#45546 [Com]: PCRE with utf8 kill apache childprocess
ID: 45546 Comment by: nikolas dot hagelstein at gmail dot com Reported By: kaiser at macbureau dot de Status: Feedback Bug Type: PCRE related Operating System: FreeBSD 7 PHP Version: 5.2.6 New Comment: Confirmed. System: FreeBSD 7 PHP 5.2.6 (PCRE Library Version => 7.6 2008-01-28) stack size (kbytes, -s) 524288 Backtrace: #6216 0x00080407a494 in match () from /usr/local/lib/php/20060613/pcre.so # #6217 0x00080407701c in match () from /usr/local/lib/php/20060613/pcre.so # #6218 0x00080407a494 in match () from /usr/local/lib/php/20060613/pcre.so # #6219 0x00080407701c in match () from /usr/local/lib/php/20060613/pcre.so # #6220 0x000804076d05 in match () from /usr/local/lib/php/20060613/pcre.so # #6221 0x00080407f12f in php_pcre_exec () # from /usr/local/lib/php/20060613/pcre.so # # #6222 0x000804084c02 in php_pcre_match_impl () # from /usr/local/lib/php/20060613/pcre.so # #6223 0x00080408569b in php_do_pcre_match () # from /usr/local/lib/php/20060613/pcre.so # #6224 0x00538912 in zend_do_fcall_common_helper_SPEC () # #6225 0x00528603 in execute () # #6226 0x005383a4 in zend_do_fcall_common_helper_SPEC () # #6227 0x00528603 in execute () # #6228 0x00508dd3 in zend_execute_scripts () # #6229 0x004c5a5d in php_execute_script () Previous Comments: [2008-07-19 12:19:46] [EMAIL PROTECTED] I can reproduce. (PHP 5.2.7-dev) ==6244== Stack overflow in thread 1: can't grow stack to 0xBE04DFC0 ==6244== ==6244== Process terminating with default action of signal 11 (SIGSEGV) ==6244== Access not within mapped region at address 0xBE04DFC0 ==6244==at 0x8099F78: match (pcre_exec.c:1287) ==6244== Stack overflow in thread 1: can't grow stack to 0xBE04DF9C ==6244== ==6244== Process terminating with default action of signal 11 (SIGSEGV) ==6244== Access not within mapped region at address 0xBE04DF9C ==6244==at 0x401D200: _vgnU_freeres (vg_preloaded.c:56) [2008-07-19 11:13:41] [EMAIL PROTECTED] Please try using this CVS snapshot: http://snaps.php.net/php5.3-latest.tar.gz For Windows (zip): http://snaps.php.net/win32/php5.3-win32-latest.zip For Windows (installer): http://snaps.php.net/win32/php5.3-win32-installer-latest.msi I can't reproduce the crash here, nor valgrind finds any problem. Can you please try the cvs version please? [2008-07-17 19:29:53] kaiser at macbureau dot de Sorry, c&p error, thanks, looking forward to hear from you. ./test.php Segmentation fault (core dumped) #!/usr/local/bin/php [2008-07-17 17:53:51] [EMAIL PROTECTED] the pasted code is incomplete (doesn't even run). Please provide a complete, but short, reproducible script. [2008-07-17 16:31:50] kaiser at macbureau dot de Description: PCRE with utf8 (Typo3 Mailform) kills apache childprocess. With the following entry in apache errorlog on FreeBSD 7 with Apache 2.2.8: [notice] child pid 6709 exit signal Illegal instruction (4) Output of ulimit -a: core file size (blocks, -c) unlimited data seg size (kbytes, -d) 33554432 file size (blocks, -f) unlimited max locked memory (kbytes, -l) unlimited max memory size (kbytes, -m) unlimited open files (-n) 11095 pipe size(512 bytes, -p) 1 stack size (kbytes, -s) 524288 cpu time (seconds, -t) unlimited max user processes (-u) 5547 virtual memory (kbytes, -v) unlimite Reproduce code: --- #!/usr/local/bin/php -- Edit this bug report at http://bugs.php.net/?id=45546&edit=1
#39349 [Bgs]: Core dump on preg_replace
ID: 39349 User updated by: nikolas dot hagelstein at gmail dot com Reported By: nikolas dot hagelstein at gmail dot com Status: Bogus Bug Type: PCRE related Operating System: Netbsd 3.0.1 PHP Version: 5.2.0 Assigned To: andrei New Comment: A stack overflow shouldnt cause a segfault. Previous Comments: [2006-12-01 20:25:11] [EMAIL PROTECTED] no bug here. just a stack overflow, which is avoidable by tweaking the new ini options and/or increasing the stack size. [2006-11-12 19:03:04] [EMAIL PROTECTED] Yes, endless recursion most likely results in a segfault and this is expected. [2006-11-12 15:15:26] nikolas dot hagelstein at gmail dot com This seems to be stack overflow related in general: do_something(); } } $i=0; $x = new Foo(); $x ->do_something(); ?> Endless recursion results in stack overflow which throws a segmentation fault. Probably libc os related. [2006-11-08 20:44:14] nikolas dot hagelstein at gmail dot com seems to work with ulimit is there any other solution beside recompiling it using the named flag? i mean running out of stack may happen on any system regardless of its default ulimits. [2006-11-07 14:48:39] [EMAIL PROTECTED] You probably run out of stack. You can try increasing your stack size and trying again on the command line with: uname -s 16384 for example. If that's what your problem is you can compile an external PCRE that will not use stack but heap (and be slower in the process). You can do that by compiling PCRE using --disable-stack-for-recursion option. The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/39349 -- Edit this bug report at http://bugs.php.net/?id=39349&edit=1
#39438 [Asn]: Memory leak PHP Fatal error: Out of memory
ID: 39438
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
Status: Assigned
Bug Type: Unknown/Other Function
Operating System: NETBSD 3.0.1 AMD64
PHP Version: 5.2.0
Assigned To: dmitry
New Comment:
No workarounds atm i had to downgrade :|
Previous Comments:
[2006-11-27 10:45:39] stig at 8620 dot dk
Are there current any work arounds for this problem?
My host has upgraded to 5.2.0, so I'm stuck with this problem.
[2006-11-08 21:56:24] nikolas dot hagelstein at gmail dot com
Did some further testing:
the script worked on:
PHP 5.1.6-5 (cli) (built: Oct 28 2006 13:49:33) Memlimit:8mb
PHP 5.1.6-5 (cli) (built: Oct 28 2006 13:49:33) Memlimit:64MB
[2006-11-08 21:40:32] nikolas dot hagelstein at gmail dot com
array(
'downloadcounter' => 2777,
'versions' => array(
'0.1.0' => array (
'title' => 'A1 Teasermenu',
'description' => 'Displays a teaser for advanced subpages
or a selection of advanced pages',
'state' => 'stable',
'reviewstate' => 0,
'category' => 'plugin',
'downloadcounter' => 2787,
'lastuploaddate' => 1088427240,
'dependencies' => array (
'depends' => array(
'typo3' =>'',
'php' =>'',
'cms' => ''
),
'conflicts' => array('' =>'')
),
'authorname' => 'Mirko Balluff',
'authoremail' => '[EMAIL PROTECTED]',
'ownerusername' => 'amt1',
't3xfilemd5' => '3a4ec198b6ea8d0bc2d69d9b7400398f',
)
)
)
);
$test=array();
while($i<1600) {
$test[]=$test2;
$i++;
}
$out=gzcompress(serialize($test));
?>
results in :
PHP Fatal error: Allowed memory size of 67108864 bytes exhausted at
/usr/pkgsrc/lang/php5/work/php-5.2.0/ext/standard/var.c:541 (tried to
allocate 1041720 bytes) in /var/www/www.chaosbutze.de/htdocs/test2.php
on line 37
while it works on php 5.1.6 and 4.
