From: sjon at hortensius dot net
Operating system: Linux
PHP version: 5.2.8
PHP Bug Type: Reproducible crash
Bug description: overwriting containing variable via extract segfaults in
_zend_is_inconsistent
Description:
------------
The supplied code shouldn't crash
Reproduce code:
---------------
$x = array('x' => 9);
extract($x);
Actual result:
--------------
#0 0x08279691 in _zend_is_inconsistent (ht=0x9,
file=0x850ada4 "/tmp/php/src/php-5.2.8/Zend/zend_hash.c", line=1277)
at /tmp/php/src/php-5.2.8/Zend/zend_hash.c:54
#1 0x0827c8c0 in zend_hash_move_forward_ex (ht=0x9, pos=0xbfabdc68)
at /tmp/php/src/php-5.2.8/Zend/zend_hash.c:1277
#2 0x0817d0e9 in zif_extract (ht=1, return_value=0x95da738,
return_value_ptr=0x0, this_ptr=0x0, return_value_used=0)
at /tmp/php/src/php-5.2.8/ext/standard/array.c:1491
#3 0x08294a64 in zend_do_fcall_common_helper_SPEC
(execute_data=0xbfabde78)
at /tmp/php/src/php-5.2.8/Zend/zend_vm_execute.h:200
#4 0x0829a367 in ZEND_DO_FCALL_SPEC_CONST_HANDLER
(execute_data=0xbfabde78)
at /tmp/php/src/php-5.2.8/Zend/zend_vm_execute.h:1729
#5 0x082945e4 in execute (op_array=0x95da104)
at /tmp/php/src/php-5.2.8/Zend/zend_vm_execute.h:92
#6 0x0826f70c in zend_execute_scripts (type=8, retval=0x0, file_count=3)
at /tmp/php/src/php-5.2.8/Zend/zend.c:1215
#7 0x0821c793 in php_execute_script (primary_file=0xbfac0204)
at /tmp/php/src/php-5.2.8/main/main.c:2044
#8 0x082ee8b6 in main (argc=2, argv=0xbfac0364)
at /tmp/php/src/php-5.2.8/sapi/cli/php_cli.c:1139
--
Edit bug report at http://bugs.php.net/?id=46945&edit=1
--
Try a CVS snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=46945&r=trysnapshot52
Try a CVS snapshot (PHP 5.3):
http://bugs.php.net/fix.php?id=46945&r=trysnapshot53
Try a CVS snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=46945&r=trysnapshot60
Fixed in CVS:
http://bugs.php.net/fix.php?id=46945&r=fixedcvs
Fixed in CVS and need be documented:
http://bugs.php.net/fix.php?id=46945&r=needdocs
Fixed in release:
http://bugs.php.net/fix.php?id=46945&r=alreadyfixed
Need backtrace:
http://bugs.php.net/fix.php?id=46945&r=needtrace
Need Reproduce Script:
http://bugs.php.net/fix.php?id=46945&r=needscript
Try newer version:
http://bugs.php.net/fix.php?id=46945&r=oldversion
Not developer issue:
http://bugs.php.net/fix.php?id=46945&r=support
Expected behavior:
http://bugs.php.net/fix.php?id=46945&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=46945&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=46945&r=submittedtwice
register_globals:
http://bugs.php.net/fix.php?id=46945&r=globals
PHP 4 support discontinued: http://bugs.php.net/fix.php?id=46945&r=php4
Daylight Savings: http://bugs.php.net/fix.php?id=46945&r=dst
IIS Stability:
http://bugs.php.net/fix.php?id=46945&r=isapi
Install GNU Sed:
http://bugs.php.net/fix.php?id=46945&r=gnused
Floating point limitations:
http://bugs.php.net/fix.php?id=46945&r=float
No Zend Extensions:
http://bugs.php.net/fix.php?id=46945&r=nozend
MySQL Configuration Error:
http://bugs.php.net/fix.php?id=46945&r=mysqlcfg
