From: steve at grommit dot com Operating system: OpenSolaris (snv_75a) PHP version: 5.2.5 PHP Bug Type: Apache2 related Bug description: Core dump in _zend_mm_alloc_int
Description: ------------ I'm seeing consistent core dumps of httpd in libphp5.so (compiled on my Solaris Nevada build 75a machine), all of them here: libphp5.so`_zend_mm_alloc_int+0x5e(82329e8, 2d) This is snv_75a on a quad core Intel xeon with PHP 5.2.5 and Apache2 2.2.3. Actual result: -------------- Stack trace: [EMAIL PROTECTED]:core] 501$ mdb core.httpd.22142 $Loading modules: [ libc.so.1 libnvpair.so.1 libuutil.so.1 libavl.so.1 ld.so.1 ] > $c libphp5.so`_zend_mm_alloc_int+0x5e(82329e8, 2d) libphp5.so`_emalloc+0x27(2d) libphp5.so`_zend_hash_quick_add_or_update+0x1f1(85cec90, 8999260, a, 7f4f5fed, 80438a8, 4) libphp5.so`_get_zval_ptr_ptr+0x17e(880a6c0, 8043940, 80438f0, 1) libphp5.so`ZEND_RECV_INIT_SPEC_CONST_HANDLER+0x103(8044168) libphp5.so`execute+0x12d(8714c90) libphp5.so`zend_do_fcall_common_helper_SPEC+0x29f(8044fd8) libphp5.so`ZEND_DO_FCALL_SPEC_CONST_HANDLER+0x67(8044fd8) libphp5.so`execute+0x12d(8906200) libphp5.so`zend_do_fcall_common_helper_SPEC+0x29f(8047558) libphp5.so`ZEND_DO_FCALL_BY_NAME_SPEC_HANDLER+0x15(8047558) libphp5.so`execute+0x12d(823daf8) libphp5.so`zend_execute_scripts+0x128(8, 0, 3, 0, 8047b24, 0) libphp5.so`php_execute_script+0x26d(8047b24) libphp5.so`php_handler+0x426(8380000) ap_run_handler+0x25(8380000) ap_invoke_handler+0xba(8380000) ap_process_request+0x50(8380000) ap_process_http_connection+0x52(8372260) ap_run_process_connection+0x25(8372260) ap_process_connection+0x3a(8372260, 8371fc8) child_main+0x2f6(13) make_child+0x84(80beaf8, 13) perform_idle_server_maintenance+0xe2(80bcc58) ap_mpm_run+0x234(80bcc58, 80ead10, 80beaf8) main+0x6e8(3, 8047e38, 8047e48) _start+0x7a(3, 8047ed4, 8047eeb, 8047eee, 0, 8047ef4) Dissassembly of that portion of the code: > libphp5.so`_zend_mm_alloc_int+0x5e::dis libphp5.so`_zend_mm_alloc_int+0x3f: shrl $0x3,%esi libphp5.so`_zend_mm_alloc_int+0x42: leal -0x2(%esi),%ecx libphp5.so`_zend_mm_alloc_int+0x45: cmpl %edx,%eax libphp5.so`_zend_mm_alloc_int+0x47: jb +0x44e <libphp5.so`_zend_mm_alloc_int+0x49b> libphp5.so`_zend_mm_alloc_int+0x4d: movl 0x8(%ebp),%eax libphp5.so`_zend_mm_alloc_int+0x50: movl %eax,-0x4(%ebp) libphp5.so`_zend_mm_alloc_int+0x53: movl 0x3c(%eax,%esi,4),%edx libphp5.so`_zend_mm_alloc_int+0x57: testl %edx,%edx libphp5.so`_zend_mm_alloc_int+0x59: je +0x18 <libphp5.so`_zend_mm_alloc_int+0x73> libphp5.so`_zend_mm_alloc_int+0x5b: leal 0x8(%edx),%eax libphp5.so`_zend_mm_alloc_int+0x5e: movl 0x8(%edx),%ecx libphp5.so`_zend_mm_alloc_int+0x61: movl -0x4(%ebp),%edx libphp5.so`_zend_mm_alloc_int+0x64: movl %ecx,0x3c(%edx,%esi,4) libphp5.so`_zend_mm_alloc_int+0x68: movl -0x10(%ebp),%ecx libphp5.so`_zend_mm_alloc_int+0x6b: subl %ecx,0x40(%edx) libphp5.so`_zend_mm_alloc_int+0x6e: jmp +0x443 <libphp5.so`_zend_mm_alloc_int+0x4b6> libphp5.so`_zend_mm_alloc_int+0x73: movl -0x4(%ebp),%eax libphp5.so`_zend_mm_alloc_int+0x76: movl 0x4(%eax),%eax libphp5.so`_zend_mm_alloc_int+0x79: shrl %cl,%eax libphp5.so`_zend_mm_alloc_int+0x7b: testl %eax,%eax libphp5.so`_zend_mm_alloc_int+0x7d: je +0x1b <libphp5.so`_zend_mm_alloc_int+0x9a> Register contents: > $r %cs = 0x0043 %eax = 0x41373041 %ds = 0x004b %ebx = 0xfd3d156c %ss = 0x004b %ecx = 0x00000005 %es = 0x004b %edx = 0x41373039 %fs = 0x0000 %esi = 0x00000007 %gs = 0x01c3 %edi = 0x00000000 %eip = 0xfd28f552 libphp5.so`_zend_mm_alloc_int+0x5e %ebp = 0x080437ec %kesp = 0x00000000 %eflags = 0x00000206 id=0 vip=0 vif=0 ac=0 vm=0 rf=0 nt=0 iopl=0x0 status=<of,df,IF,tf,sf,zf,af,PF,cf> %esp = 0x080437c4 %trapno = 0xe %err = 0x4 > -- Edit bug report at http://bugs.php.net/?id=43582&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=43582&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=43582&r=trysnapshot52 Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=43582&r=trysnapshot53 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=43582&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=43582&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=43582&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=43582&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=43582&r=needscript Try newer version: http://bugs.php.net/fix.php?id=43582&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=43582&r=support Expected behavior: http://bugs.php.net/fix.php?id=43582&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=43582&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=43582&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=43582&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=43582&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=43582&r=dst IIS Stability: http://bugs.php.net/fix.php?id=43582&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=43582&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=43582&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=43582&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=43582&r=mysqlcfg