From:             jan at horde dot org
Operating system: Linux
PHP version:      4CVS-2004-02-03 (stable)
PHP Bug Type:     Reproducible crash
Bug description:  segfault in zend_execute.c

Description:
------------
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 28753)]
0x4067a064 in execute (op_array=0x878137c)
    at /home/jan/cvs/php43/Zend/zend_execute.c:1258
1258                                    if
(ARG_SHOULD_BE_SENT_BY_REF(EX(opline)


backtrace:

#0  0x4067a064 in execute (op_array=0x878137c)
    at /home/jan/cvs/php43/Zend/zend_execute.c:1258
#1  0x4067c063 in execute (op_array=0x8785b0c)
    at /home/jan/cvs/php43/Zend/zend_execute.c:1660
#2  0x4067c063 in execute (op_array=0x85c52e4)
    at /home/jan/cvs/php43/Zend/zend_execute.c:1660
#3  0x4067c063 in execute (op_array=0x816b2bc)
    at /home/jan/cvs/php43/Zend/zend_execute.c:1660
#4  0x4067c063 in execute (op_array=0x8647dfc)
    at /home/jan/cvs/php43/Zend/zend_execute.c:1660
#5  0x4067c063 in execute (op_array=0x8647c24)
    at /home/jan/cvs/php43/Zend/zend_execute.c:1660
#6  0x4067c063 in execute (op_array=0x8647b34)
    at /home/jan/cvs/php43/Zend/zend_execute.c:1660
#7  0x4067c063 in execute (op_array=0x816814c)
    at /home/jan/cvs/php43/Zend/zend_execute.c:1660
#8  0x4066a7fa in zend_execute_scripts (type=8, retval=0x0, file_count=3)
    at /home/jan/cvs/php43/Zend/zend.c:884
#9  0x40633178 in php_execute_script (primary_file=0xbfffee60)
    at /home/jan/cvs/php43/main/main.c:1727
#10 0x40680f04 in apache_php_module_main (r=0x815cfd8,
display_source_mode=0)
    at /home/jan/cvs/php43/sapi/apache/sapi_apache.c:54
#11 0x40681eb9 in send_php (r=0x815cfd8, display_source_mode=0,
---Type <return> to continue, or q <return> to quit---
    filename=0x815edb8 "/home/jan/headhorde//imp/message.php")
    at /home/jan/cvs/php43/sapi/apache/mod_php4.c:620
#12 0x40681f3f in send_parsed_php (r=0x815cfd8)
    at /home/jan/cvs/php43/sapi/apache/mod_php4.c:635
#13 0x080557a7 in ap_invoke_handler ()
#14 0x0806aaf0 in process_request_internal ()
#15 0x0806ad81 in ap_process_request ()
#16 0x08062762 in child_main ()
#17 0x0806290a in make_child ()
#18 0x08062a46 in startup_children ()
#19 0x080634eb in standalone_main ()
#20 0x08063ca6 in main ()


Matching Apache log entry:
[Tue Feb  3 17:37:39 2004]  Script: 
'/home/jan/headhorde//imp/message.php'
---------------------------------------
/home/jan/cvs/php43/ext/mbstring/mbstring.c(329) : Block 0x0877ADF8
status:
Beginning:      OK (allocated on
/home/jan/cvs/php43/ext/mbstring/mbstring.c:314
, 17 bytes)
      End:      Overflown (magic=0xC3592234 instead of 0x2A8FCC84)
                At least 4 bytes overflown
---------------------------------------



No reproduce code at the moment.



-- 
Edit bug report at http://bugs.php.net/?id=27135&edit=1
-- 
Try a CVS snapshot (php4):  http://bugs.php.net/fix.php?id=27135&r=trysnapshot4
Try a CVS snapshot (php5):  http://bugs.php.net/fix.php?id=27135&r=trysnapshot5
Fixed in CVS:               http://bugs.php.net/fix.php?id=27135&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=27135&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=27135&r=needtrace
Need Reproduce Script:      http://bugs.php.net/fix.php?id=27135&r=needscript
Try newer version:          http://bugs.php.net/fix.php?id=27135&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=27135&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=27135&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=27135&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=27135&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=27135&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=27135&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=27135&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=27135&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=27135&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=27135&r=float

Reply via email to