From:
Operating system: Fedora 14 i686
PHP version: 5.3.8
Package: Reproducible crash
Bug Type: Bug
Bug description:Sporadic crashes
Description:
------------
Using PHP 5.3.8-1.fc14 and 2.2.17-1.fc14 and having crashes on random URLs
(cannot isolate the problem), but repeatable. Also having this issue (same
URLs) on my live deployment of the app which runs PHP 5.2.
Test script:
---------------
Could not isolate the problem
Expected result:
----------------
No crash
Actual result:
--------------
Core was generated by `/usr/sbin/httpd'.
Program terminated with signal 11, Segmentation fault.
#0 _zend_mm_free_int (heap=0x2463e70, p=0x25c5fa8)
at /usr/src/debug/php-5.3.8/Zend/zend_alloc.c:2028
2028 if (ZEND_MM_IS_FREE_BLOCK(next_block)) {
(gdb) thread apply all bt full
Thread 1 (Thread 0xb78b6750 (LWP 19172)):
#0 _zend_mm_free_int (heap=0x2463e70, p=0x25c5fa8)
at /usr/src/debug/php-5.3.8/Zend/zend_alloc.c:2028
mm_block = 0x25c5fa0
next_block = 0x4b8bf54
size = <value optimized out>
#1 0x011bfbee in _zval_ptr_dtor (zval_ptr=0x2716ef4)
at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:448
zv = 0x25c5fa8
#2 0x011dc69f in zend_hash_destroy (ht=0x2716d04)
at /usr/src/debug/php-5.3.8/Zend/zend_hash.c:529
p = 0x2715114
q = 0x2716ee8
#3 0x011cdf0e in _zval_dtor_func (zvalue=0x26a4324)
at /usr/src/debug/php-5.3.8/Zend/zend_variables.c:43
No locals.
#4 0x011bfbe6 in _zval_dtor (zval_ptr=0x2714f98)
at /usr/src/debug/php-5.3.8/Zend/zend_variables.h:35
No locals.
#5 _zval_ptr_dtor (zval_ptr=0x2714f98)
at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:447
zv = 0x26a4324
---Type <return> to continue, or q <return> to quit---
#6 0x011dc69f in zend_hash_destroy (ht=0x2716d5c)
at /usr/src/debug/php-5.3.8/Zend/zend_hash.c:529
p = 0x2714e00
q = 0x2714f8c
#7 0x011ef604 in zend_object_std_dtor (object=0x2717484)
at /usr/src/debug/php-5.3.8/Zend/zend_objects.c:45
No locals.
#8 0x011ef643 in zend_objects_free_object_storage (object=0x2717484)
at /usr/src/debug/php-5.3.8/Zend/zend_objects.c:126
No locals.
#9 0x011f38ec in zend_objects_store_del_ref_by_handle_ex (handle=150,
handlers=0x132c720) at
/usr/src/debug/php-5.3.8/Zend/zend_objects_API.c:220
__orig_bailout = 0xbf8b3e84
__bailout = {{__jmpbuf = {20090920, -1217180600, 40529048,
-1081394024, 261255254, 664128811}, __mask_was_saved = 0,
__saved_mask = {__val = {40243584, 38157936, 3213573208,
18537958,
81, 20104992, 39485736, 40218660, 40218660, 38157936,
3213573240, 18537958, 40471396, 3213573356, 41235216,
20090920, 40243648, 40471144, 52, 40218660, 40243648,
39244612, 40585716, 40470432, 40470432, 38157936,
3213573304,
18537958, 40218668, 261976150, 39859780, 40530788}}}}
obj = 0x256db04
failure = <value optimized out>
---Type <return> to continue, or q <return> to quit---
#10 0x011f3930 in zend_objects_store_del_ref (zobject=0x27172b0)
at /usr/src/debug/php-5.3.8/Zend/zend_objects_API.c:172
handle = <value optimized out>
#11 0x011cdee1 in _zval_dtor_func (zvalue=0x27172b0)
at /usr/src/debug/php-5.3.8/Zend/zend_variables.c:52
No locals.
#12 0x011bfbe6 in _zval_dtor (zval_ptr=0x271aba0)
at /usr/src/debug/php-5.3.8/Zend/zend_variables.h:35
No locals.
#13 _zval_ptr_dtor (zval_ptr=0x271aba0)
at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:447
zv = 0x27172b0
#14 0x011dc69f in zend_hash_destroy (ht=0x26a6c98)
at /usr/src/debug/php-5.3.8/Zend/zend_hash.c:529
p = 0x2741e44
q = 0x271ab94
#15 0x011cdf0e in _zval_dtor_func (zvalue=0x26a70b4)
at /usr/src/debug/php-5.3.8/Zend/zend_variables.c:43
No locals.
