From:             
Operating system: CentOS5.*
PHP version:      5.3.2
Package:          Apache2 related
Bug Type:         Bug
Bug description:syntax error in autoload causes segmentation fault 

Description:
------------
Segmentation fault was occured when the file was loaded by calling
require() or 

inclede() inside of autoload function ,

and it contains some php syntax error.



It is often happend.

The most case is after make changes of script repeatedly.

Test script:
---------------
=== C.php ===

<?php



class C{

  funct ion pr(){ print 123; }  // <-- syntax error

}



==== test.php ====

<?php



class Loader{

  function autoload($classname){ require "$classname.php" ;}

}



$loader  = new Loader();

spl_autoload_register(array($loader,'autoload'));



$c = new C();

$c->pr();

Expected result:
----------------
Report syntax error.

Actual result:
--------------
Program received signal SIGSEGV, Segmentation fault.

0xb79dcb28 in zend_mm_check_ptr (heap=0x81b8a10, ptr=0x841fc78, silent=0, 

__zend_filename=0xb7f3234b "Zend/zend_language_scanner.l",
__zend_lineno=685, 

__zend_orig_filename=0x0,

    __zend_orig_lineno=0) at /s/php-5.3.2/Zend/zend_alloc.c:1355

1355            if (p->info._prev != ZEND_MM_GUARD_BLOCK &&

(gdb) bt

#0  0xb79dcb28 in zend_mm_check_ptr (heap=0x81b8a10, ptr=0x841fc78,
silent=0, 

__zend_filename=0xb7f3234b "Zend/zend_language_scanner.l",
__zend_lineno=685, 

__zend_orig_filename=0x0,

    __zend_orig_lineno=0) at /s/php-5.3.2/Zend/zend_alloc.c:1355

#1  0xb79dcaff in zend_mm_check_ptr (heap=0x81b8a10, ptr=0x841fc78,
silent=1, 

__zend_filename=0xb7f3234b "Zend/zend_language_scanner.l",
__zend_lineno=685, 

__zend_orig_filename=0x0,

    __zend_orig_lineno=0) at /s/php-5.3.2/Zend/zend_alloc.c:1352

#2  0xb79de08c in _zend_mm_free_int (heap=0x81b8a10, p=0x841fc78, 

__zend_filename=0xb7f3234b "Zend/zend_language_scanner.l",
__zend_lineno=685, 

__zend_orig_filename=0x0,

    __zend_orig_lineno=0) at /s/php-5.3.2/Zend/zend_alloc.c:1983

#3  0xb79df163 in _efree (ptr=0x841fc78, __zend_filename=0xb7f3234b 

"Zend/zend_language_scanner.l", __zend_lineno=685,
__zend_orig_filename=0x0, 

__zend_orig_lineno=0)

    at /s/php-5.3.2/Zend/zend_alloc.c:2351

#4  0xb79c6105 in zend_multibyte_read_script (buf=0xb7157000
"<?php\n\nclass 

C{\n  funct ion pr(){ print 123; }\n}\n\n", n=50) at 

Zend/zend_language_scanner.l:685

#5  0xb79c5083 in open_file_for_scanning (file_handle=0xbf848aa0) at 

Zend/zend_language_scanner.l:263

#6  0xb79c5290 in compile_file (file_handle=0xbf848aa0, type=8) at 

Zend/zend_language_scanner.l:331

#7  0xb77d0015 in phar_compile_file (file_handle=0xbf848aa0, type=8) at
/s/php-

5.3.2/ext/phar/phar.c:3390

#8  0xb6dabbba in xdebug_compile_file (file_handle=0xbf848aa0, type=8) at 

/s/xdebug-2.0.5/xdebug.c:2405

#9  0xb6d81060 in eaccelerator_compile_file (file_handle=0xbf848aa0,
type=8) at 

/s/eaccelerator-0.9.6/eaccelerator.c:1252

#10 0xb79c546a in compile_filename (type=8, filename=0x8420ebc) at 

Zend/zend_language_scanner.l:386

#11 0xb7a33dd7 in ZEND_INCLUDE_OR_EVAL_SPEC_CONST_HANDLER 

(execute_data=0x8450258) at /s/php-5.3.2/Zend/zend_vm_execute.h:1916

#12 0xb7a2dbe4 in execute (op_array=0x842205c) at /s/php-

5.3.2/Zend/zend_vm_execute.h:104

#13 0xb6da9456 in xdebug_execute (op_array=0x842205c) at /s/xdebug-

2.0.5/xdebug.c:1562

#14 0xb79f2f5c in zend_call_function (fci=0xbf848ea4, fci_cache=0xbf848e74)
at 

/s/php-5.3.2/Zend/zend_execute_API.c:947

#15 0xb7a1be08 in zend_call_method (object_pp=0x841d5d8, obj_ce=0x84208bc,


fn_proxy=0x841d5d4, function_name=0x841f1c8 "x::autoload\001", 

function_name_len=16, retval_ptr_ptr=0xbf848f44,

    param_count=1, arg1=0x841eed8, arg2=0x0) at /s/php-

5.3.2/Zend/zend_interfaces.c:97

#16 0xb7871cfc in zif_spl_autoload_call (ht=1, return_value=0x841fd94, 

