'r' is not initialized unless walk_to_top is set:

Index: sapi/apache2handler/php_functions.c

RCS file: /repository/php-src/sapi/apache2handler/php_functions.c,v
retrieving revision 1.1.2.9
diff -u -r1.1.2.9 php_functions.c
--- sapi/apache2handler/php_functions.c 10 Jul 2003 22:45:34 -0000 1.1.2.9
+++ sapi/apache2handler/php_functions.c 10 Nov 2003 12:26:15 -0000
@@ -259,8 +259,8 @@

ctx = SG(server_context);

• r = ctx->r;
  if (arg_count == 3 && Z_STRVAL_PP(walk_to_top)) {

•    r = ctx->r;
    while(r->prev) {
    	r = r->prev;
    }