Segmentation fault in v4.3.4

php.internals

Jean-Pierre Arneodo

22 years ago
Hi, I've a seg fault with 4.3.4 To find where I configure with --enable-debug Now no seg fault but the cli print something. How to investigate more ? JP [Tue Nov 25 22:11:24 2003] Script: './wsp_shell_instrument_synchronize.php' --------------------------------------- /home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c(291) : Block 0x085BC788 status: /home/jpa/dev/php-4.3.4/Zend/zend_variables.c(44) : Actual location (location was relayed) Beginning: OK (allocated on /home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) End: Overflown (magic=0x2A8FCC87 instead of 0x2A8FCC84) 1 byte(s) overflown --------------------------------------- [Tue Nov 25 22:16:25 2003] Script: './wsp_shell_instrument_synchronize.php' --------------------------------------- /home/jpa/dev/php-4.3.4/Zend/zend_execute.h(44) : Block 0x085BC788 status: Beginning: OK (allocated on /home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) End: Overflown (magic=0x2A8F0000 instead of 0x2A8FCC84) 2 byte(s) overflown --------------------------------------- [Tue Nov 25 22:16:25 2003] Script: './wsp_shell_instrument_synchronize.php' --------------------------------------- /home/jpa/dev/php-4.3.4/Zend/zend_execute.h(44) : Block 0x085BC788 status: Beginning: OK (allocated on /home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) End: Overflown (magic=0x2A8F0000 instead of 0x2A8FCC84) 2 byte(s) overflown --------------------------------------- [Tue Nov 25 22:16:25 2003] Script: './wsp_shell_instrument_synchronize.php' --------------------------------------- /home/jpa/dev/php-4.3.4/Zend/zend_execute.h(44) : Block 0x085BC788 status: Beginning: OK (allocated on /home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) End: Overflown (magic=0x2A8F0000 instead of 0x2A8FCC84) 2 byte(s) overflown --------------------------------------- [Tue Nov 25 22:16:25 2003] Script: './wsp_shell_instrument_synchronize.php' --------------------------------------- /home/jpa/dev/php-4.3.4/Zend/zend_execute.h(44) : Block 0x085BC788 status: Beginning: OK (allocated on /home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) End: Overflown (magic=0x2A8F0000 instead of 0x2A8FCC84) 2 byte(s) overflown --------------------------------------- [Tue Nov 25 22:16:25 2003] Script: './wsp_shell_instrument_synchronize.php' --------------------------------------- /home/jpa/dev/php-4.3.4/Zend/zend_execute.h(44) : Block 0x085BC788 status: Beginning: OK (allocated on /home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) End: Overflown (magic=0x2A8F0000 instead of 0x2A8FCC84) 2 byte(s) overflown --------------------------------------- [Tue Nov 25 22:16:25 2003] Script: './wsp_shell_instrument_synchronize.php' --------------------------------------- /home/jpa/dev/php-4.3.4/Zend/zend_execute.h(44) : Block 0x085BC788 status: Beginning: OK (allocated on /home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) End: Overflown (magic=0x2A8F0000 instead of 0x2A8FCC84) 2 byte(s) overflown ---------------------------------------

Andi Gutmans

22 years ago
Hi, We really need you to cut down this script to a minimum (10-20 lines) which reproduces the problem. Thanks, Andi At 10:38 PM 11/25/2003 +0100, Jean-Pierre Arneodo wrote:

Jean-Pierre Arneodo

22 years ago
The script uses 3 extensions a lot: - xml: EXPAT Version 1.95.6 - curl: libcurl/7.10.2 OpenSSL/0.9.6b zlib/1.1.4 - mysql: Client API version 4.0.15 (The MySQL server and lib on the host is a 4.0.16) 80 classes are involved, it is difficult to reduce the script to 20 lines. The segfault is data depending. it doesn't happen every time. My first idea was to rebuild the cli to have a core dump on segfault we can analyse. But with the --enable-debug configure flag, no segfault :-( but some traces. Any direction to investigate? JP # php -r 'print_r(get_loaded_extensions());' Array ( [0] => xml [1] => tokenizer [2] => sysvshm [3] => sysvsem [4] => standard [5] => sockets [6] => session [7] => posix [8] => pcre [9] => pcntl [10] => overload [11] => mysql [12] => imap [13] => gettext [14] => gd [15] => curl [16] => ctype [17] => bz2 [18] => zlib ) ----- Original Message ----- From: "Andi Gutmans" <andi@zend.com> To: "Jean-Pierre Arneodo" <jparneodo@yahoo.fr>; <internals@lists.php.net> Sent: Tuesday, November 25, 2003 11:05 PM Subject: Re: [PHP-DEV] Segmentation fault in v4.3.4
> Hi, > > We really need you to cut down this script to a minimum (10-20 lines)
which
> reproduces the problem. > > Thanks, > > Andi > > At 10:38 PM 11/25/2003 +0100, Jean-Pierre Arneodo wrote: > >Hi, > > > >I've a seg fault with 4.3.4 > > > >To find where I configure with --enable-debug > >Now no seg fault but the cli print something. > > > >How to investigate more ? > > > >JP > > > > > > > >[Tue Nov 25 22:11:24 2003] Script:
'./wsp_shell_instrument_synchronize.php'
> >--------------------------------------- > >/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c(291) : Block 0x085BC788 > >status: > >/home/jpa/dev/php-4.3.4/Zend/zend_variables.c(44) : Actual location > >(location was relayed) > >Beginning: OK (allocated on > >/home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) > > End: Overflown (magic=0x2A8FCC87 instead of 0x2A8FCC84) > > 1 byte(s) overflown > >--------------------------------------- > >[Tue Nov 25 22:16:25 2003] Script:
'./wsp_shell_instrument_synchronize.php'
> >--------------------------------------- > >/home/jpa/dev/php-4.3.4/Zend/zend_execute.h(44) : Block 0x085BC788
status:
> >Beginning: OK (allocated on > >/home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) > > End: Overflown (magic=0x2A8F0000 instead of 0x2A8FCC84) > > 2 byte(s) overflown > >--------------------------------------- > >[Tue Nov 25 22:16:25 2003] Script:
'./wsp_shell_instrument_synchronize.php'
> >--------------------------------------- > >/home/jpa/dev/php-4.3.4/Zend/zend_execute.h(44) : Block 0x085BC788
status:
> >Beginning: OK (allocated on > >/home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) > > End: Overflown (magic=0x2A8F0000 instead of 0x2A8FCC84) > > 2 byte(s) overflown > >--------------------------------------- > >[Tue Nov 25 22:16:25 2003] Script:
'./wsp_shell_instrument_synchronize.php'
> >--------------------------------------- > >/home/jpa/dev/php-4.3.4/Zend/zend_execute.h(44) : Block 0x085BC788
status:
> >Beginning: OK (allocated on > >/home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) > > End: Overflown (magic=0x2A8F0000 instead of 0x2A8FCC84) > > 2 byte(s) overflown > >--------------------------------------- > >[Tue Nov 25 22:16:25 2003] Script:
'./wsp_shell_instrument_synchronize.php'
> >--------------------------------------- > >/home/jpa/dev/php-4.3.4/Zend/zend_execute.h(44) : Block 0x085BC788
status:
> >Beginning: OK (allocated on > >/home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) > > End: Overflown (magic=0x2A8F0000 instead of 0x2A8FCC84) > > 2 byte(s) overflown > >--------------------------------------- > >[Tue Nov 25 22:16:25 2003] Script:
'./wsp_shell_instrument_synchronize.php'
> >--------------------------------------- > >/home/jpa/dev/php-4.3.4/Zend/zend_execute.h(44) : Block 0x085BC788
status:
> >Beginning: OK (allocated on > >/home/jpa/dev/php-4.3.4/Zend/zend_hash.c:1066, 10 bytes) > > End: Overflown (magic=0x2A8F0000 instead of 0x2A8FCC84) > > 2 byte(s) overflown > >--------------------------------------- > >[Tue Nov 25 22:16:25 2003] Script:
'./wsp_shell_instrument_synchronize.php'
> >--------------------------------------- > >/home/jpa/dev/php-4.3.4/Zend/zend_execute.h(44) : Block 0x085BC788
status:

Derick Rethans

22 years ago
On Wed, 26 Nov 2003, Jean-Pierre Arneodo wrote:
> The script uses 3 extensions a lot: > - xml: EXPAT Version 1.95.6 > - curl: libcurl/7.10.2 OpenSSL/0.9.6b zlib/1.1.4 > - mysql: Client API version 4.0.15 (The MySQL server and lib on the host > is a 4.0.16) > > 80 classes are involved, it is difficult to reduce the script to 20 lines. > The segfault is data depending. it doesn't happen every time. > > My first idea was to rebuild the cli to have a core dump on segfault we can > analyse. > But with the --enable-debug configure flag, no segfault :-( > but some traces. > > Any direction to investigate?
Have a look at the valgrind tool. Use it on a debug build of PHP like this: valgrind php <yourscript> it should spit out memory problems then. Derick

