View Issue Details

IDProjectCategoryView StatusLast Update
0001965XdebugUncategorizedpublic2021-04-16 16:00
Reporterwebmozart Assigned Toderick  
PrioritynormalSeveritycrashReproducibilityalways
Status feedbackResolutionopen 
OSUbuntuOS Version18.04 
Product Version3.0.4 
Summary0001965: PHP with XDebug segfaults on destructor
DescriptionIn a business application, segfaults with the below stack trace when XDebug is loaded. When XDebug is not loaded, everything is fine.

From the below stack trace, I *assume* that the error is related to a destructor. I also found a candidate destructor that, if commented out, makes the segfault disappear. The PHP stack trace leading up to that denstructor is:

#0 https://github.com/doctrine/mongodb-odm/blob/2.2.0/lib/Doctrine/ODM/MongoDB/Iterator/HydratingIterator.php#L43, HydratingIterator->__destruct()
#1 https://github.com/doctrine/mongodb-odm/blob/2.2.0/lib/Doctrine/ODM/MongoDB/Iterator/CachingIterator.php#L164, CachingIterator->wrapTraversable()
0000002 https://github.com/doctrine/mongodb-odm/blob/2.2.0/lib/Doctrine/ODM/MongoDB/Iterator/CachingIterator.php#L90, Generator->next()
0000003 https://github.com/doctrine/mongodb-odm/blob/2.2.0/lib/Doctrine/ODM/MongoDB/Iterator/CachingIterator.php#L90, CachingIterator->next()
0000004 userland code...

A MongoDB\Driver\Cursor instance is passed to the HydratingIterator. The HydratingIterator is passed to the CachingIterator. Both are wrapped inside Generators, and the destruction of these Generators seems to be related to the segfault.

