ID: 37445 Comment by: php at seven dot net dot nz Reported By: dhrubab at gmail dot com Status: Assigned Bug Type: PDO related Operating System: Linux PHP Version: 5.1.4 Assigned To: wez New Comment:
I too was going nuts from this bug. I know no C so I can't help too much, but here's my GDB trace for people that understand it. So far I can't narrow down exactly what code is causing the segfault. Reverting the diff as suggested by indeyets at gmail dot com solved the problem. ./configure --enable-debug --with-apxs2=/usr/bin/apxs2 --with-zlib --with-bz2 --with-gd --with-ttf --with-pdo-mysql --with-mysql --with-xmlrpc --with-curl Program received signal SIGSEGV, Segmentation fault. [Switching to Thread -1214347584 (LWP 14636)] 0xb7401950 in mysql_more_results () from /usr/lib/libmysqlclient.so.15 (gdb) where #0 0xb7401950 in mysql_more_results () from /usr/lib/libmysqlclient.so.15 #1 0xb76ff78c in pdo_mysql_stmt_dtor (stmt=0x8399a74) at /tmp/php-5.1.4/ext/pdo_mysql/mysql_statement.c:71 #2 0xb76f9713 in free_statement (stmt=0x8399a74) at /tmp/php-5.1.4/ext/pdo/pdo_stmt.c:2200 #3 0xb786485b in zend_objects_store_free_object_storage (objects=0xb79e396c) at /tmp/php-5.1.4/Zend/zend_objects_API.c:86 #4 0xb783b851 in shutdown_executor () at /tmp/php-5.1.4/Zend/zend_execute_API.c:281 #5 0xb7848645 in zend_deactivate () at /tmp/php-5.1.4/Zend/zend.c:854 #6 0xb7806229 in php_request_shutdown (dummy=0x0) at /tmp/php-5.1.4/main/main.c:1287 #7 0xb78e71b7 in php_handler (r=0x82af068) at /tmp/php-5.1.4/sapi/apache2handler/sapi_apache2.c:445 #8 0x08077e38 in ap_run_handler () #9 0x080781bc in ap_invoke_handler () #10 0x080698c3 in ap_internal_redirect () #11 0xb717cc03 in ?? () from /usr/lib/apache2/modules/mod_rewrite.so #12 0x082af058 in ?? () #13 0x082a66b0 in ?? () #14 0x00000000 in ?? () Previous Comments: ------------------------------------------------------------------------ [2006-05-19 09:21:12] greg dot smith at gr-tech dot net I have reproduced the bug on Centos 4 64bit and 32 bit and Fedora core 5 as well as Suse 10.1 ------------------------------------------------------------------------ [2006-05-15 12:40:11] indeyets at gmail dot com reverting this diff helps to solve problem, while the proper resolution is not available: http://cvs.php.net/viewcvs.cgi/php-src/ext/pdo_mysql/mysql_statement.c?r1=1.48.2.12&r2=1.48.2.13 ------------------------------------------------------------------------ [2006-05-15 10:20:58] dhrubab at gmail dot com A note to say I'm using latest php (5.1.4), mysql (5.0.21), pecl-pdo (1.0.3) and pecl-pdo-mysql (1.0.2). The example code relies on mysql5 default tables being there. ------------------------------------------------------------------------ [2006-05-15 10:01:57] dhrubab at gmail dot com Description: ------------ The provided code causes a segfault. My php.ini settings are as below. short_open_tag = Off allow_call_time_pass_reference = Off error_reporting = E_ALL display_errors = On display_startup_errors = On log_errors = Off variables_order = "GPCS" register_globals = Off register_long_arrays = Off register_argc_argv = Off magic_quotes_gpc = Off magic_quotes_runtime = Off allow_url_fopen = On session.name = GRTSESSID session.use_trans_sid = 0 session.hash_function = 1 session.hash_bits_per_character = 5 My configure is as below. './configure' '--prefix=/usr/lib/php5' '--sysconfdir=/etc' '--cache-file=./config.cache' '--disable-cli' '--with-apxs2=/usr/sbin/apxs2' '--with-config-file-path=/etc/php/apache2-php5' '--with-config-file-scan-dir=/etc/php/apache2-php5/ext-active' '--without-pear' '--disable-bcmath' '--with-bz2=shared' '--enable-calendar=shared' '--with-curl=shared' '--with-curlwrappers=shared' '--disable-dbase' '--enable-exif=shared' '--without-fbsql' '--without-fdftk' '--disable-filepro' '--enable-ftp=shared' '--with-gettext=shared' '--without-gmp' '--without-hwapi' '--without-informix' '--disable-ipv6' '--without-kerberos' '--enable-mbstring=shared' '--with-mcrypt=shared' '--disable-memory-limit' '--with-mhash=shared' '--without-ming' '--without-msql' '--without-mssql' '--with-ncurses=shared' '--with-openssl' '--with-openssl-dir=/usr' '--enable-pcntl=shared' '--disable-pdo' '--without-pgsql' '--with-pspell=shared' '--without-recode' '--disable-shmop' '--without-snmp' '--enable-soap=shared' '--enable-sockets=shared' '--without-sybase' '--without-sybase-ct' '--disable-sysvmsg' '--disable-sysvsem' '--disable-sysvshm' '--with-tidy=shared' '--enable-wddx=shared' '--with-xmlrpc=shared' '--with-xsl=shared' '--with-zlib=shared' '--enable-debug' '--without-cdb' '--without-db4' '--without-flatfile' '--without-gdbm' '--without-inifile' '--without-qdbm' '--with-freetype-dir=/usr' '--with-t1lib=/usr' '--disable-gd-jis-conv' '--enable-gd-native-ttf' '--with-jpeg-dir=/usr' '--with-png-dir=/usr' '--without-xpm-dir' '--with-gd' '--with-imap=shared' '--with-imap-ssl' '--with-mysql=shared,/usr/lib/mysql' '--with-mysql-sock=/var/run/mysqld/mysqld.sock' '--with-mysqli=shared,/usr/bin/mysql_config' '--with-readline' '--without-libedit' '--without-mm' '--enable-sqlite-utf8' My full phpinfo() is below. http://www.dhruba.net/files/segfault.phpinfo.html This is simply one example of a segfault. Our application is segfaulting left, right and centre and I am trying to narrow down other test cases that result in segfaults. The main point is that PHP or PDO whichever is the culprit is not giving error messages or exceptions as it should when there's something wrong and instead segfaulting. When you use a method name that doesn't exist or a class constant that doesn't exist or when you violate allow_call_time_pass_reference = Off then a segfault occurs. This has been reproduced on three machines with three different linux distributions. Reproduce code: --------------- The source code is below. http://www.dhruba.net/files/segfault.php Expected result: ---------------- It should give me an error about passing a string by reference in bindParam(). Actual result: -------------- It segfaults. Backtrace is below. sepoy ~ # gdb /usr/sbin/apache2 GNU gdb 6.4 Copyright 2005 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i686-pc-linux-gnu"...Using host libthread_db library "/lib/libthread_db.so.1". (gdb) run -X -D DEFAULT_VHOST -D PHP5 -D INFO -D USERDIR -d /usr/lib/apache2 -f /etc/apache2/httpd.conf -k start Starting program: /usr/sbin/apache2 -X -D DEFAULT_VHOST -D PHP5 -D INFO -D USERDIR -d /usr/lib/apache2 -f /etc/apache2/httpd.conf -k start [Thread debugging using libthread_db enabled] [New Thread 16384 (LWP 4165)] [Mon May 15 10:40:27 2006] [warn] NameVirtualHost *:80 has no VirtualHosts Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 16384 (LWP 4165)] 0xb6e1025d in mysql_more_results () from /usr/lib/libmysqlclient.so.15 (gdb) bt #0 0xb6e1025d in mysql_more_results () from /usr/lib/libmysqlclient.so.15 #1 0xb6ddb9b9 in free_statement (stmt=0x82c10cc) at /var/tmp/portage/pecl-pdo-1.0.3/work/PDO-1.0.3/pdo_stmt.c:2200 #2 0xb6ddbb6c in php_pdo_stmt_delref (stmt=0x5a5a5a5a) at /var/tmp/portage/pecl-pdo-1.0.3/work/PDO-1.0.3/pdo_stmt.c:2239 #3 0xb6ddbb8b in pdo_dbstmt_free_storage (stmt=0x5a5a5a5a) at /var/tmp/portage/pecl-pdo-1.0.3/work/PDO-1.0.3/pdo_stmt.c:2245 #4 0xb78eae78 in zend_objects_store_free_object_storage (objects=0xb7a65bac) at /var/tmp/portage/php-5.1.4/work/php-5.1.4/Zend/zend_objects_API.c:86 #5 0xb78c0501 in shutdown_executor () at /var/tmp/portage/php-5.1.4/work/php-5.1.4/Zend/zend_execute_API.c:281 #6 0xb78ce7a2 in zend_deactivate () at /var/tmp/portage/php-5.1.4/work/php-5.1.4/Zend/zend.c:854 #7 0xb788a816 in php_request_shutdown (dummy=0x0) at /var/tmp/portage/php-5.1.4/work/php-5.1.4/main/main.c:1287 #8 0xb796e64c in php_apache_request_dtor (r=0x82aecd8) at /var/tmp/portage/php-5.1.4/work/php-5.1.4/sapi/apache2handler/sapi_apache2.c:445 #9 0xb796ecad in php_handler (r=0x82aecd8) at /var/tmp/portage/php-5.1.4/work/php-5.1.4/sapi/apache2handler/sapi_apache2.c:603 #10 0x08068ed5 in ap_run_handler (r=0x82aecd8) at config.c:152 #11 0x0806941f in ap_invoke_handler (r=0x82aecd8) at config.c:364 #12 0x08065ea7 in ap_process_request (r=0x82aecd8) at http_request.c:249 #13 0x08060dbc in ap_process_http_connection (c=0x82a8b30) at http_core.c:251 #14 0x08072e59 in ap_run_process_connection (c=0x82a8b30) at connection.c:43 #15 0x0807316e in ap_process_connection (c=0x82a8b30, csd=0x5a5a5a5a) at connection.c:176 #16 0x08067666 in child_main (child_num_arg=1515870810) at prefork.c:610 #17 0x08067746 in make_child (s=0x82c10cc, slot=0) at prefork.c:650 #18 0x08067880 in startup_children (number_to_start=5) at prefork.c:722 #19 0x08067caf in ap_mpm_run (_pconf=0x80a1e58, plog=0x80cdf08, s=0x5) at prefork.c:941 #20 0x0806e986 in main (argc=16, argv=0xbfc52894) at main.c:618 (gdb) ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=37445&edit=1
