Edit report at https://bugs.php.net/bug.php?id=55753&edit=1
ID: 55753
Comment by: dado at burza dot hr
Reported by: dado at burza dot hr
Summary: Sporadic crashes
Status: Feedback
Type: Bug
Package: Reproducible crash
Operating System: Fedora 14 i686
PHP Version: 5.3.8
Block user comment: N
Private report: N
New Comment:
OK, I am not able to make the vanilla version crash, but just now checked and
the production server is running manually compiled 5.2 version which also
crashes here (don't know if for same reason, assuming yes). I've taken their
./configure, but as it uses other, also manually compiled stuff, it doesn't
match my environment (and thus, also doesn't crash).
Are you able (by looking at the bt) to slightly reduce where this could be? I
can provide additional info and try/test stuff to see if it breaks. Also, as
said earlier, my co-worker got a crash on the exact same place, running Ubuntu.
When he gets back, I'll attach his BT here too.
Previous Comments:
------------------------------------------------------------------------
[2011-09-21 09:24:28] dado at burza dot hr
Yeah, I need it to go through Apache to be able to access the URL which it
crashes on, seeing I don't have a simple script to run on a locally installed
executable.
I'm compiling vanilla as typing this, but have yet to figure out how to get the
exact ./configure from the RPM (different options might make it not crash at
all). The issue is that this is crashing on the exact same place on Fedora,
CentOS and Ubuntu (my co-worker tried) so my guess is that it isn't
distro-specific).
Will get back to you, tnx.
------------------------------------------------------------------------
[2011-09-21 09:19:33] paj...@php.net
not really, best would be to be using our src directly. You don't have to
install
PHP, it can be done using a local install in your home.
If you can't do it, I would suggest to report the problem to fedora directly
but
without some kind of reproduce steps, there is little chance to get a fix.
------------------------------------------------------------------------
[2011-09-21 09:10:14] dado at burza dot hr
If I recompile the RPM having disabled all the patches, does that count?
------------------------------------------------------------------------
[2011-09-21 09:02:54] paj...@php.net
Please try using a plain vanilla php (from php.net)
------------------------------------------------------------------------
[2011-09-21 08:58:44] dado at burza dot hr
Description:
------------
Using PHP 5.3.8-1.fc14 and 2.2.17-1.fc14 and having crashes on random URLs
(cannot isolate the problem), but repeatable. Also having this issue (same
URLs) on my live deployment of the app which runs PHP 5.2.
Test script:
---------------
Could not isolate the problem
Expected result:
----------------
No crash
Actual result:
--------------
Core was generated by `/usr/sbin/httpd'.
Program terminated with signal 11, Segmentation fault.
#0 _zend_mm_free_int (heap=0x2463e70, p=0x25c5fa8)
at /usr/src/debug/php-5.3.8/Zend/zend_alloc.c:2028
2028 if (ZEND_MM_IS_FREE_BLOCK(next_block)) {
(gdb) thread apply all bt full
Thread 1 (Thread 0xb78b6750 (LWP 19172)):
#0 _zend_mm_free_int (heap=0x2463e70, p=0x25c5fa8)
at /usr/src/debug/php-5.3.8/Zend/zend_alloc.c:2028
mm_block = 0x25c5fa0
next_block = 0x4b8bf54
size = <value optimized out>
#1 0x011bfbee in _zval_ptr_dtor (zval_ptr=0x2716ef4)
at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:448
zv = 0x25c5fa8
#2 0x011dc69f in zend_hash_destroy (ht=0x2716d04)
at /usr/src/debug/php-5.3.8/Zend/zend_hash.c:529
p = 0x2715114
q = 0x2716ee8
#3 0x011cdf0e in _zval_dtor_func (zvalue=0x26a4324)
at /usr/src/debug/php-5.3.8/Zend/zend_variables.c:43
No locals.
#4 0x011bfbe6 in _zval_dtor (zval_ptr=0x2714f98)
at /usr/src/debug/php-5.3.8/Zend/zend_variables.h:35
No locals.
#5 _zval_ptr_dtor (zval_ptr=0x2714f98)
at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:447
zv = 0x26a4324
---Type <return> to continue, or q <return> to quit---
#6 0x011dc69f in zend_hash_destroy (ht=0x2716d5c)
at /usr/src/debug/php-5.3.8/Zend/zend_hash.c:529
p = 0x2714e00
q = 0x2714f8c
#7 0x011ef604 in zend_object_std_dtor (object=0x2717484)
at /usr/src/debug/php-5.3.8/Zend/zend_objects.c:45
No locals.