I didn't succeed in extracting a reproducible test case yet. Can anybody do something with this information?
Additional Information#0 0x00005555557dbc2b in zend_call_function ()
No symbol table info available.
#1 0x000055555581c88d in zend_objects_destroy_object ()
No symbol table info available.
0000002 0x0000555555821c13 in zend_objects_store_del ()
No symbol table info available.
0000003 0x00007ffff25fb891 in function_stack_entry_dtor (elem=0x5555561691a0) at /tmp/pear/temp/xdebug/src/base/base.c:122
        i = 0
        e = 0x5555561691a0
0000004 0x00007ffff25fc9b3 in xdebug_vector_pop (v=0x555555eb9350) at /tmp/pear/temp/xdebug/src/lib/vector.h:64
No locals.
0000005 xdebug_execute_ex (execute_data=<optimized out>) at /tmp/pear/temp/xdebug/src/base/base.c:792
        op_array = 0x7fffde5458b8
        edata = <optimized out>
        fse = <optimized out>
        function_nr = 1255574
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000006 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000007 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e1b110, return_value=0x7fffffff4460) at /tmp/pear/temp/xdebug/src/base/base.c:883
        edata = <optimized out>
        fse = 0x5555561690d8
        function_nr = 1255573
        function_call_traced = 0
        restore_error_handler_situation = 0
        tmp_error_cb = 0x0
0000008 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000009 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1b050) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde545348
        edata = <optimized out>
        fse = 0x555556169010
        function_nr = 1255571
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000010 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000011 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1afd0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde543228
        edata = <optimized out>
        fse = 0x555556168f48
        function_nr = 1255570
---Type <return> to continue, or q <return> to quit---
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000012 0x00005555557dc2b3 in zend_call_function ()
No symbol table info available.
0000013 0x0000555555807481 in zend_call_method ()
No symbol table info available.
0000014 0x00005555558079bb in zend_user_it_move_forward ()
No symbol table info available.
0000015 0x0000555555866d01 in ?? ()
No symbol table info available.
0000016 0x000055555586fb0f in execute_ex ()
No symbol table info available.
0000017 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1ad80) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdd2d9308
        edata = <optimized out>
        fse = 0x555556168e80
        function_nr = 1255089
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000018 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000019 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1ac50) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdd2d8e20
        edata = <optimized out>
        fse = 0x555556168db8
        function_nr = 1255085
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000020 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000021 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1a850) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdd2d7ff0
        edata = <optimized out>
        fse = 0x555556168cf0
        function_nr = 1254422
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000022 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000023 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7fffdd46a600) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf219a00
---Type <return> to continue, or q <return> to quit---
        edata = <optimized out>
        fse = 0x555556168c28
        function_nr = 1254403
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000024 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000025 0x00005555558173e9 in ?? ()
No symbol table info available.
0000026 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e1a800, return_value=0x7fffffff4dd0) at /tmp/pear/temp/xdebug/src/base/base.c:883
        edata = <optimized out>
        fse = 0x555556168b60
        function_nr = 1254402
        function_call_traced = 0
        restore_error_handler_situation = 0
        tmp_error_cb = 0x0
0000027 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000028 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1a490) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf219de8
        edata = <optimized out>
        fse = 0x555556168a98
        function_nr = 1247909
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000029 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000030 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1a2e0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf8e2190
        edata = <optimized out>
        fse = 0x5555561689d0
        function_nr = 1247875
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000031 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000032 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1a240) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdd2d6d18
        edata = <optimized out>
        fse = 0x555556168908
        function_nr = 1247873
        code_coverage_function_name = 0x0
---Type <return> to continue, or q <return> to quit---
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000033 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000034 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1a1b0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdd2d6408
        edata = <optimized out>
        fse = 0x555556168840
        function_nr = 1247871
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
#35 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000036 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7fffe1bd6200) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf219a00
        edata = <optimized out>
        fse = 0x555556168778
        function_nr = 1247852
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000037 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000038 0x00005555558173e9 in ?? ()
No symbol table info available.
0000039 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e1a160, return_value=0x7fffffff53d0) at /tmp/pear/temp/xdebug/src/base/base.c:883
        edata = <optimized out>
        fse = 0x5555561686b0
        function_nr = 1247851
        function_call_traced = 0
        restore_error_handler_situation = 0
        tmp_error_cb = 0x0
0000040 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000041 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19df0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf219de8
        edata = <optimized out>
        fse = 0x5555561685e8
        function_nr = 1245576
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000042 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
---Type <return> to continue, or q <return> to quit---
0000043 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19c40) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf8e2190
        edata = <optimized out>
        fse = 0x555556168520
        function_nr = 1245571
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000044 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000045 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19a90) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde20ce80
        edata = <optimized out>
        fse = 0x555556168458
        function_nr = 1245551
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000046 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000047 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19900) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde20f600
        edata = <optimized out>
        fse = 0x555556168390
        function_nr = 1242955
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000048 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
#49 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19810) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde20ff20
        edata = <optimized out>
        fse = 0x5555561682c8
        function_nr = 1242953
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000050 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
#51 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19760) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde14b2d0
        edata = <optimized out>
        fse = 0x555556168200
        function_nr = 1242938
---Type <return> to continue, or q <return> to quit---
