ID: 39297 User updated by: jeff at procata dot com Reported By: jeff at procata dot com -Status: Feedback +Status: Open Bug Type: Reproducible crash Operating System: Mac OS X 10.3.9 PHP Version: 5.1.6 New Comment:
>From php5.2-200610291330: Program received signal EXC_BAD_ACCESS, Could not access memory. 0x0031a998 in _zval_ptr_dtor (zval_ptr=0x16a46f3, __zend_filename=0x407530 "/Users/jeff/Downloads/php5.2 -200610291330/Zend/zend_variables.c", __zend_lineno=175) at /Users/jeff/Downloads/php5.2-200610291330/Zend/ zend_execute_API.c:412 412 (*zval_ptr)->refcount--; (gdb) bt #0 0x0031a998 in _zval_ptr_dtor (zval_ptr=0x16a46f3, __zend_filename=0x407530 "/Users/jeff/Downloads/php5.2 -200610291330/Zend/zend_variables.c", __zend_lineno=175) at /Users/jeff/Downloads/php5.2-200610291330/Zend/ zend_execute_API.c:412 #1 0x0032dcf8 in _zval_ptr_dtor_wrapper (zval_ptr=0x16a46f3) at /Users/jeff/Downloads/php5.2 -200610291330/Zend/zend_variables.c:175 #2 0x0033fa44 in zend_hash_destroy (ht=0x1654118) at / Users/jeff/Downloads/php5.2-200610291330/Zend/ zend_hash.c:521 #3 0x0035789c in zend_object_std_dtor (object=0x1692628) at /Users/jeff/Downloads/php5.2 -200610291330/Zend/zend_objects.c:45 #4 0x00357d70 in zend_objects_free_object_storage (object=0x1692628) at /Users/jeff/Downloads/php5.2 -200610291330/Zend/zend_objects.c:122 #5 0x0035c9a4 in zend_objects_store_free_object_storage (objects=0x49e148) at /Users/jeff/Downloads/php5.2 -200610291330/Zend/zend_objects_API.c:86 #6 0x0031a474 in shutdown_executor () at /Users/jeff/ Downloads/php5.2-200610291330/Zend/zend_execute_API.c: 299 #7 0x0032fd34 in zend_deactivate () at /Users/jeff/ Downloads/php5.2-200610291330/Zend/zend.c:840 #8 0x002c1b9c in php_request_shutdown (dummy=0x0) at / Users/jeff/Downloads/php5.2-200610291330/main/main.c: 1300 #9 0x003d0cb8 in main (argc=4, argv=0xbffffde0) at / Users/jeff/Downloads/php5.2-200610291330/sapi/cli/ php_cli.c:1259 Previous Comments: ------------------------------------------------------------------------ [2006-10-29 13:54:55] [EMAIL PROTECTED] Please try using this CVS snapshot: http://snaps.php.net/php5.2-latest.tar.gz For Windows: http://snaps.php.net/win32/php5.2-win32-latest.zip ------------------------------------------------------------------------ [2006-10-29 13:50:03] jeff at procata dot com Description: ------------ I'm getting a reproducable Bus Error / Segfault with PHP CLI. The same occurs in 5.1.2, 5.1.6 and 5.2.0rc4. The error is reproducible, but difficult to isolate into a small example. Reproduce code: --------------- The code that triggers the segfault is similiar to ByRef($this->obj['test'], $this->obj); Where function byRef(&$first, &$second) and obj implements ArrayAccess with a method public function offsetGet($offset) { $cannonicalName = strtolower($offset); return $this->children[$cannonicalName]; } Expected result: ---------------- PHP Fatal error: Objects used as arrays in post/pre increment/decrement must return values by reference Actual result: -------------- Program received signal EXC_BAD_ACCESS, Could not access memory. _zend_is_inconsistent (ht=0xffffffff, file=0x1 <Address 0x1 out of bounds>, line=112) at /Users/jeff/Downloads/ php-5.1.6/Zend/zend_hash.c:53 53 if (ht->inconsistent==HT_OK) { (gdb) bt #0 _zend_is_inconsistent (ht=0xffffffff, file=0x1 <Address 0x1 out of bounds>, line=112) at /Users/jeff/ Downloads/php-5.1.6/Zend/zend_hash.c:53 #1 0x001b7f68 in zend_hash_destroy (ht=0xffffffff) at / Users/jeff/Downloads/php-5.1.6/Zend/zend_hash.c:512 #2 0x001c7130 in zend_object_std_dtor (object=0x2134c98) at /Users/jeff/Downloads/php-5.1.6/ Zend/zend_objects.c:40 #3 0x001c73c8 in zend_objects_free_object_storage (object=0x2134c98) at /Users/jeff/Downloads/php-5.1.6/ Zend/zend_objects.c:111 #4 0x001ca5d8 in zend_objects_store_free_object_storage (objects=0xffffffff) at /Users/jeff/Downloads/php-5.1.6/ Zend/zend_objects_API.c:86 #5 0x0019fa74 in shutdown_executor () at /Users/jeff/ Downloads/php-5.1.6/Zend/zend_execute_API.c:281 #6 0x001add74 in zend_deactivate () at /Users/jeff/ Downloads/php-5.1.6/Zend/zend.c:854 #7 0x00169c5c in php_request_shutdown (dummy=0xffffffff) at /Users/jeff/Downloads/php-5.1.6/ main/main.c:1292 #8 0x00232284 in main (argc=4, argv=0xbffffde0) at / Users/jeff/Downloads/php-5.1.6/sapi/cli/php_cli.c:1246 ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=39297&edit=1
