View Issue Details

IDProjectCategoryView StatusLast Update
0001965XdebugUncategorizedpublic2021-06-17 00:10
Reporterwebmozart Assigned Toderick  
PrioritynormalSeveritycrashReproducibilityalways
Status resolvedResolutionunable to reproduce 
OSUbuntuOS Version18.04 
Product Version3.0.4 
Summary0001965: PHP with XDebug segfaults on destructor
Description

In a business application, segfaults with the below stack trace when XDebug is loaded. When XDebug is not loaded, everything is fine.

From the below stack trace, I assume that the error is related to a destructor. I also found a candidate destructor that, if commented out, makes the segfault disappear. The PHP stack trace leading up to that denstructor is:

#0 https://github.com/doctrine/mongodb-odm/blob/2.2.0/lib/Doctrine/ODM/MongoDB/Iterator/HydratingIterator.php#L43, HydratingIterator->__destruct()
#1 https://github.com/doctrine/mongodb-odm/blob/2.2.0/lib/Doctrine/ODM/MongoDB/Iterator/CachingIterator.php#L164, CachingIterator->wrapTraversable()
0000002 https://github.com/doctrine/mongodb-odm/blob/2.2.0/lib/Doctrine/ODM/MongoDB/Iterator/CachingIterator.php#L90, Generator->next()
0000003 https://github.com/doctrine/mongodb-odm/blob/2.2.0/lib/Doctrine/ODM/MongoDB/Iterator/CachingIterator.php#L90, CachingIterator->next()
0000004 userland code...

A MongoDB\Driver\Cursor instance is passed to the HydratingIterator. The HydratingIterator is passed to the CachingIterator. Both are wrapped inside Generators, and the destruction of these Generators seems to be related to the segfault.

I didn't succeed in extracting a reproducible test case yet. Can anybody do something with this information?

