From:
Operating system: Windows 7
PHP version: 5.3.8
Package: SPL related
Bug Type: Bug
Bug description:GC crash with referenced array in RecursiveArrayIterator
Description:
------------
GC crash with referenced array in RecursiveArrayIterator,(no problem with
gc_disable)
Test script:
---------------
$tree = array();
$branch = &$tree;
$courses = array(
'f1' => '/d1',
'f6' => '/d2',
'f7' => '/d3',
'f8' => '/d3/d4',
'f9' => '/d3/d4',
);
foreach($courses as $id => $course) {
$path = explode('/', substr($course, 1));
$branch = &$tree;
foreach($path as $category) {
if (!isset($branch[$category])) {
$branch[$category] = array();
}
$branch = &$branch[$category];
}
$branch[] = $id;
}
$iterator = new RecursiveIteratorIterator(
new RecursiveArrayIterator($tree),
RecursiveIteratorIterator::SELF_FIRST
);
foreach($iterator as $file);
Actual result:
--------------
PHP5TS!GC_REMOVE_ZVAL_FROM_BUFFER+2C4In
php__PID__1756__Date__10_26_2011__Time_11_24_34AM__612__Second_Chance_Exception_C0000005.dmp
the assembly instruction at php5ts!gc_remove_zval_from_buffer+2c4 in
C:\Program Files (x86)\PHP\php5ts.dll from The PHP Group has caused an
access violation exception (0xC0000005) when trying to read from memory
location 0x0000000c on thread 0
php5ts!gc_remove_zval_from_buffer+2c4 0127fbd0 00291a70
00291a70
php5ts!gc_remove_zval_from_buffer+476 00291a70 00bef62c
73fc3b4e
php5ts!gc_collect_cycles+6a 00291a70 00291a70
6592cc2e
php5ts!zend_deactivate+126 00291a70 00291a70
00291a04
php5ts!php_request_shutdown+31f 00000000 013c742c
00000001
php!main+122b 00000002 00291a00
00291fd0
php!memcpy+160 7efde000 00befb68
77439ed2
kernel32!BaseThreadInitThunk+e 7efde000 77d7d20f
00000000
ntdll!__RtlUserThreadStart+70 013c3002 7efde000
00000000
ntdll!_RtlUserThreadStart+1b 013c3002 7efde000
00000000
--
Edit bug report at https://bugs.php.net/bug.php?id=60138&edit=1
--
Try a snapshot (PHP 5.4):
https://bugs.php.net/fix.php?id=60138&r=trysnapshot54
Try a snapshot (PHP 5.3):
https://bugs.php.net/fix.php?id=60138&r=trysnapshot53
Try a snapshot (trunk):
https://bugs.php.net/fix.php?id=60138&r=trysnapshottrunk
Fixed in SVN:
https://bugs.php.net/fix.php?id=60138&r=fixed
Fixed in SVN and need be documented:
https://bugs.php.net/fix.php?id=60138&r=needdocs
Fixed in release:
https://bugs.php.net/fix.php?id=60138&r=alreadyfixed
Need backtrace:
https://bugs.php.net/fix.php?id=60138&r=needtrace
Need Reproduce Script:
https://bugs.php.net/fix.php?id=60138&r=needscript
Try newer version:
https://bugs.php.net/fix.php?id=60138&r=oldversion
Not developer issue:
https://bugs.php.net/fix.php?id=60138&r=support
Expected behavior:
https://bugs.php.net/fix.php?id=60138&r=notwrong
Not enough info:
https://bugs.php.net/fix.php?id=60138&r=notenoughinfo
Submitted twice:
https://bugs.php.net/fix.php?id=60138&r=submittedtwice
register_globals:
https://bugs.php.net/fix.php?id=60138&r=globals
PHP 4 support discontinued:
https://bugs.php.net/fix.php?id=60138&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=60138&r=dst
IIS Stability:
https://bugs.php.net/fix.php?id=60138&r=isapi
Install GNU Sed:
https://bugs.php.net/fix.php?id=60138&r=gnused
Floating point limitations:
https://bugs.php.net/fix.php?id=60138&r=float
No Zend Extensions:
https://bugs.php.net/fix.php?id=60138&r=nozend
MySQL Configuration Error:
https://bugs.php.net/fix.php?id=60138&r=mysqlcfg
