From:             julien at palard dot fr
Operating system: Debian 6.0.7
PHP version:      5.4.13
Package:          *General Issues
Bug Type:         Bug
Bug description:Segfault (For the moment, can't reproduce it)

Description:
------------
I got a chance of 0.018% of segfaulting in my current setup, can't
reproduce it for the moment.

But I got a stacktrace ! :-)

gdb /usr/local/php-current/sbin/php-fpm ./core.php-fpm.9958
list
2105                    mm_block = ZEND_MM_PREV_BLOCK(mm_block);
2106                    zend_mm_remove_from_free_list(heap,
(zend_mm_free_block *) mm_block);
2107                    size += ZEND_MM_FREE_BLOCK_SIZE(mm_block);
2108            }
2109            if (ZEND_MM_IS_FIRST_BLOCK(mm_block) &&
2110                ZEND_MM_IS_GUARD_BLOCK(ZEND_MM_BLOCK_AT(mm_block,
size))) {
2111                    zend_mm_del_segment(heap, (zend_mm_segment *)
((char *)mm_block - ZEND_MM_ALIGNED_SEGMENT_SIZE));
2112            } else {
2113                    ZEND_MM_BLOCK(mm_block, ZEND_MM_FREE_BLOCK, size);
2114                    zend_mm_add_to_free_list(heap, (zend_mm_free_block
*) mm_block);
(gdb) bt
#0  _zend_mm_free_int (heap=0x143a330, p=0x1b15518) at
/usr/src/php-5.4.13/Zend/zend_alloc.c:2100
#1  0x000000000068ef1b in zend_hash_destroy (ht=0x1700318) at
/usr/src/php-5.4.13/Zend/zend_hash.c:560
#2  0x00000000006a2ffc in zend_object_std_dtor (object=0x168a238) at
/usr/src/php-5.4.13/Zend/zend_objects.c:44
#3  0x00000000006a3089 in zend_objects_free_object_storage
(object=0x143a330) at /usr/src/php-5.4.13/Zend/zend_objects.c:137
#4  0x00000000006a87ca in zend_objects_store_free_object_storage
(objects=0xe2d3c0) at /usr/src/php-5.4.13/Zend/zend_objects_API.c:92
#5  0x0000000000677f9a in shutdown_executor () at
/usr/src/php-5.4.13/Zend/zend_execute_API.c:297
#6  0x0000000000682c93 in zend_deactivate () at
/usr/src/php-5.4.13/Zend/zend.c:938
#7  0x0000000000627e0f in php_request_shutdown (dummy=<value optimized
out>) at /usr/src/php-5.4.13/main/main.c:1800
#8  0x0000000000730c63 in main (argc=<value optimized out>, argv=<value
optimized out>) at /usr/src/php-5.4.13/sapi/fpm/fpm/fpm_main.c:1952
(gdb) p *next_block
Cannot access memory at address 0x656d616e7624c470
(gdb) print next_block
$7 = (zend_mm_block *) 0x656d616e7624c470

Pointer strangely look like ASCII / UTF8 data, but .. don't know, dropping
it here, if it can help :

$ echo $'\x65\x6d\x61\x6e\x76\x24\xc4\x70'
emanv$�p



Expected result:
----------------
No Segfault :)

Actual result:
--------------
Segfault ):

-- 
Edit bug report at https://bugs.php.net/bug.php?id=64463&edit=1
-- 
Try a snapshot (PHP 5.4):   
https://bugs.php.net/fix.php?id=64463&r=trysnapshot54
Try a snapshot (PHP 5.3):   
https://bugs.php.net/fix.php?id=64463&r=trysnapshot53
Try a snapshot (trunk):     
https://bugs.php.net/fix.php?id=64463&r=trysnapshottrunk
Fixed in SVN:               https://bugs.php.net/fix.php?id=64463&r=fixed
Fixed in release:           https://bugs.php.net/fix.php?id=64463&r=alreadyfixed
Need backtrace:             https://bugs.php.net/fix.php?id=64463&r=needtrace
Need Reproduce Script:      https://bugs.php.net/fix.php?id=64463&r=needscript
Try newer version:          https://bugs.php.net/fix.php?id=64463&r=oldversion
Not developer issue:        https://bugs.php.net/fix.php?id=64463&r=support
Expected behavior:          https://bugs.php.net/fix.php?id=64463&r=notwrong
Not enough info:            
https://bugs.php.net/fix.php?id=64463&r=notenoughinfo
Submitted twice:            
https://bugs.php.net/fix.php?id=64463&r=submittedtwice
register_globals:           https://bugs.php.net/fix.php?id=64463&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=64463&r=php4
Daylight Savings:           https://bugs.php.net/fix.php?id=64463&r=dst
IIS Stability:              https://bugs.php.net/fix.php?id=64463&r=isapi
Install GNU Sed:            https://bugs.php.net/fix.php?id=64463&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=64463&r=float
No Zend Extensions:         https://bugs.php.net/fix.php?id=64463&r=nozend
MySQL Configuration Error:  https://bugs.php.net/fix.php?id=64463&r=mysqlcfg

Reply via email to