Additional Information

#0 0x00005555557dbc2b in zend_call_function ()
No symbol table info available.
#1 0x000055555581c88d in zend_objects_destroy_object ()
No symbol table info available.
0000002 0x0000555555821c13 in zend_objects_store_del ()
No symbol table info available.
0000003 0x00007ffff25fb891 in function_stack_entry_dtor (elem=0x5555561691a0) at /tmp/pear/temp/xdebug/src/base/base.c:122
i = 0
e = 0x5555561691a0
0000004 0x00007ffff25fc9b3 in xdebug_vector_pop (v=0x555555eb9350) at /tmp/pear/temp/xdebug/src/lib/vector.h:64
No locals.
0000005 xdebug_execute_ex (execute_data=<optimized out>) at /tmp/pear/temp/xdebug/src/base/base.c:792
op_array = 0x7fffde5458b8
edata = <optimized out>
fse = <optimized out>
function_nr = 1255574
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000006 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000007 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e1b110, return_value=0x7fffffff4460) at /tmp/pear/temp/xdebug/src/base/base.c:883
edata = <optimized out>
fse = 0x5555561690d8
function_nr = 1255573
function_call_traced = 0
restore_error_handler_situation = 0
tmp_error_cb = 0x0
0000008 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000009 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1b050) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde545348
edata = <optimized out>
fse = 0x555556169010
function_nr = 1255571
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000010 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000011 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1afd0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde543228
edata = <optimized out>
fse = 0x555556168f48
function_nr = 1255570
---Type <return> to continue, or q <return> to quit---
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000012 0x00005555557dc2b3 in zend_call_function ()
No symbol table info available.
0000013 0x0000555555807481 in zend_call_method ()
No symbol table info available.
0000014 0x00005555558079bb in zend_user_it_move_forward ()
No symbol table info available.
0000015 0x0000555555866d01 in ?? ()
No symbol table info available.
0000016 0x000055555586fb0f in execute_ex ()
No symbol table info available.
0000017 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1ad80) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdd2d9308
edata = <optimized out>
fse = 0x555556168e80
function_nr = 1255089
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000018 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000019 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1ac50) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdd2d8e20
edata = <optimized out>
fse = 0x555556168db8
function_nr = 1255085
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000020 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000021 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1a850) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdd2d7ff0
edata = <optimized out>
fse = 0x555556168cf0
function_nr = 1254422
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000022 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000023 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7fffdd46a600) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf219a00
---Type <return> to continue, or q <return> to quit---
edata = <optimized out>
fse = 0x555556168c28
function_nr = 1254403
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000024 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000025 0x00005555558173e9 in ?? ()
No symbol table info available.
0000026 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e1a800, return_value=0x7fffffff4dd0) at /tmp/pear/temp/xdebug/src/base/base.c:883
edata = <optimized out>
fse = 0x555556168b60
function_nr = 1254402
function_call_traced = 0
restore_error_handler_situation = 0
tmp_error_cb = 0x0
0000027 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000028 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1a490) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf219de8
edata = <optimized out>
fse = 0x555556168a98
function_nr = 1247909
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000029 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000030 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1a2e0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf8e2190
edata = <optimized out>
fse = 0x5555561689d0
function_nr = 1247875
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000031 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000032 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1a240) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdd2d6d18
edata = <optimized out>
fse = 0x555556168908
function_nr = 1247873
code_coverage_function_name = 0x0
---Type <return> to continue, or q <return> to quit---
code_coverage_filename = 0x0
code_coverage_init = 0
0000033 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000034 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e1a1b0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdd2d6408
edata = <optimized out>
fse = 0x555556168840
function_nr = 1247871
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
#35 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000036 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7fffe1bd6200) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf219a00
edata = <optimized out>
fse = 0x555556168778
function_nr = 1247852
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000037 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000038 0x00005555558173e9 in ?? ()
No symbol table info available.
0000039 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e1a160, return_value=0x7fffffff53d0) at /tmp/pear/temp/xdebug/src/base/base.c:883
edata = <optimized out>
fse = 0x5555561686b0
function_nr = 1247851
function_call_traced = 0
restore_error_handler_situation = 0
tmp_error_cb = 0x0
0000040 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000041 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19df0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf219de8
edata = <optimized out>
fse = 0x5555561685e8
function_nr = 1245576
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000042 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
---Type <return> to continue, or q <return> to quit---
0000043 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19c40) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf8e2190
edata = <optimized out>
fse = 0x555556168520
function_nr = 1245571
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000044 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000045 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19a90) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde20ce80
edata = <optimized out>
fse = 0x555556168458
function_nr = 1245551
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000046 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000047 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19900) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde20f600
edata = <optimized out>
fse = 0x555556168390
function_nr = 1242955
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000048 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
#49 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19810) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde20ff20
edata = <optimized out>
fse = 0x5555561682c8
function_nr = 1242953
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000050 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
#51 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19760) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde14b2d0
edata = <optimized out>
fse = 0x555556168200
function_nr = 1242938
---Type <return> to continue, or q <return> to quit---
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000052 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000053 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e195d0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde03d4b0
edata = <optimized out>
fse = 0x555556168138
function_nr = 1242806
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000054 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000055 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19530) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf9b5b58
edata = <optimized out>
fse = 0x555556168070
function_nr = 1242805
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000056 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000057 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7fffdcf12380) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf9b8208
edata = <optimized out>
fse = 0x555556167fa8
function_nr = 1242804
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000058 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000059 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e194e0, return_value=0x7fffffff5e00) at /tmp/pear/temp/xdebug/src/base/base.c:883
edata = <optimized out>
fse = 0x555556167ee0
function_nr = 1242803
function_call_traced = 0
restore_error_handler_situation = 0
tmp_error_cb = 0x0
0000060 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000061 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e19170) at /tmp/pear/temp/xdebug/src/base/base.c:765
---Type <return> to continue, or q <return> to quit---
op_array = 0x7fffdf219de8
edata = <optimized out>
fse = 0x555556167e18
function_nr = 1239729
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000062 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000063 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18fc0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf8e2190
edata = <optimized out>
fse = 0x555556167d50
function_nr = 1239724
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000064 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000065 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18e10) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde20ce80
edata = <optimized out>
fse = 0x555556167c88
function_nr = 1239704
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000066 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000067 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18c80) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde20f600
