From:
Operating system: Windows XP
PHP version: 5.3SVN-2010-09-14 (SVN)
Package: Reproducible crash
Bug Type: Bug
Bug description:php crash on phpinfo(); using php_enchant
Description:
------------
php svn crashes when calling phpinfo() and having php_enchant loaded.
apparently an uninitialñized pointer is passed around while invoking
php_info_print_table_start();
the problem occurs only using php_enchant, any other extension, i havent
seen this crash on any other extension, in fact im using
php.ini-production modified only to load php_enchant and no other
extension.
i am using the lates sources from php 5.3 branch in svn.
this bug started to happen recently, code from about one or two weeks ago
doesn't crash.
the following stack trace was obtained using vc2008
Test script:
---------------
<?php
phpinfo();
?>
Expected result:
----------------
phpinfo page shown.
Actual result:
--------------
php5ts.dll!_erealloc(void * ptr=0x00000000, unsigned int size=79, int
allow_failure=0) LÃnea 2359 + 0x4 bytes C
php5ts.dll!xbuf_format_converter(smart_str * xbuf=0x037cf93c, const char
* fmt=0x00000000, char * ap=0x00000000) LÃnea 234 + 0x3f bytes C
php5ts.dll!vspprintf(char * * pbuf=0x037cf968, unsigned int max_len=0,
const char * format=0x022c6fe8, char * ap=0x037cf974) LÃnea 799 C
php5ts.dll!php_printf(const char * format=0x022c6fe8, ...) LÃnea 626
C
php5ts.dll!php_info_print_table_start() LÃnea 1040 + 0xa bytes
C
php_enchant.dll!zm_info_enchant(_zend_module_entry *
zend_module=0x0266de20, void * * * tsrm_ls=0x025433f0) LÃnea 323 C
php5ts.dll!php_info_print_module(_zend_module_entry *
zend_module=0x0266de20, void * * * tsrm_ls=0x025433f0) LÃnea 103 + 0x8
bytes C
php5ts.dll!_display_module_info_func(_zend_module_entry *
module=0x0266de20, void * * * tsrm_ls=0x025433f0) LÃnea 123 + 0xb
bytes C
php5ts.dll!zend_hash_apply(_hashtable * ht=0x037cfa38, int (void *, void
* * *)* apply_func=0x020b5fc0, void * * * tsrm_ls=0x025433f0) LÃnea 676 +
0x9 bytes C
php5ts.dll!php_print_info(int flag=-1, void * * * tsrm_ls=0x025433f0)
LÃnea 939 + 0x10 bytes C
php5ts.dll!zif_phpinfo(int ht=0, _zval_struct * return_value=0x0389dfc8,
_zval_struct * * return_value_ptr=0x00000000, _zval_struct *
this_ptr=0x00000000, int return_value_used=0, void * * *
tsrm_ls=0x025433f0) LÃnea 1254 C
php5ts.dll!zend_do_fcall_common_helper_SPEC(_zend_execute_data *
execute_data=0x038d0080, void * * * tsrm_ls=0x02543300) LÃnea 316 + 0x41
bytes C
php5ts.dll!ZEND_DO_FCALL_SPEC_CONST_HANDLER(_zend_execute_data *
execute_data=0x00000000, void * * * tsrm_ls=0x00000000) LÃnea 1606 + 0xe
bytes C
php5ts.dll!execute(_zend_op_array * op_array=0x0389db10, void * * *
tsrm_ls=0x02543300) LÃnea 107 + 0xa bytes C
php5ts.dll!zend_execute_scripts(int type=8, void * * *
tsrm_ls=0x025433f0, _zval_struct * * retval=0x00000000, int file_count=3,
...) LÃnea 1195 C
php5ts.dll!php_execute_script(_zend_file_handle *
primary_file=0x037cfe5c, void * * * tsrm_ls=0x025433f0) LÃnea 2260 + 0x12
bytes C
php5apache2_2.dll!php_handler(request_rec * r=0x025d34e8) LÃnea 669 +
0xe bytes C
libhttpd.dll!ap_run_handler(request_rec * r=0x025d34e8) LÃnea 158 +
0x28 bytes C
libhttpd.dll!ap_invoke_handler(request_rec * r=0x01596640) LÃnea 376 +
0x6 bytes C
libhttpd.dll!ap_process_request(request_rec * r=0x025d34e8) LÃnea
286 C
libhttpd.dll!ap_process_http_connection(conn_rec * c=0x025ce488) LÃnea
190 + 0x6 bytes C
libhttpd.dll!ap_run_process_connection(conn_rec * c=0x025ce488) LÃnea
43 + 0x28 bytes C
libhttpd.dll!ap_process_connection(conn_rec * c=0x025ce488, void *
csd=0x025c7460) LÃnea 178 + 0x6 bytes C
libhttpd.dll!worker_main(void * thread_num_val=0x025ce480) LÃnea 778
C
--
Edit bug report at http://bugs.php.net/bug.php?id=52841&edit=1
--
Try a snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=52841&r=trysnapshot52
Try a snapshot (PHP 5.3):
http://bugs.php.net/fix.php?id=52841&r=trysnapshot53
Try a snapshot (trunk):
http://bugs.php.net/fix.php?id=52841&r=trysnapshottrunk
Fixed in SVN:
http://bugs.php.net/fix.php?id=52841&r=fixed
Fixed in SVN and need be documented:
http://bugs.php.net/fix.php?id=52841&r=needdocs
Fixed in release:
http://bugs.php.net/fix.php?id=52841&r=alreadyfixed
Need backtrace:
http://bugs.php.net/fix.php?id=52841&r=needtrace
Need Reproduce Script:
http://bugs.php.net/fix.php?id=52841&r=needscript
Try newer version:
http://bugs.php.net/fix.php?id=52841&r=oldversion
Not developer issue:
http://bugs.php.net/fix.php?id=52841&r=support
Expected behavior:
http://bugs.php.net/fix.php?id=52841&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=52841&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=52841&r=submittedtwice
register_globals:
http://bugs.php.net/fix.php?id=52841&r=globals
PHP 4 support discontinued: http://bugs.php.net/fix.php?id=52841&r=php4
Daylight Savings: http://bugs.php.net/fix.php?id=52841&r=dst
IIS Stability:
http://bugs.php.net/fix.php?id=52841&r=isapi
Install GNU Sed:
http://bugs.php.net/fix.php?id=52841&r=gnused
Floating point limitations:
http://bugs.php.net/fix.php?id=52841&r=float
No Zend Extensions:
http://bugs.php.net/fix.php?id=52841&r=nozend
MySQL Configuration Error:
http://bugs.php.net/fix.php?id=52841&r=mysqlcfg