ID: 50359 Updated by: j...@php.net Reported By: datacompboy at call2ru dot com -Status: Open +Status: Feedback -Bug Type: Reproducible crash +Bug Type: SOAP related Operating System: Linux 2.6.31-1-amd64 PHP Version: 5.2.11 New Comment:
Please try using this snapshot: http://snaps.php.net/php5.2-latest.tar.gz For Windows: http://windows.php.net/snapshots/ And do not add any 3rd party patches (Suhosin) or load any zend extensions (apc, etc.) when you produce the backtrace. Also, simple backtrace is usually quite enough, just bt.. Previous Comments: ------------------------------------------------------------------------ [2009-12-02 12:16:00] datacompboy at call2ru dot com Description: ------------ Sometimes (from 1-2-3 times in a day to 1 time at 3-4 days) every-minute cron, that fetches from WS, written via SoapServer gets "Bad Gateway" reply. On server-side there an [notice] child pid 1892 exit signal Segmentation fault (11) in error.log and one of: kernel: [3878097.399362] php[23893]: segfault at 7fa3e51aded0 ip 7fa3e51aded0 sp 7fa3e35f0128 error 14 in librt-2.9.so[7fa3e9822000+7000] kernel: [3879416.960444] php[24282]: segfault at 7ff7addc9edb ip 7ff7ab8024d7 sp 7ff7ac20bca0 error 4 in libgcc_s.so.1[7ff7ab7f1000+1a000] in dmesg. After suhosin enabled in sumulation mode, there [error] [client 87.106.137.135] ALERT-SIMULATION - canary mismatch on efree() - heap overflow detected (attacker '87.106.137.135', file '/var/www/yii/framework/web/services/CWebService.php', line 154) messages. Same request executed right after error works fine. So, i have enabled buffer overflow coredump in suhosin, and here an coredump attached. Can't post full reproduce code, since crash very random. System is dual-core Opteron. PHP 5.2.11-1 with Suhosin-Patch 0.9.7 (cli) (built: Sep 20 2009 11:41:46) Copyright (c) 1997-2009 The PHP Group Zend Engine v2.2.0, Copyright (c) 1998-2009 Zend Technologies with Suhosin v0.9.29, Copyright (c) 2007, by SektionEins GmbH Reproduce code: --------------- Dies every time on $server=new SoapServer($this->wsdlUrl,$this->getOptions()); where $this->wsdlUrl = "http://dev-eworld.direktbill.de/y/wsdl/quote"; Expected result: ---------------- Always works Actual result: -------------- #0 0x00007f699b9c566b in suhosin_log () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #1 0x00007f69a402e1dd in _zend_mm_free_int (heap=0xf3eb40, p=0x1374360) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_alloc.c:2036 check = 18433888 mm_block = 0x1374338 next_block = 0x7f69a4537e40 size = 0 #2 0x00007f69a401927b in php_stream_tidy_wrapper_error_log (wrapper=0x7f69a4537e40) at /tmp/buildd/php5-5.2.11.dfsg.1/main/streams/streams.c:195 i = 1 #3 0x00007f69a401aae5 in _php_stream_open_wrapper_ex (path=0x1194760 "http://dev-eworld.direktbill.de/y/wsdl/quote", mode=0x7f69a25c51a0 "\220\066\350\246i\177", options=12, opened_path=0x0, context=0x131ec40) at /tmp/buildd/php5-5.2.11.dfsg.1/main/streams/streams.c:1899 stream = 0x131ec40 wrapper = 0x7f69a4537e40 path_to_open = 0x10814a8 "@~S\244i\177" persistent = 0 copy_of_path = 0x7fffe4fe11ef "" #4 0x00007f69a3e63b89 in php_libxml_streams_IO_open_wrapper ( filename=0x1194760 "http://dev-eworld.direktbill.de/y/wsdl/quote", mode=0x7f69a40c6d7f "rb", read_only=1) at /tmp/buildd/php5-5.2.11.dfsg.1/ext/libxml/libxml.c:323 ssbuf = {sb = {st_dev = 2749774729, st_ino = 23387733, st_nlink = 2803224128, st_mode = 20143263, st_uid = 0, st_gid = 2803224128, __pad0 = 32617, st_rdev = 20143287, st_size = 14, st_blksize = 20143256, st_blocks = 0, st_atim = {tv_sec = 20325376, tv_nsec = 2800236510}, st_mtim = {tv_sec = 4, tv_nsec = 2720850652}, st_ctim = { tv_sec = 18445520, tv_nsec = 0}, __unused = {18824016, 0, 18433888}}} context = 0x7fffe4fe11ef wrapper = 0x1 resolved_path = 0x1194760 "http://dev-eworld.direktbill.de/y/wsdl/quote" path_to_open = 0x11aa650 "\360M\031\001" ret_val = 0x7fffe4fe11ef isescaped = 0 uri = 0x1205bb0 #5 0x00007f69a3e63cb1 in php_libxml_input_buffer_create_filename (URI=0x1 <Address 0x1 out of bounds>, enc=XML_CHAR_ENCODING_NONE) at /tmp/buildd/php5-5.2.11.dfsg.1/ext/libxml/libxml.c:332 ret = 0x0 context = 0x11aa650 #6 0x00007f69a22a34cc in xmlNewInputFromFile () from /usr/lib/libxml2.so.2 No symbol table info available. #7 0x00007f69a22cef32 in ?? () from /usr/lib/libxml2.so.2 No symbol table info available. #8 0x00007f69a22ce53f in xmlLoadExternalEntity () from /usr/lib/libxml2.so.2 No symbol table info available. #9 0x00007f69a22a7744 in xmlCreateURLParserCtxt () from /usr/lib/libxml2.so.2 No symbol table info available. #10 0x00007f69a3f5867e in soap_xmlParseFile (filename=0x1 <Address 0x1 out of bounds>) at /tmp/buildd/php5-5.2.11.dfsg.1/ext/soap/php_xml.c:91 ctxt = 0x7fffe4fe1578 ret = 0x7f69a4547d60 old_allow_url_fopen = 1 '\001' #11 0x00007f69a3f50be3 in load_wsdl_ex (this_ptr=0x0, struri=0x1335c98 "http://dev-eworld.direktbill.de/y/wsdl/quote", ctx=0x7fffe4fe1570, include=0) at /tmp/buildd/php5-5.2.11.dfsg.1/ext/soap/php_sdl.c:299 tmpsdl = 0x1362400 wsdl = 0x1335c98 root = 0x1335c98 definitions = 0x7fffe4fe1578 trav = 0x2d targetNamespace = 0x7fffe4fe11ef #12 0x00007f69a3f5280f in load_wsdl (this_ptr=0x1338930, struri=0x1335c98 "http://dev-eworld.direktbill.de/y/wsdl/quote") at /tmp/buildd/php5-5.2.11.dfsg.1/ext/soap/php_sdl.c:713 ctx = {sdl = 0x0, docs = {nTableSize = 20325376, nTableMask = 0, nNumOfElements = 8, nNextFreeElement = 0, pInternalPointer = 0x0, pListHead = 0x0, pListTail = 0x0, arBuckets = 0x0, pDestructor = 0x1338c08, persistent = 48 '0', nApplyCount = 230 '\346', bApplyProtection = 244 '\364'}, messages = {nTableSize = 65536, nTableMask = 0, nNumOfElements = 8, nNextFreeElement = 0, pInternalPointer = 0x0, pListHead = 0x0, pListTail = 0x0, arBuckets = 0x0, pDestructor = 0x1388920, persistent = 0 '\000', nApplyCount = 0 '\000', bApplyProtection = 0 '\000'}, bindings = {nTableSize = 65536, nTableMask = 0, nNumOfElements = 8, nNextFreeElement = 0, pInternalPointer = 0x0, pListHead = 0x0, pListTail = 0x0, arBuckets = 0x0, pDestructor = 0x1339b28, persistent = 0 '\000', nApplyCount = 0 '\000', bApplyProtection = 0 '\000'}, portTypes = { nTableSize = 65536, nTableMask = 0, nNumOfElements = 8, nNextFreeElement = 0, pInternalPointer = 0x0, pListHead = 0x0, pListTail = 0x0, arBuckets = 0x0, pDestructor = 0x1375db8, persistent = 0 '\000', nApplyCount = 0 '\000', bApplyProtection = 0 '\000'}, services = {nTableSize = 65536, nTableMask = 0, nNumOfElements = 8, nNextFreeElement = 0, pInternalPointer = 0x0, pListHead = 0x0, pListTail = 0x0, arBuckets = 0x0, pDestructor = 0x1375e28, persistent = 0 '\000', nApplyCount = 0 '\000', bApplyProtection = 0 '\000'}, attributes = 0x10000, attributeGroups = 0x0, context = 0x0, old_header = 0x0} i = 32767 n = -453110272 #13 0x00007f69a3f53eaa in get_sdl (this_ptr=0x1338930, uri=0x17ee4a0 "\200F\b\244i\177", cache_wsdl=0) at /tmp/buildd/php5-5.2.11.dfsg.1/ext/soap/php_sdl.c:3266 fn = "\336\067\350\246i\177\000\000\240\034\376\344\377\177\000\000\000\000\000\000\000\000\000\000h\000\000\000\000\000 \000\000\200\001\000\000\000\000\000\000\204\262\226\316\363\243\273\367\316\370\061\217\066p\214\361.