edata = <optimized out>
fse = 0x555556167bc0
function_nr = 1237108
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000068 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000069 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18b90) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde20ff20
edata = <optimized out>
fse = 0x555556167af8
function_nr = 1237106
code_coverage_function_name = 0x0
---Type <return> to continue, or q <return> to quit---
code_coverage_filename = 0x0
code_coverage_init = 0
0000070 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000071 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18ae0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde14b2d0
edata = <optimized out>
fse = 0x555556167a30
function_nr = 1237091
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000072 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000073 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18950) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde03d4b0
edata = <optimized out>
fse = 0x555556167968
function_nr = 1236959
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000074 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000075 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e188b0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf9b5b58
edata = <optimized out>
fse = 0x5555561678a0
function_nr = 1236958
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000076 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000077 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7fffdcf121c0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf9b8208
edata = <optimized out>
fse = 0x5555561677d8
function_nr = 1236957
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000078 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000079 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e18860, return_value=0x7fffffff6830) at /tmp/pear/temp/xdebug/src/base/base.c:883
---Type <return> to continue, or q <return> to quit---
edata = <optimized out>
fse = 0x555556167710
function_nr = 1236956
function_call_traced = 0
restore_error_handler_situation = 0
tmp_error_cb = 0x0
0000080 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000081 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e184f0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf219de8
edata = <optimized out>
fse = 0x555556167648
function_nr = 1208243
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000082 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000083 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18340) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf8e2190
edata = <optimized out>
fse = 0x555556167580
function_nr = 1208211
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000084 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000085 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18190) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdd49afd8
edata = <optimized out>
fse = 0x5555561674b8
function_nr = 1206955
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000086 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000087 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e18100) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdd49a6c8
edata = <optimized out>
fse = 0x5555561673f0
function_nr = 1206953
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
---Type <return> to continue, or q <return> to quit---
code_coverage_init = 0
0000088 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000089 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7fffe1bc9000) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf219a00
edata = <optimized out>
fse = 0x555556167328
function_nr = 1206934
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000090 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000091 0x00005555558173e9 in ?? ()
No symbol table info available.
0000092 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e180b0, return_value=0x7fffffff6e30) at /tmp/pear/temp/xdebug/src/base/base.c:883
edata = <optimized out>
fse = 0x555556167260
function_nr = 1206933
function_call_traced = 0
restore_error_handler_situation = 0
tmp_error_cb = 0x0
0000093 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000094 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e17d40) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf219de8
edata = <optimized out>
fse = 0x555556167198
function_nr = 1204746
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000095 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000096 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e17b90) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf8e2190
edata = <optimized out>
fse = 0x5555561670d0
function_nr = 1204741
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000097 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000098 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e179e0) at /tmp/pear/temp/xdebug/src/base/base.c:765
---Type <return> to continue, or q <return> to quit---
op_array = 0x7fffde20ce80
edata = <optimized out>
fse = 0x555556167008
function_nr = 1204721
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000099 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000100 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e17850) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde20f600
edata = <optimized out>
fse = 0x555556166f40
function_nr = 1202125
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000101 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000102 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e17760) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde20ff20
edata = <optimized out>
fse = 0x555556166e78
function_nr = 1202123
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000103 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000104 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e176b0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde14b2d0
edata = <optimized out>
fse = 0x555556166db0
function_nr = 1202108
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000105 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000106 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e17520) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffde03d4b0
edata = <optimized out>
fse = 0x555556166ce8
function_nr = 1201926
code_coverage_function_name = 0x0
---Type <return> to continue, or q <return> to quit---
code_coverage_filename = 0x0
code_coverage_init = 0
0000107 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000108 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e17480) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf9b5b58
edata = <optimized out>
fse = 0x555556166c20
function_nr = 1201925
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000109 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000110 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7fffdd4d5c40) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf9b8208
edata = <optimized out>
fse = 0x555556166b58
function_nr = 1201924
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000111 0x000055555581638a in zend_generator_resume ()
No symbol table info available.
0000112 0x00007ffff25fd165 in xdebug_execute_internal (current_execute_data=0x7ffff2e17430, return_value=0x7fffffff7860) at /tmp/pear/temp/xdebug/src/base/base.c:883
edata = <optimized out>
fse = 0x555556166a90
function_nr = 1201923
function_call_traced = 0
restore_error_handler_situation = 0
tmp_error_cb = 0x0
0000113 0x00005555558750a8 in execute_ex ()
No symbol table info available.
0000114 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e170c0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf219de8
edata = <optimized out>
fse = 0x5555561669c8
function_nr = 1125756
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000115 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000116 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16f10) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf8e2190
---Type <return> to continue, or q <return> to quit---
edata = <optimized out>
fse = 0x555556166900
function_nr = 1125724
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000117 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000118 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16e90) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf11fec0
edata = <optimized out>
fse = 0x555556166838
function_nr = 1125723
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000119 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000120 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16980) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf1180c8
edata = <optimized out>
fse = 0x555556166770
function_nr = 1123512
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000121 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000122 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16880) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdf1181b0
edata = <optimized out>
fse = 0x5555561666a8
function_nr = 1123511
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000123 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000124 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16670) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb822d0
edata = <optimized out>
fse = 0x5555561665e0
function_nr = 1123488
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
---Type <return> to continue, or q <return> to quit---
code_coverage_init = 0
0000125 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000126 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e165c0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb82100
edata = <optimized out>
fse = 0x555556166518
function_nr = 1123483
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000127 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000128 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e164b0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb26090
edata = <optimized out>
fse = 0x555556166450
function_nr = 1123481