#16 0x011bfbe6 in _zval_dtor (zval_ptr=0x265846c)
at /usr/src/debug/php-5.3.8/Zend/zend_variables.h:35
No locals.
#17 _zval_ptr_dtor (zval_ptr=0x265846c)
---Type <return> to continue, or q <return> to quit---
at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:447
zv = 0x26a70b4
#18 0x011dc69f in zend_hash_destroy (ht=0x26581a0)
at /usr/src/debug/php-5.3.8/Zend/zend_hash.c:529
p = 0x2659e6c
q = 0x2658460
#19 0x011ef604 in zend_object_std_dtor (object=0x26580c4)
at /usr/src/debug/php-5.3.8/Zend/zend_objects.c:45
No locals.
#20 0x011ef643 in zend_objects_free_object_storage (object=0x26580c4)
at /usr/src/debug/php-5.3.8/Zend/zend_objects.c:126
No locals.
#21 0x011f3416 in zend_objects_store_free_object_storage
(objects=0x13447b0)
at /usr/src/debug/php-5.3.8/Zend/zend_objects_API.c:92
obj = 0x256d224
i = <value optimized out>
#22 0x011c02bc in shutdown_executor ()
at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:304
__orig_bailout = 0x0
__bailout = {{__jmpbuf = {20090920, 20202912, 18669792,
-1081393352,
261697622, 568386347}, __mask_was_saved = 0, __saved_mask =
{
__val = {39274560, 38157936, 3213573864, 18537958, 21265977,
20090920, 3213573848, 17115236, 0, 0, 264, 39274560,
16900809,
---Type <return> to continue, or q <return> to quit---
20090920, 3213573880, 20090920, 20203776, 20202788,
3213573912, 18668784, 39274568, 1947, 3213573944, 18729751,
38160152, 24, 18668715, 20090920, 20203776, 20201856,
3213573944, 18476203}}}}
#23 0x011cef30 in zend_deactivate ()
at /usr/src/debug/php-5.3.8/Zend/zend.c:891
No locals.
#24 0x01174e1d in php_request_shutdown (dummy=0x0)
at /usr/src/debug/php-5.3.8/main/main.c:1640
report_memleaks = 1 '\001'
#25 0x012635b4 in php_apache_request_dtor (r=0x25b8208)
at /usr/src/debug/php-5.3.8/sapi/apache2handler/sapi_apache2.c:509
No locals.
#26 php_handler (r=0x25b8208)
at /usr/src/debug/php-5.3.8/sapi/apache2handler/sapi_apache2.c:681
ctx = 0x25b91c8
conf = 0x23cb550
brigade = 0x25b98d0
bucket = <value optimized out>
rv = <value optimized out>
parent_req = 0x0
#27 0x00950441 in ap_run_handler (r=0x25b8208)
at /usr/src/debug/httpd-2.2.17/server/config.c:158
---Type <return> to continue, or q <return> to quit---
pHook = <value optimized out>
n = <value optimized out>
rv = <value optimized out>
#28 0x00950849 in ap_invoke_handler (r=0x25b8208)
at /usr/src/debug/httpd-2.2.17/server/config.c:376
handler = <value optimized out>
p = <value optimized out>
result = <value optimized out>
old_handler = 0x23ec418 "php5-script"
ignore = <value optimized out>
#29 0x0095f134 in ap_internal_redirect (new_uri=0x25b81f8 "/index.php",
r=0x25b9f88) at
/usr/src/debug/httpd-2.2.17/modules/http/http_request.c:549
new = 0x25b8208
access_status = <value optimized out>
#30 0x005315b6 in handler_redirect (r=0x25b9f88)
at /usr/src/debug/httpd-2.2.17/modules/mappers/mod_rewrite.c:4831
No locals.
