From:             phpclub_ru at bougakov dot com
Operating system: Windows XP Home, SP2
PHP version:      4.4.2
PHP Bug Type:     Reproducible crash
Bug description:  Wrong value of include_path causes 'Official' PHP4.4.2, PHP 
4.4.3.3dev to crash

Description:
------------
PHP 4.4.3.3 from snaps.php.net (php4-STABLE-200604220230), as well as
'official' PHP 4.4.2 available in the 'Downloads' section of php.net
crashes with the following message:

####################### cut here #################################

AppName: php.exe         AppVer: 4.4.3.3         ModName: ntdll.dll
ModVer: 5.1.2600.2180    Offset: 00010f2b

Unhandled exception at 0x7c910f2b in php.exe: 0xC0000005: Access violation
reading location 0x0009000d.


####################### / cut here #################################

My system is XP Home SP2, Apache 1.3.33
Bug reproduces all times when I open one PHP script (can't reproduce it
here since it is a part of large obfuscated project of other developer;
you can download it here:
http://e2.ilyabirman.ru/download/e2_oranda_te_v1454_distr.zip, 126Kb).

Doesn't reproduce on PHP 4.3.11. mod_php is affected as well as CGI
version.

Crash is caused by the wrong setting in php.ini:

valid example: 
include_path = ".;c:/path/with/some/cyrillic/letters/"

example that causes PHP to crash:
include_path = "c:/path/with/some/cyrillic/letters/"


Reproduce code:
---------------
Code that demonstrates the crash:
http://e2.ilyabirman.ru/download/e2_oranda_te_v1454_distr.zip, 126Kb

Expected result:
----------------
PHP should report or just ignore the wrong setting, not to crash.

Actual result:
--------------
MS Visual Studio 2003 EA debugger displays the following:


####################### cut here #################################

malloc.c, line 212:

#ifndef _WIN64
        if (__active_heap != __SYSTEM_HEAP)
            size = (size + BYTES_PER_PARA - 1) & ~(BYTES_PER_PARA - 1);
#endif  /* _WIN64 */
        return HeapAlloc(_crtheap, 0, size);
}  //             <== THIS IS LINE 212

#else  /* WINHEAP */

        /* try to find a big enough free block
         */

####################### / cut here #################################



Call stack:

####################### cut here #################################
-->             ntdll.dll!7c910f2b()    
        ntdll.dll!7c910d5c()    
        php.exe!004024d9()      
        php.exe!004024d9()      
        php4ts.dll!100b68f0()   
        php4ts.dll!100042fa()   
        ntdll.dll!7c91056d()    
        php4ts.dll!100b64ec()   
        php4ts.dll!100c6810()   
        php.exe!004024d9()      
        php.exe!004024d9()      
        php.exe!004024d9()      
        php.exe!004024d9()      
        php.exe!004024d9()      
        php.exe!004024d9()      
        php.exe!004024d9()      
        php.exe!00402c6e()      
        ntdll.dll!7c9106eb()    
>       msvcr71.dll!_heap_alloc(unsigned int size=1)  Line 212  C
        msvcr71.dll!_setargv()  Line 143        C

####################### / cut here #################################

Autos:

####################### cut here #################################
        _crtheap        0x00380000      void *
        size    1       unsigned int
####################### / cut here #################################





-- 
Edit bug report at http://bugs.php.net/?id=37188&edit=1
-- 
Try a CVS snapshot (PHP 4.4): 
http://bugs.php.net/fix.php?id=37188&r=trysnapshot44
Try a CVS snapshot (PHP 5.1): 
http://bugs.php.net/fix.php?id=37188&r=trysnapshot51
Try a CVS snapshot (PHP 6.0): 
http://bugs.php.net/fix.php?id=37188&r=trysnapshot60
Fixed in CVS:                 http://bugs.php.net/fix.php?id=37188&r=fixedcvs
Fixed in release:             
http://bugs.php.net/fix.php?id=37188&r=alreadyfixed
Need backtrace:               http://bugs.php.net/fix.php?id=37188&r=needtrace
Need Reproduce Script:        http://bugs.php.net/fix.php?id=37188&r=needscript
Try newer version:            http://bugs.php.net/fix.php?id=37188&r=oldversion
Not developer issue:          http://bugs.php.net/fix.php?id=37188&r=support
Expected behavior:            http://bugs.php.net/fix.php?id=37188&r=notwrong
Not enough info:              
http://bugs.php.net/fix.php?id=37188&r=notenoughinfo
Submitted twice:              
http://bugs.php.net/fix.php?id=37188&r=submittedtwice
register_globals:             http://bugs.php.net/fix.php?id=37188&r=globals
PHP 3 support discontinued:   http://bugs.php.net/fix.php?id=37188&r=php3
Daylight Savings:             http://bugs.php.net/fix.php?id=37188&r=dst
IIS Stability:                http://bugs.php.net/fix.php?id=37188&r=isapi
Install GNU Sed:              http://bugs.php.net/fix.php?id=37188&r=gnused
Floating point limitations:   http://bugs.php.net/fix.php?id=37188&r=float
No Zend Extensions:           http://bugs.php.net/fix.php?id=37188&r=nozend
MySQL Configuration Error:    http://bugs.php.net/fix.php?id=37188&r=mysqlcfg

Reply via email to