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000129 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000130 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16310) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb25ec0
edata = <optimized out>
fse = 0x555556166388
function_nr = 1119350
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000131 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000132 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16180) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb831f0
edata = <optimized out>
fse = 0x5555561662c0
function_nr = 1119343
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000133 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000134 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e16050) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb82f38
---Type <return> to continue, or q <return> to quit---
edata = <optimized out>
fse = 0x5555561661f8
function_nr = 1113292
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000135 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000136 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15fa0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb84838
edata = <optimized out>
fse = 0x555556166130
function_nr = 1113291
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000137 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000138 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15ef0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb84e40
edata = <optimized out>
fse = 0x555556166068
function_nr = 1113290
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000139 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000140 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15c20) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb85338
edata = <optimized out>
fse = 0x555556165fa0
function_nr = 743543
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000141 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000142 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15a20) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb86870
edata = <optimized out>
fse = 0x555555f05be8
function_nr = 390977
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
---Type <return> to continue, or q <return> to quit---
code_coverage_init = 0
0000143 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000144 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15970) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb873e0
edata = <optimized out>
fse = 0x555555f05b20
function_nr = 390976
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000145 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000146 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e158c0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb87a88
edata = <optimized out>
fse = 0x555555f05a58
function_nr = 390975
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000147 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000148 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15680) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb88110
edata = <optimized out>
fse = 0x555555f05990
function_nr = 369291
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000149 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000150 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e153e0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb89780
edata = <optimized out>
fse = 0x555555f058c8
function_nr = 369287
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000151 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000152 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15340) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb8a230
---Type <return> to continue, or q <return> to quit---
edata = <optimized out>
fse = 0x555555f05800
function_nr = 369286
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000153 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000154 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e152a0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb8a838
edata = <optimized out>
fse = 0x555555f05738
function_nr = 369285
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000155 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000156 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e15040) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb8ae18
edata = <optimized out>
fse = 0x555555f05670
function_nr = 367982
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000157 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000158 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14fa0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb8b878
edata = <optimized out>
fse = 0x555555f055a8
function_nr = 367981
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000159 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000160 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14f00) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb8be80
edata = <optimized out>
fse = 0x555555f054e0
function_nr = 367980
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
---Type <return> to continue, or q <return> to quit---
code_coverage_init = 0
0000161 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000162 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14c50) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb8c488
edata = <optimized out>
fse = 0x555555f05418
function_nr = 333471
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000163 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000164 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14bc0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb8cf10
edata = <optimized out>
fse = 0x555555f05350
function_nr = 333470
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000165 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000166 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14b20) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfb8d568
edata = <optimized out>
fse = 0x555555f05288
function_nr = 333468
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000167 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000168 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14900) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfbd12d0
edata = <optimized out>
fse = 0x555555f051c0
function_nr = 333307
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000169 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000170 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14770) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfbd1100
---Type <return> to continue, or q <return> to quit---
edata = <optimized out>
fse = 0x555555f050f8
function_nr = 333180
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000171 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000172 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14630) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfbd1a08
edata = <optimized out>
fse = 0x555555f05030
function_nr = 332765
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000173 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000174 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e14290) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffdfbd2a18
edata = <optimized out>
fse = 0x555555f04f68
function_nr = 332374
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000175 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000176 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e13f30) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffe1dc3a48
edata = <optimized out>
fse = 0x555555f04ea0
function_nr = 332370
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000177 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000178 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e13910) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffe1dc16f0
edata = <optimized out>
fse = 0x555555f04dd8
function_nr = 331999
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
---Type <return> to continue, or q <return> to quit---
code_coverage_init = 0
0000179 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000180 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e136f0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffe1dc0708
edata = <optimized out>
fse = 0x555555eb95a0
function_nr = 1656
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000181 0x00005555558752d0 in execute_ex ()
No symbol table info available.
0000182 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e131e0) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7fffe1dc1520
edata = <optimized out>
fse = 0x555555eb94d8
function_nr = 1299
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000183 0x0000555555874cf4 in execute_ex ()
No symbol table info available.
0000184 0x00007ffff25fc947 in xdebug_execute_ex (execute_data=0x7ffff2e13020) at /tmp/pear/temp/xdebug/src/base/base.c:765
op_array = 0x7ffff2e822a0
edata = <optimized out>
fse = 0x555555eb9410
function_nr = 0
code_coverage_function_name = 0x0
code_coverage_filename = 0x0
code_coverage_init = 0
0000185 0x00005555558779a2 in zend_execute ()
No symbol table info available.
0000186 0x00005555557ea9b2 in zend_execute_scripts ()
No symbol table info available.
0000187 0x00005555557894d0 in php_execute_script ()
No symbol table info available.
0000188 0x00005555558799a3 in ?? ()
No symbol table info available.
0000189 0x0000555555642cb6 in ?? ()
No symbol table info available.
0000190 0x00007ffff5c19bf7 in libc_start_main (main=0x5555556428a0, argc=10, argv=0x7fffffffd798, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>,
stack_end=0x7fffffffd788) at ../csu/libc-start.c:310
self = <optimized out>
self = <optimized out>
---Type <return> to continue, or q <return> to quit---
result = <optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, -4619316450571364206, 93824993209904, 140737488344976, 0, 0, -1535251631670339438, -1535264875030423406}, mask_was_saved = 0}},
priv = {pad = {0x0, 0x0, 0x7ffff7de38d3 <_dl_init+259>, 0x7ffff7dd1df8}, data = {prev = 0x0, cleanup = 0x0, canceltype = -136431405}}}
not_first_call = <optimized out>
0000191 0x0000555555642e5a in _start ()
No symbol table info available.

