From: ericvanblokland at gmail dot com
Operating system: Fedora Core 2
PHP version: 4.3.10
PHP Bug Type: Session related
Bug description: session_start() causes segmentation fault on complex objects
Description:
------------
PHP seems to crash on complex objects at exit or on session_start();
I suspect the php internal session_encode, session_decode, serialize and
unserialize functions.
Ive not been able to reproduce this as it only seems to occur with *VERY*
complex objects like my code generates.
Some strange facts I've found out about while trying to pinpoint the exact
cause:
- In some occasions, escaping a foreach on $this->property in an objects
__wakeup(); made the problem disappear.
- When manually decoding a session file, (about 3M) I also got a
segmentation fault. After increasing the available memory to over 64M the
session got correctly decoded. With this *SICK* amount of memory, the
actual script kept segfaulting, however, it took longer to segfault so
expect a memory leak or infinite loop.
- This problem occurs on a Fedora Core 2, Apache 2.0, PHP 4.3.10 machine,
while on RedHat 7.3, Apache 1.3.29, PHP 4.3.6 everything works fine. So
suspect the bugfix (4.3.9->4.3.10) on session handling for spooky
behaviour.
I will try to keep you all up to date.
Thank you,
Eric van Blokland
Reproduce code:
---------------
Contact me for access to code. The code is very large and complex, I
haven't been able to pinpoint to exact cause of this problem
Actual result:
--------------
Suspect internal session_encode to puke, all output correct though
#0 0x005086ae in malloc_consolidate () from /lib/tls/libc.so.6
#1 0x0050854d in _int_free () from /lib/tls/libc.so.6
#2 0x0050972b in free () from /lib/tls/libc.so.6
#3 0x01eea6af in shutdown_memory_manager (silent=0, clean_cache=0) at
/usr/src/redhat/BUILD/php-4.3.10/Zend/zend_alloc.c:492
#4 0x01eca73a in php_request_shutdown (dummy=0x0) at
/usr/src/redhat/BUILD/php-4.3.10/main/main.c:1003
#5 0x01f0ec10 in php_apache_request_dtor (r=0x945d6c0)
at
/usr/src/redhat/BUILD/php-4.3.10/sapi/apache2handler/sapi_apache2.c:453
#6 0x01f0eeda in php_handler (r=0x945d6c0) at
/usr/src/redhat/BUILD/php-4.3.10/sapi/apache2handler/sapi_apache2.c:577
#7 0x0094ec88 in ap_run_handler () from /usr/sbin/httpd
#8 0x0925f9f8 in ?? ()
#9 0x00000000 in ?? ()
Might by 31106 Related
http://bugs.php.net/bug.php?id=31106
Error occurs with session_start(); suspect session_decode to puke. No
output generated
#0 _zval_ptr_dtor (zval_ptr=0x6) at
/usr/src/redhat/BUILD/php-4.3.10/Zend/zend_execute_API.c:287
#1 0x0177d898 in zend_hash_clean (ht=0x8832aac) at
/usr/src/redhat/BUILD/php-4.3.10/Zend/zend_hash.c:582
#2 0x01788dcb in execute (op_array=0x862b22c) at
/usr/src/redhat/BUILD/php-4.3.10/Zend/zend_execute.c:1702
#3 0x01788d15 in execute (op_array=0x8703514) at
/usr/src/redhat/BUILD/php-4.3.10/Zend/zend_execute.c:1686
#4 0x0178a3fa in execute (op_array=0x8881b4c) at
/usr/src/redhat/BUILD/php-4.3.10/Zend/zend_execute.c:2212
#5 0x01778d51 in zend_execute_scripts (type=8, retval=0x0, file_count=3)
at /usr/src/redhat/BUILD/php-4.3.10/Zend/zend.c:900
#6 0x0174b0af in php_execute_script (primary_file=0xfee57db0) at
/usr/src/redhat/BUILD/php-4.3.10/main/main.c:1736
#7 0x0178e07f in php_handler (r=0x869e170) at
/usr/src/redhat/BUILD/php-4.3.10/sapi/apache2handler/sapi_apache2.c:557
#8 0x00e18c88 in ap_run_handler () from /usr/sbin/httpd
#9 0x0832d9f8 in ?? ()
#10 0x00000000 in ?? ()
Might be 31313 Related, crash can be avoided by disabling foreach on
$this->property
http://bugs.php.net/bug.php?id=31313
--
Edit bug report at http://bugs.php.net/?id=31624&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=31624&r=trysnapshot4
Try a CVS snapshot (php5.0):
http://bugs.php.net/fix.php?id=31624&r=trysnapshot50
Try a CVS snapshot (php5.1):
http://bugs.php.net/fix.php?id=31624&r=trysnapshot51
Fixed in CVS: http://bugs.php.net/fix.php?id=31624&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=31624&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=31624&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=31624&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=31624&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=31624&r=support
Expected behavior: http://bugs.php.net/fix.php?id=31624&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=31624&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=31624&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=31624&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=31624&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=31624&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=31624&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=31624&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=31624&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=31624&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=31624&r=mysqlcfg