Having mem limit set to 64MB.
Setting mem limit to 128MB and increasing interations to 2260 also
causes the above mentioned error.
[2006-11-08 20:46:33] [EMAIL PROTECTED]
Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves.
A proper reproducing script starts with ,
is max. 10-20 lines long and does not require any external
resources such as databases, etc. If the script requires a
database to demonstrate the issue, please make sure it creates
all necessary tables, stored procedures etc.
Please avoid embedding huge scripts into the report.
[2006-11-08 20:33:53] nikolas dot hagelstein at gmail dot com
Description:
After upgrading to php 5.2.0 im constantly receiving "PHP Fatal error:
Out of memory error" where i did not received one using 5.1.6. I
adjusted the memory limit from 64M to 256M but without any success.
PHP Fatal error: Out of memory (allocated 250871808) at
/usr/pkgsrc/www/ap-php/work/php-5.2.0/ext/standard/var.c:541 (tried to
allocate 2215827 bytes) in
/var/www/shared/typo3_src-4.0.1/typo3/mod/tools/em/class.em_xmlhandler.php
on line 141, referer:
http://www.chaosbutze.de/typo3/mod/tools/em/index.php?
i am not sure about how to dig into this but i can say that it seems
to be somehow xml/serialize related.
--
Edit this bug report at http://bugs.php.net/?id=39438&edit=1
#39349 [Asn]: Core dump on preg_replace
ID: 39349
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
Status: Assigned
Bug Type: PCRE related
Operating System: Netbsd 3.0.1
PHP Version: 5.2.0
Assigned To: andrei
New Comment:
This seems to be stack overflow related in general:
do_something();
}
}
$i=0;
$x = new Foo();
$x ->do_something();
?>
Endless recursion results in stack overflow which throws a segmentation
fault. Probably libc os related.
Previous Comments:
[2006-11-08 20:44:14] nikolas dot hagelstein at gmail dot com
seems to work with ulimit is there any other solution beside
recompiling it using the named flag? i mean running out of stack may
happen on any system regardless of its default ulimits.
[2006-11-07 14:48:39] [EMAIL PROTECTED]
You probably run out of stack.
You can try increasing your stack size and trying again on the command
line with:
uname -s 16384
for example. If that's what your problem is you can compile an external
PCRE that will not use stack but heap (and be slower in the process).
You can do that by compiling PCRE using --disable-stack-for-recursion
option.
[2006-11-03 13:03:32] nikolas dot hagelstein at gmail dot com
I was able to narrow down the problem to the following it seems to be
size/overflow related:
This Coredumps but if i reduce the string by one char (ie the 'r') it
stops coredumping.
[2006-11-02 21:14:29] nikolas dot hagelstein at gmail dot com
Description:
Passing large text to the beyond mentioned regexp makes php core dump
Reproduce code:
---
$out=preg_replace("/\{(?:[^{}]|\{(?:[^{}]|\{(?:[^{}]|\{[^{}]*\})*\})*\})*\}/","",$out);
Where $out isof
http://en.wikipedia.org/w/query.php?what=content&titles=moon
Probably related to some libc issues.
--
Edit this bug report at http://bugs.php.net/?id=39349&edit=1
#39381 [Com]: __destruct bug
ID: 39381 Comment by: Nikolas dot hagelstein at gmail dot com Reported By: rygorde4 at sbcglobal dot net Status: Feedback Bug Type: Unknown/Other Function Operating System: Not Applicable PHP Version: 5.2.0 New Comment: Same at wordpress 2.05 using php5.2: PHP Fatal error: Call to a member function get() on a non-object in /var/www/www.trashboard.de/htdocs /wp-includes/cache.php on line 28 Reverting to 5.1.6 made it work again Previous Comments: [2006-11-08 13:44:38] [EMAIL PROTECTED] Thank you for this bug report. To properly diagnose the problem, we need a short but complete example script to be able to reproduce this bug ourselves. A proper reproducing script starts with , is max. 10-20 lines long and does not require any external resources such as databases, etc. If the script requires a database to demonstrate the issue, please make sure it creates all necessary tables, stored procedures etc. Please avoid embedding huge scripts into the report. [2006-11-06 16:46:52] harveyelliott at hotmail dot com I currently get a issue with php 5.2 with ZenCart. I roll back to php 5.1.6 and it works fine... of course its all due to this php 5.2 bug... Im curently stuck in a hard place.. because.. Im a Web Hosting provider.. So either.. I run php 5.2 to get the security fixes and my customers are SOL that has issues with this bug.. Or.. run insecure code to keep my customers happy.. My question is.. any idea when this is going to be fixed? If I asked in the wrong place... please direct me to the correct place... as this is very important to me... [2006-11-06 13:42:19] c dot boulton at mybboard dot com Maybe relates to this? http://bugs.php.net/bug.php?id=36759 [2006-11-05 15:34:34] linksys at yahoo dot com The same issue occurs in ZenCart v1.3.6 with PHP 5.2.0 regarding using class as global variable. Discussions are here: http://www.zen-cart.com/forum/showthread.php?t=50534 [2006-11-04 19:20:52] rygorde4 at sbcglobal dot net Description: If functions are called within __destruct without register_shutdown_function being called on __destruct within a class, and global variables (that are assigned classes) called in that class will not work. This is a bug specificly with PHP 5.2.0. This bug was reported multiple times at my discussion system (here http://community.mybboard.net/showthread.php?tid=13506 and here http://community.mybboard.net/showthread.php?tid=12430). Calling register_shutdown_function on __destruct, I was able to use that as a workaround, but the problem remains with __destruct. Please contact me with any information you need, and I will gladly assist you. Reproduce code: --- You can install a fresh version of MyBB 1.2 here: http://mybboard.com/downloads.php using PHP 5.2.0. The problems lay in inc/class_core.php Expected result: No error, shutdown functions should run properly Actual result: -- Fatal error: Call to a member function run_hooks() on a non-object in /www/xxx/pub/inc/functions.php on line 146 The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/39381 -- Edit this bug report at http://bugs.php.net/?id=39381&edit=1
#39438 [Opn]: Memory leak PHP Fatal error: Out of memory
ID: 39438
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
Status: Open
Bug Type: Unknown/Other Function
Operating System: NETBSD 3.0.1 AMD64
PHP Version: 5.2.0
New Comment:
Did some further testing:
the script worked on:
PHP 5.1.6-5 (cli) (built: Oct 28 2006 13:49:33) Memlimit:8mb
PHP 5.1.6-5 (cli) (built: Oct 28 2006 13:49:33) Memlimit:64MB
Previous Comments:
[2006-11-08 21:40:32] nikolas dot hagelstein at gmail dot com
array(
'downloadcounter' => 2777,
'versions' => array(
'0.1.0' => array (
'title' => 'A1 Teasermenu',
'description' => 'Displays a teaser for advanced subpages
or a selection of advanced pages',
'state' => 'stable',
'reviewstate' => 0,
'category' => 'plugin',
'downloadcounter' => 2787,
'lastuploaddate' => 1088427240,
'dependencies' => array (
'depends' => array(
'typo3' =>'',
'php' =>'',
'cms' => ''
),
'conflicts' => array('' =>'')
),
'authorname' => 'Mirko Balluff',
'authoremail' => '[EMAIL PROTECTED]',
'ownerusername' => 'amt1',
't3xfilemd5' => '3a4ec198b6ea8d0bc2d69d9b7400398f',
)
)
)
);
$test=array();
while($i<1600) {
$test[]=$test2;
$i++;
}
$out=gzcompress(serialize($test));
?>
results in :
PHP Fatal error: Allowed memory size of 67108864 bytes exhausted at
/usr/pkgsrc/lang/php5/work/php-5.2.0/ext/standard/var.c:541 (tried to
allocate 1041720 bytes) in /var/www/www.chaosbutze.de/htdocs/test2.php
on line 37
while it works on php 5.1.6 and 4.
