Skip to content

Instantly share code, notes, and snippets.

@rybakit

rybakit/bootstrap.php Secret

Last active August 29, 2015 14:17
Show Gist options
  • Save rybakit/59a3c80e2813f05ad402 to your computer and use it in GitHub Desktop.
Save rybakit/59a3c80e2813f05ad402 to your computer and use it in GitHub Desktop.
Download ZIP
tarantool-php corruption
Raw
bootstrap.php
$tarantool = new Tarantool();
$tarantool->authenticate('tester', 'tester');
Raw
os
CentOS release 6.6 (Final)
Raw
output
*** glibc detected *** php: double free or corruption (out): 0x00007f627b67dfc0 ***
======= Backtrace: =========
/lib64/libc.so.6(+0x75e66)[0x7f6278918e66]
/lib64/libc.so.6(+0x789b3)[0x7f627891b9b3]
/usr/lib64/php/modules/tarantool.so(+0x7a99)[0x7f626ea57a99]
php(zend_objects_store_del_ref_by_handle_ex+0x28c)[0x60530c]
php(zend_objects_store_del_ref+0x13)[0x605333]
php(_zval_ptr_dtor+0x3a)[0x5cf4aa]
php[0x5e9f35]
php(zend_hash_reverse_apply+0x59)[0x5ea039]
php[0x5d0905]
php[0x5dd694]
php(php_request_shutdown+0x365)[0x57fd45]
php[0x6877df]
php[0x688ba8]
/lib64/libc.so.6(__libc_start_main+0xfd)[0x7f62788c1d5d]
php[0x422e89]
======= Memory map: ========
00400000-00740000 r-xp 00000000 08:02 6788 /usr/bin/php
00940000-009d3000 rw-p 00340000 08:02 6788 /usr/bin/php
009d3000-009ee000 rw-p 00000000 00:00 0
02368000-02516000 rw-p 00000000 00:00 0 [heap]
7f626e62b000-7f626e637000 r-xp 00000000 08:02 3052 /lib64/libnss_files-2.12.so
7f626e637000-7f626e837000 ---p 0000c000 08:02 3052 /lib64/libnss_files-2.12.so
7f626e837000-7f626e838000 r--p 0000c000 08:02 3052 /lib64/libnss_files-2.12.so
7f626e838000-7f626e839000 rw-p 0000d000 08:02 3052 /lib64/libnss_files-2.12.so
7f626e839000-7f626e84e000 r-xp 00000000 08:02 6752 /usr/lib64/php/modules/zip.so
7f626e84e000-7f626ea4e000 ---p 00015000 08:02 6752 /usr/lib64/php/modules/zip.so
7f626ea4e000-7f626ea50000 rw-p 00015000 08:02 6752 /usr/lib64/php/modules/zip.so
7f626ea50000-7f626ea63000 r-xp 00000000 08:02 9081 /usr/lib64/php/modules/tarantool.so
7f626ea63000-7f626ec63000 ---p 00013000 08:02 9081 /usr/lib64/php/modules/tarantool.so
7f626ec63000-7f626ec64000 rw-p 00013000 08:02 9081 /usr/lib64/php/modules/tarantool.so
7f626ec64000-7f626eca3000 r-xp 00000000 08:02 6751 /usr/lib64/php/modules/phar.so
7f626eca3000-7f626eea2000 ---p 0003f000 08:02 6751 /usr/lib64/php/modules/phar.so
7f626eea2000-7f626eea5000 rw-p 0003e000 08:02 6751 /usr/lib64/php/modules/phar.so
7f626eea5000-7f626eeaf000 r-xp 00000000 08:02 6750 /usr/lib64/php/modules/json.so
7f626eeaf000-7f626f0ae000 ---p 0000a000 08:02 6750 /usr/lib64/php/modules/json.so
7f626f0ae000-7f626f0af000 rw-p 00009000 08:02 6750 /usr/lib64/php/modules/json.so
7f626f0af000-7f626f105000 r-xp 00000000 08:02 3264 /usr/lib64/libgmp.so.3.5.0
7f626f105000-7f626f305000 ---p 00056000 08:02 3264 /usr/lib64/libgmp.so.3.5.0
7f626f305000-7f626f30a000 rw-p 00056000 08:02 3264 /usr/lib64/libgmp.so.3.5.0
7f626f30a000-7f626f314000 r-xp 00000000 08:02 6749 /usr/lib64/php/modules/gmp.so
7f626f314000-7f626f513000 ---p 0000a000 08:02 6749 /usr/lib64/php/modules/gmp.so
7f626f513000-7f626f515000 rw-p 00009000 08:02 6749 /usr/lib64/php/modules/gmp.so
7f626f515000-7f626f7a9000 r-xp 00000000 08:02 6748 /usr/lib64/php/modules/fileinfo.so
7f626f7a9000-7f626f9a8000 ---p 00294000 08:02 6748 /usr/lib64/php/modules/fileinfo.so
