ID:               27263
 User updated by:  davojan at mail dot ru
 Reported By:      davojan at mail dot ru
 Status:           Open
 Bug Type:         Session related
 Operating System: FreeBSD 4.7-RELEASE
 PHP Version:      5.0.0b4 (beta4)
 New Comment:

Sorry, I supplied wrong backtrace in the previous message. Here is the
actual (but it's all the same - it will hardly help you):



Core was generated by `httpd'.

Program terminated with signal 10, Bus error.

Reading symbols from /usr/lib/libcrypt.so.2...(no debugging symbols
found)...done.

Reading symbols from /usr/local/lib/libmm.so.13...(no debugging symbols
found)...done.

Reading symbols from /usr/lib/libc.so.4...(no debugging symbols
found)...done.

Reading symbols from /usr/local/libexec/apache/mod_mmap_static.so...(no
debugging symbols found)...done.

Reading symbols from /usr/local/libexec/apache/mod_vhost_alias.so...(no
debugging symbols found)...done.

....

Reading symbols from /usr/local/lib/libcrypto.so.3...(no debugging
symbols found)...done.

Reading symbols from /usr/local/libexec/apache/libphp5.so...Deprecated
bfd_read called at
/usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c
line 2627 in elfstab_build_psymtabs

Deprecated bfd_read called at
/usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c
line 933 in fill_symbuf

done.

Reading symbols from /usr/local/lib/libexslt.so.8...done.

....

Reading symbols from /usr/libexec/ld-elf.so.1...done.

#0  0x28693539 in ?? ()

(gdb) bt

#0  0x28693539 in ?? ()

#1  0x8050416 in ap_clear_pool ()

#2  0x8050478 in ap_destroy_pool ()

#3  0x80503eb in ap_clear_pool ()

#4  0x8050478 in ap_destroy_pool ()

#5  0x805b190 in clean_parent_exit ()

#6  0x805d84d in standalone_main ()

#7  0x805dcab in main ()

#8  0x804fc39 in _start ()


Previous Comments:
------------------------------------------------------------------------

[2004-02-16 17:38:33] davojan at mail dot ru

Sorry, but when I add --enable-debug to my configure the bug
"dissapeared", the example script worked fine. The crashe takes place
only in the debugless version, it's backtrace hardly can help you:



Program terminated with signal 10, Bus error.

.//usr/local/lib/php/20020429/templates.so: No such file or directory.

#0  0x2860f780 in ?? () from /usr/local/libexec/apache/libphp5.so

(gdb) bt

#0  0x2860f780 in ?? () from /usr/local/libexec/apache/libphp5.so

#1  0x8050416 in ap_clear_pool ()

#2  0x8050478 in ap_destroy_pool ()

#3  0x80503eb in ap_clear_pool ()

#4  0x8050478 in ap_destroy_pool ()

#5  0x805b190 in clean_parent_exit ()

#6  0x805d84d in standalone_main ()

#7  0x805dcab in main ()

#8  0x804fc39 in _start ()



It is a bad sign, it may mean buffer overflow anywhere in the program,
i suppose. It may be difficult to find the bug. I'm ready to provide
any help in catching it...

------------------------------------------------------------------------

[2004-02-15 16:05:23] [EMAIL PROTECTED]

Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php

Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.



------------------------------------------------------------------------

[2004-02-15 13:31:17] davojan at mail dot ru

Description:
------------
PHP crashes on session_start() if object "foo" references to object
"bar" and both "foo" and "bar" are put into session explicitly each
into it's element.



The example below will work if we comment line:

$_SESSION['bar'] = $bar;

the only one "foo" is put to session explicitly and "bar" is also put,
but as a member of "foo".

Reproduce code:
---------------
<?

class foo {

        public $bar = NULL;

}

class bar {}

//=============================[]

        $foo = new foo();

        $bar = new bar();

        $foo->bar = $bar;

        session_start();

        $_SESSION['foo'] = $foo;

        $_SESSION['bar'] = $bar;        // it will be all right, if we comment this



        session_write_close();

        session_start();        // crashing here

        echo "OK";

?>

Expected result:
----------------
OK

Actual result:
--------------
In browser:

"The page cannot be displayed"



In /var/log/httpd-error.log:

[Sun Feb 15 21:21:22 2004] [notice] child pid 230 exit signal
Segmentation fault (11)


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=27263&edit=1

Reply via email to