Having mem limit set to 64MB.
Setting mem limit to 128MB and increasing interations to 2260 also
causes the above mentioned error.
[2006-11-08 20:46:33] [EMAIL PROTECTED]
Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves.
A proper reproducing script starts with ,
is max. 10-20 lines long and does not require any external
resources such as databases, etc. If the script requires a
database to demonstrate the issue, please make sure it creates
all necessary tables, stored procedures etc.
Please avoid embedding huge scripts into the report.
[2006-11-08 20:33:53] nikolas dot hagelstein at gmail dot com
Description:
After upgrading to php 5.2.0 im constantly receiving "PHP Fatal error:
Out of memory error" where i did not received one using 5.1.6. I
adjusted the memory limit from 64M to 256M but without any success.
PHP Fatal error: Out of memory (allocated 250871808) at
/usr/pkgsrc/www/ap-php/work/php-5.2.0/ext/standard/var.c:541 (tried to
allocate 2215827 bytes) in
/var/www/shared/typo3_src-4.0.1/typo3/mod/tools/em/class.em_xmlhandler.php
on line 141, referer:
http://www.chaosbutze.de/typo3/mod/tools/em/index.php?
i am not sure about how to dig into this but i can say that it seems
to be somehow xml/serialize related.
--
Edit this bug report at http://bugs.php.net/?id=39438&edit=1
#39438 [Fbk->Opn]: Memory leak PHP Fatal error: Out of memory
ID: 39438
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
-Status: Feedback
+Status: Open
Bug Type: Unknown/Other Function
Operating System: NETBSD 3.0.1 AMD64
PHP Version: 5.2.0
New Comment:
array(
'downloadcounter' => 2777,
'versions' => array(
'0.1.0' => array (
'title' => 'A1 Teasermenu',
'description' => 'Displays a teaser for advanced subpages
or a selection of advanced pages',
'state' => 'stable',
'reviewstate' => 0,
'category' => 'plugin',
'downloadcounter' => 2787,
'lastuploaddate' => 1088427240,
'dependencies' => array (
'depends' => array(
'typo3' =>'',
'php' =>'',
'cms' => ''
),
'conflicts' => array('' =>'')
),
'authorname' => 'Mirko Balluff',
'authoremail' => '[EMAIL PROTECTED]',
'ownerusername' => 'amt1',
't3xfilemd5' => '3a4ec198b6ea8d0bc2d69d9b7400398f',
)
)
)
);
$test=array();
while($i<1600) {
$test[]=$test2;
$i++;
}
$out=gzcompress(serialize($test));
?>
results in :
PHP Fatal error: Allowed memory size of 67108864 bytes exhausted at
/usr/pkgsrc/lang/php5/work/php-5.2.0/ext/standard/var.c:541 (tried to
allocate 1041720 bytes) in /var/www/www.chaosbutze.de/htdocs/test2.php
on line 37
while it works on php 5.1.6 and 4.
Having mem limit set to 64MB.
Setting mem limit to 128MB and increasing interations to 2260 also
causes the above mentioned error.
Previous Comments:
[2006-11-08 20:46:33] [EMAIL PROTECTED]
Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves.
A proper reproducing script starts with ,
is max. 10-20 lines long and does not require any external
resources such as databases, etc. If the script requires a
database to demonstrate the issue, please make sure it creates
all necessary tables, stored procedures etc.
Please avoid embedding huge scripts into the report.
[2006-11-08 20:33:53] nikolas dot hagelstein at gmail dot com
Description:
After upgrading to php 5.2.0 im constantly receiving "PHP Fatal error:
Out of memory error" where i did not received one using 5.1.6. I
adjusted the memory limit from 64M to 256M but without any success.
PHP Fatal error: Out of memory (allocated 250871808) at
/usr/pkgsrc/www/ap-php/work/php-5.2.0/ext/standard/var.c:541 (tried to
allocate 2215827 bytes) in
/var/www/shared/typo3_src-4.0.1/typo3/mod/tools/em/class.em_xmlhandler.php
on line 141, referer:
http://www.chaosbutze.de/typo3/mod/tools/em/index.php?
i am not sure about how to dig into this but i can say that it seems
to be somehow xml/serialize related.
--
Edit this bug report at http://bugs.php.net/?id=39438&edit=1
#39349 [Fbk->Opn]: Core dump on preg_replace
ID: 39349
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
-Status: Feedback
+Status: Open
Bug Type: Reproducible crash
Operating System: Netbsd 3.0.1
PHP Version: 5.2.0
New Comment:
seems to work with ulimit is there any other solution beside
recompiling it using the named flag? i mean running out of stack may
happen on any system regardless of its default ulimits.
Previous Comments:
[2006-11-07 14:48:39] [EMAIL PROTECTED]
You probably run out of stack.
You can try increasing your stack size and trying again on the command
line with:
uname -s 16384
for example. If that's what your problem is you can compile an external
PCRE that will not use stack but heap (and be slower in the process).
You can do that by compiling PCRE using --disable-stack-for-recursion
option.
[2006-11-03 13:03:32] nikolas dot hagelstein at gmail dot com
I was able to narrow down the problem to the following it seems to be
size/overflow related:
This Coredumps but if i reduce the string by one char (ie the 'r') it
stops coredumping.
[2006-11-02 21:14:29] nikolas dot hagelstein at gmail dot com
Description:
Passing large text to the beyond mentioned regexp makes php core dump
Reproduce code:
---
$out=preg_replace("/\{(?:[^{}]|\{(?:[^{}]|\{(?:[^{}]|\{[^{}]*\})*\})*\})*\}/","",$out);
Where $out isof
http://en.wikipedia.org/w/query.php?what=content&titles=moon
Probably related to some libc issues.
