ID: 44774 Updated by: [EMAIL PROTECTED] Reported By: bdauvergne at entrouvert dot com -Status: Open +Status: Feedback Bug Type: Scripting Engine problem Operating System: Debian PHP Version: 5.2.5 New Comment:
Please try using this CVS snapshot: http://snaps.php.net/php5.2-latest.tar.gz For Windows (zip): http://snaps.php.net/win32/php5.2-win32-latest.zip For Windows (installer): http://snaps.php.net/win32/php5.2-win32-installer-latest.msi Previous Comments: ------------------------------------------------------------------------ [2008-04-18 12:24:58] bdauvergne at entrouvert dot com Description: ------------ Context: a cli interpreter with a temporary module loaded ( with dl() and not a declaration in php.ini). Description: In php_request_shutdown we can see this code: 1490 /* 7. Shutdown scanner/executor/compiler and restore ini entries */ 1491 zend_deactivate(TSRMLS_C); 1492 1493 /* 8. Call all extensions post-RSHUTDOWN functions */ 1494 zend_try { 1495 zend_post_deactivate_modules(TSRMLS_C); 1496 } zend_end_try(); The problem comes from the deallocation of EG(regular_list) in zend_deactivate in zend.c:947 : 946 947 zend_destroy_rsrc_list(&EG(regular_list) TSRMLS_CC); 948 and the use of the same list inside zend_post_deactivate_modules which calls 'zend_hash_reverse_apply(&module_registry, (apply_func_t) module_registry_unload_temp TSRMLS_CC);' on zend.c:966 which calls 1973 int module_registry_unload_temp(zend_module_entry *module TSRMLS_DC) 1974 { 1975 return (module->type == MODULE_TEMPORARY) ? ZEND_HASH_APPLY_REMOVE : ZEND_HASH_APPLY_STOP; 1976 } whick provokes the destruction of the module via module_destructor: 1903 void module_destructor(zend_module_entry *module) 1904 { 1905 TSRMLS_FETCH(); 1906 1907 if (module->type == MODULE_TEMPORARY) { 1908 zend_clean_module_rsrc_dtors(module->module_number TSRMLS_CC); 1909 clean_module_constants(module->module_number TSRMLS_CC); 1910 } as the module is a temporary module, which calls: 1908 zend_clean_module_rsrc_dtors(module->module_number TSRMLS_CC); which contains: 265 void zend_clean_module_rsrc_dtors(int module_number TSRMLS_DC) 266 { 267 zend_hash_apply_with_argument(&list_destructors, (apply_func_arg_t) zend_clean_module_rsrc_dtors_cb, (void *) &module_number TSRMLS_CC); which calls zend_clean_module_rsrc_dtors_cb on the list_destructor of the resources registerer by the given module: 253 static int zend_clean_module_rsrc_dtors_cb(zend_rsrc_list_dtors_entry *ld, int *module_number TSRMLS_DC) 254 { 255 if (ld->module_number == *module_number) { 256 zend_hash_apply_with_argument(&EG(regular_list), (apply_func_arg_t) clean_module_resource, (void *) &(ld->resource_id) TSRMLS_CC); 257 zend_hash_apply_with_argument(&EG(persistent_list), (apply_func_arg_t) clean_module_resource, (void *) &(ld->resource_id) TSRMLS_CC); 258 return 1; 259 } else { 260 return 0; 261 } 262 } On line 256 is the problem, we try to acces regular_list by it has already been destroyed before in zend_deactivate. It generate the error: $ php5 -n -r 'dl("gd.so");' /home/bdauvergne/wd/lasso/php5-5.2.5/Zend/zend_hash.c(886) : ht=0x8676c28 is already destroyed Reproduce code: --------------- $ php5 -n -r 'dl("gd.so");' php5-5.2.5/Zend/zend_hash.c(886) : ht=0x8676c28 is already destroyed Actual result: -------------- Backtrace: #0 0x08388794 in _zend_is_inconsistent (ht=0x8676c28, file=0x8628bb8 "php5-5.2.5/Zend/zend_hash.c", line=886) at php5-5.2.5/Zend/zend_hash.c:54 #1 0x0838b017 in zend_hash_apply_with_argument (ht=0x8676c28, apply_func=0x838d481 <clean_module_resource>, argument=0x87a6308) at php5-5.2.5/Zend/zend_hash.c:886 #2 0x0838d4f4 in zend_clean_module_rsrc_dtors_cb (ld=0x87a62f0, module_number=0xbf8a4c50) at php5-5.2.5/Zend/zend_list.c:256 #3 0x0838b071 in zend_hash_apply_with_argument (ht=0x86739e0, apply_func=0x838d4ab <zend_clean_module_rsrc_dtors_cb>, argument=0xbf8a4c50) at php5-5.2.5/Zend/zend_hash.c:891 #4 0x0838d566 in zend_clean_module_rsrc_dtors (module_number=41) at php5-5.2.5/Zend/zend_list.c:267 #5 0x08384c25 in module_destructor (module=0x87a64c8) at php5-5.2.5/Zend/zend_API.c:1908 #6 0x0838acf0 in zend_hash_apply_deleter (ht=0x8676f00, p=0x87a6098) at php5-5.2.5/Zend/zend_hash.c:805 #7 0x0838b294 in zend_hash_reverse_apply (ht=0x8676f00, apply_func=0x8384d88 <module_registry_unload_temp>) at php5-5.2.5/Zend/zend_hash.c:954 #8 0x0837d0f9 in zend_post_deactivate_modules () at php5-5.2.5/Zend/zend.c:967 #9 0x08320e8a in php_request_shutdown (dummy=0x0) at php5-5.2.5/main/main.c:1495 #10 0x0840caaf in main (argc=-1081454472, argv=0xb79c5450) at php5-5.2.5/sapi/cli/php_cli.c:1327 ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=44774&edit=1
