[PHP-BUG] Bug #51467 [NEW]: Crash in shutdown

[email protected] ("php at group dot apple dot com") Sat, 3 Apr 2010 02:39:46 +0200 (CEST)
Newsgroups php.bugs
Message-ID <[email protected]>
From:             
Operating system: Mac OS X 10.6
PHP version:      5.3.2
Package:          Reproducible crash
Bug Type:         Bug
Bug description:Crash in shutdown

Description:
------------
Executing certain scripts on Mac OS X 10.6 running 5.3.2 (or 5.3.1 or 5.3)

causes a crash in 
the shutdown routine. The stack trace appears to be the same reported in 
http://bugs.php.net/bug.php?id=49209.

See stack trace below.

I uploaded a tarball named "shutdown_crasher.tar.gz" as a smallish sample 
demonstrating the 
flaw.

"php displayDoc.php" shows the first crash noted below.

Putting the files into an apache doc root and loading the index.html file
shows 
two buttons. 
Clicking on one should cause apache to crash. (Oddly, one deployment always

crashed with the 
"synchronous" call while another always crashed with the "async" call.)
This 
crash is the 
second noted below.

Test script:
---------------
See tarball attached as a patch.

Expected result:
----------------
I expected output without a crash.

Actual result:
--------------
Backtrace from php CLI:
--------------------
Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x00000001434ed621
Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   php                             0x000000010032aa3f
gc_zval_possible_root + 
99
1   php                             0x000000010031ad97 zend_hash_destroy +
42
2   php                             0x00000001001a2b35
sxe_object_free_storage + 
53
3   php                             0x000000010032f351 
zend_objects_store_free_object_storage + 120
4   php                             0x0000000100304ab1 shutdown_executor +
515
5   php                             0x000000010030fce8 zend_deactivate +
111
6   php                             0x00000001002c2fce php_request_shutdown
+ 
597
7   php                             0x000000010038c51f main + 5213
8   php                             0x00000001000013b8 start + 52
--------------------

Backtrace from apache:
--------------------
Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x00000001d074cc21
Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   libphp5.so                    	0x000000010131c64f gc_zval_possible_root

+ 99
1   libphp5.so                    	0x000000010130d58b zend_hash_destroy + 
42
2   libphp5.so                    	0x000000010119e100 
sxe_object_free_storage + 53
3   libphp5.so                    	0x0000000101320f05 
zend_objects_store_free_object_storage + 120
4   libphp5.so                    	0x00000001012f76f2 shutdown_executor + 
515
5   libphp5.so                    	0x0000000101302508 zend_deactivate +
111
6   libphp5.so                    	0x00000001012b6481 php_request_shutdown

+ 597
7   libphp5.so                    	0x000000010137cff9 php_handler + 1370
[apache stack removed]
--------------------

-- 
Edit bug report at http://bugs.php.net/bug.php?id=51467&edit=1
-- 
Try a snapshot (PHP 5.2):            http://bugs.php.net/fix.php?id=51467&r=trysnapshot52
Try a snapshot (PHP 5.3):            http://bugs.php.net/fix.php?id=51467&r=trysnapshot53
Try a snapshot (PHP 6.0):            http://bugs.php.net/fix.php?id=51467&r=trysnapshot60
Fixed in SVN:                        http://bugs.php.net/fix.php?id=51467&r=fixed
Fixed in SVN and need be documented: http://bugs.php.net/fix.php?id=51467&r=needdocs
Fixed in release:                    http://bugs.php.net/fix.php?id=51467&r=alreadyfixed
Need backtrace:                      http://bugs.php.net/fix.php?id=51467&r=needtrace
Need Reproduce Script:               http://bugs.php.net/fix.php?id=51467&r=needscript
Try newer version:                   http://bugs.php.net/fix.php?id=51467&r=oldversion
Not developer issue:                 http://bugs.php.net/fix.php?id=51467&r=support
Expected behavior:                   http://bugs.php.net/fix.php?id=51467&r=notwrong
Not enough info:                     http://bugs.php.net/fix.php?id=51467&r=notenoughinfo
Submitted twice:                     http://bugs.php.net/fix.php?id=51467&r=submittedtwice
register_globals:                    http://bugs.php.net/fix.php?id=51467&r=globals
PHP 4 support discontinued:          http://bugs.php.net/fix.php?id=51467&r=php4
Daylight Savings:                    http://bugs.php.net/fix.php?id=51467&r=dst
IIS Stability:                       http://bugs.php.net/fix.php?id=51467&r=isapi
Install GNU Sed:                     http://bugs.php.net/fix.php?id=51467&r=gnused
Floating point limitations:          http://bugs.php.net/fix.php?id=51467&r=float
No Zend Extensions:                  http://bugs.php.net/fix.php?id=51467&r=nozend
MySQL Configuration Error:           http://bugs.php.net/fix.php?id=51467&r=mysqlcfg