Edit report at https://bugs.php.net/bug.php?id=64287&edit=1
ID: 64287 User updated by: bobwei9 at hotmail dot com Reported by: bobwei9 at hotmail dot com Summary: sendmsg/recvmsg shutdown handler causes segfault Status: Open Type: Bug Package: Reproducible crash Operating System: Mac OS X Mountain Lion PHP Version: master-Git-2013-02-23 (Git) Block user comment: N Private report: N New Comment: If I comment the line 448 (the call to tsrm_mutex_free()) out, it doesn't leak nor it segfaults anymore... Previous Comments: ------------------------------------------------------------------------ [2013-02-23 17:37:14] bobwei9 at hotmail dot com Description: ------------ Somehow the sendrecvmsg shutdown handler crashes when freeing. See also the backtrace. (I don't even do a single call to these functions) But it only crashes on apache (not on cli). It doesn't crash every time, but every two or three requests with every time the same backtrace. Test script: --------------- I am unable to provide a test script as it happens on every sort of scripts since updating to a version which includes sendmsg/recvmsg support. Actual result: -------------- #0 0x00007fff9868dd46 in __kill () #1 0x00007fff99ac5df0 in abort () #2 0x00007fff99a99959 in free () #3 0x0000000107d78b2f in tsrm_mutex_free (mutexp=0x7fc5498ab670) at TSRM.c:632 #4 0x0000000107b3fcfe in php_socket_sendrecvmsg_shutdown (type=1, module_number=45, tsrm_ls=0x7fc548c33130) at sendrecvmsg.c:448 #5 0x0000000107b361a8 in zm_deactivate_sockets (type=1, module_number=45, tsrm_ls=0x7fc548c33130) at sockets.c:750 #6 0x0000000107e685ba in zend_deactivate_modules (tsrm_ls=0x7fc548c33130) at zend_API.c:2364 #7 0x0000000107d818bd in php_request_shutdown (dummy=0x0) at main.c:1769 #8 0x0000000108034322 in php_apache_request_dtor (r=0x7fc5494216a0, tsrm_ls=0x7fc548c33130) at sapi_apache2.c:507 #9 0x0000000108032dd1 in php_handler (r=0x7fc5494216a0) at sapi_apache2.c:679 ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=64287&edit=1