--
Edit this bug report at http://bugs.php.net/?id=39349&edit=1
#39438 [NEW]: Memory leak PHP Fatal error: Out of memory
From: nikolas dot hagelstein at gmail dot com Operating system: NETBSD 3.0.1 AMD64 PHP version: 5.2.0 PHP Bug Type: Unknown/Other Function Bug description: Memory leak PHP Fatal error: Out of memory Description: After upgrading to php 5.2.0 im constantly receiving "PHP Fatal error: Out of memory error" where i did not received one using 5.1.6. I adjusted the memory limit from 64M to 256M but without any success. PHP Fatal error: Out of memory (allocated 250871808) at /usr/pkgsrc/www/ap-php/work/php-5.2.0/ext/standard/var.c:541 (tried to allocate 2215827 bytes) in /var/www/shared/typo3_src-4.0.1/typo3/mod/tools/em/class.em_xmlhandler.php on line 141, referer: http://www.chaosbutze.de/typo3/mod/tools/em/index.php? i am not sure about how to dig into this but i can say that it seems to be somehow xml/serialize related. -- Edit bug report at http://bugs.php.net/?id=39438&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=39438&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=39438&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=39438&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=39438&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=39438&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=39438&r=needtrace Need Reproduce Script:http://bugs.php.net/fix.php?id=39438&r=needscript Try newer version:http://bugs.php.net/fix.php?id=39438&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=39438&r=support Expected behavior:http://bugs.php.net/fix.php?id=39438&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=39438&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=39438&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=39438&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=39438&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=39438&r=dst IIS Stability:http://bugs.php.net/fix.php?id=39438&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=39438&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=39438&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=39438&r=nozend MySQL Configuration Error:http://bugs.php.net/fix.php?id=39438&r=mysqlcfg
#39349 [Opn]: Core dump on preg_replace
ID: 39349
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
Status: Open
Bug Type: Reproducible crash
Operating System: Netbsd 3.0.1
PHP Version: 5.2.0
New Comment:
I was able to narrow down the problem to the following it seems to be
size/overflow related:
This Coredumps but if i reduce the string by one char (ie the 'r') it
stops coredumping.
Previous Comments:
[2006-11-02 21:14:29] nikolas dot hagelstein at gmail dot com
Description:
Passing large text to the beyond mentioned regexp makes php core dump
Reproduce code:
---
$out=preg_replace("/\{(?:[^{}]|\{(?:[^{}]|\{(?:[^{}]|\{[^{}]*\})*\})*\})*\}/","",$out);
Where $out isof
http://en.wikipedia.org/w/query.php?what=content&titles=moon
Probably related to some libc issues.
--
Edit this bug report at http://bugs.php.net/?id=39349&edit=1
#39349 [NEW]: Core dump on preg_replace
From: nikolas dot hagelstein at gmail dot com
Operating system: Netbsd 3.0.1
PHP version: 5.2.0
PHP Bug Type: Reproducible crash
Bug description: Core dump on preg_replace
Description:
Passing large text to the beyond mentioned regexp makes php core dump
Reproduce code:
---
$out=preg_replace("/\{(?:[^{}]|\{(?:[^{}]|\{(?:[^{}]|\{[^{}]*\})*\})*\})*\}/","",$out);
Where $out isof
http://en.wikipedia.org/w/query.php?what=content&titles=moon
Probably related to some libc issues.
--
Edit bug report at http://bugs.php.net/?id=39349&edit=1
--
Try a CVS snapshot (PHP 4.4):
http://bugs.php.net/fix.php?id=39349&r=trysnapshot44
Try a CVS snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=39349&r=trysnapshot52
Try a CVS snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=39349&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=39349&r=fixedcvs
Fixed in release:
http://bugs.php.net/fix.php?id=39349&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=39349&r=needtrace
Need Reproduce Script:http://bugs.php.net/fix.php?id=39349&r=needscript
Try newer version:http://bugs.php.net/fix.php?id=39349&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=39349&r=support
Expected behavior:http://bugs.php.net/fix.php?id=39349&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=39349&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=39349&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=39349&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=39349&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=39349&r=dst
IIS Stability:http://bugs.php.net/fix.php?id=39349&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=39349&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=39349&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=39349&r=nozend
MySQL Configuration Error:http://bugs.php.net/fix.php?id=39349&r=mysqlcfg
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961 User updated by: nikolas dot hagelstein at gmail dot com Reported By: nikolas dot hagelstein at gmail dot com -Status: Feedback +Status: Open Bug Type: Reproducible crash Operating System: Netbsd 3.0.1 AMD64 PHP Version: 5.1.6 New Comment: seems to work at least on my 64bit maschine tested against 5.1.6 and latest snapshot. Maybe someone can verify for 32bit maschines. Previous Comments: [2006-09-26 22:11:59] [EMAIL PROTECTED] Please apply this to the snapshot: http://tony2001.phpclub.net/dev/tmp/bug38961.diff Does this patch fix it for you? [2006-09-26 20:30:30] nikolas dot hagelstein at gmail dot com (gdb) p word[w_idx] $1 = -61 'Ã' in my native mind this should not result in a negative number. This seems to be related to wider datatypes on 64 bit maschines possible a compiler flag issue ... [2006-09-26 20:19:01] [EMAIL PROTECTED] I've reported it to NetBSD people, lets see what they say about it. [2006-09-26 18:34:13] nikolas dot hagelstein at gmail dot com ah got it i had to run php -e (gdb) p word[w_idx] $1 = -61 'Ã' (gdb) p toupper(word[w_idx]) $2 = 28518 (gdb) p isalpha(toupper(word[w_idx])) Program received signal SIGSEGV, Segmentation fault. 0x000200e4eced in isalpha () from /usr/lib/libc.so.12 [2006-09-26 18:33:44] [EMAIL PROTECTED] # gdb sapi/cli/php (gdb) r /path/to/test/script.php (gdb) f 0 (gdb) p word[w_idx] (gdb) p toupper(word[w_idx]) (gdb) p isalpha(toupper(word[w_idx])) The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/38961 -- Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Sus]: Metaphone results in segmentation fault
ID: 38961 User updated by: nikolas dot hagelstein at gmail dot com Reported By: nikolas dot hagelstein at gmail dot com Status: Suspended Bug Type: Reproducible crash Operating System: Netbsd 3.0.1 AMD64 PHP Version: 5.1.6 New Comment: (gdb) p word[w_idx] $1 = -61 'Ã' in my native mind this should not result in a negative number. This seems to be related to wider datatypes on 64 bit maschines possible a compiler flag issue ... Previous Comments: [2006-09-26 20:19:01] [EMAIL PROTECTED] I've reported it to NetBSD people, lets see what they say about it. [2006-09-26 18:34:13] nikolas dot hagelstein at gmail dot com ah got it i had to run php -e (gdb) p word[w_idx] $1 = -61 'Ã' (gdb) p toupper(word[w_idx]) $2 = 28518 (gdb) p isalpha(toupper(word[w_idx])) Program received signal SIGSEGV, Segmentation fault. 0x000200e4eced in isalpha () from /usr/lib/libc.so.12 [2006-09-26 18:33:44] [EMAIL PROTECTED] # gdb sapi/cli/php (gdb) r /path/to/test/script.php (gdb) f 0 (gdb) p word[w_idx] (gdb) p toupper(word[w_idx]) (gdb) p isalpha(toupper(word[w_idx])) ---- [2006-09-26 18:26:08] nikolas dot hagelstein at gmail dot com (gdb) p word[w_idx] No symbol table is loaded. Use the "file" command. seems as if i have to load a symbol table or something, any hints? [2006-09-26 18:18:22] [EMAIL PROTECTED] Looks like your libc is broken. Please type this in gdb after "bt": f 0 p word[w_idx] p toupper(word[w_idx]) p isalpha(toupper(word[w_idx])) and paste the output here The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/38961 -- Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
-Status: Feedback
+Status: Open
Bug Type: Reproducible crash
Operating System: Netbsd 3.0.1 AMD64
PHP Version: 5.1.6
New Comment:
ah got it i had to run php -e
(gdb) p word[w_idx]
$1 = -61 'Ã'
(gdb) p toupper(word[w_idx])
$2 = 28518
(gdb) p isalpha(toupper(word[w_idx]))
Program received signal SIGSEGV, Segmentation fault.
