
retval=0x7f3a8921e9c0, retval@entry=0x0, file_count=file_count@entry=3) at
./Zend/zend.c:1568
#7 0x00005636ff0bb788 in php_execute_script (primary_file=<optimized out>) at
./main/main.c:2637
#8 0x00005636ff1a4b9e in do_cli (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1000
#9 0x00005636fef80b9b in main (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1396
(rr) dele 1
(rr) display/x $r14
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
2645 DATEG(last_errors) = NULL;
1: x/i $pc
=> 0x5636fef8bfe3 <php_date_initialize+163>: mov 0x8(%rsp),%rax
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f6832 in _efree (ptr=0x7f3a880ea168) at ./Zend/zend_alloc.c:1313
1313 heap->free_slot[bin_num] = p;
1: x/i $pc
=> 0x5636ff0f6832 <_efree+98>: retq
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f682e 1313 heap->free_slot[bin_num] = p;
1: x/i $pc
=> 0x5636ff0f682e <_efree+94>: add $0x8,%rsp
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
zend_mm_free_small (bin_num=<optimized out>, ptr=0x7f3a880ea168,
heap=<optimized out>) at ./Zend/zend_alloc.c:1313
1313 heap->free_slot[bin_num] = p;
1: x/i $pc
=> 0x5636ff0f682a <_efree+90>: mov %rdi,0x20(%rax)
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f6827 1312 p->next_free_slot =
heap->free_slot[bin_num];
1: x/i $pc
=> 0x5636ff0f6827 <_efree+87>: mov %rdx,(%rdi)
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f6823 1312 p->next_free_slot =
heap->free_slot[bin_num];
1: x/i $pc
=> 0x5636ff0f6823 <_efree+83>: mov 0x20(%rax),%rdx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
1312 p->next_free_slot = heap->free_slot[bin_num];
1: x/i $pc
=> 0x5636ff0f681f <_efree+79>: lea (%rax,%rcx,8),%rax
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f681b 1404
zend_mm_free_small(heap, ptr, ZEND_MM_SRUN_BIN_NUM(info));
1: x/i $pc
=> 0x5636ff0f681b <_efree+75>: sub %rdx,0x10(%rax)
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f6818 1404
zend_mm_free_small(heap, ptr, ZEND_MM_SRUN_BIN_NUM(info));
1: x/i $pc
=> 0x5636ff0f6818 <_efree+72>: mov (%rdx,%rcx,4),%edx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f6811 1404
zend_mm_free_small(heap, ptr, ZEND_MM_SRUN_BIN_NUM(info));
1: x/i $pc
=> 0x5636ff0f6811 <_efree+65>: lea 0x1056a8(%rip),%rdx #
0x5636ff1fbec0 <bin_data_size>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
1404 zend_mm_free_small(heap, ptr,
ZEND_MM_SRUN_BIN_NUM(info));
1: x/i $pc
=> 0x5636ff0f680e <_efree+62>: and $0x1f,%ecx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f680c in zend_mm_free_heap (ptr=0x7f3a880ea168,
heap=0x7f3a89200040) at ./Zend/zend_alloc.c:1403
1403 if (EXPECTED(info & ZEND_MM_IS_SRUN)) {
1: x/i $pc
=> 0x5636ff0f680c <_efree+60>: jns 0x5636ff0f6858 <_efree+136>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
1403 if (EXPECTED(info & ZEND_MM_IS_SRUN)) {
1: x/i $pc
=> 0x5636ff0f680a <_efree+58>: test %ecx,%ecx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f6804 1402 ZEND_MM_CHECK(chunk->heap ==
heap, "zend_mm_heap corrupted");
1: x/i $pc
=> 0x5636ff0f6804 <_efree+52>: jne 0x5636fef64b48 <_efree+4293321592>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
1402 ZEND_MM_CHECK(chunk->heap == heap, "zend_mm_heap
corrupted");
1: x/i $pc
=> 0x5636ff0f6801 <_efree+49>: cmp (%rsi),%rax
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
1400 zend_mm_page_info info = chunk->map[page_num];
1: x/i $pc
=> 0x5636ff0f67fa <_efree+42>: mov 0x200(%rsi,%rdx,4),%ecx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67f3 1398 zend_mm_chunk *chunk =
(zend_mm_chunk*)ZEND_MM_ALIGNED_BASE(ptr, ZEND_MM_CHUNK_SIZE);
1: x/i $pc
=> 0x5636ff0f67f3 <_efree+35>: and $0xffffffffffe00000,%rsi
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67ef in _efree (ptr=0x7f3a880ea168) at ./Zend/zend_alloc.c:1398