Jean-Pierre Arneodo

22 years ago
Here the result of valgrind, thanks to Derick! Now gurus can analyse the result. Something wrong in implode() function? Jean-Pierre #!/usr/local/bin/php -c/usr/local/php/etc/php_cli.ini <?php $a= array ( 'XXXXX_XXXX' => 'ZZZZ DDD2 17 C', 'XXXXXX_1' => '0.00', 'XXXXXXX_1' => '0.00', 'BBB' => '0.00', 'AAA' => '0.00', 'YYY_YYYYY' => '18.06', 'AAAAA_1' => '0', 'SSSSSS_PPP' => '17', 'PPPPPPPPPP' => 'C-AM', 'EEEEE_DATE' => '30 DEC 2003', 'TTTTTT_T' => ':', 'RRRRR_DATE' => '-', 'WWWDATE' => -1, 'STAMP' => '- :', ); $xml=array(); for($i=0;$i<150;$i++){ $xml['ZZZZ6000R.Q'.$i]=$a; } $xxa=array_keys($xml); echo ' BEFORE ';flush(); $xxi=implode(',',$xxa); echo ' AFTER ';flush(); ?> shell> valgrind -v --leak-check=yes php bug_php.php --ug 434 ==17820== Memcheck, a.k.a. Valgrind, a memory error detector for x86-linux. ==17820== Copyright (C) 2002-2003, and GNU GPL'd, by Julian Seward. ==17820== Using valgrind-2.0.0, a program supervision framework for x86-linux. ==17820== Copyright (C) 2000-2003, and GNU GPL'd, by Julian Seward. ==17820== Command line: ==17820== php ==17820== bug_php.php ==17820== --ug ==17820== 434 ==17820== Startup, with flags: ==17820== --suppressions=/usr/local/lib/valgrind/default.supp ==17820== -v ==17820== --leak-check=yes ==17820== Reading syms from /usr/local/bin/php ==17820== Reading syms from /lib/ld-2.2.4.so ==17820== Reading syms from /usr/local/lib/valgrind/vgskin_memcheck.so ==17820== Reading syms from /usr/local/lib/valgrind/valgrind.so ==17820== Reading syms from /lib/libcrypt-2.2.4.so ==17820== Reading syms from /lib/libpam.so.0.75 ==17820== object doesn't have any debug info ==17820== Reading syms from /usr/lib/libpng.so.2.1.0.14 ==17820== object doesn't have a symbol table ==17820== object doesn't have any debug info ==17820== Reading syms from /usr/lib/libz.so.1.1.4 ==17820== object doesn't have any debug info ==17820== Reading syms from /lib/libdl-2.2.4.so ==17820== Reading syms from /usr/lib/libbz2.so.1.0.0 ==17820== object doesn't have any debug info ==17820== Reading syms from /lib/libresolv-2.2.4.so ==17820== Reading syms from /lib/i686/libm-2.2.4.so ==17820== Reading syms from /lib/libnsl-2.2.4.so ==17820== Reading syms from /usr/local/lib/libcurl.so.2.0.2 ==17820== Reading syms from /lib/libssl.so.0.9.6b ==17820== object doesn't have any debug info ==17820== Reading syms from /lib/libcrypto.so.0.9.6b ==17820== object doesn't have any debug info ==17820== Reading syms from /lib/i686/libc-2.2.4.so ==17820== Reading suppressions file: /usr/local/lib/valgrind/default.supp ==17820== Estimated CPU clock rate is 1615 MHz ==17820== ==17820== Reading syms from /lib/libnss_files-2.2.4.so BEFORE ==17820== Invalid read of size 2 ==17820== at 0x8186883: _zval_ptr_dtor (/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c:289) ==17820== by 0x81A416F: zend_ptr_stack_clear_multiple (/home/jpa/dev/php-4.3.4/Zend/zend_execute.h:96) ==17820== by 0x81A1326: execute (/home/jpa/dev/php-4.3.4/Zend/zend_execute.c:1695) ==17820== by 0x8190A3D: zend_execute_scripts (/home/jpa/dev/php-4.3.4/Zend/zend.c:884) ==17820== Address 0x4263EBA2 is 46 bytes inside a block of size 56 free'd ==17820== at 0x4002BE5B: free (vg_replace_malloc.c:231) ==17820== by 0x817F43E: _efree (/home/jpa/dev/php-4.3.4/Zend/zend_alloc.c:265) ==17820== by 0x8187D4E: safe_free_zval_ptr (/home/jpa/dev/php-4.3.4/Zend/zend_execute.h:44) ==17820== by 0x81868B9: _zval_ptr_dtor (/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c:292) ==17820== ==17820== Invalid read of size 2 ==17820== at 0x818688C: _zval_ptr_dtor (/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c:290) ==17820== by 0x81A416F: zend_ptr_stack_clear_multiple (/home/jpa/dev/php-4.3.4/Zend/zend_execute.h:96) ==17820== by 0x81A1326: execute (/home/jpa/dev/php-4.3.4/Zend/zend_execute.c:1695) ==17820== by 0x8190A3D: zend_execute_scripts (/home/jpa/dev/php-4.3.4/Zend/zend.c:884) ==17820== Address 0x4263EBA2 is 46 bytes inside a block of size 56 free'd ==17820== at 0x4002BE5B: free (vg_replace_malloc.c:231) ==17820== by 0x817F43E: _efree (/home/jpa/dev/php-4.3.4/Zend/zend_alloc.c:265) ==17820== by 0x8187D4E: safe_free_zval_ptr (/home/jpa/dev/php-4.3.4/Zend/zend_execute.h:44) ==17820== by 0x81868B9: _zval_ptr_dtor (/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c:292) ==17820== ==17820== Invalid read of size 2 ==17820== at 0x81868C5: _zval_ptr_dtor (/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c:293) ==17820== by 0x81A416F: zend_ptr_stack_clear_multiple (/home/jpa/dev/php-4.3.4/Zend/zend_execute.h:96) ==17820== by 0x81A1326: execute (/home/jpa/dev/php-4.3.4/Zend/zend_execute.c:1695) ==17820== by 0x8190A3D: zend_execute_scripts (/home/jpa/dev/php-4.3.4/Zend/zend.c:884) ==17820== Address 0x4263EBA2 is 46 bytes inside a block of size 56 free'd ==17820== at 0x4002BE5B: free (vg_replace_malloc.c:231) ==17820== by 0x817F43E: _efree (/home/jpa/dev/php-4.3.4/Zend/zend_alloc.c:265) ==17820== by 0x8187D4E: safe_free_zval_ptr (/home/jpa/dev/php-4.3.4/Zend/zend_execute.h:44) ==17820== by 