#8 0x011ef643 in zend_objects_free_object_storage (object=0x2717484)
at /usr/src/debug/php-5.3.8/Zend/zend_objects.c:126
No locals.
#9 0x011f38ec in zend_objects_store_del_ref_by_handle_ex (handle=150,
handlers=0x132c720) at /usr/src/debug/php-5.3.8/Zend/zend_objects_API.c:220
__orig_bailout = 0xbf8b3e84
__bailout = {{__jmpbuf = {20090920, -1217180600, 40529048,
-1081394024, 261255254, 664128811}, __mask_was_saved = 0,
__saved_mask = {__val = {40243584, 38157936, 3213573208, 18537958,
81, 20104992, 39485736, 40218660, 40218660, 38157936,
3213573240, 18537958, 40471396, 3213573356, 41235216,
20090920, 40243648, 40471144, 52, 40218660, 40243648,
39244612, 40585716, 40470432, 40470432, 38157936, 3213573304,
18537958, 40218668, 261976150, 39859780, 40530788}}}}
obj = 0x256db04
failure = <value optimized out>
---Type <return> to continue, or q <return> to quit---
#10 0x011f3930 in zend_objects_store_del_ref (zobject=0x27172b0)
at /usr/src/debug/php-5.3.8/Zend/zend_objects_API.c:172
handle = <value optimized out>
#11 0x011cdee1 in _zval_dtor_func (zvalue=0x27172b0)
at /usr/src/debug/php-5.3.8/Zend/zend_variables.c:52
No locals.
#12 0x011bfbe6 in _zval_dtor (zval_ptr=0x271aba0)
at /usr/src/debug/php-5.3.8/Zend/zend_variables.h:35
No locals.
#13 _zval_ptr_dtor (zval_ptr=0x271aba0)
at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:447
zv = 0x27172b0
#14 0x011dc69f in zend_hash_destroy (ht=0x26a6c98)
at /usr/src/debug/php-5.3.8/Zend/zend_hash.c:529
p = 0x2741e44
q = 0x271ab94
#15 0x011cdf0e in _zval_dtor_func (zvalue=0x26a70b4)
at /usr/src/debug/php-5.3.8/Zend/zend_variables.c:43
No locals.
#16 0x011bfbe6 in _zval_dtor (zval_ptr=0x265846c)
at /usr/src/debug/php-5.3.8/Zend/zend_variables.h:35
No locals.
#17 _zval_ptr_dtor (zval_ptr=0x265846c)
---Type <return> to continue, or q <return> to quit---
at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:447
zv = 0x26a70b4
#18 0x011dc69f in zend_hash_destroy (ht=0x26581a0)
at /usr/src/debug/php-5.3.8/Zend/zend_hash.c:529
p = 0x2659e6c
q = 0x2658460
#19 0x011ef604 in zend_object_std_dtor (object=0x26580c4)
at /usr/src/debug/php-5.3.8/Zend/zend_objects.c:45
No locals.
#20 0x011ef643 in zend_objects_free_object_storage (object=0x26580c4)
at /usr/src/debug/php-5.3.8/Zend/zend_objects.c:126
No locals.
#21 0x011f3416 in zend_objects_store_free_object_storage (objects=0x13447b0)
at /usr/src/debug/php-5.3.8/Zend/zend_objects_API.c:92
obj = 0x256d224
i = <value optimized out>
#22 0x011c02bc in shutdown_executor ()
at /usr/src/debug/php-5.3.8/Zend/zend_execute_API.c:304
__orig_bailout = 0x0
__bailout = {{__jmpbuf = {20090920, 20202912, 18669792, -1081393352,
261697622, 568386347}, __mask_was_saved = 0, __saved_mask = {
__val = {39274560, 38157936, 3213573864, 18537958, 21265977,
20090920, 3213573848, 17115236, 0, 0, 264, 39274560, 16900809,
---Type <return> to continue, or q <return> to quit---
20090920, 3213573880, 20090920, 20203776, 20202788,
3213573912, 18668784, 39274568, 1947, 3213573944, 18729751,
38160152, 24, 18668715, 20090920, 20203776, 20201856,
3213573944, 18476203}}}}
#23 0x011cef30 in zend_deactivate ()
at /usr/src/debug/php-5.3.8/Zend/zend.c:891
No locals.
#24 0x01174e1d in php_request_shutdown (dummy=0x0)
at /usr/src/debug/php-5.3.8/main/main.c:1640
report_memleaks = 1 '\001'
#25 0x012635b4 in php_apache_request_dtor (r=0x25b8208)
at /usr/src/debug/php-5.3.8/sapi/apache2handler/sapi_apache2.c:509
No locals.
