ID:               24658
 Updated by:       [EMAIL PROTECTED]
 Reported By:      eric at cosky dot com
 Status:           Verified
 Bug Type:         Zend Engine 2 problem
 Operating System: irrelevant
 PHP Version:      5CVS-20030718
 New Comment:

Backtrace:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1024 (runnable)]
0x817b4fc in zend_assign_to_variable_reference (result=0x4029dee0,
variable_ptr_ptr=0x4029a940, 
    value_ptr_ptr=0x4028f9d8, Ts=0x0) at
/usr/src/web/php/php5/Zend/zend_execute.c:238
238                     T(result->u.var).var.ptr_ptr =
variable_ptr_ptr;
(gdb) bt
#0  0x817b4fc in zend_assign_to_variable_reference (result=0x4029dee0,
variable_ptr_ptr=0x4029a940, 
    value_ptr_ptr=0x4028f9d8, Ts=0x0) at
/usr/src/web/php/php5/Zend/zend_execute.c:238
#1  0x8197be9 in zend_recv_handler (execute_data=0xbfffccec,
op_array=0x8244858)
    at /usr/src/web/php/php5/Zend/zend_execute.c:2988
#2  0x817e77e in execute (op_array=0x8244858) at
/usr/src/web/php/php5/Zend/zend_execute.c:1194
#3  0x815c0f1 in fast_call_user_function (function_table=0x81e9c78,
object_pp=0x0, function_name=0x4029cec4, 
    retval_ptr_ptr=0xbfffce44, param_count=3, params=0xbfffce5c,
no_separation=0, symbol_table=0x0, 
    function_pointer=0x81e516c) at
/usr/src/web/php/php5/Zend/zend_execute_API.c:693
#4  0x80cc434 in php_array_walk (target_hash=0x4029cd1c,
userdata=0x4028f9cc, recursive=0)
    at /usr/src/web/php/php5/ext/standard/array.c:990
#5  0x80cc5ff in zif_array_walk (ht=3, return_value=0x4029cf24,
this_ptr=0x0, return_value_used=0)
    at /usr/src/web/php/php5/ext/standard/array.c:1045
#6  0x8195cdf in zend_do_fcall_common_helper (execute_data=0xbfffd03c,
op_array=0x4029dc84)
    at /usr/src/web/php/php5/Zend/zend_execute.c:2634
#7  0x8196384 in zend_do_fcall_handler (execute_data=0xbfffd03c,
op_array=0x4029dc84)
    at /usr/src/web/php/php5/Zend/zend_execute.c:2763
#8  0x817e77e in execute (op_array=0x4029dc84) at
/usr/src/web/php/php5/Zend/zend_execute.c:1194
#9  0x8195dd1 in zend_do_fcall_common_helper (execute_data=0xbfffd28c,
op_array=0x4029a8b4)
    at /usr/src/web/php/php5/Zend/zend_execute.c:2661
#10 0x8196128 in zend_do_fcall_by_name_handler
(execute_data=0xbfffd28c, op_array=0x4029a8b4)
    at /usr/src/web/php/php5/Zend/zend_execute.c:2732
#11 0x817e77e in execute (op_array=0x4029a8b4) at
/usr/src/web/php/php5/Zend/zend_execute.c:1194
#12 0x816589f in zend_execute_scripts (type=8, retval=0x0,
file_count=3) at /usr/src/web/php/php5/Zend/zend.c:1017
#13 0x8133255 in php_execute_script (primary_file=0xbffff628) at
/usr/src/web/php/php5/main/main.c:1695
#14 0x81a1614 in main (argc=2, argv=0xbffff694) at
/usr/src/web/php/php5/sapi/cli/php_cli.c:910
#15 0x401b19cb in __libc_start_main (main=0x81a099c <main>, argc=2,
argv=0xbffff694, init=0x806a744 <_init>, 
    fini=0x81a1fe4 <_fini>, rtld_fini=0x4000aea0 <_dl_fini>,
stack_end=0xbffff68c)
    at ../sysdeps/generic/libc-start.c:92



Previous Comments:
------------------------------------------------------------------------

[2003-07-15 01:09:40] eric at cosky dot com

Description:
------------
The following code crashes my install of PHP from July 13, 2003.
Removing the class hint in BoomWalker eliminates the crash.

Reproduce code:
---------------
class SomeClass {}
class CrashClass {
        function Boom()
        {
                $a = array( 0,1,2 );
                array_walk(&$a, "BoomWalker", &$this);
        }
}
function BoomWalker(SomeClass &$arrayItem, &$key, &$crashObj) {}
$c = new CrashClass;
$c->Boom();


Expected result:
----------------
Nothing.

Actual result:
--------------
System alert for PHP crashing.


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=24658&edit=1

Reply via email to