Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:68363
Return-Path: <rasmus@lerdorf.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 27204 invoked from network); 3 Aug 2013 17:51:38 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 3 Aug 2013 17:51:38 -0000
Authentication-Results: pb1.pair.com header.from=rasmus@lerdorf.com; sender-id=unknown
Authentication-Results: pb1.pair.com smtp.mail=rasmus@lerdorf.com; spf=permerror; sender-id=unknown
Received-SPF: error (pb1.pair.com: domain lerdorf.com from 209.85.128.43 cause and error)
X-PHP-List-Original-Sender: rasmus@lerdorf.com
X-Host-Fingerprint: 209.85.128.43 mail-qe0-f43.google.com  
Received: from [209.85.128.43] ([209.85.128.43:51419] helo=mail-qe0-f43.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 56/10-26272-8234DF15 for <internals@lists.php.net>; Sat, 03 Aug 2013 13:51:37 -0400
Received: by mail-qe0-f43.google.com with SMTP id k5so972079qej.2
        for <internals@lists.php.net>; Sat, 03 Aug 2013 10:51:33 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=google.com; s=20120113;
        h=message-id:date:from:user-agent:mime-version:to:cc:subject
         :x-enigmail-version:content-type:content-transfer-encoding
         :x-gm-message-state;
        bh=DXaIHGeKj/JwT6sazUlxqrGjKS8LsOUDkeg4RXLxGTs=;
        b=U1fF+IwXxNg/E/GT+XRlgFkPeplByRMq/8RCIVQyEUhfcMQY4xbdLOn+C3o28WKVvC
         HKRsKrqvGAulLyIyp/aOn/ADzZ4s4CG2UcBSEH8r6kPA/Y2nwcFYU+FJkjBpb6tLQk4i
         lak10GlYFV6SKcXVC20swg0tHcqwYh3QaFJaKjr0xveC60Q4MOrdYMwddtbYY6BJEqnY
         6XYD4cKwxG5AzISGkHb6rCtSznc3meijKO3q/mJIhY8V+DjQG4H5sHu0MaWON6sHUd94
         P1v8NyobERo/gL7xuUfmsEVBpoAeKEbgVT/MyAeH4TmQG7MaMJENW7YpVUiycJB5DU1h
         t36A==
X-Received: by 10.224.24.134 with SMTP id v6mr18415914qab.58.1375552293604;
        Sat, 03 Aug 2013 10:51:33 -0700 (PDT)
Received: from [172.27.202.239] ([69.64.204.50])
        by mx.google.com with ESMTPSA id e8sm511453qai.1.2013.08.03.10.51.32
        for <multiple recipients>
        (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
        Sat, 03 Aug 2013 10:51:32 -0700 (PDT)
Message-ID: <51FD4324.7030507@lerdorf.com>
Date: Sat, 03 Aug 2013 13:51:32 -0400
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130623 Thunderbird/17.0.7
MIME-Version: 1.0
To: PHP internals <internals@lists.php.net>
CC: =?ISO-8859-1?Q?Johannes_Schl=FCter?= <johannes@schlueters.de>
X-Enigmail-Version: 1.4.6
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Gm-Message-State: ALoCoQliFXQSMckAGGAXt8iYU1QWKKIL72WRyJ1YJkBkrenNllgfAWG5J59v7/48QocWRm6x9bGM
Subject: Segfault on mysqlnd stream cast
From: rasmus@lerdorf.com (Rasmus Lerdorf)

Hey Johannes, could you take a look at:

https://gist.github.com/anonymous/6143477

You can reproduce in 5.5 with:

sapi/cli/php ext/mysqli/tests/mysqli_poll_kill.php

main/streams/cast.c:306 is:

if (php_stream_is_filtered(stream)) {

but php_stream_is_filtered is just a macro that isn't expecting stream
to be null and you get the segfault there because it is trying to
dereference it. We could just add a null check, of course, but I think
the problem is in mysqlnd. mysqlnd_stream_array_to_fd_set() shouldn't be
trying to cast null streams.

-Rasmus