1398 zend_mm_chunk *chunk =
(zend_mm_chunk*)ZEND_MM_ALIGNED_BASE(ptr, ZEND_MM_CHUNK_SIZE);
1: x/i $pc
=> 0x5636ff0f67ef <_efree+31>: sub $0x8,%rsp
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67eb in zend_mm_free_heap (ptr=0x7f3a880ea168,
heap=0x7f3a89200040) at ./Zend/zend_alloc.c:1398
1398 zend_mm_chunk *chunk =
(zend_mm_chunk*)ZEND_MM_ALIGNED_BASE(ptr, ZEND_MM_CHUNK_SIZE);
1: x/i $pc
=> 0x5636ff0f67eb <_efree+27>: shr $0xc,%rdx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
1398 zend_mm_chunk *chunk =
(zend_mm_chunk*)ZEND_MM_ALIGNED_BASE(ptr, ZEND_MM_CHUNK_SIZE);
1: x/i $pc
=> 0x5636ff0f67e8 <_efree+24>: mov %rdi,%rsi
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67e6 2521 zend_mm_free_heap(AG(mm_heap), ptr
ZEND_FILE_LINE_RELAY_CC ZEND_FILE_LINE_ORIG_RELAY_CC);
1: x/i $pc
=> 0x5636ff0f67e6 <_efree+22>: je 0x5636ff0f6840 <_efree+112>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67e0 2521 zend_mm_free_heap(AG(mm_heap), ptr
ZEND_FILE_LINE_RELAY_CC ZEND_FILE_LINE_ORIG_RELAY_CC);
1: x/i $pc
=> 0x5636ff0f67e0 <_efree+16>: and $0x1fffff,%edx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
2521 zend_mm_free_heap(AG(mm_heap), ptr ZEND_FILE_LINE_RELAY_CC
ZEND_FILE_LINE_ORIG_RELAY_CC);
1: x/i $pc
=> 0x5636ff0f67dd <_efree+13>: mov %rdi,%rdx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67db in _efree (ptr=0x7f3a880ea168) at ./Zend/zend_alloc.c:2512
2512 if (UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67db <_efree+11>: jne 0x5636ff0f6838 <_efree+104>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67d9 2512 if
(UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67d9 <_efree+9>: test %edx,%edx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67d7 2512 if
(UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67d7 <_efree+7>: mov (%rax),%edx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
2512 if (UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67d0 <_efree>: mov 0x21f449(%rip),%rax #
0x5636ff315c20 <alloc_globals>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac7c0 in timelib_error_container_dtor (errors=0x7f3a880ea168) at
./ext/date/lib/timelib.c:164
164 timelib_free(errors);
1: x/i $pc
=> 0x5636fefac7c0 <timelib_error_container_dtor+128>: jmpq 0x5636ff0f67d0
<_efree>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac7bf 164 timelib_free(errors);
1: x/i $pc
=> 0x5636fefac7bf <timelib_error_container_dtor+127>: pop %rbp
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac7be 164 timelib_free(errors);
1: x/i $pc
=> 0x5636fefac7be <timelib_error_container_dtor+126>: pop %rbx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac7bb 164 timelib_free(errors);
1: x/i $pc
=> 0x5636fefac7bb <timelib_error_container_dtor+123>: mov %rbp,%rdi
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
164 timelib_free(errors);
1: x/i $pc
=> 0x5636fefac7b7 <timelib_error_container_dtor+119>: add $0x8,%rsp
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f6850 in zend_mm_free_heap (ptr=0x0, heap=0x7f3a89200040) at
./Zend/zend_alloc.c:1395
1395 zend_mm_free_huge(heap, ptr
ZEND_FILE_LINE_RELAY_CC ZEND_FILE_LINE_ORIG_RELAY_CC);
1: x/i $pc
=> 0x5636ff0f6850 <_efree+128>: retq
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f6843 1394 if (ptr != NULL) {
1: x/i $pc
=> 0x5636ff0f6843 <_efree+115>: je 0x5636ff0f6850 <_efree+128>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
1394 if (ptr != NULL) {
1: x/i $pc
=> 0x5636ff0f6840 <_efree+112>: test %rdi,%rdi
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67e6 2521 zend_mm_free_heap(AG(mm_heap), ptr
ZEND_FILE_LINE_RELAY_CC ZEND_FILE_LINE_ORIG_RELAY_CC);
1: x/i $pc
=> 0x5636ff0f67e6 <_efree+22>: je 0x5636ff0f6840 <_efree+112>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67e0 2521 zend_mm_free_heap(AG(mm_heap), ptr