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000052 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000053 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e195d0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde03d4b0
        edata = <optimized out>
        fse = 0x555556168138
        function_nr = 1242806
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000054 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000055 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19530) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf9b5b58
        edata = <optimized out>
        fse = 0x555556168070
        function_nr = 1242805
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000056 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000057 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7fffdcf12380) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf9b8208
        edata = <optimized out>
        fse = 0x555556167fa8
        function_nr = 1242804
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000058 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000059 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e194e0, return_value=0x7fffffff5e00) at /tmp/pear/temp/xdebug/src/base/base.c:883
        edata = <optimized out>
        fse = 0x555556167ee0
        function_nr = 1242803
        function_call_traced = 0
        restore_error_handler_situation = 0
        tmp_error_cb = 0x0
0000060 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000061 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19170) at /tmp/pear/temp/xdebug/src/base/base.c:765
---Type <return> to continue, or q <return> to quit---
        op_array = 0x7fffdf219de8
        edata = <optimized out>
        fse = 0x555556167e18
        function_nr = 1239729
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000062 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000063 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18fc0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf8e2190
        edata = <optimized out>
        fse = 0x555556167d50
        function_nr = 1239724
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000064 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000065 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18e10) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde20ce80
        edata = <optimized out>
        fse = 0x555556167c88
        function_nr = 1239704
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000066 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000067 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18c80) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde20f600
        edata = <optimized out>
        fse = 0x555556167bc0
        function_nr = 1237108
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000068 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000069 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18b90) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde20ff20
        edata = <optimized out>
        fse = 0x555556167af8
        function_nr = 1237106
        code_coverage_function_name = 0x0
---Type <return> to continue, or q <return> to quit---
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000070 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000071 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18ae0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde14b2d0
        edata = <optimized out>
        fse = 0x555556167a30
        function_nr = 1237091
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000072 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000073 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18950) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde03d4b0
        edata = <optimized out>
        fse = 0x555556167968
        function_nr = 1236959
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000074 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000075 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e188b0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf9b5b58
        edata = <optimized out>
        fse = 0x5555561678a0
        function_nr = 1236958
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000076 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000077 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7fffdcf121c0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf9b8208
        edata = <optimized out>
        fse = 0x5555561677d8
        function_nr = 1236957
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000078 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000079 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e18860, return_value=0x7fffffff6830) at /tmp/pear/temp/xdebug/src/base/base.c:883
---Type <return> to continue, or q <return> to quit---
        edata = <optimized out>
        fse = 0x555556167710
        function_nr = 1236956
        function_call_traced = 0
        restore_error_handler_situation = 0
        tmp_error_cb = 0x0
0000080 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000081 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e184f0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf219de8
        edata = <optimized out>
        fse = 0x555556167648
        function_nr = 1208243
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000082 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000083 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18340) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf8e2190
        edata = <optimized out>
        fse = 0x555556167580
        function_nr = 1208211
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000084 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000085 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18190) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdd49afd8
        edata = <optimized out>
        fse = 0x5555561674b8
        function_nr = 1206955
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000086 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000087 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18100) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdd49a6c8
        edata = <optimized out>
        fse = 0x5555561673f0
        function_nr = 1206953
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
---Type <return> to continue, or q <return> to quit---
        code_coverage_init = 0
0000088 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000089 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7fffe1bc9000) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf219a00
        edata = <optimized out>
        fse = 0x555556167328
        function_nr = 1206934
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000090 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000091 0x00005555558173e9 in ?? ()
No symbol table info available.
0000092 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e180b0, return_value=0x7fffffff6e30) at /tmp/pear/temp/xdebug/src/base/base.c:883
        edata = <optimized out>
        fse = 0x555556167260
        function_nr = 1206933
        function_call_traced = 0
        restore_error_handler_situation = 0
        tmp_error_cb = 0x0
0000093 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000094 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e17d40) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf219de8
        edata = <optimized out>
        fse = 0x555556167198
        function_nr = 1204746
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000095 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000096 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e17b90) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf8e2190
        edata = <optimized out>
        fse = 0x5555561670d0
        function_nr = 1204741
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000097 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000098 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e179e0) at /tmp/pear/temp/xdebug/src/base/base.c:765
---Type <return> to continue, or q <return> to quit---
        op_array = 0x7fffde20ce80
        edata = <optimized out>
        fse = 0x555556167008
        function_nr = 1204721
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000099 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000100 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e17850) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde20f600