TagsNo tags attached.
Operating System
PHP Version7.4.10-7.4.19

Activities

derick

2021-04-16 16:00

administrator   ~0005850

Hi,

Thanks for the report and back trace, but unfortunately there are not enough hints in there for me do anything with. I'm going to need a reproducible case, preferably a short one.

In order to have a better back trace, I would also recommend to set the environment variable USE_ZEND_ALLOC=0, and perhaps if you can run this with valgrind from the command line (just prefix php yourscript.php with valgrind), there might be a more reliable crash/memory corruption report. I bet it's a double free, but it is hard to investigate without a real script and real data.

cheers,
Derick

derick

2021-05-24 15:58

administrator   ~0005890

Can you provide a reproducing case please?

webmozart

2021-05-25 11:20

reporter   ~0005892

Unfortunately I don't have the code for reproducing this case anymore.

derick

2021-06-17 00:10

administrator   ~0005910

Okay. I'll close this report then. If you (or somebody else) runs into this again, please report a new issue.

Issue History

Date Modified Username Field Change
2021-04-14 11:16 webmozart New Issue
2021-04-16 16:00 derick Assigned To => derick
2021-04-16 16:00 derick Status new => feedback
2021-04-16 16:00 derick Note Added: 0005850
2021-05-24 15:58 derick Note Added: 0005890
2021-05-25 11:20 webmozart Note Added: 0005892
2021-05-25 11:20 webmozart Status feedback => assigned
2021-06-17 00:10 derick Status assigned => resolved
2021-06-17 00:10 derick Resolution open => unable to reproduce
2021-06-17 00:10 derick Note Added: 0005910