0x000200e4eced in isalpha () from /usr/lib/libc.so.12
Previous Comments:
[2006-09-26 18:33:44] [EMAIL PROTECTED]
# gdb sapi/cli/php
(gdb) r /path/to/test/script.php
(gdb) f 0
(gdb) p word[w_idx]
(gdb) p toupper(word[w_idx])
(gdb) p isalpha(toupper(word[w_idx]))
[2006-09-26 18:26:08] nikolas dot hagelstein at gmail dot com
(gdb) p word[w_idx]
No symbol table is loaded. Use the "file" command.
seems as if i have to load a symbol table or something, any hints?
[2006-09-26 18:18:22] [EMAIL PROTECTED]
Looks like your libc is broken.
Please type this in gdb after "bt":
f 0
p word[w_idx]
p toupper(word[w_idx])
p isalpha(toupper(word[w_idx]))
and paste the output here
----
[2006-09-26 18:17:17] nikolas dot hagelstein at gmail dot com
segfault on 5.1.6 and php5.2-200609261630 same backtrace
----
[2006-09-26 18:04:20] nikolas dot hagelstein at gmail dot com
sorry folks you have been right it seems as if the pkgsrc process
somehow stripes debug informations :|. Anyway here is what i got using
a native build process and the native sources (without the latest cvs
patch provided by iliaa)
Program received signal SIGSEGV, Segmentation fault.
0x004a00ff in metaphone (word=0x8127c0 "ö", word_len=2,
max_phonemes=0, phoned_word=0x7f7fcc70, traditional=1)
at /usr/local/src/php-5.1.6/ext/standard/metaphone.c:195
195 for (; !isalpha(Curr_Letter); w_idx++) {
(gdb) bt
#0 0x004a00ff in metaphone (word=0x8127c0 "ö", word_len=2,
max_phonemes=0, phoned_word=0x7f7fcc70, traditional=1)
at /usr/local/src/php-5.1.6/ext/standard/metaphone.c:195
#1 0x0049ff40 in zif_metaphone (ht=1, return_value=0x812840,
return_value_ptr=0x0, this_ptr=0x0, return_value_used=1)
at /usr/local/src/php-5.1.6/ext/standard/metaphone.c:46
#2 0x00561366 in zend_do_fcall_common_helper_SPEC (
execute_data=0x7f7fce20) at zend_vm_execute.h:200
#3 0x0056493d in ZEND_DO_FCALL_SPEC_CONST_HANDLER (
execute_data=0x7f7fce20) at zend_vm_execute.h:1640
#4 0x00560e6a in execute (op_array=0x783c40) at
zend_vm_execute.h:92
#5 0x0053ddf6 in zend_execute_scripts (type=8, retval=0x0,
file_count=3) at /usr/local/src/php-5.1.6/Zend/zend.c:1109
#6 0x004eed77 in php_execute_script
(primary_file=0x7f7fe7c0)
at /usr/local/src/php-5.1.6/main/main.c:1737
#7 0x005b1cd7 in main (argc=2, argv=0x7f7fe8c0)
at /usr/local/src/php-5.1.6/sapi/cgi/cgi_main.c:1612
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/38961
--
Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
-Status: Feedback
+Status: Open
Bug Type: Reproducible crash
Operating System: Netbsd 3.0.1 AMD64
PHP Version: 5.1.6
New Comment:
(gdb) p word[w_idx]
No symbol table is loaded. Use the "file" command.
seems as if i have to load a symbol table or something, any hints?
Previous Comments:
[2006-09-26 18:18:22] [EMAIL PROTECTED]
Looks like your libc is broken.
Please type this in gdb after "bt":
f 0
p word[w_idx]
p toupper(word[w_idx])
p isalpha(toupper(word[w_idx]))
and paste the output here
[2006-09-26 18:17:17] nikolas dot hagelstein at gmail dot com
segfault on 5.1.6 and php5.2-200609261630 same backtrace
[2006-09-26 18:04:20] nikolas dot hagelstein at gmail dot com
sorry folks you have been right it seems as if the pkgsrc process
somehow stripes debug informations :|. Anyway here is what i got using
a native build process and the native sources (without the latest cvs
patch provided by iliaa)
Program received signal SIGSEGV, Segmentation fault.
0x004a00ff in metaphone (word=0x8127c0 "ö", word_len=2,
max_phonemes=0, phoned_word=0x7f7fcc70, traditional=1)
at /usr/local/src/php-5.1.6/ext/standard/metaphone.c:195
195 for (; !isalpha(Curr_Letter); w_idx++) {
(gdb) bt
#0 0x004a00ff in metaphone (word=0x8127c0 "ö", word_len=2,
max_phonemes=0, phoned_word=0x7f7fcc70, traditional=1)
at /usr/local/src/php-5.1.6/ext/standard/metaphone.c:195
#1 0x0049ff40 in zif_metaphone (ht=1, return_value=0x812840,
return_value_ptr=0x0, this_ptr=0x0, return_value_used=1)
at /usr/local/src/php-5.1.6/ext/standard/metaphone.c:46
#2 0x00561366 in zend_do_fcall_common_helper_SPEC (
execute_data=0x7f7fce20) at zend_vm_execute.h:200
#3 0x0056493d in ZEND_DO_FCALL_SPEC_CONST_HANDLER (
execute_data=0x7f7fce20) at zend_vm_execute.h:1640
#4 0x00560e6a in execute (op_array=0x783c40) at
zend_vm_execute.h:92
#5 0x0053ddf6 in zend_execute_scripts (type=8, retval=0x0,
file_count=3) at /usr/local/src/php-5.1.6/Zend/zend.c:1109
#6 0x004eed77 in php_execute_script
(primary_file=0x7f7fe7c0)
at /usr/local/src/php-5.1.6/main/main.c:1737
#7 0x005b1cd7 in main (argc=2, argv=0x7f7fe8c0)
at /usr/local/src/php-5.1.6/sapi/cgi/cgi_main.c:1612
[2006-09-26 17:28:04] [EMAIL PROTECTED]
Please do the following:
#1 fetch http://snaps.php.net/php5.2-200609261630.tar.bz2
#2 extract it
#3 cd into the directory
#4 ./configure --disable-all --enable-debug
#5 make
#6 sapi/cli/php your_test_file.php
--------
[2006-09-26 17:07:51] nikolas dot hagelstein at gmail dot com
it is php -v returns (DEBUG) which indicates that it has been build
with enable-debug:
PHP 5.1.6 (cli) (built: Sep 26 2006 18:33:22) (DEBUG)
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/38961
--
Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Opn]: Metaphone results in segmentation fault
ID: 38961
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
Status: Open
Bug Type: Reproducible crash
Operating System: Netbsd 3.0.1 AMD64
PHP Version: 5.1.6
New Comment:
segfault on 5.1.6 and php5.2-200609261630 same backtrace
Previous Comments:
[2006-09-26 18:04:20] nikolas dot hagelstein at gmail dot com
sorry folks you have been right it seems as if the pkgsrc process
somehow stripes debug informations :|. Anyway here is what i got using
a native build process and the native sources (without the latest cvs
patch provided by iliaa)
Program received signal SIGSEGV, Segmentation fault.