        edata = <optimized out>
        fse = 0x555556166f40
        function_nr = 1202125
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000101 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000102 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e17760) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde20ff20
        edata = <optimized out>
        fse = 0x555556166e78
        function_nr = 1202123
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000103 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000104 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e176b0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde14b2d0
        edata = <optimized out>
        fse = 0x555556166db0
        function_nr = 1202108
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000105 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000106 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e17520) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffde03d4b0
        edata = <optimized out>
        fse = 0x555556166ce8
        function_nr = 1201926
        code_coverage_function_name = 0x0
---Type <return> to continue, or q <return> to quit---
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000107 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000108 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e17480) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf9b5b58
        edata = <optimized out>
        fse = 0x555556166c20
        function_nr = 1201925
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000109 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000110 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7fffdd4d5c40) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf9b8208
        edata = <optimized out>
        fse = 0x555556166b58
        function_nr = 1201924
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000111 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000112 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e17430, return_value=0x7fffffff7860) at /tmp/pear/temp/xdebug/src/base/base.c:883
        edata = <optimized out>
        fse = 0x555556166a90
        function_nr = 1201923
        function_call_traced = 0
        restore_error_handler_situation = 0
        tmp_error_cb = 0x0
0000113 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000114 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e170c0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf219de8
        edata = <optimized out>
        fse = 0x5555561669c8
        function_nr = 1125756
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000115 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000116 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16f10) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf8e2190
---Type <return> to continue, or q <return> to quit---
        edata = <optimized out>
        fse = 0x555556166900
        function_nr = 1125724
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000117 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000118 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16e90) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf11fec0
        edata = <optimized out>
        fse = 0x555556166838
        function_nr = 1125723
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000119 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000120 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16980) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf1180c8
        edata = <optimized out>
        fse = 0x555556166770
        function_nr = 1123512
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000121 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000122 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16880) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdf1181b0
        edata = <optimized out>
        fse = 0x5555561666a8
        function_nr = 1123511
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000123 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000124 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16670) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb822d0
        edata = <optimized out>
        fse = 0x5555561665e0
        function_nr = 1123488
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
---Type <return> to continue, or q <return> to quit---
        code_coverage_init = 0
0000125 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000126 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e165c0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb82100
        edata = <optimized out>
        fse = 0x555556166518
        function_nr = 1123483
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000127 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000128 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e164b0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb26090
        edata = <optimized out>
        fse = 0x555556166450
        function_nr = 1123481
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000129 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000130 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16310) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb25ec0
        edata = <optimized out>
        fse = 0x555556166388
        function_nr = 1119350
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000131 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000132 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16180) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb831f0
        edata = <optimized out>
        fse = 0x5555561662c0
        function_nr = 1119343
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000133 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000134 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16050) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb82f38
---Type <return> to continue, or q <return> to quit---
        edata = <optimized out>
        fse = 0x5555561661f8
        function_nr = 1113292
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000135 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000136 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15fa0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb84838
        edata = <optimized out>
        fse = 0x555556166130
        function_nr = 1113291
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000137 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000138 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15ef0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb84e40
        edata = <optimized out>
        fse = 0x555556166068
        function_nr = 1113290
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000139 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000140 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15c20) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb85338
        edata = <optimized out>
        fse = 0x555556165fa0
        function_nr = 743543
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000141 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000142 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15a20) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb86870
        edata = <optimized out>
        fse = 0x555555f05be8
        function_nr = 390977
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
---Type <return> to continue, or q <return> to quit---
        code_coverage_init = 0
0000143 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000144 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15970) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb873e0
        edata = <optimized out>
        fse = 0x555555f05b20
        function_nr = 390976
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000145 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000146 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e158c0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb87a88
        edata = <optimized out>
        fse = 0x555555f05a58
        function_nr = 390975
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000147 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000148 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15680) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb88110
        edata = <optimized out>
        fse = 0x555555f05990
