[PHP-DEV] (Fwd) [PHP-DEV] PHP 4.0 Bug #8425: PHP crashes if I include a From: Stefan Fiedler (fieml <email protected>)
Date: 01/03/01

hi,

> Operating system: Windows NT 4.0
> PHP version: 4.0.4
> PHP Bug Type: Reproduceable crash
> Bug description: PHP crashes if I include a page that uses xml
> parser.

my php 4.0.4 (apache 1.3.14 module, linux 2.2.14) crashes too, when
parsing xml files:

(gdb) run -X
Starting program: /usr/local/apache/src/./httpd.php404 -X

Program received signal SIGSEGV, Segmentation fault.
0x80e355f in call_user_function_ex (function_table=0x8219ec0,
object_pp=0x82bbf40,
    function_name=0x82b7f9c, retval_ptr_ptr=0xbfffa244,
param_count=3, params=0x82b8454,
    no_separation=1, symbol_table=0x0) at zend_execute_API.c:365
365 if (Z_TYPE_PP(object_pp) != IS_OBJECT) {

(gdb) bt
#0 0x80e355f in call_user_function_ex (function_table=0x8219ec0,
object_pp=0x82bbf40,
    function_name=0x82b7f9c, retval_ptr_ptr=0xbfffa244,
param_count=3, params=0x82b8454,
    no_separation=1, symbol_table=0x0) at zend_execute_API.c:365
#1 0x80e33d5 in call_user_function (function_table=0x8219ec0,
object_pp=0x82bbf40,
    function_name=0x82b7f9c, retval_ptr=0x82b84d4, param_count=3,
params=0xbfffa2c4)
    at zend_execute_API.c:325
#2 0x80d4409 in xml_call_handler (parser=0x82bbf0c,
handler=0x82b7f9c, argc=3,
    argv=0xbfffa2c4) at xml.c:361
#3 0x80d4bd1 in _xml_startElementHandler (userData=0x82bbf0c,
    name=0x824a594 "BACKSLASH", attributes=0x82bc148) at xml.c:648
#4 0x80d8313 in doContent (parser=0x82bbf70, startTagLevel=0,
enc=0x819ccc0,
    s=0x82bf6f9
"<backslash\nxmlns:backslash=\"http://slashdot.org/backslash.dtd\">\n\
n\t<
story>\n\t\t<title>Debian Hurd Still
Coming</title>\n\t\t<url>http://slashdot.org/article.
pl?sid=00/12/05/1319242</url>\n\t\t<time>2000-12-05 "...,
end=0x82c0564 "", nextPtr=0x0)
    at xmlparse.c:1268
#5 0x80d7b4f in contentProcessor (parser=0x82bbf70,
    start=0x82bf6f9
"<backslash\nxmlns:backslash=\"http://slashdot.org/backslash.dtd\">\n\
n\t<story>\n\t\t<title>Debian Hurd Still
Coming</title>\n\t\t<url>http://slashdot.org/arti
cle.pl?sid=00/12/05/1319242</url>\n\t\t<time>2000-12-05 "...,
end=0x82c0564 "",
    endPtr=0x0) at xmlparse.c:957
#6 0x80d991c in prologProcessor (parser=0x82bbf70,
    s=0x82bf6e4 "<?xml
version=\"1.0\"?><backslash\nxmlns:backslash=\"http://slashdot.org/
backslash.dtd\">\n\n\t<story>\n\t\t<title>Debian Hurd Still
Coming</title>\n\t\t<url>http:
//slashdot.org/article.pl?sid=00/12/05/1319242</url"...,
end=0x82c0564 "", nextPtr=0x0)
    at xmlparse.c:2036
#7 0x80d9700 in prologInitProcessor (parser=0x82bbf70,
    s=0x82bf6e4 "<?xml
version=\"1.0\"?><backslash\nxmlns:backslash=\"http://slashdot.org/
backslash.dtd\">\n\n\t<story>\n\t\t<title>Debian Hurd Still
Coming</title>\n\t\t<url>http:
//slashdot.org/article.pl?sid=00/12/05/1319242</url"...,
end=0x82c0564 "", nextPtr=0x0)
    at xmlparse.c:1967
#8 0x80d76af in php_XML_Parse (parser=0x82bbf70,
    s=0x82bf6e4 "<?xml
version=\"1.0\"?><backslash\nxmlns:backslash=\"http://slashdot.org/
backslash.dtd\">\n\n\t<story>\n\t\t<title>Debian Hurd Still
Coming</title>\n\t\t<url>http:
//slashdot.org/article.pl?sid=00/12/05/1319242</url"..., len=3712,
isFinal=1)
    at xmlparse.c:779
#9 0x80d5e80 in php_if_xml_parse (ht=3, return_value=0x82b4fb4,
this_ptr=0x0,
    return_value_used=1) at xml.c:1221
#10 0x81161e5 in execute (op_array=0x82a7df0) at
./zend_execute.c:1519
#11 0x81163de in execute (op_array=0x8230dec) at
./zend_execute.c:1559
#12 0x80eadb8 in zend_execute_scripts (type=8, file_count=3) at
zend.c:729
#13 0x806b461 in php_execute_script (primary_file=0xbffff758) at
main.c:1221
#14 0x80f7b17 in apache_php_module_main (r=0x822aa54,
display_source_mode=0)
    at sapi_apache.c:89
#15 0x8068a66 in send_php ()
#16 0x8068aa0 in send_parsed_php ()
#17 0x8141c23 in ap_invoke_handler ()
#18 0x81581a9 in process_request_internal ()
#19 0x8158614 in ap_internal_redirect ()
#20 0x813145d in handle_dir ()
#21 0x8141c23 in ap_invoke_handler ()
#22 0x81581a9 in process_request_internal ()
#23 0x815820c in ap_process_request ()
#24 0x814e879 in child_main ()
#25 0x814ea38 in make_child ()
#26 0x814ebc3 in startup_children ()
#27 0x814f264 in standalone_main ()
#28 0x814fae3 in main ()
#29 0x40520313 in __libc_start_main (main=0x814f700 <main>, argc=2,
argv=0xbffff984,
    init=0x8066278 <_init>, fini=0x8178a68 <_fini>,
rtld_fini=0x4000ac70 <_dl_fini>,
    stack_end=0xbffff97c) at ../sysdeps/generic/libc-start.c:90

lg,
stefan 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>