ID: 36071
User updated by: kaien at sparcs dot org
Reported By: kaien at sparcs dot org
Status: Assigned
Bug Type: Scripting Engine problem
Operating System: Linux
PHP Version: 5CVS-2006-01-18 (snap)
Assigned To: dmitry
New Comment:
make_real_object() in ZEND_ASSIGN_OBJ separates EG(error_zval_ptr)
Thanks to SEGV, or modification on EG(error_zval_ptr) could be harder
to figure out.
<?
$a = clone 0;
$a[0]->b = 0;
print_r(clone 1);
?>
Warning: __clone method called on non-object in - on line 2
Warning: __clone method called on non-object in - on line 4
stdClass Object
(
[b] => 0
)
Segmentation fault (core dumped)
Previous Comments:
------------------------------------------------------------------------
[2006-01-18 20:08:07] [EMAIL PROTECTED]
Dmitry, please take a look at it.
------------------------------------------------------------------------
[2006-01-18 19:47:26] kaien at sparcs dot org
Sorry. The comment part (/* */) was just an attempt at humor, which I
thought I had omitted.
Same problem with 5.1.1, 5.1.2.
No crash with 5.0.3.
------------------------------------------------------------------------
[2006-01-18 19:33:26] kaien at sparcs dot org
Description:
------------
2 line of php code crash latest engine.
configure --disable-all
/*
We want immediate fix.
We are scheduled for migration of our service from
php4 to php5 next week.
*/
Reproduce code:
---------------
<?
$a = clone 0;
$a[0]->b = 0;
?>
Expected result:
----------------
NO seg fault.
Actual result:
--------------
Warning: __clone method called on non-object in - on line 2
Segmentation fault (core dumped)
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=36071&edit=1
