From:             
Operating system: Windows XP
PHP version:      5.3SVN-2010-09-14 (SVN)
Package:          Reproducible crash
Bug Type:         Bug
Bug description:php crash on phpinfo(); using php_enchant

Description:
------------
php svn crashes when calling phpinfo() and having php_enchant loaded.



apparently an uninitialñized pointer is passed around while invoking
php_info_print_table_start();





 the problem occurs only using php_enchant, any other extension, i havent
seen this crash on any other extension, in fact im using 

php.ini-production modified only to load php_enchant and no other
extension.



i am using the lates sources from php 5.3 branch in svn.

this bug started to happen recently, code from about one or two weeks ago

doesn't crash.





the following stack trace was obtained using vc2008



        



Test script:
---------------
<?php

    phpinfo();

?>



Expected result:
----------------
phpinfo page shown.

Actual result:
--------------
php5ts.dll!_erealloc(void * ptr=0x00000000, unsigned int size=79, int
allow_failure=0)  Línea 2359 + 0x4 bytes       C

        php5ts.dll!xbuf_format_converter(smart_str * xbuf=0x037cf93c, const char
* fmt=0x00000000, char * ap=0x00000000)  Línea 234 + 0x3f bytes        C

        php5ts.dll!vspprintf(char * * pbuf=0x037cf968, unsigned int max_len=0,
const char * format=0x022c6fe8, char * ap=0x037cf974)  Línea 799       C

        php5ts.dll!php_printf(const char * format=0x022c6fe8, ...)  Línea 626  
C

        php5ts.dll!php_info_print_table_start()  Línea 1040 + 0xa bytes        
C

        php_enchant.dll!zm_info_enchant(_zend_module_entry *
zend_module=0x0266de20, void * * * tsrm_ls=0x025433f0)  Línea 323      C

        php5ts.dll!php_info_print_module(_zend_module_entry *
zend_module=0x0266de20, void * * * tsrm_ls=0x025433f0)  Línea 103 + 0x8
bytes   C

        php5ts.dll!_display_module_info_func(_zend_module_entry *
module=0x0266de20, void * * * tsrm_ls=0x025433f0)  Línea 123 + 0xb
bytes   C

        php5ts.dll!zend_hash_apply(_hashtable * ht=0x037cfa38, int (void *, void
* * *)* apply_func=0x020b5fc0, void * * * tsrm_ls=0x025433f0)  Línea 676 +
0x9 bytes       C

        php5ts.dll!php_print_info(int flag=-1, void * * * tsrm_ls=0x025433f0) 
Línea 939 + 0x10 bytes C

        php5ts.dll!zif_phpinfo(int ht=0, _zval_struct * return_value=0x0389dfc8,
_zval_struct * * return_value_ptr=0x00000000, _zval_struct *
this_ptr=0x00000000, int return_value_used=0, void * * *
tsrm_ls=0x025433f0)  Línea 1254        C

        php5ts.dll!zend_do_fcall_common_helper_SPEC(_zend_execute_data *
execute_data=0x038d0080, void * * * tsrm_ls=0x02543300)  Línea 316 + 0x41
bytes   C

        php5ts.dll!ZEND_DO_FCALL_SPEC_CONST_HANDLER(_zend_execute_data *
execute_data=0x00000000, void * * * tsrm_ls=0x00000000)  Línea 1606 + 0xe
bytes   C

        php5ts.dll!execute(_zend_op_array * op_array=0x0389db10, void * * *
tsrm_ls=0x02543300)  Línea 107 + 0xa bytes     C

        php5ts.dll!zend_execute_scripts(int type=8, void * * *
tsrm_ls=0x025433f0, _zval_struct * * retval=0x00000000, int file_count=3,
...)  Línea 1195       C

        php5ts.dll!php_execute_script(_zend_file_handle *
primary_file=0x037cfe5c, void * * * tsrm_ls=0x025433f0)  Línea 2260 + 0x12
bytes   C

        php5apache2_2.dll!php_handler(request_rec * r=0x025d34e8)  Línea 669 +
0xe bytes       C

        libhttpd.dll!ap_run_handler(request_rec * r=0x025d34e8)  Línea 158 +
0x28 bytes      C

        libhttpd.dll!ap_invoke_handler(request_rec * r=0x01596640)  Línea 376 +
0x6 bytes       C

        libhttpd.dll!ap_process_request(request_rec * r=0x025d34e8)  Línea
286     C

        libhttpd.dll!ap_process_http_connection(conn_rec * c=0x025ce488)  Línea
190 + 0x6 bytes C

        libhttpd.dll!ap_run_process_connection(conn_rec * c=0x025ce488)  Línea
43 + 0x28 bytes C

        libhttpd.dll!ap_process_connection(conn_rec * c=0x025ce488, void *
csd=0x025c7460)  Línea 178 + 0x6 bytes C

        libhttpd.dll!worker_main(void * thread_num_val=0x025ce480)  Línea 778  
C

-- 
Edit bug report at http://bugs.php.net/bug.php?id=52841&edit=1
-- 
Try a snapshot (PHP 5.2):            
http://bugs.php.net/fix.php?id=52841&r=trysnapshot52
Try a snapshot (PHP 5.3):            
http://bugs.php.net/fix.php?id=52841&r=trysnapshot53
Try a snapshot (trunk):              
http://bugs.php.net/fix.php?id=52841&r=trysnapshottrunk
Fixed in SVN:                        
http://bugs.php.net/fix.php?id=52841&r=fixed
Fixed in SVN and need be documented: 
http://bugs.php.net/fix.php?id=52841&r=needdocs
Fixed in release:                    
http://bugs.php.net/fix.php?id=52841&r=alreadyfixed
Need backtrace:                      
http://bugs.php.net/fix.php?id=52841&r=needtrace
Need Reproduce Script:               
http://bugs.php.net/fix.php?id=52841&r=needscript
Try newer version:                   
http://bugs.php.net/fix.php?id=52841&r=oldversion
Not developer issue:                 
http://bugs.php.net/fix.php?id=52841&r=support
Expected behavior:                   
http://bugs.php.net/fix.php?id=52841&r=notwrong
Not enough info:                     
http://bugs.php.net/fix.php?id=52841&r=notenoughinfo
Submitted twice:                     
http://bugs.php.net/fix.php?id=52841&r=submittedtwice
register_globals:                    
http://bugs.php.net/fix.php?id=52841&r=globals
PHP 4 support discontinued:          http://bugs.php.net/fix.php?id=52841&r=php4
Daylight Savings:                    http://bugs.php.net/fix.php?id=52841&r=dst
IIS Stability:                       
http://bugs.php.net/fix.php?id=52841&r=isapi
Install GNU Sed:                     
http://bugs.php.net/fix.php?id=52841&r=gnused
Floating point limitations:          
http://bugs.php.net/fix.php?id=52841&r=float
No Zend Extensions:                  
http://bugs.php.net/fix.php?id=52841&r=nozend
MySQL Configuration Error:           
http://bugs.php.net/fix.php?id=52841&r=mysqlcfg

Reply via email to