\a\346)\203o\314\002VG\355 o\177\321\b\304x+\v\245\230\313+\256\207\354B\220\267U\346-O\376\214\306o_U\n\353\276\354\067\016\222\362\026\340\031\376\344\37 7\177\000\000\217â¬\001\000\000\000\000`\a\000\000\000\000\000\000`\a\000\000v\000\000\000o\a\000\000\000\000\000\000<lA\001o\20 7\000\000/ï¬\001\000\000\000\000 \023\"\001\000\000\000\000\006\000\000\000\006\000\000\000 \023\"\001\000\000\000\000\000\200\0 00\000o\a\000\000\060ï¬\001\000\000\000\000\320\032\376\344\037\000\000\000\324\001\000\000\000\000\000\000s\361\000\000\000\000 \000\000\202\361\000\000\000\000\000\000\370\364\000\000\000\000\000\000\026\000\000\000\000\000\000\000\020\222;\001\000\000\00 0\000\t\000\000\000\000\000\000\000"... sdl = 0x0 old_error_code = 0x125d7f8 "\002Xx\001" uri_len = 32617 context = 0x0 tmp = 0x7f69a426ce56 proxy_host = 0xe proxy_port = 0x0 orig_context = 0x0 new_context = 0x1338448 headers = {c = 0x1782878 "\260\022\t\244i\177", len = 0, a = 0} key = 0x2ca4548500 <Address 0x2ca4548500 out of bounds> t = 0 #14 0x00007f69a3f236b6 in zim_SoapClient_SoapClient (ht=0, return_value=0x7f69a429c6e8, return_value_ptr=0x7f699b9c535d, this_ptr=0x1375318, return_value_used=1697478245) at /tmp/buildd/php5-5.2.11.dfsg.1/ext/soap/soap.c:2505 __orig_bailout = 0x7fffe4fe4100 __bailout = {{__jmpbuf = {3841902352, 32767, 23, 0, 3622280798, 2203380534, 22, 0}, __mask_was_saved = -1216373154, __saved_mask = {__val = {0, 0, 3841862000, 0, 3841902352, 32767, 3841902352, 32767, 3841902352, 32767, 8, 0, 17331736, 0, 8, 0}}}} wsdl = 0x1318e80 options = 0x1263108 soap_version = 1 context = 0x0 cache_wsdl = 0 sdl = 0x0 typemap_ht = 0x0 _old_handler = 0 '\000' _old_error_code = 0x13387a0 "\020u\b\001" _old_error_object = 0x0 _old_soap_version = 0 _old_in_compilation = 0 '\000' _old_in_execution = 0 '\000' _old_current_execute_data = 0x1005e8500000001 #15 0x00007f699b9c7b4d in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #16 0x00007f69a4084271 in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fe4100) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:202 return_reference = 1 '\001' opline = 0x4 original_return_value = 0x10879c0 current_scope = 0x17345e8 current_this = 0x1a6dcd0 return_value_used = 0 should_change_scope = 115 's' #17 0x00007f69a406d604 in execute (op_array=0x1733278) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x17345e8, function_state = {function_symbol_table = 0x1758298, function = 0x10879c0, reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc = 0x10879c0, op_array = 0x1733278, object = 0x1338930, Ts = 0x7fffe4fe2e80, CVs = 0x7fffe4fe2e30, original_in_execution = 1 '\001', symbol_table = 0x1758150, prev_execute_data = 0x7fffe4fe4520, old_error_reporting = 0x0} #18 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #19 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fe4520) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234 opline = 0x61a05e85bcd82f9b original_return_value = 0x7fffe4fe4c08 current_scope = 0x1a14e80 current_this = 0x1a03b98 return_value_used = 0 should_change_scope = 254 '\376' #20 0x00007f69a406d604 in execute (op_array=0x1a64198) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x1a14e80, function_state = {function_symbol_table = 0x1758150, function = 0x1733278, reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc = 0x1733278, op_array = 0x1a64198, object = 0x173cea0, Ts = 0x7fffe4fe4380, CVs = 0x7fffe4fe4360, original_in_execution = 1 '\001', symbol_table = 0x1758050, prev_execute_data = 0x7fffe4fe4c40, old_error_reporting = 0x0} #21 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #22 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fe4c40) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234 opline = 0x174b9c8 original_return_value = 0x7fffe4fe71f0 current_scope = 0x174ba68 current_this = 0x17415e0 return_value_used = 0 should_change_scope = 116 't' #23 0x00007f69a406d604 in execute (op_array=0x1749510) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x174ba68, function_state = {function_symbol_table = 0x1758050, function = 0x1a64198, reserved = {0x100000000010000, 0x1, 0x186c927, 