| Newsgroups |
php.bugs |
| Message-ID |
<[email protected]> |
From: [email protected]
Operating system: Linux
PHP version: 6CVS-2008-08-13 (CVS)
PHP Bug Type: Reproducible crash
Bug description: Segfault in error handling
Description:
------------
When error reporting is set to E_ALL, calling ob_start() in an error
handler function causes a segfault when triggered by imap_open().
I don't know if this is an imap only issue, it didn't crash with a couple
other functions I tested.
PHP6 snapshot compiled with --with-imap --with-imap-ssl
Reproduce code:
---------------
<?php
/* segfault on HEAD and memleak on 5_3 */
error_reporting(E_ALL);
set_error_handler('segfault');
function segfault() {
ob_start();
}
imap_open($a,$b,$c);
?>
Actual result:
--------------
Segmentation fault
Backtrace:
----------
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb6bd76d0 (LWP 32715)]
php_output_handler_create_internal (name=0x0, output_handler=0x8279240
<php_output_handler_default_func>, chunk_size=0, flags=112) at
/mnt/hd/gsoc/php6/Zend/zend.h:414
414 return ++pz->refcount__gc;
(gdb) bt
#0 php_output_handler_create_internal (name=0x0, output_handler=0x8279240
<php_output_handler_default_func>, chunk_size=0, flags=112) at
/mnt/hd/gsoc/php6/Zend/zend.h:414
#1 0x0827a2e8 in php_output_start_user (output_handler=0x0, chunk_size=0,
flags=112) at /mnt/hd/gsoc/php6/main/output.c:492
#2 0x0827a379 in zif_ob_start (ht=0, return_value=0x88000e4,
return_value_ptr=0x8835638, this_ptr=0x0, return_value_used=0) at
/mnt/hd/gsoc/php6/main/output.c:1346
#3 0x082edbb7 in zend_do_fcall_common_helper_SPEC
(execute_data=0x88355e8) at /mnt/hd/gsoc/php6/Zend/zend_vm_execute.h:323
#4 0x082ed088 in execute (op_array=0x8833570) at
/mnt/hd/gsoc/php6/Zend/zend_vm_execute.h:104
#5 0x082b400d in zend_call_function (fci=0xbf9a6044,
fci_cache=0xbf9a5fcc) at /mnt/hd/gsoc/php6/Zend/zend_execute_API.c:933
#6 0x082b4dc8 in call_user_function_ex (function_table=0x86ac4c0,
object_pp=0x0, function_name=0x87fff80, retval_ptr_ptr=0xbf9a60c0,
param_count=5, params=0x88000c8,
no_separation=1, symbol_table=0x0) at
/mnt/hd/gsoc/php6/Zend/zend_execute_API.c:729
#7 0x082c4d88 in zend_error (type=8, format=0x8604722 "%s") at
/mnt/hd/gsoc/php6/Zend/zend.c:1632
#8 0x08268d33 in php_verror (docref=0x0, params=0x83b9100 "", type=8,
format=0x85b8978 "%s (errflg=%ld)", args=0xbf9a618c "hH\203\b\002") at
/mnt/hd/gsoc/php6/main/main.c:818
#9 0x08269233 in php_error_docref0 (docref=0x0, type=8, format=0x85b8978
"%s (errflg=%ld)") at /mnt/hd/gsoc/php6/main/main.c:839
#10 0x080f8c08 in zm_deactivate_imap (type=1, module_number=20) at
/mnt/hd/gsoc/php6/ext/imap/php_imap.c:1117
#11 0x082c5ae2 in module_registry_cleanup (module=0x8708728) at
/mnt/hd/gsoc/php6/Zend/zend_API.c:2487
#12 0x082d1936 in zend_hash_apply (ht=0x86abf40, apply_func=0x82c5ac0
<module_registry_cleanup>) at /mnt/hd/gsoc/php6/Zend/zend_hash.c:920
#13 0x082c3318 in zend_deactivate_modules () at
/mnt/hd/gsoc/php6/Zend/zend.c:1394
#14 0x08267ba6 in php_request_shutdown (dummy=0x0) at
/mnt/hd/gsoc/php6/main/main.c:1600
#15 0x08359aa4 in main (argc=2, argv=0xbf9a6674) at
/mnt/hd/gsoc/php6/sapi/cli/php_cli.c:1329
--
Edit bug report at http://bugs.php.net/?id=45813&edit=1
--
Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=45813&r=trysnapshot52
Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=45813&r=trysnapshot53
Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=45813&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=45813&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=45813&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=45813&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=45813&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=45813&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=45813&r=support
Expected behavior: http://bugs.php.net/fix.php?id=45813&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=45813&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=45813&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=45813&r=globals
PHP 4 support discontinued: http://bugs.php.net/fix.php?id=45813&r=php4
Daylight Savings: http://bugs.php.net/fix.php?id=45813&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=45813&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=45813&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=45813&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=45813&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=45813&r=mysqlcfg