Segmentation fault in ext/spl/spl_directory.c

Description

The following code:

<?php
$obj = new SplFileObject(__FILE__);
function test($function) {
try {
@$function();
} catch (Throwable) {
}
}
foreach (get_declared_classes() as $class) {
foreach (get_class_methods($class) as $method) {
test([$obj, $method]);
}
}

Resulted in this output:

/php-src/ext/spl/spl_directory.c:650:3: runtime error: member access within null pointer of type 'zend_string' (aka 'struct _zend_string')

PHP Version

nightly

Operating System

ubuntu 22.04

Smaller reproducible:

$obj = new SplFileObject(__FILE__);

$class = 'SensitiveParameterValue';

foreach (get_class_methods($class) as $method) {
    echo "Method: $method\n";
    try {
        $obj->$method();
    } catch (Throwable $e) {
        echo $e::class, ': ', $e->getMessage(), PHP_EOL;
    }
}

The issue seems to possibly be with get_class_methods() as if I set $method = '__debugInfo' explicitly it, it works.

Okay I figured out the issue:

$obj = new SplFileObject(__FILE__);

try {
    $obj->__construct();
} catch (Throwable $e) {
    echo $e::class, ': ', $e->getMessage(), PHP_EOL;
}
$obj->__debugInfo();

The constructor when it fails sets intern->u.file.open_mode = NULL; which causes the null deref afterwards.

Fix phpGH-16477 (Segmentation fault when calling __debugInfo() after …

Fix GH-16477 (Segmentation fault when calling __debugInfo() after fai…

Merge branch 'PHP-8.2' into PHP-8.3

Fix GH-16477 (Segmentation fault when calling __debugInfo() after fai…

Merge branch 'PHP-8.2' into PHP-8.3

Fix GH-16477 (Segmentation fault when calling __debugInfo() after fai…

Merge branch 'PHP-8.3' into PHP-8.4

Merge branch 'PHP-8.4'

Navigation Menu

Repository navigation

Segmentation fault in ext/spl/spl_directory.c #16477

Description

PHP Version

Operating System

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Segmentation fault in ext/spl/spl_directory.c #16477

Description

Description

PHP Version

Operating System

Activity

Girgias commented on Oct 17, 2024

Girgias commented on Oct 17, 2024

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions