[Bug 1219466] [NEW] segfault on uncaught exceptions with long message

[Yogu]

Public bug reported:

The following file causes a segmentation fault:

    <?php 
    throw new Exception(str_repeat('a', 916));

whereas the same statement with 915 characters shows the exception and
terminates gracefully.

The number of characters variies; in one of my applications, it chrashes
at 887 characters. Stack level does not seem to influence it.

If the exception is caught, the segfault does not occur.

Apache error log:

> [Sun Sep 01 16:16:04 2013] [error] [client 127.0.0.1] PHP Fatal error:  Uncaught exception 'Exception' with message 'aa...aaaa' in /.../test.php:3 in /.../test.php on line 3
> [Sun Sep 01 16:16:04 2013] [notice] child pid 12198 exit signal Segmentation fault (11), possible coredump in /etc/apache2

(ellipsis by me)

In /etc/apache2, there is no coredump. If you know a way to force the
coredump, please let me know.

Versions:
* Ubuntu 12.04.2 LTS
* Apache/2.2.22 (Ubuntu)
*PHP  5.3.10-1ubuntu3.7 with Suhosin-Patch (cli) (built: Jul 15 2013 18:05:44)
  Zend Engine v2.3.0, Copyright (c) 1998-2012 Zend Technologies
    with Xdebug v2.1.0, Copyright (c) 2002-2010, by Derick Rethans

apt-cache policy php5
php5:
  Installed: 5.3.10-1ubuntu3.7
  Candidate: 5.3.10-1ubuntu3.7
  Version table:
 *** 5.3.10-1ubuntu3.7 0
        500 http://de.archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 Packages
        100 /var/lib/dpkg/status
     5.3.10-1ubuntu3 0
        500 http://de.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages

** Affects: php5 (Ubuntu)
     Importance: Undecided
         Status: New

** Summary changed:

- segfault when throwing Exception with long message
+ segfault on uncaught exceptions with long message

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in Ubuntu.
https://bugs.launchpad.net/bugs/1219466

Title:
  segfault on uncaught exceptions with long message

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1219466/+subscriptions