0x7fff00000001}}, fbc = 0x1a64198, op_array = 0x1749510, object = 0x1a6c190, Ts = 0x7fffe4fe47a0, CVs = 0x7fffe4fe4780, original_in_execution = 1 '\001', symbol_table = 0x1b04ac8, prev_execute_data = 0x7fffe4fe7220, old_error_reporting = 0x0} #24 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #25 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fe7220) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234 opline = 0x7f69a40b3652 original_return_value = 0x7fffe4fe76b0 current_scope = 0x1a14838 current_this = 0x19ffbb8 return_value_used = 0 should_change_scope = 0 '\000' #26 0x00007f69a406d604 in execute (op_array=0x1a003e8) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x1a14838, function_state = {function_symbol_table = 0x1b04ac8, function = 0x1749510, reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc = 0x1749510, op_array = 0x1a003e8, object = 0x1a6d380, Ts = 0x7fffe4fe4ec0, CVs = 0x7fffe4fe4ea0, original_in_execution = 1 '\001', symbol_table = 0x1ace190, prev_execute_data = 0x7fffe4fe76e0, old_error_reporting = 0x0} #27 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #28 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fe76e0) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234 opline = 0x7f69a402f2d8 original_return_value = 0x7fffe4fe7a30 current_scope = 0x1a03140 current_this = 0x19ffbb8 return_value_used = 0 should_change_scope = 160 '\240' #29 0x00007f69a406d604 in execute (op_array=0x1a28bc0) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x1a03140, function_state = {function_symbol_table = 0x1ace190, function = 0x1a003e8, reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc = 0x1a003e8, op_array = 0x1a28bc0, object = 0x1a6c190, Ts = 0x7fffe4fe74a0, CVs = 0x7fffe4fe7480, original_in_execution = 1 '\001', symbol_table = 0x1aa8f10, prev_execute_data = 0x7fffe4fe7a60, old_error_reporting = 0x0} #30 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #31 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fe7a60) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234 opline = 0x173d190 original_return_value = 0x7fffe4fe80a8 current_scope = 0x1754288 current_this = 0x17403f8 return_value_used = 0 should_change_scope = 115 's' #32 0x00007f69a406d604 in execute (op_array=0x1752e18) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x1754288, function_state = {function_symbol_table = 0x1aa8f10, function = 0x1a28bc0, reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc = 0x1a28bc0, op_array = 0x1752e18, object = 0x1a6c190, Ts = 0x7fffe4fe7960, CVs = 0x7fffe4fe7940, original_in_execution = 1 '\001', symbol_table = 0x1aa92a0, prev_execute_data = 0x7fffe4fe8180, old_error_reporting = 0x0} #33 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #34 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fe8180) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234 opline = 0x1a6d808 original_return_value = 0x7fffe4fe85a8 current_scope = 0x174b798 current_this = 0x17415e0 return_value_used = 0 should_change_scope = 2 '\002' #35 0x00007f69a406d604 in execute (op_array=0x1749510) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x174b798, function_state = {function_symbol_table = 0x1aa92a0, function = 0x1752e18, reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc = 0x1752e18, op_array = 0x1749510, object = 0x1753430, Ts = 0x7fffe4fe7ce0, CVs = 0x7fffe4fe7cc0, original_in_execution = 1 '\001', symbol_table = 0x1aa6d68, prev_execute_data = 0x7fffe4fe8600, old_error_reporting = 0x0} #36 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #37 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fe8600) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234 opline = 0x1a2cf28 original_return_value = 0x7fffe4fe8b40 current_scope = 0x1a2b7b8 