ID:               50611
 Comment by:       akrus at flygroup dot st
 Reported By:      an0nym at narod dot ru
 Status:           Open
 Bug Type:         Reproducible crash
 Operating System: FreeBSD 7.2-RELEASE-p3 etc
 PHP Version:      5.3.1, 5.3.0, 5.2.10
 New Comment:

Also can confirm this. Tried to debug with gdb under FreeBSD with php
5.3.1:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x29f01040 (LWP 100325)]
0x0841c6de in ZEND_FETCH_DIM_W_SPEC_CV_CONST_HANDLER
(execute_data=0x2e203020) at zend_vm_execute.h:23571
23571                  
Z_DELREF_PP(EX_T(opline->result.u.var).var.ptr_ptr);
(gdb) bt full
#0  0x0841c6de in ZEND_FETCH_DIM_W_SPEC_CV_CONST_HANDLER
(execute_data=0x2e203020) at zend_vm_execute.h:23571
        opline = (zend_op *) 0x29f21e4c
        container = Variable "container" is not available.


Previous Comments:
------------------------------------------------------------------------

[2009-12-30 08:45:52] an0nym at narod dot ru

Segfault occurs on 
Windows 2003/XP, PHP 5.3.1, NTS, VC6, FastCGI
Debian, PHP 5.3.0-3
FreeBSD, PHP 5.2.10
FreeBSD, PHP 5.3.1

Fatal error occurs on
Ubuntu 6.3, PHP 5.2.10-2
FreeBSD, PHP 5.2.9
FreeBSD, PHP 5.2.6
FreeBSD, PHP 5.2.11

------------------------------------------------------------------------

[2009-12-30 08:35:42] mikhail dot v dot gavrilov at gmail dot com

Can confirm this.
OS: (Windows 2003 SP2 || Windows XP SP3) && PHP 5.3.1 NTS VC6

------------------------------------------------------------------------

[2009-12-30 08:30:22] an0nym at narod dot ru

Description:
------------
Segmentation fault occurs when trying to assign a var to a reference
onto some index of a string variable. (I know it's dumb, but no segfault
should occur, but a Fatal error: ...)

Reproduce code:
---------------
<?php
$value1 = 'foobar';
$value2 = &$value1[0];

Expected result:
----------------
Fatal Error

Actual result:
--------------
Segmentation Fault


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=50611&edit=1

Reply via email to