0x81868B9: _zval_ptr_dtor (/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c:292) AFTER ==17820== ==17820== ERROR SUMMARY: 4 errors from 3 contexts (suppressed: 3 from 1) ==17820== ==17820== 1 errors in context 1 of 3: ==17820== Invalid read of size 2 ==17820== at 0x81868C5: _zval_ptr_dtor (/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c:293) ==17820== by 0x81A416F: zend_ptr_stack_clear_multiple (/home/jpa/dev/php-4.3.4/Zend/zend_execute.h:96) ==17820== by 0x81A1326: execute (/home/jpa/dev/php-4.3.4/Zend/zend_execute.c:1695) ==17820== by 0x8190A3D: zend_execute_scripts (/home/jpa/dev/php-4.3.4/Zend/zend.c:884) ==17820== Address 0x4263EBA2 is 46 bytes inside a block of size 56 free'd ==17820== at 0x4002BE5B: free (vg_replace_malloc.c:231) ==17820== by 0x817F43E: _efree (/home/jpa/dev/php-4.3.4/Zend/zend_alloc.c:265) ==17820== by 0x8187D4E: safe_free_zval_ptr (/home/jpa/dev/php-4.3.4/Zend/zend_execute.h:44) ==17820== by 0x81868B9: _zval_ptr_dtor (/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c:292) ==17820== ==17820== 1 errors in context 2 of 3: ==17820== Invalid read of size 2 ==17820== at 0x818688C: _zval_ptr_dtor (/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c:290) ==17820== by 0x81A416F: zend_ptr_stack_clear_multiple (/home/jpa/dev/php-4.3.4/Zend/zend_execute.h:96) ==17820== by 0x81A1326: execute (/home/jpa/dev/php-4.3.4/Zend/zend_execute.c:1695) ==17820== by 0x8190A3D: zend_execute_scripts (/home/jpa/dev/php-4.3.4/Zend/zend.c:884) ==17820== Address 0x4263EBA2 is 46 bytes inside a block of size 56 free'd ==17820== at 0x4002BE5B: free (vg_replace_malloc.c:231) ==17820== by 0x817F43E: _efree (/home/jpa/dev/php-4.3.4/Zend/zend_alloc.c:265) ==17820== by 0x8187D4E: safe_free_zval_ptr (/home/jpa/dev/php-4.3.4/Zend/zend_execute.h:44) ==17820== by 0x81868B9: _zval_ptr_dtor (/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c:292) ==17820== ==17820== 2 errors in context 3 of 3: ==17820== Invalid read of size 2 ==17820== at 0x8186883: _zval_ptr_dtor (/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c:289) ==17820== by 0x81A416F: zend_ptr_stack_clear_multiple (/home/jpa/dev/php-4.3.4/Zend/zend_execute.h:96) ==17820== by 0x81A1326: execute (/home/jpa/dev/php-4.3.4/Zend/zend_execute.c:1695) ==17820== by 0x8190A3D: zend_execute_scripts (/home/jpa/dev/php-4.3.4/Zend/zend.c:884) ==17820== Address 0x4263EBA2 is 46 bytes inside a block of size 56 free'd ==17820== at 0x4002BE5B: free (vg_replace_malloc.c:231) ==17820== by 0x817F43E: _efree (/home/jpa/dev/php-4.3.4/Zend/zend_alloc.c:265) ==17820== by 0x8187D4E: safe_free_zval_ptr (/home/jpa/dev/php-4.3.4/Zend/zend_execute.h:44) ==17820== by 0x81868B9: _zval_ptr_dtor (/home/jpa/dev/php-4.3.4/Zend/zend_execute_API.c:292) --17820-- --17820-- supp: 3 _dl_relocate_object/libc-2.2.4.so/_dl_catch_error(Cond) ==17820== ==17820== IN SUMMARY: 4 errors from 3 contexts (suppressed: 3 from 1) ==17820== ==17820== malloc/free: in use at exit: 924 bytes in 7 blocks. ==17820== malloc/free: 17447 allocs, 17440 frees, 3337750 bytes allocated. ==17820== ==17820== searching for pointers to 7 not-freed blocks. ==17820== checked 8276972 bytes. ==17820== ==17820== LEAK SUMMARY: ==17820== definitely lost: 0 bytes in 0 blocks. ==17820== possibly lost: 0 bytes in 0 blocks. ==17820== still reachable: 924 bytes in 7 blocks. ==17820== suppressed: 0 bytes in 0 blocks. ==17820== Reachable blocks (those to which a pointer was found) are not shown. ==17820== To see them, rerun with: --show-reachable=yes ==17820== --17820-- TT/TC: 0 tc sectors discarded. --17820-- 9118 chainings, 0 unchainings. --17820-- translate: new 12574 (211072 -> 2966498; ratio 140:10) --17820-- discard 0 (0 -> 0; ratio 0:10). --17820-- dispatch: 6850000 jumps (bb entries), of which 810191 (11%) were unchained. --17820-- 139/52227 major/minor sched events. 17402 tt_fast misses. --17820-- reg-alloc: 2068 t-req-spill, 558773+9763 orig+spill uis, 63291 total-reg-r. --17820-- sanity: 140 cheap, 6 expensive checks. --17820-- ccalls: 72861 C calls, 62% saves+restores avoided (270194 bytes) --17820-- 95773 args, avg 0.89 setup instrs each (20064 bytes) --17820-- 0% clear the stack (218583 bytes) --17820-- 21133 retvals, 30% of reg-reg movs avoided (12658 bytes) ----- Original Message ----- From: "Derick Rethans" <derick@php.net> To: "Jean-Pierre Arneodo" <jparneodo@yahoo.fr> Cc: <internals@lists.php.net>; "Andi Gutmans" <andi@zend.com> Sent: Wednesday, November 26, 2003 12:27 PM Subject: Re: [PHP-DEV] Segmentation fault in v4.3.4
> On Wed, 26 Nov 2003, Jean-Pierre Arneodo wrote: > > > The script uses 3 extensions a lot: > > - xml: EXPAT Version 1.95.6 > > - curl: libcurl/7.10.2 OpenSSL/0.9.6b zlib/1.1.4 > > - mysql: Client API version 4.0.15 (The MySQL server and lib on the
host
> > is a 4.0.16) > > > > 80 classes are involved, it is difficult to reduce the script to 20
lines.
> > The segfault is data depending. it doesn't happen every time. > > > > My first idea was to rebuild the cli to have a core dump on segfault we
can