ZEND_FILE_LINE_RELAY_CC ZEND_FILE_LINE_ORIG_RELAY_CC);
1: x/i $pc
=> 0x5636ff0f67e0 <_efree+16>: and $0x1fffff,%edx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
2521 zend_mm_free_heap(AG(mm_heap), ptr ZEND_FILE_LINE_RELAY_CC
ZEND_FILE_LINE_ORIG_RELAY_CC);
1: x/i $pc
=> 0x5636ff0f67dd <_efree+13>: mov %rdi,%rdx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67db in _efree (ptr=0x0) at ./Zend/zend_alloc.c:2512
2512 if (UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67db <_efree+11>: jne 0x5636ff0f6838 <_efree+104>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67d9 2512 if
(UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67d9 <_efree+9>: test %edx,%edx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67d7 2512 if
(UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67d7 <_efree+7>: mov (%rax),%edx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
2512 if (UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67d0 <_efree>: mov 0x21f449(%rip),%rax #
0x5636ff315c20 <alloc_globals>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac7b2 in timelib_error_container_dtor (errors=0x7f3a880ea168) at
./ext/date/lib/timelib.c:163
163 timelib_free(errors->error_messages);
1: x/i $pc
=> 0x5636fefac7b2 <timelib_error_container_dtor+114>: callq 0x5636ff0f67d0
<_efree>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
163 timelib_free(errors->error_messages);
1: x/i $pc
=> 0x5636fefac7ae <timelib_error_container_dtor+110>: mov 0x0(%rbp),%rdi
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac784 160 for (i = 0; i < errors->error_count;
i++) {
1: x/i $pc
=> 0x5636fefac784 <timelib_error_container_dtor+68>: jle 0x5636fefac7ae
<timelib_error_container_dtor+110>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac782 160 for (i = 0; i < errors->error_count;
i++) {
1: x/i $pc
=> 0x5636fefac782 <timelib_error_container_dtor+66>: test %ecx,%ecx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
160 for (i = 0; i < errors->error_count; i++) {
1: x/i $pc
=> 0x5636fefac77f <timelib_error_container_dtor+63>: mov 0x10(%rbp),%ecx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f6850 in zend_mm_free_heap (ptr=0x0, heap=0x7f3a89200040) at
./Zend/zend_alloc.c:1395
1395 zend_mm_free_huge(heap, ptr
ZEND_FILE_LINE_RELAY_CC ZEND_FILE_LINE_ORIG_RELAY_CC);
1: x/i $pc
=> 0x5636ff0f6850 <_efree+128>: retq
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f6843 1394 if (ptr != NULL) {
1: x/i $pc
=> 0x5636ff0f6843 <_efree+115>: je 0x5636ff0f6850 <_efree+128>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
1394 if (ptr != NULL) {
1: x/i $pc
=> 0x5636ff0f6840 <_efree+112>: test %rdi,%rdi
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67e6 2521 zend_mm_free_heap(AG(mm_heap), ptr
ZEND_FILE_LINE_RELAY_CC ZEND_FILE_LINE_ORIG_RELAY_CC);
1: x/i $pc
=> 0x5636ff0f67e6 <_efree+22>: je 0x5636ff0f6840 <_efree+112>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67e0 2521 zend_mm_free_heap(AG(mm_heap), ptr
ZEND_FILE_LINE_RELAY_CC ZEND_FILE_LINE_ORIG_RELAY_CC);
1: x/i $pc
=> 0x5636ff0f67e0 <_efree+16>: and $0x1fffff,%edx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
2521 zend_mm_free_heap(AG(mm_heap), ptr ZEND_FILE_LINE_RELAY_CC
ZEND_FILE_LINE_ORIG_RELAY_CC);
1: x/i $pc
=> 0x5636ff0f67dd <_efree+13>: mov %rdi,%rdx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67db in _efree (ptr=0x0) at ./Zend/zend_alloc.c:2512
2512 if (UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67db <_efree+11>: jne 0x5636ff0f6838 <_efree+104>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67d9 2512 if
(UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67d9 <_efree+9>: test %edx,%edx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636ff0f67d7 2512 if
(UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67d7 <_efree+7>: mov (%rax),%edx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
2512 if (UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67d0 <_efree>: mov 0x21f449(%rip),%rax #
0x5636ff315c20 <alloc_globals>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac77a in timelib_error_container_dtor (errors=0x7f3a880ea168) at
./ext/date/lib/timelib.c:159
159 timelib_free(errors->warning_messages);
1: x/i $pc
=> 0x5636fefac77a <timelib_error_container_dtor+58>: callq 0x5636ff0f67d0
<_efree>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
159 timelib_free(errors->warning_messages);
1: x/i $pc
=> 0x5636fefac776 <timelib_error_container_dtor+54>: mov 0x8(%rbp),%rdi
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac74e 156 for (i = 0; i < errors->warning_count;
i++) {
1: x/i $pc
=> 0x5636fefac74e <timelib_error_container_dtor+14>: jle 0x5636fefac776
<timelib_error_container_dtor+54>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac74c 156 for (i = 0; i < errors->warning_count;
i++) {
1: x/i $pc
=> 0x5636fefac74c <timelib_error_container_dtor+12>: test %edi,%edi
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac749 156 for (i = 0; i < errors->warning_count;
i++) {
1: x/i $pc
=> 0x5636fefac749 <timelib_error_container_dtor+9>: mov 0x14(%rdi),%edi
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac745 156 for (i = 0; i < errors->warning_count;
i++) {
1: x/i $pc
=> 0x5636fefac745 <timelib_error_container_dtor+5>: sub $0x8,%rsp
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac744 156 for (i = 0; i < errors->warning_count;
i++) {
1: x/i $pc
=> 0x5636fefac744 <timelib_error_container_dtor+4>: push %rbx
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fefac741 156 for (i = 0; i < errors->warning_count;
i++) {
1: x/i $pc
=> 0x5636fefac741 <timelib_error_container_dtor+1>: mov %rdi,%rbp
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
156 for (i = 0; i < errors->warning_count; i++) {
1: x/i $pc
=> 0x5636fefac740 <timelib_error_container_dtor>: push %rbp
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
update_errors_warnings (last_errors=0x7f3a88055ca8) at
./ext/date/php_date.c:2644
2644 timelib_error_container_dtor(DATEG(last_errors));
1: x/i $pc
=> 0x5636fef8bfde <php_date_initialize+158>: callq 0x5636fefac740
<timelib_error_container_dtor>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fef8bfdc 2643 if (DATEG(last_errors)) {
1: x/i $pc
=> 0x5636fef8bfdc <php_date_initialize+156>: je 0x5636fef8bfe8
<php_date_initialize+168>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fef8bfd9 2643 if (DATEG(last_errors)) {
1: x/i $pc
=> 0x5636fef8bfd9 <php_date_initialize+153>: test %rdi,%rdi
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fef8bfd6 2643 if (DATEG(last_errors)) {
1: x/i $pc
=> 0x5636fef8bfd6 <php_date_initialize+150>: mov %r14,%rax
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
2643 if (DATEG(last_errors)) {
1: x/i $pc
=> 0x5636fef8bfcf <php_date_initialize+143>: mov 0x38b382(%rip),%rdi
# 0x5636ff317358 <date_globals+24>
4: /x $r14 = 0x7f3a88055ca8
(rr) reverse-stepi
php_date_initialize (dateobj=0x7f3a880d1a10, time_str=0x0,
time_str_len=<optimized out>, format=0x0, timezone_object=0x0, ctor=1) at
./ext/date/php_date.c:2690
2690 update_errors_warnings(err);
1: x/i $pc
=> 0x5636fef8bfca <php_date_initialize+138>: mov 0x8(%rsp),%r14
4: /x $r14 = 0x3
(rr) undisp 4
(rr) print/x $rsp
$6 = 0x7fffd2243b90
(rr) x/1xg $rsp + 0x8
0x7fffd2243b98: 0x00007f3a88055ca8
(rr) print err
$7 = (timelib_error_container *) 0x7f3a88055ca8
(rr) watch *0x7fffd2243b98
Hardware watchpoint 2: *0x7fffd2243b98
(rr) reverse-cont
Continuing.
