Edit report at https://bugs.php.net/bug.php?id=54911&edit=1

 ID:                 54911
 Updated by:         larue...@php.net
 Reported by:        erik at datahack dot se
 Summary:            Access to a undefined member in inherit SoapClient
                     may cause Segmentation Fault
 Status:             Open
 Type:               Bug
 Package:            Reproducible crash
 Operating System:   Linux
 PHP Version:        5.3.6
-Assigned To:        
+Assigned To:        dmitry
 Block user comment: N
 Private report:     N

 New Comment:

assign to dmitry.


Previous Comments:
------------------------------------------------------------------------
[2011-05-23 19:33:19] erik at datahack dot se

Description:
------------
If you try to access an undefined variable or constant in an extended 
SoapClient, it will cause PHP crash due to a Segmentation Fault.

Test script:
---------------
<?php
    class XSoapClient extends SoapClient {
        function __doRequest($request, $location, $action, $version) {
            echo self::$crash;
//          echo parent::$crash;
//          echo self::crash;
//          echo parent::crash;
        }   
    }   
    $client = new XSoapClient(null, array('uri'=>'', 'location'=>''));
    $client->__soapCall('', array());
?>

Expected result:
----------------
An error like, Fatal error: Access to undeclared static property: 
XSoapClient::$crash...

Actual result:
--------------
$ sapi/cli/php ../crash.php 
Segmentation fault

# gdb backtrace...
Starting program: /home/erik/php-5.3.6/sapi/cli/php ../crash.php
[Thread debugging using libthread_db enabled]

Program received signal SIGSEGV, Segmentation fault.
0x0843c238 in zval_delref_p (zval_ptr=0xbfffcf68, __zend_filename=0x87cc4e8 
"/home/erik/php-5.3.6/Zend/zend_vm_execute.h", 
    __zend_lineno=609) at /home/erik/php-5.3.6/Zend/zend.h:385
385             return --pz->refcount__gc;
(gdb) bt
#0  0x0843c238 in zval_delref_p (zval_ptr=0xbfffcf68, __zend_filename=0x87cc4e8 
"/home/erik/php-5.3.6/Zend/zend_vm_execute.h", 
    __zend_lineno=609) at /home/erik/php-5.3.6/Zend/zend.h:385
#1  _zval_ptr_dtor (zval_ptr=0xbfffcf68, __zend_filename=0x87cc4e8 
"/home/erik/php-5.3.6/Zend/zend_vm_execute.h", __zend_lineno=609)
    at /home/erik/php-5.3.6/Zend/zend_execute_API.c:437
#2  0x08479ff8 in ZEND_HANDLE_EXCEPTION_SPEC_HANDLER (execute_data=0x8920a60) 
at /home/erik/php-5.3.6/Zend/zend_vm_execute.h:609
#3  0x08478793 in execute (op_array=0x88f2be0) at 
/home/erik/php-5.3.6/Zend/zend_vm_execute.h:107
#4  0x0844bae6 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at 
/home/erik/php-5.3.6/Zend/zend.c:1194
#5  0x083e102e in php_execute_script (primary_file=0xbffff324) at 
/home/erik/php-5.3.6/main/main.c:2268
#6  0x08509d35 in main (argc=2, argv=0xbffff4b4) at 
/home/erik/php-5.3.6/sapi/cli/php_cli.c:1193



------------------------------------------------------------------------



-- 
Edit this bug report at https://bugs.php.net/bug.php?id=54911&edit=1

Reply via email to