Derick Rethans

22 years ago
On Wed, 26 Nov 2003, Jean-Pierre Arneodo wrote:
> Here the result of valgrind, thanks to Derick! > Now gurus can analyse the result.
I could reproduce this with 4.3dev, but not with PHP 5. Derick

Ilia A.

22 years ago
This problem is now fixed, thank you for reporting it. Ilia

Jean-Pierre Arneodo

22 years ago
----- Original Message ----- From: "Ilia Alshanetsky" <ilia@prohost.org> To: "Jean-Pierre Arneodo" <jparneodo@yahoo.fr>; <internals@lists.php.net> Sent: Thursday, November 27, 2003 2:18 AM Subject: Re: [PHP-DEV] Segmentation fault in v4.3.4
> This problem is now fixed, thank you for reporting it. > > Ilia
OK, it works better with php4-STABLE-200311270830 But, Valgrind reported others similar problem. At the beginning of the log, it's an https call through Curl. Look at the end for zend related reports. The process die in the exit() function. Jean-Pierre ==1239== Memcheck, a.k.a. Valgrind, a memory error detector for x86-linux. ==1239== Copyright (C) 2002-2003, and GNU GPL'd, by Julian Seward. ==1239== Using valgrind-2.0.0, a program supervision framework for x86-linux. ==1239== Copyright (C) 2000-2003, and GNU GPL'd, by Julian Seward. ==1239== Estimated CPU clock rate is 1615 MHz ==1239== For more details, rerun with: -v ==1239== ==1239== Syscall param write(buf) contains uninitialised or unaddressable byte(s) ==1239== at 0x404FAFB4: __libc_write (in /lib/i686/libc-2.2.4.so) ==1239== by 0x403A9D50: BIO_write (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033EDEB: ssl3_write_pending (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033EAA1: ssl3_write_bytes (in /lib/libssl.so.0.9.6b) ==1239== Address 0x47C0989B is 15 bytes inside a block of size 18437 alloc'd ==1239== at 0x4002BB60: malloc (vg_replace_malloc.c:153) ==1239== by 0x4037BFAC: CRYPTO_malloc (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40340481: ssl3_setup_buffers (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339ACD: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4039C105: RSA_padding_add_PKCS1_type_2 (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399A41: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4039B3E5: RSA_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033B959: ssl3_send_client_key_exchange (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40393DA7: BN_bin2bn (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399AD1: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4039B3E5: RSA_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033B959: ssl3_send_client_key_exchange (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40393E98: BN_ucmp (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403928F4: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4039B3E5: RSA_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x403928FA: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4039B3E5: RSA_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033B959: ssl3_send_client_key_exchange (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40394532: BN_mul (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398992: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392947: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398B50: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392947: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398B59: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392947: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398BBA: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392947: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40393E98: BN_ucmp (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398C94: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392947: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398C9A: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392947: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40394532: BN_mul (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398992: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392BC3: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398B50: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392BC3: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398B59: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392BC3: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398BBA: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392BC3: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40393E98: BN_ucmp (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398C94: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392BC3: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398C9A: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392BC3: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4039719C: BN_sqr (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4039897A: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C2F: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398B50: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C2F: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398B59: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C2F: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398BBA: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C2F: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40393E98: BN_ucmp (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398C94: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C2F: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398C9A: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C2F: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40391A75: BN_usub (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398CAC: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C2F: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40391AB1: BN_usub (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398CAC: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C2F: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40391B58: BN_usub (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398CAC: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C2F: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4039719C: BN_sqr (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4039897A: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392B77: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398B50: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392B77: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398B59: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392B77: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398BBA: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392B77: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40393E98: BN_ucmp (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398C94: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392B77: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398C9A: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392B77: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40391A75: BN_usub (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398CAC: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392B77: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40391AB1: BN_usub (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398CAC: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392B77: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40391B58: BN_usub (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398CAC: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403989A8: BN_mod_mul_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392B77: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398B50: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C59: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4039B3E5: RSA_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398BBA: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C59: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4039B3E5: RSA_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40393E98: BN_ucmp (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40398C94: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C59: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40398C9A: BN_from_montgomery (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40392C59: BN_mod_exp_mont (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399B9D: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4039B3E5: RSA_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x403935D7: BN_num_bits_word (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40393666: BN_num_bits (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399BAD: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4039B3E5: RSA_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x403935DE: BN_num_bits_word (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40393666: BN_num_bits (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399BAD: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4039B3E5: RSA_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Use of uninitialised value of size 4 ==1239== at 0x403935E3: BN_num_bits_word (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40393666: BN_num_bits (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399BAD: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4039B3E5: RSA_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x403935D7: BN_num_bits_word (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40393666: BN_num_bits (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40393DFC: BN_bn2bin (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399BCC: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x403935DE: BN_num_bits_word (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40393666: BN_num_bits (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40393DFC: BN_bn2bin (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399BCC: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Use of uninitialised value of size 4 ==1239== at 0x403935E3: BN_num_bits_word (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40393666: BN_num_bits (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40393DFC: BN_bn2bin (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x40399BCC: RSA_eay_public_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== ==1239== Use of uninitialised value of size 4 ==1239== at 0x4038D6E5: RC2_set_key (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B9609: rc2_init_key (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7F79: EVP_CipherInit (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033D7C8: ssl3_change_cipher_state (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Use of uninitialised value of size 4 ==1239== at 0x4038DDC7: RC2_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4038D8E3: RC2_cbc_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B9405: rc2_cbc_cipher (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DAAB: ssl3_enc (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Use of uninitialised value of size 4 ==1239== at 0x4038DDD3: RC2_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4038D8E3: RC2_cbc_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B9405: rc2_cbc_cipher (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DAAB: ssl3_enc (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Use of uninitialised value of size 4 ==1239== at 0x4038DDDB: RC2_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4038D8E3: RC2_cbc_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B9405: rc2_cbc_cipher (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DAAB: ssl3_enc (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Use of uninitialised value of size 4 ==1239== at 0x4038DDE7: RC2_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4038D8E3: RC2_cbc_encrypt (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B9405: rc2_cbc_cipher (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DAAB: ssl3_enc (in /lib/libssl.so.0.9.6b) ==1239== ==1239== More than 50 errors detected. Subsequent errors ==1239== will still be recorded, but in less detail than before. ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4033E7DD: ssl3_get_record (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033EFF3: ssl3_read_bytes (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FFAF: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Use of uninitialised value of size 4 ==1239== at 0x4033E7DD: ssl3_get_record (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033EFF3: ssl3_read_bytes (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FFAF: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4033E7E7: ssl3_get_record (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033EFF3: ssl3_read_bytes (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FFAF: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4033FFDA: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x4034437F: SSL_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40340005: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x4034437F: SSL_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4034008F: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x4034437F: SSL_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x403400C2: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x4034437F: SSL_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x403A982E: BUF_MEM_grow (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403400D3: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x403400D9: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x4034437F: SSL_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40340130: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x4034437F: SSL_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4033F0A5: ssl3_read_bytes (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340158: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4033F0C2: ssl3_read_bytes (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340158: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40024679: memcpy (mac_replace_strmem.c:60) ==1239== by 0x4033F0D4: ssl3_read_bytes (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340158: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x400246A7: memcpy (mac_replace_strmem.c:251) ==1239== by 0x4033F0D4: ssl3_read_bytes (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340158: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40024799: memcpy (mac_replace_strmem.c:270) ==1239== by 0x4033F0D4: ssl3_read_bytes (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340158: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x400247BA: memcpy (mac_replace_strmem.c:276) ==1239== by 0x4033F0D4: ssl3_read_bytes (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340158: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x400247CA: memcpy (mac_replace_strmem.c:279) ==1239== by 0x4033F0D4: ssl3_read_bytes (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340158: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4033F0EF: ssl3_read_bytes (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340158: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4034015E: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x4034437F: SSL_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4034016A: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033FA3C: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x4034437F: SSL_connect (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4037E500: MD5_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBAC: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4037E514: MD5_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBAC: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4037E553: MD5_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBAC: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4037E750: MD5_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBAC: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4037E78E: MD5_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBAC: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4037E7B6: MD5_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBAC: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4037E7ED: MD5_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBAC: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4037E7FA: MD5_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBAC: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4037E800: MD5_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBAC: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4037E806: MD5_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBAC: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x403829C0: SHA1_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBC2: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x403829D4: SHA1_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBC2: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40382A13: SHA1_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBC2: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40382C18: SHA1_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBC2: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40382C50: SHA1_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBC2: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40382C78: SHA1_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBC2: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40382CAD: SHA1_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBC2: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40382CBA: SHA1_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBC2: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40382CC0: SHA1_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBC2: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x40382CC6: SHA1_Update (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x403B7CC9: EVP_DigestUpdate (in /lib/libcrypto.so.0.9.6b) ==1239== by 0x4033DBC2: ssl3_finish_mac (in /lib/libssl.so.0.9.6b) ==1239== by 0x40340182: ssl3_get_message (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4033FA91: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x4034437F: SSL_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x40319FA8: Curl_SSLConnect (ssluse.c:781) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4033FAB9: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x4034437F: SSL_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x40319FA8: Curl_SSLConnect (ssluse.c:781) ==1239== ==1239== Use of uninitialised value of size 4 ==1239== at 0x4033FAB9: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x4034437F: SSL_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x40319FA8: Curl_SSLConnect (ssluse.c:781) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4033FAC3: ssl3_get_finished (in /lib/libssl.so.0.9.6b) ==1239== by 0x40339E52: ssl3_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x4034437F: SSL_connect (in /lib/libssl.so.0.9.6b) ==1239== by 0x40319FA8: Curl_SSLConnect (ssluse.c:781) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x4033EFDD: ssl3_read_bytes (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033CFDF: ssl3_read_internal (in /lib/libssl.so.0.9.6b) ==1239== by 0x4033D048: ssl3_read (in /lib/libssl.so.0.9.6b) ==1239== by 0x40344415: SSL_read (in /lib/libssl.so.0.9.6b) ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x81806F6: _mem_block_check (/home/jpa/dev/php4-STABLE-200311270830/Zend/zend_alloc.c:677) ==1239== by 0x817F8C2: _efree (/home/jpa/dev/php4-STABLE-200311270830/Zend/zend_alloc.c:243) ==1239== by 0x81882CA: safe_free_zval_ptr (/home/jpa/dev/php4-STABLE-200311270830/Zend/zend_execute.h:44) ==1239== by 0x8186E35: _zval_ptr_dtor (/home/jpa/dev/php4-STABLE-200311270830/Zend/zend_execute_API.c:292) ==1239== ==1239== Invalid read of size 2 ==1239== at 0x81A475A: zend_pzval_lock_func (/home/jpa/dev/php4-STABLE-200311270830/Zend/zend_execute_locks.h:8) ==1239== by 0x819F6BB: execute (/home/jpa/dev/php4-STABLE-200311270830/Zend/zend_execute.c:1252) ==1239== by 0x81A15E5: execute (/home/jpa/dev/php4-STABLE-200311270830/Zend/zend_execute.c:1660) ==1239== by 0x81A15E5: execute (/home/jpa/dev/php4-STABLE-200311270830/Zend/zend_execute.c:1660) ==1239== Address 0x4F63A472 is not stack'd, malloc'd or free'd ==1239== ==1239== Conditional jump or move depends on uninitialised value(s) ==1239== at 0x811D9E4: php_char_to_str (/home/jpa/dev/php4-STABLE-200311270830/ext/standard/string.c:2528) ==1239== by 0x811E0C2: php_str_replace_in_subject (/home/jpa/dev/php4-STABLE-200311270830/ext/standard/string.c:2680) ==1239== by 0x811E7CC: zif_str_replace (/home/jpa/dev/php4-STABLE-200311270830/ext/standard/string.c:2757) ==1239== by 0x81A13FA: execute (/home/jpa/dev/php4-STABLE-200311270830/Zend/zend_execute.c:1616)