7f626f9a8000-7f626f9aa000 rw-p 00293000 08:02 6748 /usr/lib64/php/modules/fileinfo.so
7f626f9aa000-7f626f9c3000 r-xp 00000000 08:02 3389 /usr/lib64/libsasl2.so.2.0.23
7f626f9c3000-7f626fbc2000 ---p 00019000 08:02 3389 /usr/lib64/libsasl2.so.2.0.23
7f626fbc2000-7f626fbc3000 r--p 00018000 08:02 3389 /usr/lib64/libsasl2.so.2.0.23
7f626fbc3000-7f626fbc4000 rw-p 00019000 08:02 3389 /usr/lib64/libsasl2.so.2.0.23
7f626fbc4000-7f626fbd2000 r-xp 00000000 08:02 4620 /lib64/liblber-2.4.so.2.10.2
7f626fbd2000-7f626fdd1000 ---p 0000e000 08:02 4620 /lib64/liblber-2.4.so.2.10.2
7f626fdd1000-7f626fdd2000 r--p 0000d000 08:02 4620 /lib64/liblber-2.4.so.2.10.2
7f626fdd2000-7f626fdd3000 rw-p 0000e000 08:02 4620 /lib64/liblber-2.4.so.2.10.2
7f626fdd3000-7f626fdfa000 r-xp 00000000 08:02 4593 /usr/lib64/libssh2.so.1.0.1
7f626fdfa000-7f626fff9000 ---p 00027000 08:02 4593 /usr/lib64/libssh2.so.1.0.1
7f626fff9000-7f626fffa000 rw-p 00026000 08:02 4593 /usr/lib64/libssh2.so.1.0.1
7f626fffa000-7f626fffb000 rw-p 00000000 00:00 0
7f626fffb000-7f6270034000 r-xp 00000000 08:02 3137 /lib64/libnspr4.so
7f6270034000-7f6270234000 ---p 00039000 08:02 3137 /lib64/libnspr4.so
7f6270234000-7f6270235000 r--p 00039000 08:02 3137 /lib64/libnspr4.so
7f6270235000-7f6270237000 rw-p 0003a000 08:02 3137 /lib64/libnspr4.so
7f6270237000-7f6270239000 rw-p 00000000 00:00 0
7f6270239000-7f627023d000 r-xp 00000000 08:02 3138 /lib64/libplc4.so
7f627023d000-7f627043c000 ---p 00004000 08:02 3138 /lib64/libplc4.so
7f627043c000-7f627043d000 r--p 00003000 08:02 3138 /lib64/libplc4.so
7f627043d000-7f627043e000 rw-p 00004000 08:02 3138 /lib64/libplc4.so
7f627043e000-7f6270441000 r-xp 00000000 08:02 3139 /lib64/libplds4.so
7f6270441000-7f6270640000 ---p 00003000 08:02 3139 /lib64/libplds4.so
7f6270640000-7f6270641000 r--p 00002000 08:02 3139 /lib64/libplds4.so
7f6270641000-7f6270642000 rw-p 00003000 08:02 3139 /lib64/libplds4.so
7f6270642000-7f6270667000 r-xp 00000000 08:02 3192 /usr/lib64/libnssutil3.so
7f6270667000-7f6270867000 ---p 00025000 08:02 3192 /usr/lib64/libnssutil3.so
7f6270867000-7f627086d000 r--p 00025000 08:02 3192 /usr/lib64/libnssutil3.so
7f627086d000-7f627086e000 rw-p 0002b000 08:02 3192 /usr/lib64/libnssutil3.so
7f627086e000-7f62709a5000 r-xp 00000000 08:02 4512 /usr/lib64/libnss3.so
7f62709a5000-7f6270ba4000 ---p 00137000 08:02 4512 /usr/lib64/libnss3.soAborted
Raw
php -v
PHP 5.4.39 (cli) (built: Mar 19 2015 06:59:35)
Copyright (c) 1997-2014 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2014 Zend Technologies
Raw
tarantool --version
Failed to set locale to C.UTF-8
Tarantool 1.6.4-491-gc39c6ed
Target: Linux-x86_64-RelWithDebugInfo
Build options: cmake . -DCMAKE_INSTALL_PREFIX=/usr -DENABLE_TRACE=ON -DENABLE_BACKTRACE=ON
Compiler: /opt/rh/devtoolset-2/root/usr/bin/cc /opt/rh/devtoolset-2/root/usr/bin/c++
C_FLAGS: -fno-omit-frame-pointer -fno-stack-protector -fexceptions -funwind-tables -fopenmp -msse2 -std=c11 -Wall -Wextra -Wno-sign-compare -Wno-strict-aliasing -fno-gnu89-inline
CXX_FLAGS: -fno-omit-frame-pointer -fno-stack-protector -fexceptions -funwind-tables -fopenmp -msse2 -std=c++11 -Wall -Wextra -Wno-sign-compare -Wno-strict-aliasing -Wno-invalid-offsetof
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment