Bug #74369 [Com]: Random segmentation fault (core dumped)

Edit report at https://bugs.php.net/bug.php?id=74369&edit=1

 ID:                 74369
 Comment by:         spam2 at rhsoft dot net
 Reported by:        sexecut at gmail dot com
 Summary:            Random segmentation fault (core dumped)
 Status:             Feedback
 Type:               Bug
 Package:            Reproducible crash
 Operating System:   Ubuntu 16.04.1 LTS
 PHP Version:        7.1.3
 Block user comment: N
 Private report:     N

 New Comment:

> A proper reproducing script starts with <?php 
> and ends with ?>,is max. 10-20 lines long

well, but when it happens only with a large script that's just impossible and that standard paragrpah not very helpful


Previous Comments:
------------------------------------------------------------------------
[2017-04-04 11:01:23] [email protected]

Can you provide the result of running the code under "USE_ZEND_ALLOC=0 valgrind php"?

------------------------------------------------------------------------
[2017-04-04 10:55:29] [email protected]

Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves. 

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external 
resources such as databases, etc. If the script requires a 
database to demonstrate the issue, please make sure it creates 
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.



------------------------------------------------------------------------
[2017-04-04 10:49:46] sexecut at gmail dot com

Description:
------------
My big php scripts arbitrarily end with such an error: Segmentation fault (core dumped)
The application in which this occurs is very large. It is not possible to download it. To reproduce this bug more compactly it is impossible.

My php.ini is standard.
Configure line:
'./configure'\
    '--enable-debug'\
    '--enable-fpm'\
    '--enable-cli'\
    '--with-imap'\
    '--with-imap-ssl'\
    '--with-readline'\
    '--with-pic' '--disable-rpath' '--without-pear' '--with-bz2' '--with-freetype-dir=/usr'\
    '--with-png-dir=/usr' '--with-xpm-dir=/usr' '--enable-gd-native-ttf' '--without-gdbm' '--with-gettext'\
    '--with-gmp=/usr/include/i386-linux-gnu' '--with-iconv' '--with-jpeg-dir=/usr'\
    '--with-openssl' '--with-pcre-regex=/usr/include/' '--with-zlib'\
    '--with-pear'\
    '--with-layout=GNU' '--enable-exif' '--enable-ftp' '--enable-sockets' '--enable-sysvsem'\
    '--enable-sysvshm' '--enable-sysvmsg' '--with-kerberos' '--enable-shmop' '--enable-calendar'\
    '--with-libxml-dir=/usr' '--enable-xml' '--enable-soap'\
    '--enable-pcntl'\
    '--with-pdo-pgsql'\
    '--with-gd' '--disable-dba' '--without-unixODBC'\
    '--with-mcrypt' '--enable-zip'\
    '--enable-mbstring' '--without-pspell' '--disable-wddx' '--with-curl' '--disable-posix' '--disable-sysvmsg'\
    '--disable-sysvshm' '--disable-sysvsem'\
    '--enable-short-tags'\
    '--enable-phpdbg'\
    '--enable-intl'\
    '--enable-libxml';

Expected result:
----------------
$ ulimit -c unlimited; php ./yii import 12600
start
end

Actual result:
--------------
$ ulimit -c unlimited; php ./yii import 12600
start
Segmentation fault (core dumped)

$ gdb /usr/local/bin/php /var/www/debug/core-yii.48714 
GNU gdb (Ubuntu 7.11.1-0ubuntu1~16.04) 7.11.1
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/local/bin/php...done.

warning: core file may not match specified executable file.
[New LWP 48714]

warning: Could not load shared library symbols for /usr/lib/libc-client.so.2007e.
Do you need "set solib-search-path" or "set sysroot"?
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/local/bin/php ./yii import 12580'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  zend_mm_alloc_small (bin_num=6, size=56, heap=0x7f7b87000040) at /usr/local/etc/php-7.1.3/Zend/zend_alloc.c:1261
1261			heap->free_slot[bin_num] = p->next_free_slot;
(gdb) bt
#0  zend_mm_alloc_small (bin_num=6, size=56, heap=0x7f7b87000040) at /usr/local/etc/php-7.1.3/Zend/zend_alloc.c:1261
#1  _emalloc_56 () at /usr/local/etc/php-7.1.3/Zend/zend_alloc.c:2336
#2  0x000000000082d1f0 in _array_init (arg=arg@entry=0x7f7b87016120, size=2) at /usr/local/etc/php-7.1.3/Zend/zend_API.c:1060
#3  0x0000000000742b73 in zif_array_map (execute_data=0x7f7b87016130, return_value=0x7f7b87016120) at /usr/local/etc/php-7.1.3/ext/standard/array.c:5342
#4  0x00000000008cc6d2 in ZEND_DO_FCALL_BY_NAME_SPEC_RETVAL_USED_HANDLER () at /usr/local/etc/php-7.1.3/Zend/zend_vm_execute.h:876
#5  0x0000000000874a6b in execute_ex (ex=<optimized out>) at /usr/local/etc/php-7.1.3/Zend/zend_vm_execute.h:429
#6  0x000000000081afe7 in zend_call_function (fci=0x7f7b870160a0, fci@entry=0x7ffd24dabe70, fci_cache=fci_cache@entry=0x7ffd24dabe40) at /usr/local/etc/php-7.1.3/Zend/zend_execute_API.c:846
#7  0x00000000006aa674 in zim_reflection_class_newInstanceArgs (execute_data=<optimized out>, return_value=0x7f7b87015b20) at /usr/local/etc/php-7.1.3/ext/reflection/php_reflection.c:4975
#8  0x00000000008cd12c in ZEND_DO_FCALL_SPEC_RETVAL_USED_HANDLER () at /usr/local/etc/php-7.1.3/Zend/zend_vm_execute.h:1097
#9  0x0000000000874a6b in execute_ex (ex=<optimized out>) at /usr/local/etc/php-7.1.3/Zend/zend_vm_execute.h:429
#10 0x000000000081afe7 in zend_call_function (fci=0x7f7b870158b0, fci@entry=0x7ffd24dac080, fci_cache=fci_cache@entry=0x7ffd24dac050) at /usr/local/etc/php-7.1.3/Zend/zend_execute_API.c:846
#11 0x000000000074588b in zif_call_user_func_array (execute_data=0x7f7b87013220, return_value=0x7f7b87013210) at /usr/local/etc/php-7.1.3/ext/standard/basic_functions.c:4853
#12 0x00000000008cc6d2 in ZEND_DO_FCALL_BY_NAME_SPEC_RETVAL_USED_HANDLER () at /usr/local/etc/php-7.1.3/Zend/zend_vm_execute.h:876
#13 0x0000000000874a6b in execute_ex (ex=<optimized out>) at /usr/local/etc/php-7.1.3/Zend/zend_vm_execute.h:429
#14 0x00000000008cf590 in zend_execute (op_array=0x7f7b8707f0e0, op_array@entry=0x7f7b867a2260, return_value=return_value@entry=0x7f7b87013060) at /usr/local/etc/php-7.1.3/Zend/zend_vm_execute.h:474
#15 0x000000000082b153 in zend_execute_scripts (type=type@entry=8, retval=0x7f7b87013060, retval@entry=0x0, file_count=file_count@entry=3) at /usr/local/etc/php-7.1.3/Zend/zend.c:1476
#16 0x00000000007c78f0 in php_execute_script (primary_file=primary_file@entry=0x7ffd24dae700) at /usr/local/etc/php-7.1.3/main/main.c:2537
#17 0x00000000008d18a6 in do_cli (argc=4, argv=0x1b0df20) at /usr/local/etc/php-7.1.3/sapi/cli/php_cli.c:993
#18 0x000000000044acfc in main (argc=4, argv=0x1b0df20) at /usr/local/etc/php-7.1.3/sapi/cli/php_cli.c:1381


------------------------------------------------------------------------



--
Edit this bug report at https://bugs.php.net/bug.php?id=74369&edit=1