From: 12985462 at QQ dot com Operating system: CentOS 5.3 32bit PHP version: 5.2.10 PHP Bug Type: CGI related Bug description: php: free(): invalid pointer: 0x0a48f6b0 ***
Description: ------------ OS:CentOS 5.3 CPU:Intel(R) Core(TM)2 Quad CPU Q9300 @ 2.50GHz MEM:256M PHP Version:PHP 5.2.10 + Zend Optimizer v3.3.9 ------------------------- SELinux is disabled!!! ------------------------- Compiler : icc -V Intel(R) C Compiler for applications running on IA-32, Version 10.1 Build 20090817 Package ID: l_cc_p_10.1.025 Copyright (C) 1985-2009 Intel Corporation. All rights reserved. FOR NON-COMMERCIAL USE ONLY ------------------------- gcc -v Using built-in specs. Target: i386-redhat-linux Configured with: ../configure --prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/info --enable-shared --enable-threads=posix --enable-checking=release --with-system-zlib --enable-__cxa_atexit --disable-libunwind-exceptions --enable-libgcj-multifile --enable-languages=c,c++,objc,obj-c++,java,fortran,ada --enable-java-awt=gtk --disable-dssi --enable-plugin --with-java-home=/usr/lib/jvm/java-1.4.2-gcj-1.4.2.0/jre --with-cpu=generic --host=i386-redhat-linux Thread model: posix gcc version 4.1.2 20080704 (Red Hat 4.1.2-44) --------------------------- compiling with CC=icc CXX=icpc CFLAGS='-O2 -unroll2 -ip -fp-model source -restrict -xW ' CXXFLAGS='-O2 -unroll2 -ip -fp-model source -restrict -fno-implicit-templates -fno-exceptions -fno-rtti -xW ' ./configure --prefix=/var/webserver/php --with-config-file-path=/var/webserver/php/etc --with-mysql=/var/webserver/mysql --with-mysqli=/var/webserver/mysql/bin/mysql_config --with-iconv-dir=/usr/local --with-freetype-dir --with-jpeg-dir --with-png-dir --with-zlib --with-libxml-dir=/usr --enable-xml --disable-rpath --enable-discard-path --enable-bcmath --enable-shmop --enable-sysvsem --enable-inline-optimization --with-curl --with-curlwrappers --enable-mbregex --enable-fastcgi --enable-fpm --enable-force-cgi-redirect --enable-mbstring --with-gd --enable-gd-native-ttf --with-openssl --enable-pcntl --enable-sockets --with-mcrypt --with-mhash --without-pear --disable-debug --disable-ipv6 ---------------------------------------------------- php.ini [Zend] zend_extension="/var/webserver/zend/ZendOptimizer.so" zend_optimizer.optimization_level=1023 ---------------------------------------------------- ldd /var/webserver/php/bin/php libcrypt.so.1 => /lib/libcrypt.so.1 (0xb7f8f000) librt.so.1 => /lib/librt.so.1 (0xb7f86000) libmhash.so.2 => /usr/lib/libmhash.so.2 (0xb7f3f000) libmcrypt.so.4 => /usr/lib/libmcrypt.so.4 (0xb7f0c000) libfreetype.so.6 => /usr/lib/libfreetype.so.6 (0xb7e8c000) libpng12.so.0 => /usr/lib/libpng12.so.0 (0xb7e66000) libz.so.1 => /usr/lib/libz.so.1 (0xb7e52000) libjpeg.so.62 => /usr/lib/libjpeg.so.62 (0xb7e30000) libcurl.so.3 => /usr/lib/libcurl.so.3 (0xb7df4000) libresolv.so.2 => /lib/libresolv.so.2 (0xb7de1000) libimf.so => /opt/intel/cc/10.1.025/lib/libimf.so (0xb7bb1000) libm.so.6 => /lib/libm.so.6 (0xb7b8a000) libnsl.so.1 => /lib/libnsl.so.1 (0xb7b72000) libxml2.so.2 => /usr/lib/libxml2.so.2 (0xb7a40000) libssl.so.6 => /lib/libssl.so.6 (0xb79f9000) libcrypto.so.6 => /lib/libcrypto.so.6 (0xb78b9000) libdl.so.2 => /lib/libdl.so.2 (0xb78b5000) libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0xb7888000) libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0xb77f1000) libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0xb77cb000) libcom_err.so.2 => /lib/libcom_err.so.2 (0xb77c8000) libidn.so.11 => /usr/lib/libidn.so.11 (0xb7797000) libmysqlclient.so.16 => /var/webserver/mysql/lib/mysql/libmysqlclient.so.16 (0xb7641000) libtcmalloc_minimal.so.0 => /usr/local/lib/libtcmalloc_minimal.so.0 (0xb760e000) libiconv.so.2 => /usr/local/lib/libiconv.so.2 (0xb7510000) libgcc_s.so.1 => /lib/libgcc_s.so.1 (0xb7504000) libc.so.6 => /lib/libc.so.6 (0xb73c0000) libpthread.so.0 => /lib/libpthread.so.0 (0xb73a9000) /lib/ld-linux.so.2 (0xb7fc7000) libkrb5support.so.0 => /usr/lib/libkrb5support.so.0 (0xb739f000) libkeyutils.so.1 => /lib/libkeyutils.so.1 (0xb739c000) libintlc.so.5 => /opt/intel/cc/10.1.025/lib/libintlc.so.5 (0xb7358000) libstdc++.so.6 => /usr/lib/libstdc++.so.6 (0xb726f000) libselinux.so.1 => /lib/libselinux.so.1 (0xb7257000) libsepol.so.1 => /lib/libsepol.so.1 (0xb7210000) Expected result: ---------------- /var/webserver/php/bin/php -v *** glibc detected *** /var/webserver/php/bin/php: free(): invalid pointer: 0x0a48f6b0 *** ======= Backtrace: ========= /lib/libc.so.6[0xb74210f1] /lib/libc.so.6(cfree+0x90)[0xb7424bc0] /var/webserver/zend/ZendOptimizer.so[0xb70d0111] ======= Memory map: ======== 08048000-0869e000 r-xp 00000000 08:03 53182695 /var/webserver/php/bin/php 0869e000-086d1000 rw-p 00656000 08:03 53182695 /var/webserver/php/bin/php 086d1000-086db000 rw-p 086d1000 00:00 0 0a2d4000-0a574000 rw-p 0a2d4000 00:00 0 [heap] b701a000-b709a000 rw-s 00000000 00:40 0 b709a000-b70a3000 r-xp 00000000 08:03 52071567 /lib/libnss_files-2.5.so b70a3000-b70a4000 r--p 00008000 08:03 52071567 /lib/libnss_files-2.5.so b70a4000-b70a5000 rw-p 00009000 08:03 52071567 /lib/libnss_files-2.5.so b70a5000-b71f0000 r-xp 00000000 08:03 53182687 /var/webserver/zend/ZendOptimizer.so b71f0000-b7201000 rw-p 0014b000 08:03 53182687 /var/webserver/zend/ZendOptimizer.so b7201000-b7208000 rw-p b7201000 00:00 0 b7208000-b7243000 r-xp 00000000 08:03 52071756 /lib/libsepol.so.1 b7243000-b7244000 rw-p 0003a000 08:03 52071756 /lib/libsepol.so.1 b7244000-b724f000 rw-p b7244000 00:00 0 b724f000-b7265000 r-xp 00000000 08:03 52072821 /lib/libselinux.so.1 b7265000-b7267000 rw-p 00015000 08:03 52072821 /lib/libselinux.so.1 b7267000-b7345000 r-xp 00000000 08:03 52073268 /usr/lib/libstdc++.so.6.0.8 b7345000-b7348000 r--p 000dd000 08:03 52073268 /usr/lib/libstdc++.so.6.0.8 b7348000-b734a000 rw-p 000e0000 08:03 52073268 /usr/lib/libstdc++.so.6.0.8 b734a000-b7350000 rw-p b734a000 00:00 0 b7350000-b7391000 r-xp 00000000 08:03 52366545 /opt/intel/cc/10.1.025/lib/libintlc.so.5 b7391000-b7393000 rw-p 00041000 08:03 52366545 /opt/intel/cc/10.1.025/lib/libintlc.so.5 b7393000-b7394000 rw-p b7393000 00:00 0 b7394000-b7396000 r-xp 00000000 08:03 52072569 /lib/libkeyutils-1.2.so b7396000-b7397000 rw-p 00001000 08:03 52072569 /lib/libkeyutils-1.2.so b7397000-b739f000 r-xp 00000000 08:03 52073384 /usr/lib/libkrb5support.so.0.1 b739f000-b73a0000 rw-p 00007000 08:03 52073384 /usr/lib/libkrb5support.so.0.1 b73a0000-b73a1000 rw-p b73a0000 00:00 0 b73a1000-b73b4000 r-xp 00000000 08:03 52071713 /lib/libpthread-2.5.so b73b4000-b73b5000 r--p 00012000 08:03 52071713 /lib/libpthread-2.5.so b73b5000-b73b6000 rw-p 00013000 08:03 52071713 /lib/libpthread-2.5.so b73b6000-b73b8000 rw-p b73b6000 00:00 0 