Edit report at http://bugs.php.net/bug.php?id=52518&edit=1
ID: 52518 Updated by: fel...@php.net Reported by: correo at sevein dot com Summary: Segfault in /Zend/zend_objects_API.c:230 -Status: Open +Status: Feedback Type: Bug Package: Reproducible crash Operating System: Linux/Windows PHP Version: 5.3.3 Block user comment: N New Comment: Thank you for this bug report. To properly diagnose the problem, we need a short but complete example script to be able to reproduce this bug ourselves. A proper reproducing script starts with <?php and ends with ?>, is max. 10-20 lines long and does not require any external resources such as databases, etc. If the script requires a database to demonstrate the issue, please make sure it creates all necessary tables, stored procedures etc. Please avoid embedding huge scripts into the report. Previous Comments: ------------------------------------------------------------------------ [2010-08-02 19:12:54] correo at sevein dot com Description: ------------ A PHP process segfaults randomly when I try to build a complex search index with Symfony framework and Zend Lucene. Unfortunately, I can't figure out a short script to reproduce this problem. I can reproduce it with all PHP versions, included PHP 5.3.3. In debug mode, the problem occurs fastly (the index build can take many hours). This is how I compiled my PHP installation: ./configure \ --enable-dom \ --enable-libxml \ --with-xsl \ --enable-pdo \ --with-pdo-mysql \ --with-mysql \ --with-mysqli \ --enable-mbstring \ --enable-debug gdb: $ gdb /home/foobar/bin/php-5.3.3-debug ./core Core was generated by `/home/foobar/bin/php-5.3.3-debug -d memory_limit=1200M symfony search:populate Q'. Program terminated with signal 11, Segmentation fault. #0 0x000000000086d775 in zend_objects_store_del_ref_by_handle_ex (handle=16159, handlers=0x106b340) at /home/foobar/bin/php-5.3.3/Zend/zend_objects_API.c:230 230 obj->refcount--; (gdb) print obj $1 = (struct _store_object *) 0x7ffc9fc80838 (gdb) print obj->refcount Cannot access memory at address 0x7ffc9fc80860 The backtrack: (gdb) bt #0 0x000000000086d775 in zend_objects_store_del_ref_by_handle_ex (handle=16159, handlers=0x106b340) at /home/foobar/bin/php-5.3.3/Zend/zend_objects_API.c:230 #1 0x000000000086d477 in zend_objects_store_del_ref (zobject=0xd724c90) at /home/foobar/bin/php-5.3.3/Zend/zend_objects_API.c:172 #2 0x000000000083d822 in _zval_dtor_func (zvalue=0xd724c90, __zend_filename=0xdceb88 "/home/foobar/bin/php-5.3.3/Zend/zend_execute_API.c", __zend_lineno=443) at /home/foobar/bin/php-5.3.3/Zend/zend_variables.c:52 #3 0x000000000082d73a in _zval_dtor (zvalue=0xd724c90, __zend_filename=0xdceb88 "/home/foobar/bin/php-5.3.3/Zend/zend_execute_API.c", __zend_lineno=443) at /home/foobar/bin/php-5.3.3/Zend/zend_variables.h:35 #4 0x000000000082e6c8 in _zval_ptr_dtor (zval_ptr=0xddbaa00, __zend_filename=0xdd0400 "/home/foobar/bin/php-5.3.3/Zend/zend_variables.c", __zend_lineno=178) at /home/foobar/bin/php-5.3.3/Zend/zend_execute_API.c:443 #5 0x000000000083db9f in _zval_ptr_dtor_wrapper (zval_ptr=0xddbaa00) at /home/foobar/bin/php-5.3.3/Zend/zend_variables.c:178 #6 0x000000000084feb0 in zend_hash_destroy (ht=0xcba0578) at /home/foobar/bin/php-5.3.3/Zend/zend_hash.c:526 #7 0x0000000000868209 in zend_object_std_dtor (object=0xf2983f0) at /home/foobar/bin/php-5.3.3/Zend/zend_objects.c:45 #8 0x0000000000868585 in zend_objects_free_object_storage (object=0xf2983f0) at /home/foobar/bin/php-5.3.3/Zend/zend_objects.c:128 #9 0x000000000086d710 in zend_objects_store_del_ref_by_handle_ex (handle=16266, handlers=0x106b340) at /home/foobar/bin/php-5.3.3/Zend/zend_objects_API.c:220 #10 0x000000000086d477 in zend_objects_store_del_ref (zobject=0xe67c7b0) at /home/foobar/bin/php-5.3.3/Zend/zend_objects_API.c:172 #11 0x000000000083d822 in _zval_dtor_func (zvalue=0xe67c7b0, __zend_filename=0xdceb88 "/home/foobar/bin/php-5.3.3/Zend/zend_execute_API.c", __zend_lineno=443) at /home/foobar/bin/php-5.3.3/Zend/zend_variables.c:52 #12 0x000000000082d73a in _zval_dtor (zvalue=0xe67c7b0, __zend_filename=0xdceb88 "/home/foobar/bin/php-5.3.3/Zend/zend_execute_API.c", __zend_lineno=443) at /home/foobar/bin/php-5.3.3/Zend/zend_variables.h:35 #13 0x000000000082e6c8 in _zval_ptr_dtor (zval_ptr=0x7ffca2525c10, __zend_filename=0xdd6728 "/home/foobar/bin/php-5.3.3/Zend/zend_vm_execute.h", __zend_lineno=160) at /home/foobar/bin/php-5.3.3/Zend/zend_execute_API.c:443 #14 0x00000000008732da in zend_leave_helper_SPEC (execute_data=0x7ffca2525b38) at /home/foobar/bin/php-5.3.3/Zend/zend_vm_execute.h:160 #15 0x0000000000878335 in ZEND_RETURN_SPEC_CONST_HANDLER (execute_data=0x7ffca2525b38) at /home/foobar/bin/php- 5.3.3/Zend/zend_vm_execute.h:1686 #16 0x0000000000873131 in execute (op_array=0x33a0410) at /home/foobar/bin/php- 5.3.3/Zend/zend_vm_execute.h:107 #17 0x00000000008401ec in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /home/foobar/bin/php-5.3.3/Zend/zend.c:1194 #18 0x00000000007ca328 in php_execute_script (primary_file=0x7fffd3b27230) at /home/foobar/bin/php-5.3.3/main/main.c:2260 #19 0x00000000009238a3 in main (argc=6, argv=0x7fffd3b27498) at /home/foobar/bin/php-5.3.3/sapi/cli/php_cli.c:1192 Test script: --------------- Unfortunately, I can't figure out a short script to reproduce this problem. Expected result: ---------------- The process should not segfault. Actual result: -------------- Segfault ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/bug.php?id=52518&edit=1