Marcus Börger

22 years ago
Hello Jean-Pierre, Thursday, November 27, 2003, 1:27:25 PM, you wrote:
> ----- Original Message ----- > From: "Ilia Alshanetsky" <ilia@prohost.org> > To: "Jean-Pierre Arneodo" <jparneodo@yahoo.fr>; <internals@lists.php.net> > Sent: Thursday, November 27, 2003 2:18 AM > Subject: Re: [PHP-DEV] Segmentation fault in v4.3.4
>> This problem is now fixed, thank you for reporting it. >> >> Ilia
> OK, it works better with php4-STABLE-200311270830
> But, Valgrind reported others similar problem. > At the beginning of the log, it's an https call through Curl. > Look at the end for zend related reports.
> The process die in the exit() function.
> Jean-Pierre
> ==1239== Memcheck, a.k.a. Valgrind, a memory error detector for x86-linux. > ==1239== Copyright (C) 2002-2003, and GNU GPL'd, by Julian Seward. > ==1239== Using valgrind-2.0.0, a program supervision framework for > x86-linux.
[...] According to the valgrind output most errors are caused by the crypt library which is not our problem and about which we cannot do anything than hoping for a fix as we do for a long time now. The end of your output of course is interesting.
-- Best regards, Marcus mailto:helly@php.net

Ilia A.