#31 0x00950441 in ap_run_handler (r=0x25b9f88)
at /usr/src/debug/httpd-2.2.17/server/config.c:158
pHook = <value optimized out>
n = <value optimized out>
rv = <value optimized out>
#32 0x00950849 in ap_invoke_handler (r=0x25b9f88)
---Type <return> to continue, or q <return> to quit---
at /usr/src/debug/httpd-2.2.17/server/config.c:376
handler = <value optimized out>
p = <value optimized out>
result = <value optimized out>
old_handler = 0x538d4b "redirect-handler"
ignore = <value optimized out>
#33 0x0095fb28 in ap_process_request (r=0x25b9f88)
at /usr/src/debug/httpd-2.2.17/modules/http/http_request.c:282
access_status = <value optimized out>
#34 0x0095c738 in ap_process_http_connection (c=0x25ac0e8)
at /usr/src/debug/httpd-2.2.17/modules/http/http_core.c:190
r = 0x25b9f88
csd = 0x0
#35 0x00957b81 in ap_run_process_connection (c=0x25ac0e8)
at /usr/src/debug/httpd-2.2.17/server/connection.c:43
pHook = <value optimized out>
n = <value optimized out>
rv = <value optimized out>
#36 0x00965041 in child_main (child_num_arg=<value optimized out>)
at /usr/src/debug/httpd-2.2.17/server/mpm/prefork/prefork.c:662
current_conn = <value optimized out>
csd = 0x25abf50
ptrans = 0x25abf10
---Type <return> to continue, or q <return> to quit---
allocator = 0x25a9e80
status = <value optimized out>
i = <value optimized out>
lr = <value optimized out>
pollset = 0x25aa058
sbh = 0x25aa050
bucket_alloc = 0x25b5f38
last_poll_idx = 0
#37 0x009653ee in make_child (s=<value optimized out>, slot=1)
at /usr/src/debug/httpd-2.2.17/server/mpm/prefork/prefork.c:763
pid = <value optimized out>
#38 0x009654cf in startup_children (number_to_start=7)
at /usr/src/debug/httpd-2.2.17/server/mpm/prefork/prefork.c:781
i = <value optimized out>
#39 0x009660f5 in ap_mpm_run (_pconf=0x23560b8, plog=0x2384170,
s=0x2357fb0)
at /usr/src/debug/httpd-2.2.17/server/mpm/prefork/prefork.c:1002
index = <value optimized out>
remaining_children_to_start = 8
rv = <value optimized out>
#40 0x00939952 in main (argc=1, argv=0xbf8b4894)
at /usr/src/debug/httpd-2.2.17/server/main.c:739
c = 0 '\000'
configtestonly = 9861636
---Type <return> to continue, or q <return> to quit---
confname = 0x9681cc "conf/httpd.conf"
def_server_root = 0x9681c1 "/etc/httpd"
temp_error_log = 0x968413 "Pre-configuration failed"
error = <value optimized out>
process = 0x2354140
server_conf = 0x2357fb0
pglobal = 0x968447
pconf = 0x23560b8
plog = 0x2384170
ptemp = 0x2388180
pcommands = 0x23580c0
opt = 0x2358160
rv = 37060528
mod = <value optimized out>
optarg = 0x96792a "\201\303\346@\001"
signal_server = <value optimized out>
--
Edit bug report at https://bugs.php.net/bug.php?id=55753&edit=1
--
Try a snapshot (PHP 5.4):
https://bugs.php.net/fix.php?id=55753&r=trysnapshot54
Try a snapshot (PHP 5.3):
https://bugs.php.net/fix.php?id=55753&r=trysnapshot53
Try a snapshot (trunk):
https://bugs.php.net/fix.php?id=55753&r=trysnapshottrunk
Fixed in SVN:
https://bugs.php.net/fix.php?id=55753&r=fixed
Fixed in SVN and need be documented:
https://bugs.php.net/fix.php?id=55753&r=needdocs
Fixed in release:
https://bugs.php.net/fix.php?id=55753&r=alreadyfixed
Need backtrace:
https://bugs.php.net/fix.php?id=55753&r=needtrace
Need Reproduce Script:
https://bugs.php.net/fix.php?id=55753&r=needscript
Try newer version:
https://bugs.php.net/fix.php?id=55753&r=oldversion
Not developer issue:
https://bugs.php.net/fix.php?id=55753&r=support
Expected behavior:
https://bugs.php.net/fix.php?id=55753&r=notwrong
Not enough info:
https://bugs.php.net/fix.php?id=55753&r=notenoughinfo
Submitted twice:
https://bugs.php.net/fix.php?id=55753&r=submittedtwice
register_globals:
https://bugs.php.net/fix.php?id=55753&r=globals
PHP 4 support discontinued:
https://bugs.php.net/fix.php?id=55753&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=55753&r=dst
IIS Stability:
https://bugs.php.net/fix.php?id=55753&r=isapi
Install GNU Sed:
https://bugs.php.net/fix.php?id=55753&r=gnused
Floating point limitations:
https://bugs.php.net/fix.php?id=55753&r=float
No Zend Extensions:
https://bugs.php.net/fix.php?id=55753&r=nozend
MySQL Configuration Error:
https://bugs.php.net/fix.php?id=55753&r=mysqlcfg
