PHP  
 PHP_7_2
downloads | QA | documentation | faq | getting help | mailing lists | reporting bugs | php.net sites | links | my php.net 
 

Valgrind Report for sapi/phpdbg/tests/bug73794.phpt ('Bug #73794 (Crash (out of memory) when using run and # command separator)')

Script

1: <?php
2:
echo $argv[1];
3:
?>
4:

Report

==18338== Invalid write of size 1
==18338==    at 0x138E313: phpdbg_do_run (phpdbg_prompt.c:904)
==18338==    by 0x13B7ED7: phpdbg_internal_stack_execute (phpdbg_cmd.c:680)
==18338==    by 0x13B82F6: phpdbg_stack_execute (phpdbg_cmd.c:733)
==18338==    by 0x1392AC7: phpdbg_interactive (phpdbg_prompt.c:1631)
==18338==    by 0x137E8AF: main (phpdbg.c:2001)
==18338==  Address 0x15b1be01 is 0 bytes after a block of size 1 alloc'd
==18338==    at 0x4C291FA: malloc (vg_replace_malloc.c:298)
==18338==    by 0x108BA70: __zend_malloc (zend_alloc.c:2829)
==18338==    by 0x108A1F0: _emalloc (zend_alloc.c:2429)
==18338==    by 0x138DC85: phpdbg_do_run (phpdbg_prompt.c:841)
==18338==    by 0x13B7ED7: phpdbg_internal_stack_execute (phpdbg_cmd.c:680)
==18338==    by 0x13B82F6: phpdbg_stack_execute (phpdbg_cmd.c:733)
==18338==    by 0x1392AC7: phpdbg_interactive (phpdbg_prompt.c:1631)
==18338==    by 0x137E8AF: main (phpdbg.c:2001)
==18338== 
==18338== Conditional jump or move depends on uninitialised value(s)
==18338==    at 0x4C2A868: __strlen_sse42 (vg_replace_strmem.c:462)
==18338==    by 0x1006A77: php_build_argv (php_variables.c:571)
==18338==    by 0x138E4E7: phpdbg_do_run (phpdbg_prompt.c:921)
==18338==    by 0x13B7ED7: phpdbg_internal_stack_execute (phpdbg_cmd.c:680)
==18338==    by 0x13B82F6: phpdbg_stack_execute (phpdbg_cmd.c:733)
==18338==    by 0x1392AC7: phpdbg_interactive (phpdbg_prompt.c:1631)
==18338==    by 0x137E8AF: main (phpdbg.c:2001)
==18338== 
==18338== Invalid read of size 1
==18338==    at 0x10CED93: zend_string_release (zend_string.h:289)
==18338==    by 0x10CED93: destroy_op_array (zend_opcode.c:399)
==18338==    by 0x1376375: php_phpdbg_destroy_file_source (phpdbg.c:131)
==18338==    by 0x112AA91: zend_hash_destroy (zend_hash.c:1247)
==18338==    by 0x137F52C: main (phpdbg.c:2159)
==18338==  Address 0x15b1a465 is 5 bytes inside a block of size 32 free'd
==18338==    at 0x4C28BD4: free (vg_replace_malloc.c:529)
==18338==    by 0x13C45FF: phpdbg_watch_efree (phpdbg_watch.c:1169)
==18338==    by 0x108A50A: _efree (zend_alloc.c:2444)
==18338==    by 0x1173D12: _str_dtor (zend_string.c:50)
==18338==    by 0x112A9A8: zend_hash_destroy (zend_hash.c:1236)
==18338==    by 0x1174E88: zend_interned_strings_deactivate (zend_string.c:205)
==18338==    by 0xFE5D30: php_request_shutdown (main.c:1925)
==18338==    by 0x137EE1F: main (phpdbg.c:2098)
==18338==  Block was alloc'd at
==18338==    at 0x4C291FA: malloc (vg_replace_malloc.c:298)
==18338==    by 0x108BA70: __zend_malloc (zend_alloc.c:2829)
==18338==    by 0x108A1F0: _emalloc (zend_alloc.c:2429)
==18338==    by 0x1053358: zend_string_alloc (zend_string.h:134)
==18338==    by 0x1053358: zend_string_init (zend_string.h:170)
==18338==    by 0x1053358: lex_scan (zend_language_scanner.l:1869)
==18338==    by 0x109409C: zendlex (zend_compile.c:1721)
==18338==    by 0x1039F35: zendparse (zend_language_parser.c:4914)
==18338==    by 0x10457D9: zend_compile (zend_language_scanner.l:585)
==18338==    by 0x1045BBD: compile_file (zend_language_scanner.l:635)
==18338==    by 0xB7DDC1: phar_compile_file (phar.c:3317)
==18338==    by 0x13A8C89: phpdbg_compile_file (phpdbg_list.c:274)
==18338==    by 0x13A91C9: phpdbg_init_compile_file (phpdbg_list.c:317)
==18338==    by 0x138C0B0: phpdbg_compile (phpdbg_prompt.c:600)
==18338== 

 

Generated at Mon, 08 Oct 2018 02:05:35 +0000 (10 days ago)

Copyright © 2005-2018 The PHP Group
All rights reserved.