ID: 24219 User updated by: wjs at 42virtual dot com Reported By: wjs at 42virtual dot com -Status: Feedback +Status: Open Bug Type: DOM XML related Operating System: SUSE 8.2 PHP Version: 4.3.2 New Comment:
Backtrace.... (gdb) bt #0 0x0807504f in node_list_wrapper_dtor (node=0xffff0000, destroyref=0) at /usr/local/src/php-4.3.2/ext/domxml/php_domxml.c:638 #1 0x08075058 in node_list_wrapper_dtor (node=0x826e318, destroyref=0) at /usr/local/src/php-4.3.2/ext/domxml/php_domxml.c:638 #2 0x08075058 in node_list_wrapper_dtor (node=0x826db08, destroyref=0) at /usr/local/src/php-4.3.2/ext/domxml/php_domxml.c:638 #3 0x08069af2 in php_free_xml_doc (rsrc=0x0) at /usr/local/src/php-4.3.2/ext/domxml/php_domxml.c:638 #4 0x0813264e in list_entry_destructor (ptr=0x826c6ac) at /usr/local/src/php-4.3.2/Zend/zend_list.c:172 #5 0x08131189 in zend_hash_apply_deleter (ht=0x8180a40, p=0x827bcb4) at /usr/local/src/php-4.3.2/Zend/zend_hash.c:598 #6 0x0813124a in zend_hash_graceful_reverse_destroy (ht=0x8180a40) at /usr/local/src/php-4.3.2/Zend/zend_hash.c:664 #7 0x081327dc in zend_destroy_rsrc_list (ht=0x8180a40) at /usr/local/src/php-4.3.2/Zend/zend_list.c:233 #8 0x08123f9f in shutdown_executor () at /usr/local/src/php-4.3.2/Zend/zend_execute_API.c:213 #9 0x0812c340 in zend_deactivate () at /usr/local/src/php-4.3.2/Zend/zend.c:649 #10 0x08101c10 in php_request_shutdown (dummy=0x0) at /usr/local/src/php-4.3.2/main/main.c:985 #11 0x0813ef81 in main (argc=2, argv=0xbffff334) at /usr/local/src/php-4.3.2/sapi/cli/php_cli.c:862 #12 0x4011b8ae in __libc_start_main () from /lib/libc.so.6 Previous Comments: ------------------------------------------------------------------------ [2003-06-17 03:11:20] [EMAIL PROTECTED] We need some script to reproduce it. If we can not reproduce it we can not fix it... ------------------------------------------------------------------------ [2003-06-17 03:10:17] wjs at 42virtual dot com We cannot provide you with a "script" however we can provide you with a backtrace (in 10 min) ------------------------------------------------------------------------ [2003-06-17 03:07:20] [EMAIL PROTECTED] Please provide a script to reproduce this problem. ------------------------------------------------------------------------ [2003-06-17 03:03:22] wjs at 42virtual dot com The variable node is of tpye xmlNodePtr whereas node->properties is of xmlAttr. Can this be a big /litte endian problem? ------------------------------------------------------------------------ [2003-06-17 03:00:46] wjs at 42virtual dot com Description: ------------ We are getting not steadily reproducable segmentation fault in this function. From one recursive Call to the other it appears the a NULL-Pointer (in node) is somehow casted to 0xffff0000. We suspect that this might be a casting problem between xmlNodePtr and xmlAttr /* destroyref is a bool indicating if all registered objects for nodes within the tree should be destroyed */ static inline void node_list_wrapper_dtor(xmlNodePtr node, int destroyref TSRMLS_DC) { while (node != NULL) { node_list_wrapper_dtor(node->children, destroyref TSRMLS_CC); switch (node->type) { /* Skip property freeing for the following types */ case XML_ATTRIBUTE_DECL: case XML_DTD_NODE: case XML_ENTITY_DECL: case XML_ATTRIBUTE_NODE: break; default: /* Attribute Nodes contain accessible children Call this function with the propert list attr_list_wrapper_dtor(node->properties); */ node_list_wrapper_dtor((xmlNodePtr) node->properties, destroyref TSRMLS_CC); } if (destroyref == 1) { node_wrapper_free(node TSRMLS_CC); } else { node_wrapper_dtor(node); } node = node->next; } } ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=24219&edit=1