#40479 [NEW]: zend_mm_heap corrupted

[rrossi at maggioli dot it]

From: rrossi at maggioli dot it
Operating system: Suse Linux 9.0
PHP version: 5.2.1
PHP Bug Type: Reproducible crash
Bug description: zend_mm_heap corrupted

Description:
------------
Instead of printing the desired string, PHP breaks and gives me the
message in the summary (found in the apache log)

No problems with 5.2.0

my config.nice

'./configure' \
'--with-apxs' \
'--with-mysql=/usr/local/mysql' \
'--with-bz2' \
'--with-mcrypt' \
'--with-pgsql' \
'--without-pear' \
"$@"
Apache 1.3.37

Reproduce code:
---------------
header('Content-type: text/xml');
$xmlOut = "<?xml version='1.0' encoding='iso-8859-1'?>"
. "<ajax-response>";
$xmlOut .=
"<fragment><id>approfondimenti</id><content><![CDATA[$stApprofondimenti]]></content></fragment>"
..

"<fragment><id>inevidenza</id><content><![CDATA[$stInevidenza]]></content></fragment>"
..

"<fragment><id>normativa</id><content><![CDATA[$stNormativa]]></content></fragment>"
..

"<fragment><id>giurisprudenza</id><content><![CDATA[$stGiurisprudenza]]></content></fragment>"
..

"<fragment><id>progress</id><content><![CDATA[$stNewsMenu]]></content></fragment>"
..
"<num_news>$numNews</num_news>";
$xmlOut .= "</ajax-response>";
die($xmlOut);


Expected result:
----------------
An xml stream.

Actual result:
--------------
No response from server.

--
Edit bug report at [url]http://bugs.php.net/?id=40479&edit=1[/url]
--
Try a CVS snapshot (PHP 4.4): [url]http://bugs.php.net/fix.php?id=40479&r=trysnapshot44[/url]
Try a CVS snapshot (PHP 5.2): [url]http://bugs.php.net/fix.php?id=40479&r=trysnapshot52[/url]
Try a CVS snapshot (PHP 6.0): [url]http://bugs.php.net/fix.php?id=40479&r=trysnapshot60[/url]
Fixed in CVS: [url]http://bugs.php.net/fix.php?id=40479&r=fixedcvs[/url]
Fixed in release: [url]http://bugs.php.net/fix.php?id=40479&r=alreadyfixed[/url]
Need backtrace: [url]http://bugs.php.net/fix.php?id=40479&r=needtrace[/url]
Need Reproduce Script: [url]http://bugs.php.net/fix.php?id=40479&r=needscript[/url]
Try newer version: [url]http://bugs.php.net/fix.php?id=40479&r=oldversion[/url]
Not developer issue: [url]http://bugs.php.net/fix.php?id=40479&r=support[/url]
Expected behavior: [url]http://bugs.php.net/fix.php?id=40479&r=notwrong[/url]
Not enough info: [url]http://bugs.php.net/fix.php?id=40479&r=notenoughinfo[/url]
Submitted twice: [url]http://bugs.php.net/fix.php?id=40479&r=submittedtwice[/url]
register_globals: [url]http://bugs.php.net/fix.php?id=40479&r=globals[/url]
PHP 3 support discontinued: [url]http://bugs.php.net/fix.php?id=40479&r=php3[/url]
Daylight Savings: [url]http://bugs.php.net/fix.php?id=40479&r=dst[/url]
IIS Stability: [url]http://bugs.php.net/fix.php?id=40479&r=isapi[/url]
Install GNU Sed: [url]http://bugs.php.net/fix.php?id=40479&r=gnused[/url]
Floating point limitations: [url]http://bugs.php.net/fix.php?id=40479&r=float[/url]
No Zend Extensions: [url]http://bugs.php.net/fix.php?id=40479&r=nozend[/url]
MySQL Configuration Error: [url]http://bugs.php.net/fix.php?id=40479&r=mysqlcfg[/url]

[tony2001@php.net]

ID: 40479
Updated by: [email]tony2001@php.net[/email]
Reported By: rrossi at maggioli dot it
-Status: Open
+Status: Feedback
Bug Type: Reproducible crash
Operating System: Suse Linux 9.0
PHP Version: 5.2.1
New Comment:

Please try using this CVS snapshot:

[url]http://snaps.php.net/php5.2-latest.tar.gz[/url]

For Windows:

[url]http://snaps.php.net/win32/php5.2-win32-latest.zip[/url]




Previous Comments:
------------------------------------------------------------------------

[2007-02-14 11:21:55] rrossi at maggioli dot it

Description:
------------
Instead of printing the desired string, PHP breaks and gives me the
message in the summary (found in the apache log)

No problems with 5.2.0

my config.nice

'./configure' \
'--with-apxs' \
'--with-mysql=/usr/local/mysql' \
'--with-bz2' \
'--with-mcrypt' \
'--with-pgsql' \
'--without-pear' \
"$@"
Apache 1.3.37

Reproduce code:
---------------
header('Content-type: text/xml');
$xmlOut = "<?xml version='1.0' encoding='iso-8859-1'?>"
. "<ajax-response>";
$xmlOut .=
"<fragment><id>approfondimenti</id><content><![CDATA[$stApprofondimenti]]></content></fragment>"
..

"<fragment><id>inevidenza</id><content><![CDATA[$stInevidenza]]></content></fragment>"
..

"<fragment><id>normativa</id><content><![CDATA[$stNormativa]]></content></fragment>"
..

"<fragment><id>giurisprudenza</id><content><![CDATA[$stGiurisprudenza]]></content></fragment>"
..

"<fragment><id>progress</id><content><![CDATA[$stNewsMenu]]></content></fragment>"
..
"<num_news>$numNews</num_news>";
$xmlOut .= "</ajax-response>";
die($xmlOut);


Expected result:
----------------
An xml stream.

Actual result:
--------------
No response from server.


------------------------------------------------------------------------


--
Edit this bug report at [url]http://bugs.php.net/?id=40479&edit=1[/url]

[tlongren at gmail dot com]

ID: 40479
Comment by: tlongren at gmail dot com
Reported By: rrossi at maggioli dot it
Status: No Feedback
Bug Type: Reproducible crash
Operating System: Suse Linux 9.0
PHP Version: 5.2.1
New Comment:

I've tried the latest CVS snapshot and this problem still occurs there.


Previous Comments:
------------------------------------------------------------------------

[2007-02-22 01:00:01] php-bugs at lists dot php dot net

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

------------------------------------------------------------------------

[2007-02-14 11:44:26] [email]tony2001@php.net[/email]

Please try using this CVS snapshot:

[url]http://snaps.php.net/php5.2-latest.tar.gz[/url]

For Windows:

[url]http://snaps.php.net/win32/php5.2-win32-latest.zip[/url]



------------------------------------------------------------------------

[2007-02-14 11:21:55] rrossi at maggioli dot it

Description:
------------
Instead of printing the desired string, PHP breaks and gives me the
message in the summary (found in the apache log)

No problems with 5.2.0

my config.nice

'./configure' \
'--with-apxs' \
'--with-mysql=/usr/local/mysql' \
'--with-bz2' \
'--with-mcrypt' \
'--with-pgsql' \
'--without-pear' \
"$@"
Apache 1.3.37

Reproduce code:
---------------
header('Content-type: text/xml');
$xmlOut = "<?xml version='1.0' encoding='iso-8859-1'?>"
. "<ajax-response>";
$xmlOut .=
"<fragment><id>approfondimenti</id><content><![CDATA[$stApprofondimenti]]></content></fragment>"
..

"<fragment><id>inevidenza</id><content><![CDATA[$stInevidenza]]></content></fragment>"
..

"<fragment><id>normativa</id><content><![CDATA[$stNormativa]]></content></fragment>"
..

"<fragment><id>giurisprudenza</id><content><![CDATA[$stGiurisprudenza]]></content></fragment>"
..

"<fragment><id>progress</id><content><![CDATA[$stNewsMenu]]></content></fragment>"
..
"<num_news>$numNews</num_news>";
$xmlOut .= "</ajax-response>";
die($xmlOut);


Expected result:
----------------
An xml stream.

Actual result:
--------------
No response from server.


------------------------------------------------------------------------


--
Edit this bug report at [url]http://bugs.php.net/?id=40479&edit=1[/url]

[tony2001@php.net]

ID: 40479
Updated by: [email]tony2001@php.net[/email]
Reported By: rrossi at maggioli dot it
-Status: No Feedback
+Status: Feedback
Bug Type: Reproducible crash
Operating System: Suse Linux 9.0
PHP Version: 5.2.1
New Comment:

Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves.

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external
resources such as databases, etc. If the script requires a
database to demonstrate the issue, please make sure it creates
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.




Previous Comments:
------------------------------------------------------------------------

[2007-02-26 22:10:47] tlongren at gmail dot com

I've tried the latest CVS snapshot and this problem still occurs there.

------------------------------------------------------------------------

[2007-02-22 01:00:01] php-bugs at lists dot php dot net

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

------------------------------------------------------------------------

[2007-02-14 11:44:26] [email]tony2001@php.net[/email]

Please try using this CVS snapshot:

[url]http://snaps.php.net/php5.2-latest.tar.gz[/url]

For Windows:

[url]http://snaps.php.net/win32/php5.2-win32-latest.zip[/url]



------------------------------------------------------------------------

[2007-02-14 11:21:55] rrossi at maggioli dot it

Description:
------------
Instead of printing the desired string, PHP breaks and gives me the
message in the summary (found in the apache log)

No problems with 5.2.0

my config.nice

'./configure' \
'--with-apxs' \
'--with-mysql=/usr/local/mysql' \
'--with-bz2' \
'--with-mcrypt' \
'--with-pgsql' \
'--without-pear' \
"$@"
Apache 1.3.37

Reproduce code:
---------------
header('Content-type: text/xml');
$xmlOut = "<?xml version='1.0' encoding='iso-8859-1'?>"
. "<ajax-response>";
$xmlOut .=
"<fragment><id>approfondimenti</id><content><![CDATA[$stApprofondimenti]]></content></fragment>"
..

"<fragment><id>inevidenza</id><content><![CDATA[$stInevidenza]]></content></fragment>"
..

"<fragment><id>normativa</id><content><![CDATA[$stNormativa]]></content></fragment>"
..

"<fragment><id>giurisprudenza</id><content><![CDATA[$stGiurisprudenza]]></content></fragment>"
..

"<fragment><id>progress</id><content><![CDATA[$stNewsMenu]]></content></fragment>"
..
"<num_news>$numNews</num_news>";
$xmlOut .= "</ajax-response>";
die($xmlOut);


Expected result:
----------------
An xml stream.

Actual result:
--------------
No response from server.


------------------------------------------------------------------------


--
Edit this bug report at [url]http://bugs.php.net/?id=40479&edit=1[/url]

[noah at hd dot se]

ID: 40479
Comment by: noah at hd dot se
Reported By: rrossi at maggioli dot it
Status: No Feedback
Bug Type: Reproducible crash
Operating System: Suse Linux 9.0
PHP Version: 5.2.1
New Comment:

Fwiw, I experienced the same error with the following code and the
latest PHP.

....
for($i = 0; $i < $foo; $i++) {
...
for($i = 0; $i < $bar; $i++) {
...
}
...
}
....


Previous Comments:
------------------------------------------------------------------------

[2007-03-06 01:00:00] php-bugs at lists dot php dot net

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

------------------------------------------------------------------------

[2007-02-26 22:14:48] [email]tony2001@php.net[/email]

Thank you for this bug report. To properly diagnose the problem, we
need a short but complete example script to be able to reproduce
this bug ourselves.

A proper reproducing script starts with <?php and ends with ?>,
is max. 10-20 lines long and does not require any external
resources such as databases, etc. If the script requires a
database to demonstrate the issue, please make sure it creates
all necessary tables, stored procedures etc.

Please avoid embedding huge scripts into the report.



------------------------------------------------------------------------

[2007-02-26 22:10:47] tlongren at gmail dot com

I've tried the latest CVS snapshot and this problem still occurs there.

------------------------------------------------------------------------

[2007-02-22 01:00:01] php-bugs at lists dot php dot net

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

------------------------------------------------------------------------

[2007-02-14 11:44:26] [email]tony2001@php.net[/email]

Please try using this CVS snapshot:

[url]http://snaps.php.net/php5.2-latest.tar.gz[/url]

For Windows:

[url]http://snaps.php.net/win32/php5.2-win32-latest.zip[/url]



------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
[url]http://bugs.php.net/40479[/url]

--
Edit this bug report at [url]http://bugs.php.net/?id=40479&edit=1[/url]