ID:               34617
 Updated by:       [EMAIL PROTECTED]
 Reported By:      guillaume dot outters at free dot fr
-Status:           Assigned
+Status:           Closed
 Bug Type:         Scripting Engine problem
 Operating System: Mac OS X 10.4.2
 PHP Version:      5CVS, 6CVS (2005-09-23)
 Assigned To:      dmitry
 New Comment:

Fixed in CVS HEAD, PHP_5_1 and PHP_5_0.


Previous Comments:
------------------------------------------------------------------------

[2005-09-24 16:43:03] guillaume dot outters at free dot fr

OK, here we go for a shorter crasher:

<?php
class Thing {}
function boom()
{
    $reader = xml_parser_create();
    xml_set_object($reader, new Thing());
    die("here");
    xml_parser_free($reader);
}
boom();
?>

Some comments on the environment:

- crashes with CLI (that could be useful to speed up testing  
and avoid crashing your company's internet web server)
- Doesn't crash with the default Tiger PHP (4.3.11)
- Doesn't crash with my modification (freing the store after 
resources). That said, it was a quick fix, and I don't know 
the Zend engine sufficently to ensure it is safe in other 
situations.

Some comments on the crasher:

- dying() after the xml_parser_free doesn't crash anymore 
(the parser has been manually freed, so that's the same as 
freing resources before the objects_store).
- the code must be in a function to crash.

------------------------------------------------------------------------

[2005-09-24 15:11:49] [EMAIL PROTECTED]

Yet another chicken-and-egg problem with resources and objects.
xml_parser uses object for callbacks that is already destroyed at the
time when the resource is being destroyed.

2 guillaume dot outters at free dot fr:
Please try to make a reproduce case shorter than 1.7Mb. 

------------------------------------------------------------------------

[2005-09-23 20:06:38] [EMAIL PROTECTED]

Dmitry, this is not looking good. Can you check it out?


------------------------------------------------------------------------

[2005-09-23 16:56:08] guillaume dot outters at free dot fr

Same exact problem with 5.1.0RC2-dev (only line numbers in the 
backtrace differ).

------------------------------------------------------------------------

[2005-09-23 16:25:35] [EMAIL PROTECTED]

Please try using this CVS snapshot:

  http://snaps.php.net/php5-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5-win32-latest.zip

Please don't report issues unless you can reproduce the with PHP 5.1
snaps too. 

------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/34617

-- 
Edit this bug report at http://bugs.php.net/?id=34617&edit=1

Reply via email to