22 years ago
Could you please supply the PHP script used? Ilia

Jean-Pierre Arneodo

22 years ago
Here a script parsed through valgrind. It's related to the gettext extension. It is not the segfault I search, so I continue to search zend related bug. Jean-Pierre <?php // Prerequisite: // 1. Copy some .mo file from your system to /tmp/fr_FR/LC_MESSAGES/run.mo // 2. ./configure --with-gettext GetText Support: enabled setlocale(LC_MESSAGES,'fr_FR'); bindtextdomain('run','/tmp'); textdomain('run'); echo "\n"; echo gettext('AZERTY'); // The file run.mo must exists but the string not echo "\n"; ?> ==13278== Memcheck, a.k.a. Valgrind, a memory error detector for x86-linux. ==13278== Copyright (C) 2002-2003, and GNU GPL'd, by Julian Seward. ==13278== Using valgrind-2.0.0, a program supervision framework for x86-linux. ==13278== Copyright (C) 2000-2003, and GNU GPL'd, by Julian Seward. ==13278== Command line: ==13278== php ==13278== bug_php_4.php ==13278== Startup, with flags: ==13278== --suppressions=/usr/local/lib/valgrind/default.supp ==13278== -v ==13278== Reading syms from /usr/local/bin/php ==13278== Reading syms from /lib/ld-2.2.4.so ==13278== Reading syms from /usr/local/lib/valgrind/vgskin_memcheck.so ==13278== Reading syms from /usr/local/lib/valgrind/valgrind.so ==13278== Reading syms from /lib/libcrypt-2.2.4.so ==13278== Reading syms from /lib/libpam.so.0.75 ==13278== object doesn't have any debug info ==13278== Reading syms from /usr/lib/libpng.so.2.1.0.14 ==13278== object doesn't have a symbol table ==13278== object doesn't have any debug info ==13278== Reading syms from /usr/lib/libz.so.1.1.4 ==13278== object doesn't have any debug info ==13278== Reading syms from /lib/libdl-2.2.4.so ==13278== Reading syms from /usr/lib/libbz2.so.1.0.0 ==13278== object doesn't have any debug info ==13278== Reading syms from /lib/libresolv-2.2.4.so ==13278== Reading syms from /lib/i686/libm-2.2.4.so ==13278== Reading syms from /lib/libnsl-2.2.4.so ==13278== Reading syms from /usr/local/lib/libcurl.so.2.0.2 ==13278== Reading syms from /lib/libssl.so.0.9.6b ==13278== object doesn't have any debug info ==13278== Reading syms from /lib/libcrypto.so.0.9.6b ==13278== object doesn't have any debug info ==13278== Reading syms from /lib/i686/libc-2.2.4.so ==13278== Reading suppressions file: /usr/local/lib/valgrind/default.supp ==13278== Estimated CPU clock rate is 1615 MHz ==13278== ==13278== Reading syms from /lib/libnss_files-2.2.4.so ==13278== Reading syms from /usr/lib/gconv/ISO8859-1.so ==13278== object doesn't have a symbol table ==13278== object doesn't have any debug info ==13278== Reading syms from /usr/lib/gconv/ISO8859-15.so ==13278== object doesn't have a symbol table ==13278== object doesn't have any debug info AZERTY ==13278== Invalid read of size 4 ==13278== at 0x4050673F: trecurse (tsearch.c:600) ==13278== by 0x4050669D: __twalk (tsearch.c:609) ==13278== by 0x4043F6AA: __gconv_release_shlib (gconv_dl.c:189) ==13278== by 0x40438729: __gconv_close_transform (gconv_db.c:196) ==13278== Address 0x426419F8 is 4 bytes inside a block of size 16 free'd ==13278== at 0x4002BE5B: free (vg_replace_malloc.c:231) ==13278== by 0x405067F1: tdestroy_recurse (tsearch.c:644) ==13278== by 0x40506709: __tdestroy (tsearch.c:641) ==13278== by 0x4043F754: free_mem (gconv_dl.c:209) ==13278== ==13278== Invalid read of size 4 ==13278== at 0x40506798: trecurse (tsearch.c:612) ==13278== by 0x4050669D: __twalk (tsearch.c:609) ==13278== by 0x4043F6AA: __gconv_release_shlib (gconv_dl.c:189) ==13278== by 0x40438729: __gconv_close_transform (gconv_db.c:196) ==13278== Address 0x426419FC is 8 bytes inside a block of size 16 free'd ==13278== at 0x4002BE5B: free (vg_replace_malloc.c:231) ==13278== by 0x405067F1: tdestroy_recurse (tsearch.c:644) ==13278== by 0x40506709: __tdestroy (tsearch.c:641) ==13278== by 0x4043F754: free_mem (gconv_dl.c:209) ==13278== ==13278== ERROR SUMMARY: 4 errors from 2 contexts (suppressed: 32 from 4) ==13278== ==13278== 2 errors in context 1 of 2: ==13278== Invalid read of size 4 ==13278== at 0x40506798: trecurse (tsearch.c:612) ==13278== by 0x4050669D: __twalk (tsearch.c:609) ==13278== by 0x4043F6AA: __gconv_release_shlib (gconv_dl.c:189) ==13278== by 0x40438729: __gconv_close_transform (gconv_db.c:196) ==13278== Address 0x426419FC is 8 bytes inside a block of size 16 free'd ==13278== at 0x4002BE5B: free (vg_replace_malloc.c:231) ==13278== by 0x405067F1: tdestroy_recurse (tsearch.c:644) ==13278== by 0x40506709: __tdestroy (tsearch.c:641) ==13278== by 0x4043F754: free_mem (gconv_dl.c:209) ==13278== ==13278== 2 errors in context 2 of 2: ==13278== Invalid read of size 4 ==13278== at 0x4050673F: trecurse (tsearch.c:600) ==13278== by 0x4050669D: __twalk (tsearch.c:609) ==13278== by 0x4043F6AA: __gconv_release_shlib (gconv_dl.c:189) ==13278== by 0x40438729: __gconv_close_transform (gconv_db.c:196) ==13278== Address 0x426419F8 is 4 bytes inside a block of size 16 free'd ==13278== at 0x4002BE5B: free (vg_replace_malloc.c:231) ==13278== by 0x405067F1: tdestroy_recurse (tsearch.c:644) ==13278== by 0x40506709: __tdestroy (tsearch.c:641) ==13278== by 0x4043F754: free_mem (gconv_dl.c:209) --13278-- --13278-- supp: 9 _dl_relocate_object/libc-2.2.4.so/_dl_catch_error(Cond) --13278-- supp: 9 do_release_shlib/__twalk(Addr4) --13278-- supp: 8 __twalk/*(Addr4) --13278-- supp: 6 do_release_shlib/trecurse(Addr4) ==13278== ==13278== IN SUMMARY: 4 errors from 2 contexts (suppressed: 32 from 4) ==13278== ==13278== malloc/free: in use at exit: 2375 bytes in 17 blocks. ==13278== malloc/free: 16391 allocs, 16374 frees, 3273452 bytes allocated. ==13278== --13278-- TT/TC: 0 tc sectors discarded. --13278-- 9775 chainings, 0 unchainings. --13278-- translate: new 13279 (220792 -> 3115845; ratio 141:10) --13278-- discard 0 (0 -> 0; ratio 0:10). --13278-- dispatch: 6550000 jumps (bb entries), of which 756986 (11%) were unchained. --13278-- 133/51027 major/minor sched events. 18263 tt_fast misses. --13278-- reg-alloc: 2220 t-req-spill, 587300+10728 orig+spill uis, 67066 total-reg-r. --13278-- sanity: 134 cheap, 6 expensive checks. --13278-- ccalls: 75352 C calls, 62% saves+restores avoided (278928 bytes) --13278-- 98970 args, avg 0.89 setup instrs each (20838 bytes) --13278-- 0% clear the stack (226056 bytes) --13278-- 22062 retvals, 30% of reg-reg movs avoided (13188 bytes) ----- Original Message ----- From: "Ilia Alshanetsky" <ilia@prohost.org> To: "Jean-Pierre Arneodo" <jparneodo@yahoo.fr>; <internals@lists.php.net> Sent: Thursday, November 27, 2003 4:39 PM Subject: Re: [PHP-DEV] Segmentation fault in php4-STABLE-200311270830

Ilia A.

22 years ago
On November 28, 2003 09:37 am, Jean-Pierre Arneodo wrote:
> Here a script parsed through valgrind. > It's related to the gettext extension. > It is not the segfault I search, so I continue to search zend related bug. > > Jean-Pierre
I can replicate the problem, however this is not a PHP issue since all of the issues appear to be inside gconv (iirc glibc iconv implementation). Ilia