Bug 637511 – Intermittent Seg Fault during DOMDocument clean up

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 637511 - Intermittent Seg Fault during DOMDocument clean up


Summary:	Intermittent Seg Fault during DOMDocument clean up


Status:	RESOLVED OBSOLETE

Product:	libxml2
Classification:	Platform
Component:	general
Version:	2.7.6
Hardware:	Other Linux

Importance:	Normal major
Target Milestone:	---
Assigned To:	Daniel Veillard
QA Contact:	libxml QA maintainers

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2010-12-18 05:25 UTC by chris.richard
Modified:	2021-07-05 13:22 UTC

See Also:
GNOME target:	---
GNOME version:	---

Description chris.richard 2010-12-18 05:25:36 UTC

libxml causes a seg fault *intermittently* after all PHP user code has
finished
running.

I'm using DOMFragment to parse chunks of XHTML and append them to a
DOMDocument
which gets output (via saveHTML) once it's completely assembled. The
output
completes successfully but at least half the time I get seg fault
related to the
clean up of the DOMDocument and no response is sent to the client.

Core Dump:

+ Trace 225170

#0 xmlDictOwns
from /usr/lib/libxml2.so.2
#1 xmlFreeNodeList
from /usr/lib/libxml2.so.2
#2 ??
from /usr/lib/libxml2.so.2
#3 xmlHashFree
from /usr/lib/libxml2.so.2
#4 xmlFreeDtd
from /usr/lib/libxml2.so.2
#5 xmlFreeDoc
from /usr/lib/libxml2.so.2
#6 php_libxml_decrement_doc_ref
from /usr/lib/apache2/modules/libphp5.so
#7 ??
from /usr/lib/apache2/modules/libphp5.so
#8 zend_objects_store_del_ref_by_handle_ex
from /usr/lib/apache2/modules/libphp5.so
#9 zend_objects_store_del_ref
from /usr/lib/apache2/modules/libphp5.so
#10 _zval_ptr_dtor
from /usr/lib/apache2/modules/libphp5.so
#11 zend_hash_destroy
from /usr/lib/apache2/modules/libphp5.so
#12 _zval_dtor_func
from /usr/lib/apache2/modules/libphp5.so
#13 _zval_ptr_dtor
from /usr/lib/apache2/modules/libphp5.so
#14 zend_hash_destroy
from /usr/lib/apache2/modules/libphp5.so
#15 zend_object_std_dtor
from /usr/lib/apache2/modules/libphp5.so
#16 zend_objects_free_object_storage
from /usr/lib/apache2/modules/libphp5.so
#17 zend_objects_store_del_ref_by_handle_ex
from /usr/lib/apache2/modules/libphp5.so
#18 zend_objects_store_del_ref
from /usr/lib/apache2/modules/libphp5.so
#19 _zval_ptr_dtor
from /usr/lib/apache2/modules/libphp5.so
#20 zend_hash_destroy
from /usr/lib/apache2/modules/libphp5.so
#21 _zval_dtor_func
from /usr/lib/apache2/modules/libphp5.so
#22 _zval_ptr_dtor
from /usr/lib/apache2/modules/libphp5.so
#23 zend_hash_destroy
from /usr/lib/apache2/modules/libphp5.so
#24 zend_object_std_dtor
from /usr/lib/apache2/modules/libphp5.so
#25 zend_objects_free_object_storage
from /usr/lib/apache2/modules/libphp5.so
#26 zend_objects_store_free_object_storage
from /usr/lib/apache2/modules/libphp5.so
#27 ??
from /usr/lib/apache2/modules/libphp5.so
#28 ??
from /usr/lib/apache2/modules/libphp5.so
#29 php_request_shutdown
from /usr/lib/apache2/modules/libphp5.so


Don't really know if this is a PHP issue or a libxml issue. The fact that half the time it works perfectly makes me think this is probably a bug but any help would be appreciated.

Comment 1 GNOME Infrastructure Team 2021-07-05 13:22:49 UTC

GNOME is going to shut down bugzilla.gnome.org in favor of gitlab.gnome.org.
As part of that, we are mass-closing older open tickets in bugzilla.gnome.org
which have not seen updates for a longer time (resources are unfortunately
quite limited so not every ticket can get handled).

If you can still reproduce the situation described in this ticket in a recent
and supported software version, then please follow
  https://wiki.gnome.org/GettingInTouch/BugReportingGuidelines
and create a new ticket at
  https://gitlab.gnome.org/GNOME/libxml2/-/issues/

Thank you for your understanding and your help.