Edit report at http://bugs.php.net/bug.php?id=49634&edit=1
ID: 49634 Updated by: [email protected] Reported by: aldo at armiento dot com Summary: Segfault throwing an exception in a XSL registered function Status: Open Type: Bug Package: XSLT related Operating System: Linux Debian, Mac OSX PHP Version: 5.*, 6 (2009-09-23) New Comment: I can reproduce it now. Probably I forgot to create the doc.xml to test it in the first time. Previous Comments: ------------------------------------------------------------------------ [2009-09-25 22:47:53] aldo at armiento dot com Dear Mr. Jani, my intermediate backtrace was in replying to [email protected] that says that he can't reproduce it on Debian 32bit with libxslt 1.1.24-2 and libxml2 2.6.32. I installed a Debian Lenny 32bit from scratch to verify this affirmation and I can reproduce it. Best regards, A. ------------------------------------------------------------------------ [2009-09-25 22:22:05] [email protected] Please don't spam the bug system, one time is enough. Also, there's no need to add the backtrace especially when it's basically identical to the first one. ------------------------------------------------------------------------ [2009-09-23 07:56:25] aldo at armiento dot com Latest snapshot (php5.3-200909230630): (gdb) r Starting program: /home/armiento/env/spider/bin/php test_segfault.php [Thread debugging using libthread_db enabled] [New Thread 139866082309840 (LWP 1958)] Exception! Exception! *** glibc detected *** free(): invalid pointer: 0x00000000019a65e0 *** Program received signal SIGABRT, Aborted. [Switching to Thread 139866082309840 (LWP 1958)] 0x00007f351ac7607b in raise () from /lib/libc.so.6 (gdb) bt #0 0x00007f351ac7607b in raise () from /lib/libc.so.6 #1 0x00007f351ac7784e in abort () from /lib/libc.so.6 #2 0x00007f351acac5f9 in __fsetlocking () from /lib/libc.so.6 #3 0x00007f351acb3163 in mallopt () from /lib/libc.so.6 #4 0x00007f351acb31ee in free () from /lib/libc.so.6 #5 0x000000000044f3bb in php_libxml_node_decrement_resource (object=0x7f351c24b730) at /home/armiento/src/php5.3-200909230630/ext/libxml/libxml.c:1058 #6 0x00000000004cc3a5 in dom_objects_free_storage (object=0x7f351c24b730) at /home/armiento/src/php5.3-200909230630/ext/dom/php_dom.c:1017 #7 0x00000000006c0d56 in zend_objects_store_del_ref_by_handle_ex (handle=3, handlers=<value optimized out>) at /home/armiento/src/php5.3-200909230630/Zend/zend_objects_API.c:220 #8 0x00000000006c0d92 in zend_objects_store_del_ref (zobject=0x7f351c249510) at /home/armiento/src/php5.3-200909230630/Zend/zend_objects_API.c:172 #9 0x0000000000694795 in _zval_ptr_dtor (zval_ptr=0x7f351c24be60) at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.h:35 #10 0x00000000006ac7e8 in zend_hash_destroy (ht=0x7f351c24bda0) at /home/armiento/src/php5.3-200909230630/Zend/zend_hash.c:526 #11 0x00000000006a08a6 in _zval_dtor_func (zvalue=0x7f351c24bd70) at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.c:43 #12 0x0000000000694795 in _zval_ptr_dtor (zval_ptr=0x7f351c24beb8) at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.h:35 #13 0x00000000006ac7e8 in zend_hash_destroy (ht=0x7f351c24bcc8) at /home/armiento/src/php5.3-200909230630/Zend/zend_hash.c:526 #14 0x00000000006a08a6 in _zval_dtor_func (zvalue=0x7f351c24bc98) at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.c:43 #15 0x0000000000694795 in _zval_ptr_dtor (zval_ptr=0x7f351c24bf10) at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.h:35 #16 0x00000000006ac7e8 in zend_hash_destroy (ht=0x7f351c24bbc0) at /home/armiento/src/php5.3-200909230630/Zend/zend_hash.c:526 #17 0x00000000006a08a6 in _zval_dtor_func (zvalue=0x7f351c24bb90) at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.c:43 #18 0x0000000000694795 in _zval_ptr_dtor (zval_ptr=0x7f351c24bf70) at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.h:35 #19 0x00000000006ac7e8 in zend_hash_destroy (ht=0x7f351c24bae8) at /home/armiento/src/php5.3-200909230630/Zend/zend_hash.c:526 #20 0x00000000006a08a6 in _zval_dtor_func (zvalue=0x7f351c24b110) at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.c:43 #21 0x0000000000694795 in _zval_ptr_dtor (zval_ptr=0x7f351c24ba28) at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.h:35 #22 0x00000000006ac7e8 in zend_hash_destroy (ht=0x7f351c24b950) at /home/armiento/src/php5.3-200909230630/Zend/zend_hash.c:526 #23 0x00000000006bd6b9 in zend_object_std_dtor (object=0x7f351c24b7a0) at /home/armiento/src/php5.3-200909230630/Zend/zend_objects.c:45 #24 0x00000000006bd6d9 in zend_objects_free_object_storage (object=0x7a6) at /home/armiento/src/php5.3-200909230630/Zend/zend_objects.c:114 #25 0x00000000006c0d56 in zend_objects_store_del_ref_by_handle_ex (handle=7, handlers=<value optimized out>) at /home/armiento/src/php5.3-200909230630/Zend/zend_objects_API.c:220 #26 0x00000000006c0d92 in zend_objects_store_del_ref (zobject=0x7f351c24c6a0) at /home/armiento/src/php5.3-200909230630/Zend/zend_objects_API.c:172 #27 0x0000000000694795 in _zval_ptr_dtor (zval_ptr=0x7f351c24b1d8) at /home/armiento/src/php5.3-200909230630/Zend/zend_variables.h:35 #28 0x00000000006ae457 in _zend_hash_quick_add_or_update (ht=0xcfc5e8, arKey=0x7f351c249380 "e", nKeyLength=2, h=5863242, pData=0xcfc830, nDataSize=8, pDest=0x7f351a062118, flag=1) at /home/armiento/src/php5.3-200909230630/Zend/zend_hash.c:299 #29 0x00000000006c1f2e in ZEND_CATCH_SPEC_CV_HANDLER (execute_data=0x7f351a062050) at /home/armiento/src/php5.3-200909230630/Zend/zend_vm_execute.h:1234 #30 0x00000000006c2bd1 in execute (op_array=0x7f351c246578) at /home/armiento/src/php5.3-200909230630/Zend/zend_vm_execute.h:104 #31 0x00000000006a0b1d in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /home/armiento/src/php5.3-200909230630/Zend/zend.c:1188 #32 0x00000000006515f5 in php_execute_script (primary_file=0x7fff24282950) at /home/armiento/src/php5.3-200909230630/main/main.c:2214 #33 0x00000000007248f6 in main (argc=2, argv=0x7fff24282bb8) at /home/armiento/src/php5.3-200909230630/sapi/cli/php_cli.c:1190 (gdb) ------------------------------------------------------------------------ [2009-09-23 06:25:39] [email protected] Please try using this snapshot: http://snaps.php.net/php5.3-latest.tar.gz For Windows: http://windows.php.net/snapshots/ ------------------------------------------------------------------------ [2009-09-23 00:54:42] [email protected] I can't reproduce it on Debian 32bit. libxslt 1.1.24-2 ; libxml2 2.6.32 ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/bug.php?id=49634 -- Edit this bug report at http://bugs.php.net/bug.php?id=49634&edit=1
