crashing webservers

we have a problem where webservers (php/apache) are getting into a strange state and crashing.

here is the dump

any ideas what could be wrong?

(gdb) where
#0 0x6c86ebd2 in ZEND_ASSIGN_SPEC_CV_VAR_HANDLER
(execute_data=0xffff77bc)
at
/home/y/src/company/packages/company/php/php-5.1.6/Zend/zend_execute.c:179
#1 0x6c80645b in execute (op_array=0x2cdc80c) at
/home/y/src/company/packages/company/php/php-5.1.6/Zend/zend_vm_execute.h:92
#2 0x6c80c720 in
ZEND_INCLUDE_OR_EVAL_SPEC_CONST_HANDLER
(execute_data=0xffffaa7c)
at
/home/y/src/company/packages/company/php/php-5.1.6/Zend/zend_vm_execute.h:1971
#3 0x6c80645b in execute (op_array=0x29c5b0c) at
/home/y/src/company/packages/company/php/php-5.1.6/Zend/zend_vm_execute.h:92
#4 0x6c7f0179 in zend_execute_scripts (type=8,
retval=0x0, file_count=3)
at
/home/y/src/company/packages/company/php/php-5.1.6/Zend/zend.c:1110
#5 0x6c7bcb38 in php_execute_script
(primary_file=0xffffc0d8) at
/home/y/src/company/packages/company/php/php-5.1.6/main/main.c:1774
#6 0x6c87af4a in apache_php_module_main (r=0x1bfd054,
display_source_mode=0)
at
/home/y/src/company/packages/company/php/php-5.1.6/sapi/apache/sapi_apache.c:53
#7 0x6c87c124 in send_php (r=0x1bfd054,
display_source_mode=0, filename=0x0)
at
/home/y/src/company/packages/company/php/php-5.1.6/sapi/apache/mod_php5.c:893
#8 0x6c87c16d in send_parsed_php (r=0x1bfd054) at
/home/y/src/company/packages/company/php/php-5.1.6/sapi/apache/mod_php5.c:908
#9 0x00047ba4 in ap_invoke_handler (r=0x1bfd054) at
http_config.c:480
#10 0x0005ab7c in process_request_internal
(r=0x1bfd054) at http_request.c:1375
#11 0x0005abd7 in ap_process_request (r=0x1bfd054) at
http_request.c:1391
#12 0x00052828 in child_main (child_num_arg=2) at
http_main.c:5432
#13 0x00052b1d in make_child (s=0x99228, slot=2,
now=1185762401) at http_main.c:5675
#14 0x00052d6c in perform_idle_server_maintenance ()
at http_main.c:5901
#15 0x000532aa in standalone_main (argc=4,
argv=0xffffc4a0) at http_main.c:6213
#16 0x0005384c in main (argc=4, argv=0xffffc4a0) at
http_main.c:6496
 
 
The crash is at zend_execute.c:179
179 if (T->str_offset.str->type != IS_STRING
 
What happened is T->str_offset.str is a null pointer.
 
Here is content of T:
(gdb) p *T
$6 = {tmp_var = {value = {lval = 2370094, dval =
4.4179505143110831e-295, str = {val = 0x242a2e "", len
= 47320812},
ht = 0x242a2e, obj = {handle = 2370094, handlers
= 0x2d20eec}}, refcount = 0, type = 0 '\0', is_ref = 0
'\0'}, var = {
ptr_ptr = 0x242a2e, ptr = 0x2d20eec,
fcall_returned_reference = 0 '\0'}, str_offset =
{ptr_ptr = 0x242a2e, ptr = 0x2d20eec,
fcall_returned_reference = 0 '\0', str = 0x0,
offset = 0}, class_entry = 0x242a2e}

Select allOpen in new window