Hardware watchpoint 2: *0x7fffd2243b98
Old value = -2012914520
New value = 0
0x00005636fef8fc5f in timelib_strtotime (s=<optimized out>, len=len@entry=3,
errors=errors@entry=0x7fffd2243b98, tzdb=<optimized out>,
tz_get_wrapper=tz_get_wrapper@entry=0x5636fef86af0
<php_date_parse_tzfile_wrapper>) at ./ext/date/lib/parse_date.c:22112
22112 *errors = in.errors;
1: x/i $pc
=> 0x5636fef8fc5f <timelib_strtotime+623>: mov %rax,(%rdi)
(rr) dele 2
(rr) print/x $rax
$8 = 0x7f3a88055ca8
(rr) print/x $rdi
$9 = 0x7fffd2243b98
(rr) display/x $rax
5: /x $rax = 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fef8fc5b 22112 *errors = in.errors;
1: x/i $pc
=> 0x5636fef8fc5b <timelib_strtotime+619>: mov (%rsp),%rdi
5: /x $rax = 0x7f3a88055ca8
(rr) reverse-stepi
22112 *errors = in.errors;
1: x/i $pc
=> 0x5636fef8fc56 <timelib_strtotime+614>: mov 0x60(%rsp),%rax
5: /x $rax = 0x7f3a89200060
(rr) undisp 5
(rr) print/x $rsp
$10 = 0x7fffd2243ad0
(rr) x/1xg $rsp + 0x60
0x7fffd2243b30: 0x00007f3a88055ca8
(rr) watch *0x7fffd2243b30
Hardware watchpoint 3: *0x7fffd2243b30
(rr) reverse-cont
Continuing.
Hardware watchpoint 3: *0x7fffd2243b30
Old value = -2012914520
New value = 0
0x00005636fef8fa40 in timelib_strtotime (s=0x5636ff1ae641 "now",
len=len@entry=3, errors=errors@entry=0x7fffd2243b98, tzdb=0x5636ffcb14c0,
tz_get_wrapper=tz_get_wrapper@entry=0x5636fef86af0
<php_date_parse_tzfile_wrapper>) at ./ext/date/lib/parse_date.c:22046
22046 in.errors = timelib_malloc(sizeof(timelib_error_container));
1: x/i $pc
=> 0x5636fef8fa40 <timelib_strtotime+80>: mov %rax,0x60(%rsp)
(rr) bt
#0 0x00005636fef8fa40 in timelib_strtotime (s=0x5636ff1ae641 "now",
len=len@entry=3, errors=errors@entry=0x7fffd2243b98, tzdb=0x5636ffcb14c0,
tz_get_wrapper=tz_get_wrapper@entry=0x5636fef86af0
<php_date_parse_tzfile_wrapper>) at ./ext/date/lib/parse_date.c:22046
#1 0x00005636fef8c18c in php_date_initialize (dateobj=0x7f3a880d1a10,
time_str=0x0, time_str_len=<optimized out>, format=0x0, timezone_object=0x0,
ctor=1) at ./ext/date/php_date.c:2686
#2 0x00005636fef8c9e5 in zim_DateTime___construct
(execute_data=0x7f3a8921f0c0, return_value=<optimized out>) at
./ext/date/php_date.h:143
#3 0x00005636ff1a0b4b in ZEND_DO_FCALL_SPEC_RETVAL_UNUSED_HANDLER () at
./Zend/zend_vm_execute.h:984
#4 execute_ex (ex=0x7f3a89200040) at ./Zend/zend_vm_execute.h:55523
#5 0x00005636ff1a25e7 in zend_execute (op_array=op_array@entry=0x7f3a880c0600,
return_value=0x0, return_value@entry=0x7f3a8921e9c0) at
./Zend/zend_vm_execute.h:60935
#6 0x00005636ff11b233 in zend_execute_scripts (type=type@entry=8,
retval=0x7f3a8921e9c0, retval@entry=0x0, file_count=file_count@entry=3) at
./Zend/zend.c:1568
