ID: 27979 Updated by: [EMAIL PROTECTED] Reported By: [EMAIL PROTECTED] -Status: Open +Status: Closed Bug Type: Zend Engine 2 problem Operating System: Win XP PHP Version: 5CVS-2004-04-13 (dev) New Comment:
This bug has been fixed in CVS. Snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. Thank you for the report, and for helping us make PHP better. Previous Comments: ------------------------------------------------------------------------ [2004-04-13 11:42:03] [EMAIL PROTECTED] I caught this segfault too, with following backtrace: --- #0 0x4036b709 in _zend_is_inconsistent (ht=0x1, file=0x403d1200 "/home/tony/CVS/php-src_debug/Zend/zend_hash.c", line=341) at /home/tony/CVS/php-src_debug/Zend/zend_hash.c:53 #1 0x4036c600 in _zend_hash_index_update_or_next_insert (ht=0x1, h=0, pData=0xbfffbe64, nDataSize=4, pDest=0x0, flag=4, __zend_filename=0x403d0560 "/home/tony/CVS/php-src_debug/Zend/zend_API.c", __zend_lineno=977) at /home/tony/CVS/php-src_debug/Zend/zend_hash.c:341 #2 0x40367bc6 in add_next_index_zval (arg=0x80d8ed8, value=0x80d91d4) at /home/tony/CVS/php-src_debug/Zend/zend_API.c:977 #3 0x402772c7 in spl_array_write_dimension (object=0x80d9028, offset=0x0, value=0x80d91d4) at /home/tony/CVS/php-src_debug/ext/spl/spl_array.c:201 #4 0x40395f94 in zend_assign_to_object (result=0x80e3034, object_ptr=0x80d9128, op2=0x80e305c, value_op=0x80e3094, Ts=0xbfffbf74, opcode=147) at /home/tony/CVS/php-src_debug/Zend/zend_execute.c:444 #5 0x4038e5eb in zend_assign_dim_handler (execute_data=0xbfffcf70, opline=0x80e3030, op_array=0x80d7654) at /home/tony/CVS/php-src_debug/Zend/zend_execute.c:2211 #6 0x4038bc76 in execute (op_array=0x80d7654) at /home/tony/CVS/php-src_debug/Zend/zend_execute.c:1391 #7 0x40364c6a in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /home/tony/CVS/php-src_debug/Zend/zend.c:1058 #8 0x40317d6a in php_execute_script (primary_file=0xbffff300) at /home/tony/CVS/php-src_debug/main/main.c:1630 #9 0x403989fe in apache_php_module_main (r=0x81976e4, display_source_mode=0) at /home/tony/CVS/php-src_debug/sapi/apache/sapi_apache.c:54 #10 0x40399a79 in send_php (r=0x81976e4, display_source_mode=0, filename=0x8197c44 "/www/index.php") at /home/tony/CVS/php-src_debug/sapi/apache/mod_php5.c:621 #11 0x40399b0a in send_parsed_php (r=0x81976e4) at /home/tony/CVS/php-src_debug/sapi/apache/mod_php5.c:636 #12 0x0806b1d6 in ap_invoke_handler () #13 0x080811fe in process_request_internal () #14 0x08081668 in ap_internal_redirect () #15 0x0806000a in handle_dir () #16 0x0806b1d6 in ap_invoke_handler () #17 0x080811fe in process_request_internal () #18 0x0808125b in ap_process_request () #19 0x08077c14 in child_main () #20 0x08077dc6 in make_child () #21 0x08077f45 in startup_children () #22 0x0807862f in standalone_main () #23 0x08078ec9 in main () #24 0x400d2af7 in __libc_start_main () from /lib/i686/libc.so.6 ------------------------------------------------------------------------ [2004-04-13 11:02:56] [EMAIL PROTECTED] Description: ------------ PHP segfaults using the given script. Reproduce code: --------------- <?php $array = array('1' => 'one', '2' => 'two', '3' => 'three'); $object = new ArrayObject($array); $arrayobject = new ArrayObject($object); $arrayobject[] = 'four'; ?> Actual result: -------------- $ gdb php GNU gdb 2003-09-20-cvs (cygwin-special) (...) (gdb) run bug-spl.php Starting program: /cygdrive/c/PHP/php.exe bug-spl.php ---Type <return> to continue, or q <return> to quit--- Program received signal SIGSEGV, Segmentation fault. 0x1003d8d3 in zend_bailout () from /cygdrive/c/PHP/php5ts.dll (gdb) bt #0 0x1003d8d3 in zend_bailout () from /cygdrive/c/PHP/php5ts.dll #1 0x00a00278 in ?? () #2 0x00000002 in ?? () #3 0x00000001 in ?? () #4 0x00362680 in ?? () #5 0x10005189 in php5ts!add_next_index_null () from /cygdrive/c/PHP/php5ts.dll ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=27979&edit=1
