From: ben dot tc1415 at gmail dot com
Operating system: Linux
PHP version: 5CVS-2006-07-04 (CVS)
PHP Bug Type: Reproducible crash
Bug description: Segfault in zend_assign_to_varible
Description:
------------
When running complex scripts, e.g. phpMyAdmin, php segfaults. This seems
to be happening inside the zend engine - in the zend_assign_to_varible. It
also occurs in php 5.1.4.
Reproduce code:
---------------
I cannot yet find any other reproduce code other than running phpMyAdmin
:(
Expected result:
----------------
phpMyAdmin runs
Actual result:
--------------
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1213146208 (LWP 32409)]
0x0101b3f5 in zend_assign_to_variable (result=0xa85d114, op1=0xa85d128,
op2=0xa85d13c, value=0xa85d140, type=1, Ts=0xb7afffe0,
tsrm_ls=0xa47c3a0)
at /home/blewis/php-src/Zend/zend_execute.c:273
273 if (zend_hash_quick_find(EG(active_symbol_table),
cv->na me, cv->name_len+1, cv->hash_value, (void **)ptr)==FAILURE) {
(gdb) bt
#0 0x0101b3f5 in zend_assign_to_variable (result=0xa85d114,
op1=0xa85d128,
op2=0xa85d13c, value=0xa85d140, type=1, Ts=0xb7afffe0,
tsrm_ls=0xa47c3a0)
at /home/blewis/php-src/Zend/zend_execute.c:273
#1 0x0101b9ae in ZEND_ASSIGN_SPEC_CV_CONST_HANDLER
(execute_data=0xb7b049cc,
tsrm_ls=0xa47c3a0) at
/home/blewis/php-src/Zend/zend_vm_execute.h:20842
#2 0x00fed85c in execute (op_array=0xa82ed48, tsrm_ls=0xa47c3a0)
at /home/blewis/php-src/Zend/zend_vm_execute.h:92
#3 0x01037d38 in ZEND_INCLUDE_OR_EVAL_SPEC_CV_HANDLER (
execute_data=0xb7b05cbc, tsrm_ls=0xa47c3a0)
at /home/blewis/php-src/Zend/zend_vm_execute.h:19527
#4 0x00fed85c in execute (op_array=0xa788300, tsrm_ls=0xa47c3a0)
at /home/blewis/php-src/Zend/zend_vm_execute.h:92
#5 0x00ff2e9b in ZEND_INCLUDE_OR_EVAL_SPEC_CONST_HANDLER (
execute_data=0xb7b0954c, tsrm_ls=0xa47c3a0)
at /home/blewis/php-src/Zend/zend_vm_execute.h:1971
#6 0x00fed85c in execute (op_array=0xa45af58, tsrm_ls=0xa47c3a0)
at /home/blewis/php-src/Zend/zend_vm_execute.h:92
#7 0x00ff2e9b in ZEND_INCLUDE_OR_EVAL_SPEC_CONST_HANDLER (
execute_data=0xb7b0af9c, tsrm_ls=0xa47c3a0)
at /home/blewis/php-src/Zend/zend_vm_execute.h:1971
#8 0x00fed85c in execute (op_array=0xa76d6f0, tsrm_ls=0xa47c3a0)
at /home/blewis/php-src/Zend/zend_vm_execute.h:92
#9 0x00fc5a3f in zend_execute_scripts (type=8, tsrm_ls=0xa47c3a0,
retval=Variab le "retval" is not available.
)
at /home/blewis/php-src/Zend/zend.c:1109
#10 0x00f77ea0 in php_execute_script (primary_file=0xb7b0d2e4,
tsrm_ls=0xa47c3a0) at /home/blewis/php-src/main/main.c:1732
#11 0x01059526 in php_handler (r=0xa3fe328)
at /home/blewis/php-src/sapi/apache2handler/sapi_apache2.c:586
#12 0x080794d9 in ap_run_handler (r=0xa3fe328) at config.c:157
#13 0x0807c631 in ap_invoke_handler (r=0xa3fe328) at config.c:371
#14 0x080b2b48 in ap_process_request (r=0xa3fe328) at http_request.c:258
#15 0x080afe5b in ap_process_http_connection (c=0xa2fad18) at
http_core.c:172
#16 0x080802b9 in ap_run_process_connection (c=0xa2fad18) at
connection.c:43
#17 0x080bcf94 in worker_thread (thd=0x9f15f10, dummy=0xa2700b8)
at worker.c:531
#18 0x00c0a686 in dummy_worker (opaque=0x9f15f10)
at threadproc/unix/thread.c:138
#19 0x00119255 in start_thread () from /lib/libpthread.so.0
#20 0x003bf92e in clone () from /lib/libc.so.6
--
Edit bug report at http://bugs.php.net/?id=38010&edit=1
--
Try a CVS snapshot (PHP 4.4):
http://bugs.php.net/fix.php?id=38010&r=trysnapshot44
Try a CVS snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=38010&r=trysnapshot52
Try a CVS snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=38010&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=38010&r=fixedcvs
Fixed in release:
http://bugs.php.net/fix.php?id=38010&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=38010&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=38010&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=38010&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=38010&r=support
Expected behavior: http://bugs.php.net/fix.php?id=38010&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=38010&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=38010&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=38010&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=38010&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=38010&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=38010&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=38010&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=38010&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=38010&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=38010&r=mysqlcfg
