#27263 [Opn->Fbk]: Unserialize crashes on multiple objects, stored in session explicitly

2004-02-16 Thread sniper
 ID:   27263
 Updated by:   [EMAIL PROTECTED]
 Reported By:  davojan at mail dot ru
-Status:   Open
+Status:   Feedback
 Bug Type: Session related
 Operating System: FreeBSD 4.7-RELEASE
 PHP Version:  5.0.0b4 (beta4)
 New Comment:

Please try using this CVS snapshot:

  http://snaps.php.net/php5-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5-win32-latest.zip

I can not reproduce this crash with latest CVS..




Previous Comments:


[2004-02-16 17:38:33] davojan at mail dot ru

Sorry, but when I add --enable-debug to my configure the bug
"dissapeared", the example script worked fine. The crashe takes place
only in the debugless version, it's backtrace hardly can help you:



Program terminated with signal 10, Bus error.

.//usr/local/lib/php/20020429/templates.so: No such file or directory.

#0  0x2860f780 in ?? () from /usr/local/libexec/apache/libphp5.so

(gdb) bt

#0  0x2860f780 in ?? () from /usr/local/libexec/apache/libphp5.so

#1  0x8050416 in ap_clear_pool ()

#2  0x8050478 in ap_destroy_pool ()

#3  0x80503eb in ap_clear_pool ()

#4  0x8050478 in ap_destroy_pool ()

#5  0x805b190 in clean_parent_exit ()

#6  0x805d84d in standalone_main ()

#7  0x805dcab in main ()

#8  0x804fc39 in _start ()



It is a bad sign, it may mean buffer overflow anywhere in the program,
i suppose. It may be difficult to find the bug. I'm ready to provide
any help in catching it...



[2004-02-15 16:05:23] [EMAIL PROTECTED]

Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php

Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.





[2004-02-15 13:31:17] davojan at mail dot ru

Description:

PHP crashes on session_start() if object "foo" references to object
"bar" and both "foo" and "bar" are put into session explicitly each
into it's element.



The example below will work if we comment line:

$_SESSION['bar'] = $bar;

the only one "foo" is put to session explicitly and "bar" is also put,
but as a member of "foo".

Reproduce code:
---
bar = $bar;

session_start();

$_SESSION['foo'] = $foo;

$_SESSION['bar'] = $bar;// it will be all right, if we comment this



session_write_close();

session_start();// crashing here

echo "OK";

?>

Expected result:

OK

Actual result:
--
In browser:

"The page cannot be displayed"



In /var/log/httpd-error.log:

[Sun Feb 15 21:21:22 2004] [notice] child pid 230 exit signal
Segmentation fault (11)





-- 
Edit this bug report at http://bugs.php.net/?id=27263&edit=1


#27263 [Opn->Fbk]: Unserialize crashes on multiple objects, stored in session explicitly

2004-02-15 Thread sniper
 ID:   27263
 Updated by:   [EMAIL PROTECTED]
 Reported By:  davojan at mail dot ru
-Status:   Open
+Status:   Feedback
 Bug Type: Session related
 Operating System: FreeBSD 4.7-RELEASE
 PHP Version:  5.0.0b4 (beta4)
 New Comment:

Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php

Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.




Previous Comments:


[2004-02-15 13:31:17] davojan at mail dot ru

Description:

PHP crashes on session_start() if object "foo" references to object
"bar" and both "foo" and "bar" are put into session explicitly each
into it's element.



The example below will work if we comment line:

$_SESSION['bar'] = $bar;

the only one "foo" is put to session explicitly and "bar" is also put,
but as a member of "foo".

Reproduce code:
---
bar = $bar;

session_start();

$_SESSION['foo'] = $foo;

$_SESSION['bar'] = $bar;// it will be all right, if we comment this



session_write_close();

session_start();// crashing here

echo "OK";

?>

Expected result:

OK

Actual result:
--
In browser:

"The page cannot be displayed"



In /var/log/httpd-error.log:

[Sun Feb 15 21:21:22 2004] [notice] child pid 230 exit signal
Segmentation fault (11)





-- 
Edit this bug report at http://bugs.php.net/?id=27263&edit=1