0x004a00ff in metaphone (word=0x8127c0 "ö", word_len=2,
max_phonemes=0, phoned_word=0x7f7fcc70, traditional=1)
at /usr/local/src/php-5.1.6/ext/standard/metaphone.c:195
195 for (; !isalpha(Curr_Letter); w_idx++) {
(gdb) bt
#0 0x004a00ff in metaphone (word=0x8127c0 "ö", word_len=2,
max_phonemes=0, phoned_word=0x7f7fcc70, traditional=1)
at /usr/local/src/php-5.1.6/ext/standard/metaphone.c:195
#1 0x0049ff40 in zif_metaphone (ht=1, return_value=0x812840,
return_value_ptr=0x0, this_ptr=0x0, return_value_used=1)
at /usr/local/src/php-5.1.6/ext/standard/metaphone.c:46
#2 0x00561366 in zend_do_fcall_common_helper_SPEC (
execute_data=0x7f7fce20) at zend_vm_execute.h:200
#3 0x0056493d in ZEND_DO_FCALL_SPEC_CONST_HANDLER (
execute_data=0x7f7fce20) at zend_vm_execute.h:1640
#4 0x00560e6a in execute (op_array=0x783c40) at
zend_vm_execute.h:92
#5 0x0053ddf6 in zend_execute_scripts (type=8, retval=0x0,
file_count=3) at /usr/local/src/php-5.1.6/Zend/zend.c:1109
#6 0x004eed77 in php_execute_script
(primary_file=0x7f7fe7c0)
at /usr/local/src/php-5.1.6/main/main.c:1737
#7 0x005b1cd7 in main (argc=2, argv=0x7f7fe8c0)
at /usr/local/src/php-5.1.6/sapi/cgi/cgi_main.c:1612
[2006-09-26 17:28:04] [EMAIL PROTECTED]
Please do the following:
#1 fetch http://snaps.php.net/php5.2-200609261630.tar.bz2
#2 extract it
#3 cd into the directory
#4 ./configure --disable-all --enable-debug
#5 make
#6 sapi/cli/php your_test_file.php
[2006-09-26 17:07:51] nikolas dot hagelstein at gmail dot com
it is php -v returns (DEBUG) which indicates that it has been build
with enable-debug:
PHP 5.1.6 (cli) (built: Sep 26 2006 18:33:22) (DEBUG)
[2006-09-26 17:06:29] [EMAIL PROTECTED]
..or your PHP binary is stripped.
Just get the sources, compile them with ./configure --enable-debug
--disable-all and use the sapi/cli/php binary.
[2006-09-26 17:02:49] [EMAIL PROTECTED]
Well, your PHP is built without --enable-debug, that's the fact.
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/38961
--
Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
-Status: Feedback
+Status: Open
Bug Type: Reproducible crash
Operating System: Netbsd 3.0.1 AMD64
PHP Version: 5.1.6
New Comment:
sorry folks you have been right it seems as if the pkgsrc process
somehow stripes debug informations :|. Anyway here is what i got using
a native build process and the native sources (without the latest cvs
patch provided by iliaa)
Program received signal SIGSEGV, Segmentation fault.
0x004a00ff in metaphone (word=0x8127c0 "ö", word_len=2,
max_phonemes=0, phoned_word=0x7f7fcc70, traditional=1)
at /usr/local/src/php-5.1.6/ext/standard/metaphone.c:195
195 for (; !isalpha(Curr_Letter); w_idx++) {
(gdb) bt
#0 0x004a00ff in metaphone (word=0x8127c0 "ö", word_len=2,
max_phonemes=0, phoned_word=0x7f7fcc70, traditional=1)
at /usr/local/src/php-5.1.6/ext/standard/metaphone.c:195
#1 0x0049ff40 in zif_metaphone (ht=1, return_value=0x812840,
return_value_ptr=0x0, this_ptr=0x0, return_value_used=1)
at /usr/local/src/php-5.1.6/ext/standard/metaphone.c:46
#2 0x00561366 in zend_do_fcall_common_helper_SPEC (
execute_data=0x7f7fce20) at zend_vm_execute.h:200
#3 0x0056493d in ZEND_DO_FCALL_SPEC_CONST_HANDLER (
execute_data=0x7f7fce20) at zend_vm_execute.h:1640
#4 0x00560e6a in execute (op_array=0x783c40) at
zend_vm_execute.h:92
#5 0x0053ddf6 in zend_execute_scripts (type=8, retval=0x0,
file_count=3) at /usr/local/src/php-5.1.6/Zend/zend.c:1109
#6 0x004eed77 in php_execute_script
(primary_file=0x7f7fe7c0)
at /usr/local/src/php-5.1.6/main/main.c:1737
#7 0x005b1cd7 in main (argc=2, argv=0x7f7fe8c0)
at /usr/local/src/php-5.1.6/sapi/cgi/cgi_main.c:1612
Previous Comments:
[2006-09-26 17:28:04] [EMAIL PROTECTED]
Please do the following:
#1 fetch http://snaps.php.net/php5.2-200609261630.tar.bz2
#2 extract it
#3 cd into the directory
#4 ./configure --disable-all --enable-debug
#5 make
#6 sapi/cli/php your_test_file.php
[2006-09-26 17:07:51] nikolas dot hagelstein at gmail dot com
it is php -v returns (DEBUG) which indicates that it has been build
with enable-debug:
PHP 5.1.6 (cli) (built: Sep 26 2006 18:33:22) (DEBUG)
[2006-09-26 17:06:29] [EMAIL PROTECTED]
..or your PHP binary is stripped.
Just get the sources, compile them with ./configure --enable-debug
--disable-all and use the sapi/cli/php binary.
[2006-09-26 17:02:49] [EMAIL PROTECTED]
Well, your PHP is built without --enable-debug, that's the fact.
----
[2006-09-26 17:00:46] nikolas dot hagelstein at gmail dot com
yes ...it is:
Starting program: /usr/pkg/bin/php
/var/www/www.chaosbutze.de/htdocs/test.php
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...
Program received signal SIGSEGV, Segmentation fault.
0x0051bb0f in zif_metaphone ()
(gdb) bt
#0 0x0051bb0f in zif_metaphone ()
#1 0x0051b9e2 in zif_metaphone ()
#2 0x005bfa95 in execute ()
#3 0x005bf21c in execute ()
#4 0x005a2ef6 in zend_execute_scripts ()
#5 0x00562c09 in php_execute_script ()
#6 0x006133e9 in main ()
#7 0x00440aa8 in ___start ()
i even tried -e but without any success...