#7 0x00005636ff0bb788 in php_execute_script (primary_file=<optimized out>) at
./main/main.c:2637
#8 0x00005636ff1a4b9e in do_cli (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1000
#9 0x00005636fef80b9b in main (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1396
# (rr) when
# Current event: 4491
#until (did not save this in the first debugging session)
# Current event: 4495
(rr) dele 3
(rr) stepi
22050 in.errors->error_messages = NULL;
1: x/i $pc
=> 0x5636fef8fa45 <timelib_strtotime+85>: movq $0x0,(%rax)
(rr) print in.errors
$12 = (timelib_error_container *) 0x7f3a88055ca8
(rr) reverse-stepi
0x00005636fef8fa40 22046 in.errors =
timelib_malloc(sizeof(timelib_error_container));
1: x/i $pc
=> 0x5636fef8fa40 <timelib_strtotime+80>: mov %rax,0x60(%rsp)
(rr)
_emalloc_24 () at ./Zend/zend_alloc.c:1290
1290 return (void*)p;
1: x/i $pc
=> 0x5636ff0f5119 <_emalloc_24+57>: retq
(rr) rb _efree*
Breakpoint 4 at 0x5636ff0f67d0: file ./Zend/zend_alloc.c, line 2512.
void _efree(void *);
Breakpoint 5 at 0x5636ff0f6440: file ./Zend/zend_alloc.c, line 2469.
void _efree_1024(void *);
# 259 breakpoints ...
(rr) cont
...
Breakpoint 3, _efree (ptr=0x7f3a88055ca8) at ./Zend/zend_alloc.c:2512
2512 if (UNEXPECTED(AG(mm_heap)->use_custom_heap)) {
1: x/i $pc
=> 0x5636ff0f67d0 <_efree>: mov 0x21f449(%rip),%rax #
0x5636ff315c20 <alloc_globals>
2: /x $rax = 0x7f3a89200040
3: /x $rsp = 0x7fffd2243b88
(rr) bt
#0 _efree (ptr=0x7f3a88055ca8) at ./Zend/zend_alloc.c:2512
#1 0x00005636fefac7c5 in timelib_error_container_dtor (errors=<optimized out>)
at ./ext/date/lib/timelib.c:164
#2 0x00005636fef8bfe3 in update_errors_warnings (last_errors=0x7f3a880ea168)
at ./ext/date/php_date.c:2644
#3 php_date_initialize (dateobj=0x7f3a880d15b0, time_str=0x7f3a8801fbf8
"01/07/2021", time_str_len=<optimized out>, format=0x7f3a88037b98 "d/m/Y",
timezone_object=0x0, ctor=0) at ./ext/date/php_date.c:2690
#4 0x00005636fef8c648 in zif_date_create_from_format
(execute_data=0x7f3a8921f1a0, return_value=0x7f3a8921f130) at
./ext/date/php_date.h:143
#5 0x00005636ff1a1a41 in ZEND_DO_FCALL_SPEC_RETVAL_USED_HANDLER () at
./Zend/zend_vm_execute.h:1106
#6 execute_ex (ex=0x7f3a88055ca8) at ./Zend/zend_vm_execute.h:55527
#7 0x00005636ff1a25e7 in zend_execute (op_array=op_array@entry=0x7f3a880b0ca0,
return_value=0x0, return_value@entry=0x7f3a8921f0c0) at
./Zend/zend_vm_execute.h:60935
#8 0x00005636ff11b233 in zend_execute_scripts (type=type@entry=8,
retval=0x7f3a8921f0c0, retval@entry=0x0, file_count=file_count@entry=3) at
./Zend/zend.c:1568
#9 0x00005636ff0bb788 in php_execute_script (primary_file=<optimized out>) at
./main/main.c:2637