b73b8000-b74f6000 r-xp 00000000 08:03 52071634 /lib/libc-2.5.so b74f6000-b74f8000 r--p 0013e000 08:03 52071634 /lib/libc-2.5.so b74f8000-b74f9000 rw-p 00140000 08:03 52071634 /lib/libc-2.5.so b74f9000-b74fc000 rw-p b74f9000 00:00 0 b74fc000-b7507000 r-xp 00000000 08:03 52076812 /lib/libgcc_s-4.1.2-20080825.so.1 b7507000-b7508000 rw-p 0000a000 08:03 52076812 /lib/libgcc_s-4.1.2-20080825.so.1 b7508000-b7604000 r-xp 00000000 08:03 52077133 /usr/local/lib/libiconv.so.2.5.0 b7604000-b7606000 rw-p 000fc000 08:03 52077133 /usr/local/lib/libiconv.so.2.5.0 b7606000-b761f000 r-xp 00000000 08:03 52073338 /usr/local/lib/libtcmalloc_minimal.so.0.0.0 b761f000-b7620000 rw-p 00019000 08:03 52073338 /usr/local/lib/libtcmalloc_minimal.so.0.0.0 b7620000-b7639000 rw-p b7620000 00:00 0 b7639000-b7688000 r-xp 00000000 08:03 53020729 /var/webserver/mysql/lib/mysql/libmysqlclient.so.16.0.0 b7688000-b778e000 rw-p 0004f000 08:03 53020729 /var/webserver/mysql/lib/mysql/libmysqlclient.so.16.0.0 b778e000-b778f000 rw-p b778e000 00:00 0 b778f000-b77bf000 r-xp 00000000 08:03 52073236 /usr/lib/libidn.so.11.5.19 b77bf000-b77c0000 rw-p 0002f000 08:03 52073236 /usr/lib/libidn.so.11.5.19 b77c0000-b77c2000 r-xp 00000000 08:03 52071737 /lib/libcom_err.so.2.1 b77c2000-b77c3000 rw-p 00001000 08:03 52071737 /lib/libcom_err.so.2.1 b77c3000-b77e8000 r-xp 00000000 08:03 52075775 /usr/lib/libk5crypto.so.3.1 b77e8000-b77e9000 rw-p 00025000 08:03 52075775 /usr/lib/libk5crypto.so.3.1 b77e9000-b787c000 r-xp 00000000 08:03 52073194 /usr/lib/libkrb5.so.3.3 b787c000-b787f000 rw-p 00092000 08:03 52073194 /usr/lib/libkrb5.so.3.3 b787f000-b7880000 rw-p b787f000 00:00 0 b7880000-b78ac000 r-xp 00000000 08:03 52073170 /usr/lib/libgssapi_krb5.so.2.2 b78ac000-b78ad000 rw-p 0002c000 08:03 52073170 /usr/lib/libgssapi_krb5.so.2.2 b78ad000-b78af000 r-xp 00000000 08:03 52071769 /lib/libdl-2.5.so b78af000-b78b0000 r--p 00001000 08:03 52071769 /lib/libdl-2.5.so b78b0000-b78b1000 rw-p 00002000 08:03 52071769 /lib/libdl-2.5.so b78b1000-b79da000 r-xp 00000000 08:03 52076887 /lib/libcrypto.so.0.9.8e b79da000-b79ed000 rw-p 00129000 08:03 52076887 /lib/libcrypto.so.0.9.8e b79ed000-b79f1000 rw-p b79ed000 00:00 0 b79f1000-b7a34000 r-xp 00000000 08:03 52071547 /lib/libssl.so.0.9.8e b7a34000-b7a38000 rw-p 00042000 08:03 52071547 /lib/libssl.so.0.9.8e b7a38000-b7b64000 r-xp 00000000 08:03 52073503 /usr/lib/libxml2.so.2.6.26 b7b64000-b7b69000 rw-p 0012c000 08:03 52073503 /usr/lib/libxml2.so.2.6.26 b7b69000-b7b6a000 rw-p b7b69000 00:00 0 b7b6a000-b7b7d000 r-xp 00000000 08:03 52071569 /lib/libnsl-2.5.so b7b7d000-b7b7e000 r--p 00012000 08:03 52071569 /lib/libnsl-2.5.so b7b7e000-b7b7f000 rw-p 00013000 08:03 52071569 /lib/libnsl-2.5.so b7b7f000-b7b82000 rw-p b7b7f000 00:00 0 b7b82000-b7ba7000 r-xp 00000000 08:03 52071556 /lib/libm-2.5.so b7ba7000-b7ba8000 r--p 00024000 08:03 52071556 /lib/libm-2.5.so b7ba8000-b7ba9000 rw-p 00025000 08:03 52071556 /lib/libm-2.5.so b7ba9000-b7dd6000 r-xp 00000000 08:03 52366543 /opt/intel/cc/10.1.025/lib/libimf.so b7dd6000-b7dd9000 rw-p 0022c000 08:03 52366543 /opt/intel/cc/10.1.025/lib/libimf.so b7dd9000-b7de8000 r-xp 00000000 08:03 52071728 /lib/libresolv-2.5.so b7de8000-b7de9000 r--p 0000e000 08:03 52071728 /lib/libresolv-2.5.so b7de9000-b7dea000 rw-p 0000f000 08:03 52071728 /lib/libresolv-2.5.so b7dea000-b7dec000 rw-p b7dea000 00:00 0 b7dec000-b7e27000 