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/38961
--
Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961 User updated by: nikolas dot hagelstein at gmail dot com Reported By: nikolas dot hagelstein at gmail dot com -Status: Feedback +Status: Open Bug Type: Reproducible crash Operating System: Netbsd 3.0.1 AMD64 PHP Version: 5.1.6 New Comment: it is php -v returns (DEBUG) which indicates that it has been build with enable-debug: PHP 5.1.6 (cli) (built: Sep 26 2006 18:33:22) (DEBUG) Previous Comments: [2006-09-26 17:06:29] [EMAIL PROTECTED] ..or your PHP binary is stripped. Just get the sources, compile them with ./configure --enable-debug --disable-all and use the sapi/cli/php binary. [2006-09-26 17:02:49] [EMAIL PROTECTED] Well, your PHP is built without --enable-debug, that's the fact. [2006-09-26 17:00:46] nikolas dot hagelstein at gmail dot com yes ...it is: Starting program: /usr/pkg/bin/php /var/www/www.chaosbutze.de/htdocs/test.php (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)... Program received signal SIGSEGV, Segmentation fault. 0x0051bb0f in zif_metaphone () (gdb) bt #0 0x0051bb0f in zif_metaphone () #1 0x0051b9e2 in zif_metaphone () #2 0x005bfa95 in execute () #3 0x005bf21c in execute () #4 0x005a2ef6 in zend_execute_scripts () #5 0x00562c09 in php_execute_script () #6 0x006133e9 in main () #7 0x00440aa8 in ___start () i even tried -e but without any success... [2006-09-26 16:57:21] [EMAIL PROTECTED] And the backtrace is EXACTLY the same? Just #0 0x0050c86c in zif_metaphone () ? [2006-09-26 16:53:05] nikolas dot hagelstein at gmail dot com Just a typo withhin my comment debug is enabled see beyond PHP 5.1.6 (cli) (built: Sep 26 2006 18:33:22) (DEBUG) The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/38961 -- Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961 User updated by: nikolas dot hagelstein at gmail dot com Reported By: nikolas dot hagelstein at gmail dot com -Status: Feedback +Status: Open Bug Type: Reproducible crash Operating System: Netbsd 3.0.1 AMD64 PHP Version: 5.1.6 New Comment: yes ...it is: Starting program: /usr/pkg/bin/php /var/www/www.chaosbutze.de/htdocs/test.php (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)... Program received signal SIGSEGV, Segmentation fault. 0x0051bb0f in zif_metaphone () (gdb) bt #0 0x0051bb0f in zif_metaphone () #1 0x0051b9e2 in zif_metaphone () #2 0x005bfa95 in execute () #3 0x005bf21c in execute () #4 0x005a2ef6 in zend_execute_scripts () #5 0x00562c09 in php_execute_script () #6 0x006133e9 in main () #7 0x00440aa8 in ___start () i even tried -e but without any success... Previous Comments: [2006-09-26 16:57:21] [EMAIL PROTECTED] And the backtrace is EXACTLY the same? Just #0 0x0050c86c in zif_metaphone () ? [2006-09-26 16:53:05] nikolas dot hagelstein at gmail dot com Just a typo withhin my comment debug is enabled see beyond PHP 5.1.6 (cli) (built: Sep 26 2006 18:33:22) (DEBUG) [2006-09-26 16:48:12] [EMAIL PROTECTED] --enabled-debug != --enable-debug [2006-09-26 16:38:21] nikolas dot hagelstein at gmail dot com recompiled using --enabled-debug -> same output [2006-09-26 16:27:57] [EMAIL PROTECTED] With --enable-debug we would get a lot more useful information. The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/38961 -- Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961 User updated by: nikolas dot hagelstein at gmail dot com Reported By: nikolas dot hagelstein at gmail dot com -Status: Feedback +Status: Open Bug Type: Reproducible crash Operating System: Netbsd 3.0.1 AMD64 PHP Version: 5.1.6 New Comment: Just a typo withhin my comment debug is enabled see beyond PHP 5.1.6 (cli) (built: Sep 26 2006 18:33:22) (DEBUG) Previous Comments: [2006-09-26 16:48:12] [EMAIL PROTECTED] --enabled-debug != --enable-debug [2006-09-26 16:38:21] nikolas dot hagelstein at gmail dot com recompiled using --enabled-debug -> same output [2006-09-26 16:27:57] [EMAIL PROTECTED] With --enable-debug we would get a lot more useful information. [2006-09-26 16:23:48] nikolas dot hagelstein at gmail dot com Ok, i just copied the cvs metaphone.c to my 5.1.6 source tree and did a rebuild. Still segfault, same backtrace : Program received signal SIGSEGV, Segmentation fault. 0x0050c86c in zif_metaphone () (gdb) bt #0 0x0050c86c in zif_metaphone () #1 0x0050c762 in zif_metaphone () #2 0x0059f309 in execute () #3 0x0059eba0 in execute () #4 0x00585886 in zend_execute_scripts () #5 0x0054bfe9 in php_execute_script () #6 0x005eab04 in main () #7 0x004407a8 in ___start () [2006-09-26 16:04:18] [EMAIL PROTECTED] >"Syntax error: Unterminated quoted string" Please elaborate. The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/38961 -- Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961 User updated by: nikolas dot hagelstein at gmail dot com Reported By: nikolas dot hagelstein at gmail dot com -Status: Feedback +Status: Open Bug Type: Reproducible crash Operating System: Netbsd 3.0.1 AMD64 PHP Version: 5.1.6 New Comment: recompiled using --enabled-debug -> same output Previous Comments: [2006-09-26 16:27:57] [EMAIL PROTECTED] With --enable-debug we would get a lot more useful information. [2006-09-26 16:23:48] nikolas dot hagelstein at gmail dot com Ok, i just copied the cvs metaphone.c to my 5.1.6 source tree and did a rebuild. Still segfault, same backtrace : Program received signal SIGSEGV, Segmentation fault. 0x0050c86c in zif_metaphone () (gdb) bt #0 0x0050c86c in zif_metaphone () #1 0x0050c762 in zif_metaphone () #2 0x0059f309 in execute () #3 0x0059eba0 in execute () #4 0x00585886 in zend_execute_scripts () #5 0x0054bfe9 in php_execute_script () #6 0x005eab04 in main () #7 0x004407a8 in ___start () [2006-09-26 16:04:18] [EMAIL PROTECTED] >"Syntax error: Unterminated quoted string" Please elaborate. [2006-09-26 15:56:37] nikolas dot hagelstein at gmail dot com I checked out 5.2 from cvs but i am not able to build it on my maschine. "Syntax error: Unterminated quoted string" Any other way to check if the the 64bit fix works? [2006-09-26 15:41:22] [EMAIL PROTECTED] Can you please try the latest CVS, it has a 64bit fix that may fix the crash you are experiencing. The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/38961 -- Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961 User updated by: nikolas dot hagelstein at gmail dot com Reported By: nikolas dot hagelstein at gmail dot com -Status: Feedback +Status: Open Bug Type: Reproducible crash Operating System: Netbsd 3.0.1 AMD64 PHP Version: 5.1.6 New Comment: Ok, i just copied the cvs metaphone.c to my 5.1.6 source tree and did a rebuild. Still segfault, same backtrace : Program received signal SIGSEGV, Segmentation fault. 0x0050c86c in zif_metaphone () (gdb) bt #0 0x0050c86c in zif_metaphone () #1 0x0050c762 in zif_metaphone () #2 0x0059f309 in execute () #3 0x0059eba0 in execute () #4 0x00585886 in zend_execute_scripts () #5 0x0054bfe9 in php_execute_script () #6 0x005eab04 in main () #7 0x004407a8 in ___start () Previous Comments: [2006-09-26 16:04:18] [EMAIL PROTECTED] >"Syntax error: Unterminated quoted string" Please elaborate. [2006-09-26 15:56:37] nikolas dot hagelstein at gmail dot com I checked out 5.2 from cvs but i am not able to build it on my maschine. "Syntax error: Unterminated quoted string" Any other way to check if the the 64bit fix works? [2006-09-26 15:41:22] [EMAIL PROTECTED] Can you please try the latest CVS, it has a 64bit fix that may fix the crash you are experiencing. [2006-09-26 15:35:34] nikolas dot hagelstein at gmail dot com So it is eigther a system specific issue (i was able to reproduce it on 2 maschines) or you did not used an utf8 file ;) [2006-09-26 15:32:42] [EMAIL PROTECTED] Works perfectly fine: string(0) "" The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/38961 -- Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
-Status: Feedback
+Status: Open
Bug Type: Reproducible crash
Operating System: Netbsd 3.0.1 AMD64
PHP Version: 5.1.6
New Comment:
I checked out 5.2 from cvs but i am not able to build it on my
maschine.
"Syntax error: Unterminated quoted string"
Any other way to check if the the 64bit fix works?