#10 0x00005636ff1a4b9e in do_cli (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1000
#11 0x00005636fef80b9b in main (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1396
(rr) when
Current event: 4491
##########
##########
##########
Breakpoint 69, 0x00005636fef8fa40 in timelib_strtotime (s=0x5636ff1ae641 "now",
len=len@entry=3, errors=errors@entry=0x7fffd2243b98, tzdb=0x5636ffcb14c0,
tz_get_wrapper=tz_get_wrapper@entry=0x5636fef86af0
<php_date_parse_tzfile_wrapper>) at ./ext/date/lib/parse_date.c:22046
22046 in.errors = timelib_malloc(sizeof(timelib_error_container));
1: x/i $pc
=> 0x5636fef8fa40 <timelib_strtotime+80>: mov %rax,0x60(%rsp)
(rr) bt
#0 0x00005636fef8fa40 in timelib_strtotime (s=0x5636ff1ae641 "now",
len=len@entry=3, errors=errors@entry=0x7fffd2243b98, tzdb=0x5636ffcb14c0,
tz_get_wrapper=tz_get_wrapper@entry=0x5636fef86af0
<php_date_parse_tzfile_wrapper>) at ./ext/date/lib/parse_date.c:22046
#1 0x00005636fef8c18c in php_date_initialize (dateobj=0x7f3a880d1a10,
time_str=0x0, time_str_len=<optimized out>, format=0x0, timezone_object=0x0,
ctor=1) at ./ext/date/php_date.c:2686
#2 0x00005636fef8c9e5 in zim_DateTime___construct
(execute_data=0x7f3a8921f0c0, return_value=<optimized out>) at
./ext/date/php_date.h:143
#3 0x00005636ff1a0b4b in ZEND_DO_FCALL_SPEC_RETVAL_UNUSED_HANDLER () at
./Zend/zend_vm_execute.h:984
#4 execute_ex (ex=0x7f3a89200040) at ./Zend/zend_vm_execute.h:55523
#5 0x00005636ff1a25e7 in zend_execute (op_array=op_array@entry=0x7f3a880c0600,
return_value=0x0, return_value@entry=0x7f3a8921e9c0) at
./Zend/zend_vm_execute.h:60935
#6 0x00005636ff11b233 in zend_execute_scripts (type=type@entry=8,
retval=0x7f3a8921e9c0, retval@entry=0x0, file_count=file_count@entry=3) at
./Zend/zend.c:1568
#7 0x00005636ff0bb788 in php_execute_script (primary_file=<optimized out>) at
./main/main.c:2637
#8 0x00005636ff1a4b9e in do_cli (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1000
#9 0x00005636fef80b9b in main (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1396
(rr) when
Current event: 4495
(rr) x/4xb 0x7f3a88055ca8
0x7f3a88055ca8: 0xb0 0xa1 0x0e 0x88
(rr) disassemble timelib_strtotime+72, timelib_strtotime+91
Dump of assembler code from 0x5636fef8fa38 to 0x5636fef8fa4b:
0x00005636fef8fa38 <timelib_strtotime+72>: rep stos %rax,%es:(%rdi)
0x00005636fef8fa3b <timelib_strtotime+75>: callq 0x5636ff0f50e0
<_emalloc_24>
0x00005636fef8fa40 <timelib_strtotime+80>: mov %rax,0x60(%rsp)
0x00005636fef8fa45 <timelib_strtotime+85>: movq $0x0,(%rax)
End of assembler dump.
Breakpoint 70, munmap () at ../sysdeps/unix/syscall-template.S:78
78 ../sysdeps/unix/syscall-template.S: Datei oder Verzeichnis nicht
gefunden.