current_this = 0x1a03b98 return_value_used = 0 should_change_scope = 162 '\242' #38 0x00007f69a406d604 in execute (op_array=0x1a63ff8) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x1a2b7b8, function_state = {function_symbol_table = 0x1aa6d68, function = 0x1749510, reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc = 0x1749510, op_array = 0x1a63ff8, object = 0x1a6d380, Ts = 0x7fffe4fe8410, CVs = 0x7fffe4fe83e0, original_in_execution = 1 '\001', symbol_table = 0x1aa5310, prev_execute_data = 0x7fffe4fe8c40, old_error_reporting = 0x0} #39 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #40 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fe8c40) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234 opline = 0x7fffe4fe8c40 original_return_value = 0x7fffe4fe9118 current_scope = 0x1a2a810 current_this = 0x1a03b98 return_value_used = 0 should_change_scope = 254 '\376' #41 0x00007f69a406d604 in execute (op_array=0x1a63e50) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x1a2a810, function_state = {function_symbol_table = 0x1aa5310, function = 0x1a63ff8, reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc = 0x1a63ff8, op_array = 0x1a63e50, object = 0x1a6c190, Ts = 0x7fffe4fe8890, CVs = 0x7fffe4fe8860, original_in_execution = 1 '\001', symbol_table = 0x1a9f8b0, prev_execute_data = 0x7fffe4fe92e0, old_error_reporting = 0x0} #42 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #43 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fe92e0) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234 opline = 0x7f69a4548508 original_return_value = 0x7fffe4fe9988 current_scope = 0x11ebbe0 current_this = 0x11dc3b0 return_value_used = 0 should_change_scope = 30 '\036' #44 0x00007f69a406d604 in execute (op_array=0x11ed128) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x11ebbe0, function_state = {function_symbol_table = 0x1a9f8b0, function = 0x1a63e50, reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc = 0x1a63e50, op_array = 0x11ed128, object = 0x1a6c190, Ts = 0x7fffe4fe8ee0, CVs = 0x7fffe4fe8ea0, original_in_execution = 1 '\001', symbol_table = 0x1a9f6c8, prev_execute_data = 0x7fffe4fe99c0, old_error_reporting = 0x0} #45 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #46 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fe99c0) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234 opline = 0x7f69a4548508 original_return_value = 0x7fffe4fe9da0 current_scope = 0x11df6e8 current_this = 0x11dc3b0 return_value_used = 0 should_change_scope = 29 '\035' #47 0x00007f69a406d604 in execute (op_array=0x1158058) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x11df6e8, function_state = {function_symbol_table = 0x1a9f6c8, function = 0x11ed128, reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc = 0x11ed128, op_array = 0x1158058, object = 0x1157c00, Ts = 0x7fffe4fe9570, CVs = 0x7fffe4fe9540, original_in_execution = 1 '\001', symbol_table = 0x1153210, prev_execute_data = 0x7fffe4fe9f10, old_error_reporting = 0x0} #48 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #49 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fe9f10) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234 opline = 0x61a05e85bcd82f9b original_return_value = 0x7fffe4fea3a0 current_scope = 0x1894098 current_this = 0x11bf108 return_value_used = 0 should_change_scope = 254 '\376' #50 0x00007f69a406d604 in execute (op_array=0x1a95850) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x1894098, function_state = {function_symbol_table = 0x1153210, function = 0x1158058, reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc = 0x1158058, op_array = 0x1a95850, object = 0x1157c00, Ts = 0x7fffe4fe9c30, CVs = 0x7fffe4fe9c20, original_in_execution = 1 '\001', symbol_table = 