Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:89061 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 4351 invoked from network); 4 Nov 2015 01:59:15 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 4 Nov 2015 01:59:15 -0000 Authentication-Results: pb1.pair.com header.from=laruence@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=laruence@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.160.174 as permitted sender) X-PHP-List-Original-Sender: laruence@gmail.com X-Host-Fingerprint: 209.85.160.174 mail-yk0-f174.google.com Received: from [209.85.160.174] ([209.85.160.174:33378] helo=mail-yk0-f174.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 1D/4A-13519-07669365 for ; Tue, 03 Nov 2015 20:59:12 -0500 Received: by ykft191 with SMTP id t191so48837649ykf.0 for ; Tue, 03 Nov 2015 17:59:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=MUV0skmpjC4aotVoCskgK5PTgifmfIMJreZoKET3iW0=; b=xjuriM7zYOgjHZlkruxGPqhbG/8O9uLjhXEzt0t5e046OCPFZbtIgsf5+gY+rX6UmA xofzr1o4Wpg7SEch05otfWEry6gSXLppVbQWEUvbfaREhwICSCM5B2Af7L6Ju9hoWLn2 rxfB2UYIruPxI7h+X+1WWBOOo1JYddZ1qWnSzPrlqEdEl5yFL6HNRxxsnU9q0tRTaplC WCbJdMl7BoIuUoNyQJxhTF7AJT4ONZZ5dWGxULBGYNgmD+CecHbxX1o0E1YzmV/hwmyM AwYJbKDGHUyvjcxJG88a4gIeJU9fn+Aodd37n+vpjym5SyBDucsn9S5/M+vlsyBempaF 1JIQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zend_com.20150623.gappssmtp.com; s=20150623; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=MUV0skmpjC4aotVoCskgK5PTgifmfIMJreZoKET3iW0=; b=zQiJQ5A99o2s3qS4/0MWtM3mZPRRUj511ItfiGCJiH+eeKeh7K9aee5P6bcb3ulZox hx3Ugma81CftqrOJprxy1kLxN+1+kTlIMhLIz1Jxk1xuZ7WNMrN9l0uRheiS8ae4sBIF 1LxyjT3UXdGhaaZOCw+vO5mMBCLff8YdIJYGqHZzM0YksfXyXR4HnjO+Qk17ky8HQAbl xhOAXz3J/73bd2ZrKrIK+uzHQS75+oz1hDyeplfEIWdmalDmlLoPrm58Bg75JGunkgUM 07EzXbLFhjsCsLznMizBliTg8q8uL531YDCcRV8qeFfJWYTsmZ94f2etOd9UX3ilJP6Z eogw== X-Received: by 10.31.165.132 with SMTP id o126mr21343903vke.101.1446602349781; Tue, 03 Nov 2015 17:59:09 -0800 (PST) MIME-Version: 1.0 Sender: laruence@gmail.com Received: by 10.31.229.3 with HTTP; Tue, 3 Nov 2015 17:58:50 -0800 (PST) In-Reply-To: References: Date: Wed, 4 Nov 2015 09:58:50 +0800 X-Google-Sender-Auth: K_kthbgerAHwj02IHG-WiuqCCV4 Message-ID: To: Dmitry Stogov , fabian@tag1consulting.com Cc: Anatol Belski , Nikita Popov , PHP Internals Content-Type: multipart/alternative; boundary=001a114162c230a75a0523ad5be0 Subject: Re: Bug #70805 (Segmentation faults whilst running Drupal 8 test suite) From: xinchen.h@zend.com (Xinchen Hui) --001a114162c230a75a0523ad5be0 Content-Type: text/plain; charset=UTF-8 Hey: On Wed, Nov 4, 2015 at 3:58 AM, Dmitry Stogov wrote: > Hi, > > I think, I found the root problem of https://bugs.php.net/bug.php?id=70805 > > unset($a) or unser($GLOBAL["a"]) triggered GC and destructors calls that > tried to release the same global variable $a once again. As result it's > reference counter was decremented twice and this caused use-after-free, > double-free, etc. > > The proposed cumulative fix for all related problems: > > https://gist.github.com/dstogov/7aa9d24876e2b3fce8c5 > > Xinchen, could you please review and verify this once again, > then add necessary tests and commit. > No problem, all issues we met are resovled , thanks :) tested and committed. and aslo thanks the fabian who provides us ssh access to a reproducible box (it's really hard to reproduce locally) thanks! > > Thanks. Dmitry. > -- Xinchen Hui @Laruence http://www.laruence.com/ --001a114162c230a75a0523ad5be0--