        function_nr = 369291
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000149 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000150 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e153e0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb89780
        edata = <optimized out>
        fse = 0x555555f058c8
        function_nr = 369287
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000151 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000152 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15340) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb8a230
---Type <return> to continue, or q <return> to quit---
        edata = <optimized out>
        fse = 0x555555f05800
        function_nr = 369286
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000153 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000154 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e152a0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb8a838
        edata = <optimized out>
        fse = 0x555555f05738
        function_nr = 369285
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000155 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000156 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15040) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb8ae18
        edata = <optimized out>
        fse = 0x555555f05670
        function_nr = 367982
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000157 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000158 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14fa0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb8b878
        edata = <optimized out>
        fse = 0x555555f055a8
        function_nr = 367981
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000159 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000160 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14f00) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb8be80
        edata = <optimized out>
        fse = 0x555555f054e0
        function_nr = 367980
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
---Type <return> to continue, or q <return> to quit---
        code_coverage_init = 0
0000161 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000162 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14c50) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb8c488
        edata = <optimized out>
        fse = 0x555555f05418
        function_nr = 333471
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000163 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000164 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14bc0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb8cf10
        edata = <optimized out>
        fse = 0x555555f05350
        function_nr = 333470
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000165 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000166 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14b20) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfb8d568
        edata = <optimized out>
        fse = 0x555555f05288
        function_nr = 333468
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000167 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000168 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14900) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfbd12d0
        edata = <optimized out>
        fse = 0x555555f051c0
        function_nr = 333307
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000169 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000170 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14770) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfbd1100
---Type <return> to continue, or q <return> to quit---
        edata = <optimized out>
        fse = 0x555555f050f8
        function_nr = 333180
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000171 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000172 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14630) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfbd1a08
        edata = <optimized out>
        fse = 0x555555f05030
        function_nr = 332765
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000173 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000174 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14290) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffdfbd2a18
        edata = <optimized out>
        fse = 0x555555f04f68
        function_nr = 332374
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000175 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000176 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e13f30) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffe1dc3a48
        edata = <optimized out>
        fse = 0x555555f04ea0
        function_nr = 332370
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000177 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000178 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e13910) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffe1dc16f0
        edata = <optimized out>
        fse = 0x555555f04dd8
        function_nr = 331999
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
---Type <return> to continue, or q <return> to quit---
        code_coverage_init = 0
0000179 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000180 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e136f0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffe1dc0708
        edata = <optimized out>
        fse = 0x555555eb95a0
        function_nr = 1656
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000181 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000182 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e131e0) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7fffe1dc1520
        edata = <optimized out>
        fse = 0x555555eb94d8
        function_nr = 1299
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000183 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000184 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e13020) at /tmp/pear/temp/xdebug/src/base/base.c:765
        op_array = 0x7ffff2e822a0
        edata = <optimized out>
        fse = 0x555555eb9410
        function_nr = 0
        code_coverage_function_name = 0x0
        code_coverage_filename = 0x0
        code_coverage_init = 0
0000185 0x00005555558779a2 in zend_execute ()
No symbol table info available.
0000186 0x00005555557ea9b2 in zend_execute_scripts ()
No symbol table info available.
0000187 0x00005555557894d0 in php_execute_script ()
No symbol table info available.
0000188 0x00005555558799a3 in ?? ()
No symbol table info available.
0000189 0x0000555555642cb6 in ?? ()
No symbol table info available.
0000190 0x00007ffff5c19bf7 in __libc_start_main (main=0x5555556428a0, argc=10, argv=0x7fffffffd798, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>,
    stack_end=0x7fffffffd788) at ../csu/libc-start.c:310
        self = <optimized out>
        __self = <optimized out>
---Type <return> to continue, or q <return> to quit---
        result = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, -4619316450571364206, 93824993209904, 140737488344976, 0, 0, -1535251631670339438, -1535264875030423406}, mask_was_saved = 0}},
          priv = {pad = {0x0, 0x0, 0x7ffff7de38d3 <_dl_init+259>, 0x7ffff7dd1df8}, data = {prev = 0x0, cleanup = 0x0, canceltype = -136431405}}}
        not_first_call = <optimized out>
0000191 0x0000555555642e5a in _start ()
No symbol table info available.
TagsNo tags attached.
Operating System
PHP Version7.4.10-7.4.19

Activities

derick

2021-04-16 16:00

administrator   ~0005850

Hi,

Thanks for the report and back trace, but unfortunately there are not enough hints in there for me do anything with. I'm going to need a reproducible case, *preferably* a short one.

In order to have a better back trace, I would also recommend to set the environment variable `USE_ZEND_ALLOC=0`, and perhaps if you can run this with valgrind from the command line (just prefix php yourscript.php with valgrind), there might be a more reliable crash/memory corruption report. I bet it's a double free, but it is hard to investigate without a real script and real data.

cheers,
Derick

Issue History

Date Modified Username Field Change
2021-04-14 11:16 webmozart New Issue
2021-04-16 16:00 derick Assigned To => derick
2021-04-16 16:00 derick Status new => feedback
2021-04-16 16:00 derick Note Added: 0005850