ID: 47768 Updated by: j...@php.net Reported By: hossy421 at yahoo dot co dot jp -Status: Open +Status: Feedback Bug Type: Apache2 related Operating System: FreeBSD 6.3-RELEASE-p9 PHP Version: 5.2.9 New Comment:
Not enough information was provided for us to be able to handle this bug. Please re-read the instructions at http://bugs.php.net/how-to-report.php If you can provide more information, feel free to add it to this bug and change the status back to "Open". Thank you for your interest in PHP. Previous Comments: ------------------------------------------------------------------------ [2009-03-24 22:58:38] hossy421 at yahoo dot co dot jp Description: ------------ httpd ( Apache 2.2 ) crashes below messages. > httpd in free(): error: recursive call > [notice] child pid XXXXX exit signal Abort trap (6) XXXXX is process id of a httpd child process. Reproduce code: --------------- sorry, I could't repro this bug in another environment. Actual result: -------------- this is backtrace. Program received signal SIGABRT, Aborted. 0x2836b56f in kill () from /lib/libc.so.6 (gdb) bt #0 0x2836b56f in kill () from /lib/libc.so.6 #1 0x2828d27b in raise () from /usr/lib/libpthread.so.2 #2 0x2836a2ab in abort () from /lib/libc.so.6 : #6 0x2830662c in free () from /lib/libc.so.6 #7 0x28617828 in php_error_cb (type=1, error_filename=0x86b1e38 "/usr/home/hossy/public_html/test.php", error_lineno=391, format=0x2874febc "Maximum execution time of %d second%s exceeded", args=0xbfbf7898 "\n") at /usr/ports/lang/php5/work/php-5.2.9/main/main.c:824 : #10 0x282920d3 in sigaction () from /usr/lib/libpthread.so.2 #11 <signal handler called> : #15 0x2830662c in free () from /lib/libc.so.6 #16 0x28644cb5 in zend_mm_mem_malloc_free (storage=0x80a1690, ptr=0xa81c000) at /usr/ports/lang/php5/work/php-5.2.9/Zend/zend_alloc.c:276 : 1. httpd cought SIGPROF in free() because of `max_execution_time' parameter. 2. php_error_cb() called free() 3. free() detected as `recursive call.' in zend_mm_mem_malloc_free(), signal is blocked from HANDLE_BLOCK_INTERRUPTIONS macro. but, apache2handler does't have the function for it. (gdb) p zend_block_interruptions $1 = (void (*)(void)) 0 (gdb) p sapi_module $2 = {name = 0x28759d5d "apache2handler", pretty_name = 0x28759d6c "Apache 2.0 Handler", : block_interruptions = 0, unblock_interruptions = 0, : (gdb) p apache2_sapi_module $3 = {name = 0x28759d5d "apache2handler", pretty_name = 0x28759d6c "Apache 2.0 Handler", : block_interruptions = 0, unblock_interruptions = 0, : in japanese mailing list, I got a patch for this problem. http://ml.php.gr.jp/pipermail/php-dev/2009-March/001453.html ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=47768&edit=1
