From: phpclub_ru at bougakov dot com Operating system: Windows XP Home, SP2 PHP version: 4.4.2 PHP Bug Type: Reproducible crash Bug description: Wrong value of include_path causes 'Official' PHP4.4.2, PHP 4.4.3.3dev to crash
Description: ------------ PHP 4.4.3.3 from snaps.php.net (php4-STABLE-200604220230), as well as 'official' PHP 4.4.2 available in the 'Downloads' section of php.net crashes with the following message: ####################### cut here ################################# AppName: php.exe AppVer: 4.4.3.3 ModName: ntdll.dll ModVer: 5.1.2600.2180 Offset: 00010f2b Unhandled exception at 0x7c910f2b in php.exe: 0xC0000005: Access violation reading location 0x0009000d. ####################### / cut here ################################# My system is XP Home SP2, Apache 1.3.33 Bug reproduces all times when I open one PHP script (can't reproduce it here since it is a part of large obfuscated project of other developer; you can download it here: http://e2.ilyabirman.ru/download/e2_oranda_te_v1454_distr.zip, 126Kb). Doesn't reproduce on PHP 4.3.11. mod_php is affected as well as CGI version. Crash is caused by the wrong setting in php.ini: valid example: include_path = ".;c:/path/with/some/cyrillic/letters/" example that causes PHP to crash: include_path = "c:/path/with/some/cyrillic/letters/" Reproduce code: --------------- Code that demonstrates the crash: http://e2.ilyabirman.ru/download/e2_oranda_te_v1454_distr.zip, 126Kb Expected result: ---------------- PHP should report or just ignore the wrong setting, not to crash. Actual result: -------------- MS Visual Studio 2003 EA debugger displays the following: ####################### cut here ################################# malloc.c, line 212: #ifndef _WIN64 if (__active_heap != __SYSTEM_HEAP) size = (size + BYTES_PER_PARA - 1) & ~(BYTES_PER_PARA - 1); #endif /* _WIN64 */ return HeapAlloc(_crtheap, 0, size); } // <== THIS IS LINE 212 #else /* WINHEAP */ /* try to find a big enough free block */ ####################### / cut here ################################# Call stack: ####################### cut here ################################# --> ntdll.dll!7c910f2b() ntdll.dll!7c910d5c() php.exe!004024d9() php.exe!004024d9() php4ts.dll!100b68f0() php4ts.dll!100042fa() ntdll.dll!7c91056d() php4ts.dll!100b64ec() php4ts.dll!100c6810() php.exe!004024d9() php.exe!004024d9() php.exe!004024d9() php.exe!004024d9() php.exe!004024d9() php.exe!004024d9() php.exe!004024d9() php.exe!00402c6e() ntdll.dll!7c9106eb() > msvcr71.dll!_heap_alloc(unsigned int size=1) Line 212 C msvcr71.dll!_setargv() Line 143 C ####################### / cut here ################################# Autos: ####################### cut here ################################# _crtheap 0x00380000 void * size 1 unsigned int ####################### / cut here ################################# -- Edit bug report at http://bugs.php.net/?id=37188&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=37188&r=trysnapshot44 Try a CVS snapshot (PHP 5.1): http://bugs.php.net/fix.php?id=37188&r=trysnapshot51 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=37188&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=37188&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=37188&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=37188&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=37188&r=needscript Try newer version: http://bugs.php.net/fix.php?id=37188&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=37188&r=support Expected behavior: http://bugs.php.net/fix.php?id=37188&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=37188&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=37188&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=37188&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=37188&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=37188&r=dst IIS Stability: http://bugs.php.net/fix.php?id=37188&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=37188&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=37188&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=37188&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=37188&r=mysqlcfg