#26 php_handler (r=0x25b8208)
at /usr/src/debug/php-5.3.8/sapi/apache2handler/sapi_apache2.c:681
ctx = 0x25b91c8
conf = 0x23cb550
brigade = 0x25b98d0
bucket = <value optimized out>
rv = <value optimized out>
parent_req = 0x0
#27 0x00950441 in ap_run_handler (r=0x25b8208)
at /usr/src/debug/httpd-2.2.17/server/config.c:158
---Type <return> to continue, or q <return> to quit---
pHook = <value optimized out>
n = <value optimized out>
rv = <value optimized out>
#28 0x00950849 in ap_invoke_handler (r=0x25b8208)
at /usr/src/debug/httpd-2.2.17/server/config.c:376
handler = <value optimized out>
p = <value optimized out>
result = <value optimized out>
old_handler = 0x23ec418 "php5-script"
ignore = <value optimized out>
#29 0x0095f134 in ap_internal_redirect (new_uri=0x25b81f8 "/index.php",
r=0x25b9f88) at /usr/src/debug/httpd-2.2.17/modules/http/http_request.c:549
new = 0x25b8208
access_status = <value optimized out>
#30 0x005315b6 in handler_redirect (r=0x25b9f88)
at /usr/src/debug/httpd-2.2.17/modules/mappers/mod_rewrite.c:4831
No locals.
#31 0x00950441 in ap_run_handler (r=0x25b9f88)
at /usr/src/debug/httpd-2.2.17/server/config.c:158
pHook = <value optimized out>
n = <value optimized out>
rv = <value optimized out>
#32 0x00950849 in ap_invoke_handler (r=0x25b9f88)
---Type <return> to continue, or q <return> to quit---
at /usr/src/debug/httpd-2.2.17/server/config.c:376
handler = <value optimized out>
p = <value optimized out>
result = <value optimized out>
old_handler = 0x538d4b "redirect-handler"
ignore = <value optimized out>
#33 0x0095fb28 in ap_process_request (r=0x25b9f88)
at /usr/src/debug/httpd-2.2.17/modules/http/http_request.c:282
access_status = <value optimized out>
#34 0x0095c738 in ap_process_http_connection (c=0x25ac0e8)
at /usr/src/debug/httpd-2.2.17/modules/http/http_core.c:190
r = 0x25b9f88
csd = 0x0
#35 0x00957b81 in ap_run_process_connection (c=0x25ac0e8)
at /usr/src/debug/httpd-2.2.17/server/connection.c:43
pHook = <value optimized out>
n = <value optimized out>
rv = <value optimized out>
#36 0x00965041 in child_main (child_num_arg=<value optimized out>)
at /usr/src/debug/httpd-2.2.17/server/mpm/prefork/prefork.c:662
current_conn = <value optimized out>
csd = 0x25abf50
ptrans = 0x25abf10
---Type <return> to continue, or q <return> to quit---
allocator = 0x25a9e80
status = <value optimized out>
i = <value optimized out>
lr = <value optimized out>
pollset = 0x25aa058
sbh = 0x25aa050
bucket_alloc = 0x25b5f38
last_poll_idx = 0
#37 0x009653ee in make_child (s=<value optimized out>, slot=1)
at /usr/src/debug/httpd-2.2.17/server/mpm/prefork/prefork.c:763
pid = <value optimized out>
#38 0x009654cf in startup_children (number_to_start=7)
at /usr/src/debug/httpd-2.2.17/server/mpm/prefork/prefork.c:781
i = <value optimized out>
#39 0x009660f5 in ap_mpm_run (_pconf=0x23560b8, plog=0x2384170, s=0x2357fb0)
at /usr/src/debug/httpd-2.2.17/server/mpm/prefork/prefork.c:1002
index = <value optimized out>
remaining_children_to_start = 8
rv = <value optimized out>
#40 0x00939952 in main (argc=1, argv=0xbf8b4894)
at /usr/src/debug/httpd-2.2.17/server/main.c:739
c = 0 '\000'
configtestonly = 9861636
---Type <return> to continue, or q <return> to quit---
confname = 0x9681cc "conf/httpd.conf"
def_server_root = 0x9681c1 "/etc/httpd"
temp_error_log = 0x968413 "Pre-configuration failed"
error = <value optimized out>
process = 0x2354140
server_conf = 0x2357fb0
pglobal = 0x968447
pconf = 0x23560b8
plog = 0x2384170
ptemp = 0x2388180
pcommands = 0x23580c0
opt = 0x2358160
rv = 37060528
mod = <value optimized out>
optarg = 0x96792a "\201\303\346@\001"
signal_server = <value optimized out>
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=55753&edit=1