r-xp 00000000 08:03 52073460 /usr/lib/libcurl.so.3.0.0 b7e27000-b7e28000 rw-p 0003b000 08:03 52073460 /usr/lib/libcurl.so.3.0.0 b7e28000-b7e49000 r-xp 00000000 08:03 52073245 /usr/lib/libjpeg.so.62.0.0 b7e49000-b7e4a000 rw-p 00020000 08:03 52073245 /usr/lib/libjpeg.so.62.0.0 b7e4a000-b7e5c000 r-xp 00000000 08:03 52073227 /usr/lib/libz.so.1.2.3 b7e5c000-b7e5d000 rw-p 00011000 08:03 52073227 /usr/lib/libz.so.1.2.3 b7e5d000-b7e5e000 rw-p b7e5d000 00:00 0 b7e5e000-b7e83000 r-xp 00000000 08:03 52073431 /usr/lib/libpng12.so.0.10.0 b7e83000-b7e84000 rw-p 00024000 08:03 52073431 /usr/lib/libpng12.so.0.10.0 b7e84000-b7f01000 r-xp 00000000 08:03 52073440 /usr/lib/libfreetype.so.6.3.10 b7f01000-b7f04000 rw-p 0007d000 08:03 52073440 /usr/lib/libfreetype.so.6.3.10 b7f04000-b7f2f000 r-xp 00000000 08:03 52077147 /usr/lib/libmcrypt.so.4.4.8 b7f2f000-b7f32000 rw-p 0002b000 08:03 52077147 /usr/lib/libmcrypt.so.4.4.8 b7f32000-b7f37000 rw-p b7f32000 00:00 0 b7f37000-b7f7d000 r-xp 00000000 08:03 52077152 /usr/lib/libmhash.so.2.0.1 b7f7d000-b7f7e000 rw-p 00046000 08:03 52077152 /usr/lib/libmhash.so.2.0.1 b7f7e000-b7f85000 r-xp 00000000 08:03 52071757 /lib/librt-2.5.so b7f85000-b7f86000 r--p 00006000 08:03 52071757 /lib/librt-2.5.so b7f86000-b7f87000 rw-p 00007000 08:03 52071757 /lib/librt-2.5.so b7f87000-b7f90000 r-xp 00000000 08:03 52071770 /lib/libcrypt-2.5.so b7f90000-b7f91000 r--p 00008000 08:03 52071770 /lib/libcrypt-2.5.so b7f91000-b7f92000 rw-p 00009000 08:03 52071770 /lib/libcrypt-2.5.so b7f92000-b7fba000 rw-p b7f92000 00:00 0 b7fbe000-b7fbf000 rw-p b7fbe000 00:00 0 b7fbf000-b7fd9000 r-xp 00000000 08:03 52071722 /lib/ld-2.5.so b7fd9000-b7fda000 r--p 00019000 08:03 52071722 /lib/ld-2.5.so b7fda000-b7fdb000 rw-p 0001a000 08:03 52071722 /lib/ld-2.5.so bf8c6000-bf8da000 rwxp 7ffffffea000 00:00 0 [stack] bf8da000-bf8db000 rw-p 7fffffffe000 00:00 0 Aborted ----------------------------------------- -- Edit bug report at http://bugs.php.net/?id=49559&edit=1 -- Try a snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=49559&r=trysnapshot52 Try a snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=49559&r=trysnapshot53 Try a snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=49559&r=trysnapshot60 Fixed in SVN: http://bugs.php.net/fix.php?id=49559&r=fixed Fixed in SVN and need be documented: http://bugs.php.net/fix.php?id=49559&r=needdocs Fixed in release: http://bugs.php.net/fix.php?id=49559&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=49559&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=49559&r=needscript Try newer version: http://bugs.php.net/fix.php?id=49559&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=49559&r=support Expected behavior: http://bugs.php.net/fix.php?id=49559&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=49559&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=49559&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=49559&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=49559&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=49559&r=dst IIS Stability: http://bugs.php.net/fix.php?id=49559&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=49559&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=49559&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=49559&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=49559&r=mysqlcfg