0x1151d00, prev_execute_data = 0x7fffe4fea3d0, old_error_reporting = 0x0} #51 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #52 0x00007f69a4083ebe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fffe4fea3d0) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:234 opline = 0x11563e8 original_return_value = 0x7fffe4fea5d8 current_scope = 0x11529f0 current_this = 0x0 return_value_used = 0 should_change_scope = 21 '\025' #53 0x00007f69a406d604 in execute (op_array=0x1151990) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend_vm_execute.h:92 execute_data = {opline = 0x11529f0, function_state = {function_symbol_table = 0x1151d00, function = 0x1a95850, reserved = {0x7f69a6e8841a, 0x7f699b9d0011, 0x1, 0x9}}, fbc = 0x1a95850, op_array = 0x1151990, object = 0x1157c00, Ts = 0x7fffe4fea190, CVs = 0x7fffe4fea170, original_in_execution = 0 '\000', symbol_table = 0x7f69a4548688, prev_execute_data = 0x0, old_error_reporting = 0x0} #54 0x00007f699b9c7fbf in ?? () from /usr/lib/php5/20060613/suhosin.so No symbol table info available. #55 0x00007f69a4049a38 in zend_execute_scripts (type=32767, retval=0x0, file_count=-453073448) at /tmp/buildd/php5-5.2.11.dfsg.1/Zend/zend.c:1215 files = 0x7fffe4fea5a8 i = 1 file_handle = 0x7fffe4fec990 orig_op_array = 0x800000003 orig_retval_ptr_ptr = 0x0 local_retval = 0x1 #56 0x00007f69a4004968 in php_execute_script (primary_file=0x19ed780) at /tmp/buildd/php5-5.2.11.dfsg.1/main/main.c:2041 __orig_bailout = 0x0 __bailout = {{__jmpbuf = {3841893840, 32767, 2751765048, 32617, 2, 32617, 2245244407, 3771558564}, __mask_was_saved = -453073448, __saved_mask = {__val = {3, 8, 0, 0, 0, 0, 40, 0, 3841894096, 32767, 3841893856, 32767, 0, 0, 1, 0}}}} prepend_file_p = 0x0 append_file_p = 0x0 prepend_file = {type = 0 '\000', filename = 0x0, opened_path = 0x0, handle = {fd = 0, fp = 0x0, stream = { handle = 0x0, reader = 0, closer = 0, fteller = 0x7fffe4fec890, interactive = 0}}, free_filename = 72 'H'} append_file = {type = 0 '\000', filename = 0x0, opened_path = 0x0, handle = {fd = 0, fp = 0x0, stream = {handle = 0x0, reader = 0, closer = 0, fteller = 0, interactive = 0}}, free_filename = 0 '\000'} retval = 0 #57 0x00007f69a40bf555 in php_handler (r=0x140d510) at /tmp/buildd/php5-5.2.11.dfsg.1/sapi/apache2handler/sapi_apache2.c:651 __bailout = {{__jmpbuf = {18398280, 0, 120, 0, 3563167326, 2106055757, 21021768, 0}, __mask_was_saved = 194092638, __saved_mask = {__val = {0, 9, 0, 9, 4294967295, 4294967295, 4294967295, 4294967295, 4294967295, 4294967295, 3841903180, 32767, 4294967295, 4294967295, 4294967295, 4294967295}}}} ctx = 0x1185670 conf = 0x140c448 brigade = 0x0 bucket = 0x7fffe4fe11ef rv = -453111313 parent_req = 0x1 #58 0x000000000043ba93 in ap_run_handler () No symbol table info available. #59 0x000000000043f0ef in ap_invoke_handler () No symbol table info available. #60 0x000000000044c280 in ap_internal_redirect () No symbol table info available. #61 0x00007f69a18bdba5 in ?? () from /usr/lib/apache2/modules/mod_rewrite.so No symbol table info available. #62 0x000000000043ba93 in ap_run_handler () No symbol table info available. #63 0x000000000043f0ef in ap_invoke_handler () No symbol table info available. #64 0x000000000044c418 in ap_process_request () No symbol table info available. #65 0x00000000004494f8 in ?? () No symbol table info available. #66 0x0000000000443193 in ap_run_process_connection () No symbol table info available. #67 0x0000000000450a7b in ?? () No symbol table info available. #68 0x0000000000450d44 in ?? () No symbol table info available. #69 0x000000000045195e in ap_mpm_run () No symbol table info available. #70 0x0000000000428711 in main () No symbol table info available. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=50359&edit=1