Edit report at http://bugs.php.net/bug.php?id=53345&edit=1
ID: 53345 Updated by: fel...@php.net Reported by: php-bugs at thequod dot de Summary: Crash related to custom session handler (via MySQL DB) in Roundcube -Status: Open +Status: Feedback Type: Bug Package: Session related Operating System: Linux PHP Version: 5.3.3 Block user comment: N Private report: N New Comment: Please try using this snapshot: http://snaps.php.net/php5.3-latest.tar.gz For Windows: http://windows.php.net/snapshots/ Previous Comments: ------------------------------------------------------------------------ [2010-11-18 14:47:02] php-bugs at thequod dot de Description: ------------ I am getting a crash using Roundcube (http://roundcube.net/ at trunk (r4231)), which is not easily reproducible. It appears to be related (initially triggered) to forwarding some spam related message and the internal session management in Roundcube (which is using a custom handler, writing the data to a MySQL database). Currently I can easily trigger the crash, but it might be difficult to reproduce it somewhere else. Here is a gdb backtrace, using PHP from Debian testing: #0 _zval_ptr_dtor (zval_ptr=0xbfec89bc) at /build/buildd-php5_5.3.3-2-i386-iygsWg/php5-5.3.3/Zend/zend.h:385 #1 0x08348e99 in zend_do_fcall_common_helper_SPEC (execute_data=0xbfec89bc) at /build/buildd-php5_5.3.3-2-i386-iygsWg/php5-5.3.3/Zend/zend_execute.h:318 #2 0x0831ff2e in execute (op_array=0x8fade04) at /build/buildd-php5_5.3.3-2-i386-iygsWg/php5-5.3.3/Zend/zend_vm_execute.h:107 #3 0x082ebbe1 in zend_call_function (fci=0xbfec8b7c, fci_cache=0xbfec8b24) at /build/buildd-php5_5.3.3-2-i386-iygsWg/php5-5.3.3/Zend/zend_execute_API.c:963 #4 0x082ec854 in call_user_function_ex (function_table=0x8d44c90, object_pp=0x0, function_name=0x8fd8078, retval_ptr_ptr=0xbfec8bec, param_count=<error type>, params=0x0, no_separation=1, symbol_table=0x0) at /build/buildd-php5_5.3.3-2-i386-iygsWg/php5-5.3.3/Zend/zend_execute_API.c:754 #5 0x082ec8cb in call_user_function (function_table=0x8d44c90, object_pp=0x0, function_name=0x8fd8078, retval_ptr=0xbfec8c3c, param_count=<error type>, params=0x8fb9c6c) at /build/buildd-php5_5.3.3-2-i386-iygsWg/php5-5.3.3/Zend/zend_execute_API.c:727 #6 0x08217f90 in user_shutdown_function_call (shutdown_function_entry=0x8fd80a4) at /build/buildd-php5_5.3.3-2-i386-iygsWg/php5-5.3.3/ext/standard/basic_functions.c:4976 #7 0x083032b8 in zend_hash_apply (ht=0x8fd1f0c, apply_func=0x8217f10 <user_shutdown_function_call>) at /build/buildd-php5_5.3.3-2-i386-iygsWg/php5-5.3.3/Zend/zend_hash.c:875 #8 0x082159ea in php_call_shutdown_functions () at /build/buildd-php5_5.3.3-2-i386-iygsWg/php5-5.3.3/ext/standard/basic_functions.c:5068 #9 0x0829b435 in php_request_shutdown (dummy=0x0) at /build/buildd-php5_5.3.3-2-i386-iygsWg/php5-5.3.3/main/main.c:1598 #10 0x083894ef in main (argc=3, argv=0xbfecc9cb) at /build/buildd-php5_5.3.3-2-i386-iygsWg/php5-5.3.3/sapi/cgi/cgi_main.c:2167 I hope this helps to track this down - I could do some more debugging, e.g. add var_dump/breaking points into the Roundcube code, but it might be time consuming to get a small test script. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/bug.php?id=53345&edit=1