return_value_ptr=0xbf849130, this_ptr=0x0, return_value_used=1) at /s/php-

5.3.2/ext/spl/php_spl.c:395

#17 0xb79f30f4 in zend_call_function (fci=0xbf84910c, fci_cache=0xbf8490f8)
at 

/s/php-5.3.2/Zend/zend_execute_API.c:969

#18 0xb79f385d in zend_lookup_class_ex (name=0x8422190 "C", name_length=1,


use_autoload=1, ce=0xbf84919c) at
/s/php-5.3.2/Zend/zend_execute_API.c:1100

#19 0xb79f44b0 in zend_fetch_class (class_name=0x8422190 "C",
class_name_len=1, 

fetch_type=4) at /s/php-5.3.2/Zend/zend_execute_API.c:1542

#20 0xb7a30966 in ZEND_FETCH_CLASS_SPEC_CONST_HANDLER
(execute_data=0x84501b8) 

at /s/php-5.3.2/Zend/zend_vm_execute.h:724

#21 0xb7a308df in ZEND_USER_OPCODE_SPEC_HANDLER (execute_data=0x84501b8) at


/s/php-5.3.2/Zend/zend_vm_execute.h:703

#22 0xb7a2dbe4 in execute (op_array=0x841eb88) at /s/php-

5.3.2/Zend/zend_vm_execute.h:104

#23 0xb6da9456 in xdebug_execute (op_array=0x841eb88) at /s/xdebug-

2.0.5/xdebug.c:1562

#24 0xb7a0139d in zend_execute_scripts (type=8, retval=0x0, file_count=3)
at 

/s/php-5.3.2/Zend/zend.c:1194

#25 0xb79954b6 in php_execute_script (primary_file=0xbf84b65c) at /s/php-

5.3.2/main/main.c:2260

#26 0xb7acb392 in php_handler (r=0x83a1538) at /s/php-

5.3.2/sapi/apache2handler/sapi_apache2.c:655

#27 0x0807f629 in ap_run_handler (r=0x83a1538) at config.c:157

---Type <return> to continue, or q <return> to quit---

#28 0x08082797 in ap_invoke_handler (r=0x83a1538) at config.c:372

#29 0x080d64f8 in ap_process_request (r=0x83a1538) at http_request.c:282

#30 0x080d36db in ap_process_http_connection (c=0x83e1af0) at
http_core.c:190

#31 0x08086769 in ap_run_process_connection (c=0x83e1af0) at
connection.c:43

#32 0x08104f1d in child_main (child_num_arg=<value optimized out>) at 

prefork.c:662

#33 0x08105163 in make_child (s=0x8152c98, slot=0) at prefork.c:702

#34 0x08105f3c in ap_mpm_run (_pconf=0x814a550, plog=0x81a47f8,
s=0x8152c98) at 

prefork.c:978

#35 0x0806cf25 in main (argc=135562568, argv=0x83df910) at main.c:740

-- 
Edit bug report at http://bugs.php.net/bug.php?id=51243&edit=1
-- 
Try a snapshot (PHP 5.2):            
http://bugs.php.net/fix.php?id=51243&r=trysnapshot52
Try a snapshot (PHP 5.3):            
http://bugs.php.net/fix.php?id=51243&r=trysnapshot53
Try a snapshot (PHP 6.0):            
http://bugs.php.net/fix.php?id=51243&r=trysnapshot60
Fixed in SVN:                        
http://bugs.php.net/fix.php?id=51243&r=fixed
Fixed in SVN and need be documented: 
http://bugs.php.net/fix.php?id=51243&r=needdocs
Fixed in release:                    
http://bugs.php.net/fix.php?id=51243&r=alreadyfixed
Need backtrace:                      
http://bugs.php.net/fix.php?id=51243&r=needtrace
Need Reproduce Script:               
http://bugs.php.net/fix.php?id=51243&r=needscript
Try newer version:                   
http://bugs.php.net/fix.php?id=51243&r=oldversion
Not developer issue:                 
http://bugs.php.net/fix.php?id=51243&r=support
Expected behavior:                   
http://bugs.php.net/fix.php?id=51243&r=notwrong
Not enough info:                     
http://bugs.php.net/fix.php?id=51243&r=notenoughinfo
Submitted twice:                     
http://bugs.php.net/fix.php?id=51243&r=submittedtwice
register_globals:                    
http://bugs.php.net/fix.php?id=51243&r=globals
PHP 4 support discontinued:          http://bugs.php.net/fix.php?id=51243&r=php4
Daylight Savings:                    http://bugs.php.net/fix.php?id=51243&r=dst
IIS Stability:                       
http://bugs.php.net/fix.php?id=51243&r=isapi
Install GNU Sed:                     
http://bugs.php.net/fix.php?id=51243&r=gnused
Floating point limitations:          
http://bugs.php.net/fix.php?id=51243&r=float
No Zend Extensions:                  
http://bugs.php.net/fix.php?id=51243&r=nozend
MySQL Configuration Error:           
http://bugs.php.net/fix.php?id=51243&r=mysqlcfg

Reply via email to