[php-maint] Bug#665781: php5: Reintroduced old bug: Crash accessing global object itself returned from its __get() handle

[Timo Rothenpieler]

Forgot that in initial bug report:
Upstream fix for this:
https://github.com/dsp/php-src/commit/6c3845ce61a19348168a9158bb3832d53821a830

Am 26.03.2012 04:13, schrieb Timo R.:
> Package: php5-cli
> Version: 5.3.3-7+squeeze8
> Severity: important
> Tags: squeeze
>
> Backtrace:
> #0  0x0831e073 in zend_object_store_get_object (zobject=0xa05f7ac) at /build/buildd-php5_5.3.3-7+squeeze8-i386-aElbFU/php5-5.3.3/Zend/zend_objects_API.c:269
> #1  0x0831a47d in zend_objects_get_address (zobject=0xa05f7ac) at /build/buildd-php5_5.3.3-7+squeeze8-i386-aElbFU/php5-5.3.3/Zend/zend_objects.c:146
> #2  0x0831d2a4 in zend_std_get_method (object_ptr=0xa09269c, method_name=0xa062ca8 "b", method_len=1)
>      at /build/buildd-php5_5.3.3-7+squeeze8-i386-aElbFU/php5-5.3.3/Zend/zend_object_handlers.c:817
> #3  0x08353948 in ZEND_INIT_METHOD_CALL_SPEC_VAR_CONST_HANDLER (execute_data=0xa092684)
>      at /build/buildd-php5_5.3.3-7+squeeze8-i386-aElbFU/php5-5.3.3/Zend/zend_vm_execute.h:10422
> #4  0x0832151e in execute (op_array=0xa05fd74) at /build/buildd-php5_5.3.3-7+squeeze8-i386-aElbFU/php5-5.3.3/Zend/zend_vm_execute.h:107
> #5  0xb6639404 in ?? () from /usr/lib/php5/20090626+lfs/suhosin.so
> #6  0x082f7296 in zend_execute_scripts (type=8, retval=0x0, file_count=3) at /build/buildd-php5_5.3.3-7+squeeze8-i386-aElbFU/php5-5.3.3/Zend/zend.c:1266
> #7  0x0829b4c4 in php_execute_script (primary_file=0xbf8d730c) at /build/buildd-php5_5.3.3-7+squeeze8-i386-aElbFU/php5-5.3.3/main/main.c:2289
> #8  0x0838d84b in main (argc=2, argv=0xbf8d7424) at /build/buildd-php5_5.3.3-7+squeeze8-i386-aElbFU/php5-5.3.3/sapi/cli/php_cli.c:1196
>
> Link to php bugtracker(including way to reproduce this):
> https://bugs.php.net/bug.php?id=54372
>
> -- System Information:
> Debian Release: 6.0.4
>    APT prefers stable
>    APT policy: (500, 'stable')
> Architecture: i386 (i686)
>
> Kernel: Linux 2.6.18-028stab091.2 (SMP w/2 CPU cores)
> Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
>
> Versions of packages php5-cli depends on:
> ii  libbz2-1.0         1.0.5-6+squeeze1      high-quality block-sorting file co
> ii  libc6              2.11.3-2              Embedded GNU C Library: Shared lib
> ii  libcomerr2         1.41.12-4stable1      common error description library
> ii  libdb4.8           4.8.30-2              Berkeley v4.8 Database Libraries [
> ii  libgssapi-krb5-2   1.8.3+dfsg-4squeeze5  MIT Kerberos runtime libraries - k
> ii  libk5crypto3       1.8.3+dfsg-4squeeze5  MIT Kerberos runtime libraries - C
> ii  libkrb5-3          1.8.3+dfsg-4squeeze5  MIT Kerberos runtime libraries
> ii  libmagic1          5.04-5+squeeze1       File type determination library us
> ii  libonig2           5.9.1-1               Oniguruma regular expressions libr
> ii  libpcre3           8.02-1.1              Perl 5 Compatible Regular Expressi
> ii  libqdbm14          1.8.77-4              QDBM Database Libraries [runtime]
> ii  libssl0.9.8        0.9.8o-4squeeze7      SSL shared libraries
> ii  libxml2            2.7.8.dfsg-2+squeeze3 GNOME XML library
> ii  mime-support       3.48-1                MIME files 'mime.types'&  'mailcap
> ii  php5-common        5.3.3-7+squeeze8      Common files for packages built fr
> ii  tzdata             2011n-0squeeze1       time zone and daylight-saving time
> ii  ucf                3.0025+nmu1           Update Configuration File: preserv
> ii  zlib1g             1:1.2.3.4.dfsg-3      compression library - runtime
>
> php5-cli recommends no packages.
>
> Versions of packages php5-cli suggests:
> pn  php-pear<none>      (no description available)
>
> -- no debconf information
>
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2831 bytes
Desc: S/MIME Kryptografische Unterschrift
URL: <http://lists.alioth.debian.org/pipermail/pkg-php-maint/attachments/20120326/c816a462/attachment-0001.bin>