Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:6254
Return-Path: <php@hristov.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 56506 invoked by uid 1010); 6 Dec 2003 16:41:28 -0000
Delivered-To: ezmlm-scan-internals@lists.php.net
Delivered-To: ezmlm-internals@lists.php.net
Received: (qmail 56448 invoked from network); 6 Dec 2003 16:41:28 -0000
Received: from unknown (HELO stella.fastforwardnetwork.com) (209.51.153.50)
  by pb1.pair.com with SMTP; 6 Dec 2003 16:41:28 -0000
Received: (qmail 30709 invoked from network); 6 Dec 2003 17:44:14 -0000
Received: from p508a9954.dip.t-dialin.net (HELO hristov.com) (80.138.153.84)
  by d.goto.bg with SMTP; 6 Dec 2003 17:44:14 -0000
Message-ID: <3FD206E3.2090703@hristov.com>
Date: Sat, 06 Dec 2003 17:42:11 +0100
User-Agent: Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.6b) Gecko/20031202
X-Accept-Language: en-us, en
MIME-Version: 1.0
To:  internals@lists.php.net
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Segfault in HEAD
From: php@hristov.com (Andrey Hristov)

Hi,
the following script segfaults when HEAD is used (no problem with PHP_4_3).
<?php
$s = "FUBAR";
$s[0][] = 1;
?>

Here is a session that shows the script and the error spotted by valgrind.
[session]

bash-2.05b$ cat soffset.php
<?php
$s = "FUBAR";
$s[0][] = 1;
?>
bash-2.05b$ valgrind ./php soffset.php
==4985== Memcheck, a.k.a. Valgrind, a memory error detector for x86-linux.
==4985== Copyright (C) 2002-2003, and GNU GPL'd, by Julian Seward.
==4985== Using valgrind-2.0.0, a program supervision framework for 
x86-linux.
==4985== Copyright (C) 2000-2003, and GNU GPL'd, by Julian Seward.
==4985== Estimated CPU clock rate is 300 MHz
==4985== For more details, rerun with: -v
==4985==
==4985== Invalid read of size 4
==4985==    at 0x814C3E3: zend_assign_dim_handler (zend_execute.c:2069)
==4985==    by 0x814A22E: execute (zend_execute.c:1273)
==4985==    by 0x812C1EA: zend_execute_scripts (zend.c:1016)
==4985==    by 0x80F221B: php_execute_script (main.c:1625)
==4985==    Address 0x0 is not stack'd, malloc'd or free'd
Segmentation fault
bash-2.05b$ ../4_3/php soffset.php
bash-2.05b$

[/session]

Regards,
Andrey