1: x/i $pc
=> 0x7f3a8b7e31d0 <munmap>: mov $0xb,%eax
(rr) bt
#0 munmap () at ../sysdeps/unix/syscall-template.S:78
#1 0x00005636ff0f26f7 in zend_mm_munmap (size=2097152, addr=<optimized out>)
at ./Zend/zend_alloc.c:777
#2 zend_mm_chunk_free (addr=<optimized out>, size=size@entry=2097152,
heap=<optimized out>) at ./Zend/zend_alloc.c:777
#3 0x00005636ff0f2b3a in zend_mm_shutdown (heap=0x7f3a89200040, full=0,
silent=<optimized out>) at ./Zend/zend_alloc.c:2301
#4 0x00005636ff0ba357 in php_request_shutdown (dummy=<optimized out>) at
./main/main.c:1951
#5 0x00005636ff1a3fda in do_cli (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1167
#6 0x00005636fef80b9b in main (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1396
(rr) when
Current event: 4620
(rr) x/4xb 0x7f3a88055ca8
0x7f3a88055ca8: 0x00 0x00 0x00 0x00
(rr) finish
Run till exit from #0 munmap () at ../sysdeps/unix/syscall-template.S:78
0x00005636ff0f26f7 in zend_mm_munmap (size=2097152, addr=<optimized out>) at
./Zend/zend_alloc.c:777
777 zend_mm_munmap(addr, size);
1: x/i $pc
=> 0x5636ff0f26f7 <zend_mm_chunk_free+23>: test %eax,%eax
(rr) x/4xb 0x7f3a88055ca8
0x7f3a88055ca8: Cannot access memory at address 0x7f3a88055ca8
PHP Fatal error: Uncaught ErrorException: Notice: Unknown: Unexpected
characters at end of address: < (errflg=3) in Unknown:0
Stack trace:
#0 [internal function]:
Symfony\Component\ErrorHandler\ErrorHandler->handleError(8, 'Unknown:
Unexpe...', 'Unknown', 0, NULL)
#1 {main}
thrown in Unknown on line 0
Program received signal SIGSEGV, Segmentation fault.
0x00005636fefac749 in timelib_error_container_dtor (errors=0x7f3a88055ca8) at
./ext/date/lib/timelib.c:156
156 for (i = 0; i < errors->warning_count; i++) {
1: x/i $pc
=> 0x5636fefac749 <timelib_error_container_dtor+9>: mov 0x14(%rdi),%edi
2: /x $rax = 0x0
3: /x $rsp = 0x7fffd2247350
(rr) bt
#0 0x00005636fefac749 in timelib_error_container_dtor (errors=0x7f3a88055ca8)
at ./ext/date/lib/timelib.c:156
#1 0x00005636fef82e9c in zm_shutdown_date (type=<optimized out>,
module_number=<optimized out>) at ./ext/date/php_date.c:945
#2 0x00005636ff120397 in module_destructor
(module=module@entry=0x5636ffb3ace0) at ./Zend/zend_API.c:2575
#3 0x00005636ff119e6c in module_destructor_zval (zv=<optimized out>) at
./Zend/zend.c:745
#4 0x00005636ff12ada3 in _zend_hash_del_el_ex (prev=<optimized out>,
p=<optimized out>, idx=1, ht=<optimized out>) at ./Zend/zend_hash.c:1182
#5 _zend_hash_del_el (p=0x5636ffb900f0, idx=1, ht=0x5636ff31b260
<module_registry>) at ./Zend/zend_hash.c:1205
#6 zend_hash_graceful_reverse_destroy (ht=ht@entry=0x5636ff31b260
<module_registry>) at ./Zend/zend_hash.c:1659
#7 0x00005636ff11ec8c in zend_destroy_modules () at ./Zend/zend_API.c:2013
#8 0x00005636ff11ac43 in zend_shutdown () at ./Zend/zend.c:976
#9 0x00005636ff0bb3aa in php_module_shutdown () at ./main/main.c:2496
#10 php_module_shutdown () at ./main/main.c:2470
#11 0x00005636fef80bf7 in main (argc=3, argv=0x5636ffb0ca30) at
./sapi/cli/php_cli.c:1411
(rr) when
Current event: 4714
(rr) x/4xb 0x7f3a88055ca8
0x7f3a88055ca8: Cannot access memory at address 0x7f3a88055ca8
##########
##########
##########
set width 0
set pagination off
directory /home/benutzer/source/php7.3-cli/orig/php7.3-7.3.27
display/i $pc
cont
