From: [EMAIL PROTECTED] Operating system: FreeBSD PHP version: 5.0.0b3 (beta3) PHP Bug Type: Reproducible crash Bug description: gmp_hamdist() produces crash
Description: ------------ gmp_hamdist() continuously produces a crash: if (ZEND_NUM_ARGS() != 2 || zend_get_parameters_ex(1, &a_arg, &b_arg) == FAILURE){ 1 should be 2, b_arg is not being set properly, and thus FETCH_GMP_ZVAL(gmpnum_b, b_arg); is crashing. Reproduce code: --------------- <?php gmp_hamdist("1", "2"); ?> Actual result: -------------- #0 0x0807c987 in zif_gmp_hamdist (ht=2, return_value=0x81c3994, this_ptr=0x0, return_value_used=1) at /usr/home/dave/php-5.0.0b3/ext/gmp/gmp.c:1239 1239 FETCH_GMP_ZVAL(gmpnum_b, b_arg); (gdb) bt #0 0x0807c987 in zif_gmp_hamdist (ht=2, return_value=0x81c3994, this_ptr=0x0, return_value_used=1) at /usr/home/dave/php-5.0.0b3/ext/gmp/gmp.c:1239 #1 0x0815e6ee in zend_do_fcall_common_helper (execute_data=0xbfbfe000, op_array=0x81c2134) at /usr/home/dave/php-5.0.0b3/Zend/zend_execute.c:2535 #2 0x0815bcef in execute (op_array=0x81c2134) at /usr/home/dave/php-5.0.0b3/Zend/zend_execute.c:1260 #3 0x08145be7 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /usr/home/dave/php-5.0.0b3/Zend/zend.c:1048 #4 0x0811bf17 in php_execute_script (primary_file=0xbfbff6e8) at /usr/home/dave/php-5.0.0b3/main/main.c:1638 #5 0x08164a1d in main (argc=2, argv=0xbfbff748) at /usr/home/dave/php-5.0.0b3/sapi/cli/php_cli.c:910 #6 0x0806d4a5 in _start () (gdb) print gmpnum_b $1 = (struct {...} (*)[1]) 0xc (gdb) print b_arg $2 = (struct _zval_struct **) 0xb4 (gdb) print *b_arg Cannot access memory at address 0xb4 (gdb) print *gmpnum_b Cannot access memory at address 0xc -- Edit bug report at http://bugs.php.net/?id=27171&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=27171&r=trysnapshot4 Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=27171&r=trysnapshot5 Fixed in CVS: http://bugs.php.net/fix.php?id=27171&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=27171&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=27171&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=27171&r=needscript Try newer version: http://bugs.php.net/fix.php?id=27171&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=27171&r=support Expected behavior: http://bugs.php.net/fix.php?id=27171&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=27171&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=27171&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=27171&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=27171&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=27171&r=dst IIS Stability: http://bugs.php.net/fix.php?id=27171&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=27171&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=27171&r=float