Previous Comments:
[2006-09-26 15:41:22] [EMAIL PROTECTED]
Can you please try the latest CVS, it has a 64bit fix that may
fix the crash you are experiencing.
[2006-09-26 15:35:34] nikolas dot hagelstein at gmail dot com
So it is eigther a system specific issue (i was able to reproduce it on
2 maschines) or you did not used an utf8 file ;)
[2006-09-26 15:32:42] [EMAIL PROTECTED]
Works perfectly fine: string(0) ""
[2006-09-26 15:16:57] nikolas dot hagelstein at gmail dot com
I can not try that since i am not able to submit real utf8 chars
through my shell.
test.php
php test.php
results in a segmentation fault test.php needs to be an UTF8 file.
file -i test.php
test.php: text/plain; charset=utf-8
[2006-09-26 15:09:28] [EMAIL PROTECTED]
./sapi/cli/php -r
'var_dump(metaphone("русский
язык UTF8"));'
string(3) "UTF"
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/38961
--
Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
-Status: Feedback
+Status: Open
Bug Type: Reproducible crash
Operating System: Netbsd 3.0.1 AMD64
PHP Version: 5.1.6
New Comment:
I can not try that since i am not able to submit real utf8 chars
through my shell.
test.php
php test.php
results in a segmentation fault test.php needs to be an UTF8 file.
file -i test.php
test.php: text/plain; charset=utf-8
Previous Comments:
[2006-09-26 15:09:28] [EMAIL PROTECTED]
./sapi/cli/php -r
'var_dump(metaphone("русский
язык UTF8"));'
string(3) "UTF"
----
[2006-09-26 15:06:14] nikolas dot hagelstein at gmail dot com
Starting program: /usr/pkg/bin/php test.php
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
Program received signal SIGSEGV, Segmentation fault.
0x0050c86b in zif_metaphone ()
(gdb) bt
#0 0x0050c86b in zif_metaphone ()
#1 0x0050c761 in zif_metaphone ()
#2 0x0059f489 in execute ()
#3 0x0059ed20 in execute ()
#4 0x00585a06 in zend_execute_scripts ()
#5 0x0054c169 in php_execute_script ()
#6 0x005eac84 in main ()
#7 0x004407a8 in ___start ()
(gdb)
[2006-09-26 14:09:57] [EMAIL PROTECTED]
Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves.
A proper reproducing script starts with ,
is max. 10-20 lines long and does not require any external
resources such as databases, etc. If the script requires a
database to demonstrate the issue, please make sure it creates
all necessary tables, stored procedures etc.
Please avoid embedding huge scripts into the report.
----
[2006-09-26 14:01:12] nikolas dot hagelstein at gmail dot com
Description:
Passing utf8 data to metaphone results in a segmentation fault.
Reproduce code:
---
--
Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961 User updated by: nikolas dot hagelstein at gmail dot com Reported By: nikolas dot hagelstein at gmail dot com -Status: Feedback +Status: Open Bug Type: Reproducible crash Operating System: Netbsd 3.0.1 AMD64 PHP Version: 5.1.6 New Comment: Starting program: /usr/pkg/bin/php test.php (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... Program received signal SIGSEGV, Segmentation fault. 0x0050c86b in zif_metaphone () (gdb) bt #0 0x0050c86b in zif_metaphone () #1 0x0050c761 in zif_metaphone () #2 0x0059f489 in execute () #3 0x0059ed20 in execute () #4 0x00585a06 in zend_execute_scripts () #5 0x0054c169 in php_execute_script () #6 0x005eac84 in main () #7 0x004407a8 in ___start () (gdb) Previous Comments: [2006-09-26 14:09:57] [EMAIL PROTECTED] Thank you for this bug report. To properly diagnose the problem, we need a short but complete example script to be able to reproduce this bug ourselves. A proper reproducing script starts with , is max. 10-20 lines long and does not require any external resources such as databases, etc. If the script requires a database to demonstrate the issue, please make sure it creates all necessary tables, stored procedures etc. Please avoid embedding huge scripts into the report. [2006-09-26 14:01:12] nikolas dot hagelstein at gmail dot com Description: Passing utf8 data to metaphone results in a segmentation fault. Reproduce code: --- -- Edit this bug report at http://bugs.php.net/?id=38961&edit=1
#38961 [NEW]: Metaphone results in segmentation fault
From: nikolas dot hagelstein at gmail dot com Operating system: Netbsd 3.0.1 AMD64 PHP version: 5.1.6 PHP Bug Type: Reproducible crash Bug description: Metaphone results in segmentation fault Description: Passing utf8 data to metaphone results in a segmentation fault. Reproduce code: --- -- Edit bug report at http://bugs.php.net/?id=38961&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=38961&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=38961&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=38961&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=38961&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=38961&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=38961&r=needtrace Need Reproduce Script:http://bugs.php.net/fix.php?id=38961&r=needscript Try newer version:http://bugs.php.net/fix.php?id=38961&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=38961&r=support Expected behavior:http://bugs.php.net/fix.php?id=38961&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=38961&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=38961&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=38961&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=38961&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=38961&r=dst IIS Stability:http://bugs.php.net/fix.php?id=38961&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=38961&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=38961&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=38961&r=nozend MySQL Configuration Error:http://bugs.php.net/fix.php?id=38961&r=mysqlcfg
#38961 [Fbk->Opn]: Metaphone results in segmentation fault
ID: 38961
User updated by: nikolas dot hagelstein at gmail dot com
Reported By: nikolas dot hagelstein at gmail dot com
-Status: Feedback
+Status: Open
Bug Type: Reproducible crash
Operating System: Netbsd 3.0.1 AMD64
PHP Version: 5.1.6
New Comment:
So it is eigther a system specific issue (i was able to reproduce it on
2 maschines) or you did not used an utf8 file ;)
Previous Comments:
[2006-09-26 15:32:42] [EMAIL PROTECTED]
Works perfectly fine: string(0) ""
[2006-09-26 15:16:57] nikolas dot hagelstein at gmail dot com
I can not try that since i am not able to submit real utf8 chars
through my shell.
test.php
php test.php
results in a segmentation fault test.php needs to be an UTF8 file.
file -i test.php
test.php: text/plain; charset=utf-8
[2006-09-26 15:09:28] [EMAIL PROTECTED]
./sapi/cli/php -r
'var_dump(metaphone("русский
язык UTF8"));'
string(3) "UTF"
--------
[2006-09-26 15:06:14] nikolas dot hagelstein at gmail dot com
Starting program: /usr/pkg/bin/php test.php
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
Program received signal SIGSEGV, Segmentation fault.
0x0050c86b in zif_metaphone ()
(gdb) bt
#0 0x0050c86b in zif_metaphone ()
#1 0x0050c761 in zif_metaphone ()
#2 0x0059f489 in execute ()
#3 0x0059ed20 in execute ()
#4 0x00585a06 in zend_execute_scripts ()
#5 0x0054c169 in php_execute_script ()
#6 0x005eac84 in main ()
#7 0x004407a8 in ___start ()
(gdb)
[2006-09-26 14:09:57] [EMAIL PROTECTED]
Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves.
A proper reproducing script starts with ,
is max. 10-20 lines long and does not require any external
resources such as databases, etc. If the script requires a
database to demonstrate the issue, please make sure it creates
all necessary tables, stored procedures etc.
Please avoid embedding huge scripts into the report.
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/38961
--
Edit this bug report at http://bugs.php.net/?id=38961&edit=1
