ID: 13322
Updated by: lobbin
Reported By: [EMAIL PROTECTED]
Old Status: Feedback
Status: Closed
Bug Type: Reproducible crash
Operating System: Debian Linux 2.2
PHP Version: 4.0CVS-2001-09-15
New Comment:
No feedback. Closing.
Previous Comments:
------------------------------------------------------------------------
[2001-12-22 12:06:22] [EMAIL PROTECTED]
Can you try latest CVS? I believe this is fixed.
Feedback.
------------------------------------------------------------------------
[2001-09-17 04:19:19] [EMAIL PROTECTED]
Problem is on shutdown and destroy/freeing alocated memory.
Breakpoint 2, main (argc=2, argv=0xbffffdb4) at cgi_main.c:775
775 php_request_shutdown((void *) 0);
php_request_shutdown (dummy=0x0) at main.c:711
736 zend_deactivate(TSRMLS_C);
zend_deactivate () at zend.c:587
595 shutdown_executor(TSRMLS_C);
shutdown_executor () at zend_execute_API.c:162
190 zend_destroy_rsrc_list(&EG(regular_list) TSRMLS_CC);
zend_destroy_rsrc_list (ht=0x81798a4) at zend_list.c:235
231 void zend_destroy_rsrc_list(HashTable *ht TSRMLS_DC)
232 {
233 Bucket *p, *q;
234
235 while (1) {
236 p = ht->pListTail;
237 if (!p) {
238 break;
239 }
240 q = p->pListLast;
241 if (q) {
242 q->pListNext = NULL;
243 }
244 ht->pListTail = q;
245
246 if (ht->pDestructor) {
247 zend_try {
248 ht->pDestructor(p->pData);
249 } zend_end_try();
250 }
251 if (!p->pDataPtr && p->pData) {
252 pefree(p->pData, ht->persistent);
253 }
254 pefree(p, ht->persistent);
255 }
256 pefree(ht->arBuckets, ht->persistent);
257 }
ht = (HashTable *) 0x81798a4
{nTableSize = 8, nTableMask = 7, nNumOfElements = 2,
nNextFreeElement = 3, pInternalPointer = 0x81ad614, pListHead =
0x81ad614,
pListTail = 0x81ac7ec, arBuckets = 0x81a8894,
pDestructor = 0x810cc14 <list_entry_destructor>, persistent = 0
'\000',
nApplyCount = 0 '\000', bApplyProtection = 1 '\001', inconsistent =
0}
p = (Bucket *) 0x81ac7ec
{h = 2, nKeyLength = 0, pData = 0x81ac844, pDataPtr = 0x0,
pListNext = 0x0, pListLast = 0x81ad614, pNext = 0x0, pLast = 0x0,
arKey = ""}
q = (Bucket)*ht->pListTail->pListLast
{h = 1, nKeyLength = 0, pData = 0x81b09ac, pDataPtr = 0x0,
pListNext = 0x81ac7ec, pListLast = 0x0, pNext = 0x0, pLast = 0x0,
arKey = ""}
print (Bucket)*ht->pListTail->pListLast->pListNext
{h = 2, nKeyLength = 0, pData = 0x81ac844, pDataPtr = 0x0,
pListNext = 0x0, pListLast = 0x81ad614, pNext = 0x0, pLast = 0x0,
arKey = ""}
ht->pDestructor(0x81ac844);
print (Bucket)*p
{h = 2, nKeyLength = 0, pData = 0x81ac844, pDataPtr = 0x0,
pListNext = 0x0, pListLast = 0x81ad614, pNext = 0x0, pLast = 0x0,
arKey = ""}
pefree(p->pData, ht->persistent);
and second cycle
p= (Bucket)*ht->pListTail
$142 = {h = 1, nKeyLength = 0, pData = 0x81b09ac, pDataPtr = 0x0,
pListNext = 0x0, pListLast = 0x0, pNext = 0x0, pLast = 0x0, arKey =
""}
q = p->pListLast;
ht->pListTail = q; (now 0x0)
ht->pDestructor still point to zend list destructor php_free_xml_doc
and
pData = 0x81b09ac are the same.
What's wrong?
------------------------------------------------------------------------
[2001-09-15 19:15:34] [EMAIL PROTECTED]
Result with newest libxml2-2.4.5 is the same.
Program received signal SIGSEGV, Segmentation fault
0x401fa860 in free () from /lib/libc.so.6
(gdb) bt
#0 0x401fa860 in free () from /lib/libc.so.6
#1 0x400efe79 in xmlFreeNodeList (cur=0x81f98e0) at tree.c:2372
#2 0x400efe37 in xmlFreeNodeList (cur=0x81f9898) at tree.c:2364
#3 0x400ee2dc in xmlFreeDoc (cur=0x81f9800) at tree.c:525
#4 0x806f06d in php_free_xml_doc (rsrc=0x81dae74) at php_domxml.c:353
#5 0x811d86a in list_entry_destructor (ptr=0x81dae74) at
zend_list.c:177
#6 0x811da55 in zend_destroy_rsrc_list (ht=0x8185d84) at
zend_list.c:248
#7 0x810ca20 in shutdown_executor () at zend_execute_API.c:190
#8 0x81162e6 in zend_deactivate () at zend.c:595
#9 0x8062c2f in php_request_shutdown (dummy=0x0) at main.c:736
#10 0x8061543 in main (argc=2, argv=0xbffffb04) at cgi_main.c:775
------------------------------------------------------------------------
[2001-09-15 18:17:22] [EMAIL PROTECTED]
Problem is still here in last CVS. Standalone php (cgi) same problem.
Program received signal SIGSEGV, Segmentation fault.
0x401fab13 in free () from /lib/libc.so.6
(gdb) bt
#0 0x401fab13 in free () from /lib/libc.so.6
#1 0x401fa873 in free () from /lib/libc.so.6
#2 0x400efca9 in xmlFreeNodeList () from /usr/lib/libxml2.so.2
#3 0x400efc67 in xmlFreeNodeList () from /usr/lib/libxml2.so.2
#4 0x400ee18c in xmlFreeDoc () from /usr/lib/libxml2.so.2
#5 0x806f05d in php_free_xml_doc (rsrc=0x81dae54) at php_domxml.c:353
#6 0x811d85a in list_entry_destructor (ptr=0x81dae54) at
zend_list.c:177
#7 0x811da45 in zend_destroy_rsrc_list (ht=0x8185d64) at
zend_list.c:248
#8 0x810ca10 in shutdown_executor () at zend_execute_API.c:190
#9 0x81162d6 in zend_deactivate () at zend.c:595
#10 0x8062c1f in php_request_shutdown (dummy=0x0) at main.c:736
#11 0x8061533 in main (argc=2, argv=0xbffffb04) at cgi_main.c:775
------------------------------------------------------------------------
[2001-09-15 17:47:39] [EMAIL PROTECTED]
I've got php4-200109151335.tar.bz from http://snaps.php.net. I can try
last one http://snaps.php.net:8000/php4-200109151635.tar.bz2.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/?id=13322
Edit this bug report at http://bugs.php.net/?id=13322&edit=1
--
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
