{"action":"created","issue":{"url":"https://api.github.com/repos/facebook/hhvm/issues/6381","labels_url":"https://api.github.com/repos/facebook/hhvm/issues/6381/labels{/name}","comments_url":"https://api.github.com/repos/facebook/hhvm/issues/6381/comments","events_url":"https://api.github.com/repos/facebook/hhvm/issues/6381/events","html_url":"https://github.com/facebook/hhvm/issues/6381","id":111908540,"number":6381,"title":"mPDF 6.0 crashes with HHVM 3.10.0 (debian jessie)","user":{"login":"0x64616E69656C","id":7055311,"avatar_url":"https://avatars.githubusercontent.com/u/7055311?v=3","gravatar_id":"","url":"https://api.github.com/users/0x64616E69656C","html_url":"https://github.com/0x64616E69656C","followers_url":"https://api.github.com/users/0x64616E69656C/followers","following_url":"https://api.github.com/users/0x64616E69656C/following{/other_user}","gists_url":"https://api.github.com/users/0x64616E69656C/gists{/gist_id}","starred_url":"https://api.github.com/users/0x64616E69656C/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/0x64616E69656C/subscriptions","organizations_url":"https://api.github.com/users/0x64616E69656C/orgs","repos_url":"https://api.github.com/users/0x64616E69656C/repos","events_url":"https://api.github.com/users/0x64616E69656C/events{/privacy}","received_events_url":"https://api.github.com/users/0x64616E69656C/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-10-16T20:49:47Z","updated_at":"2015-10-16T21:30:14Z","closed_at":null,"body":"Hi,\r\n\r\nafter upgrading to 3.10.0 today, HHVM starts crashing again when calling mPDF library (previous crashes where fixed in 3.9.1, see #5528).\r\n\r\n> [Fri Oct 16 08:23:57 2015] [hphp] [17350:7fcefdfff700:57:000001] [] Core dumped: Segmentation fault\r\n\r\n```\r\n#0  mPDF->SubstituteChars() called at [/var/www/xxx/vendor/mpdf/mpdf/mpdf.php:14118]\r\n#1  mPDF->WriteHTML(<html stuff>) called at [/var/www/[...]/pdf.php:147]\r\n#2  include(/var/www/[...]/pdf.php) called at [/var/www/[]/bootstrap.php:196]\r\n#3  include(/var/www/[...]/bootstrap.php) called at [/var/www/[...]/htdocs/index.php:2]\r\n```"},"comment":{"url":"https://api.github.com/repos/facebook/hhvm/issues/comments/148841174","html_url":"https://github.com/facebook/hhvm/issues/6381#issuecomment-148841174","issue_url":"https://api.github.com/repos/facebook/hhvm/issues/6381","id":148841174,"user":{"login":"0x64616E69656C","id":7055311,"avatar_url":"https://avatars.githubusercontent.com/u/7055311?v=3","gravatar_id":"","url":"https://api.github.com/users/0x64616E69656C","html_url":"https://github.com/0x64616E69656C","followers_url":"https://api.github.com/users/0x64616E69656C/followers","following_url":"https://api.github.com/users/0x64616E69656C/following{/other_user}","gists_url":"https://api.github.com/users/0x64616E69656C/gists{/gist_id}","starred_url":"https://api.github.com/users/0x64616E69656C/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/0x64616E69656C/subscriptions","organizations_url":"https://api.github.com/users/0x64616E69656C/orgs","repos_url":"https://api.github.com/users/0x64616E69656C/repos","events_url":"https://api.github.com/users/0x64616E69656C/events{/privacy}","received_events_url":"https://api.github.com/users/0x64616E69656C/received_events","type":"User","site_admin":false},"created_at":"2015-10-16T21:30:14Z","updated_at":"2015-10-16T21:30:14Z","body":"A litte more verbosity:\r\n\r\nPoC:\r\n```php\r\n<?php\r\nini_set('max_execution_time', '30');\r\n\r\nrequire __DIR__ . '/vendor/autoload.php';\r\n\r\nob_start();\r\n?>\r\n\r\n<p>Hello World!</p>\r\n\r\n<?php\r\n$content = ob_get_contents();\r\nob_end_clean();\r\n$mpdf = new mPDF('c', 'a4');\r\n$mpdf->debug = true;\r\n$mpdf->allow_charset_conversion = true;\r\n$mpdf->WriteHTML($content);\r\n$mpdf->Output('foo.pdf', 'D');\r\n\r\n```\r\n\r\nValgrind:\r\n```\r\n\r\n==10731== Memcheck, a memory error detector\r\n==10731== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.\r\n==10731== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info\r\n==10731== Command: php pdf_test.php\r\n==10731==\r\n==10731== brk segment overflow in thread #1: can't grow to 0x11200000\r\n==10731== Conditional jump or move depends on uninitialised value(s)\r\n==10731==    at 0x10CE959: HPHP::jit::(anonymous namespace)::Vxls::allocate(HPHP::jit::(anonymous namespace)::Interval*) (in /usr/bin/hhvm)\r\n==10731==    by 0x10EFA4F: HPHP::jit::allocateRegisters(HPHP::jit::Vunit&, HPHP::jit::Abi const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x12024EA: HPHP::jit::optimizeX64(HPHP::jit::Vunit&, HPHP::jit::Abi const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x12D9E18: HPHP::jit::Vauto::~Vauto() (in /usr/bin/hhvm)\r\n==10731==    by 0x139DE57: HPHP::jit::UniqueStubs::emitAll() (in /usr/bin/hhvm)\r\n==10731==    by 0x135D746: HPHP::jit::MCGenerator::initUniqueStubs() (in /usr/bin/hhvm)\r\n==10731==    by 0xA17107: HPHP::ProcessInit() (in /usr/bin/hhvm)\r\n==10731==    by 0xC8FBAF: HPHP::hphp_process_init() (in /usr/bin/hhvm)\r\n==10731==    by 0xCA2C1A: HPHP::execute_program_impl(int, char**) (in /usr/bin/hhvm)\r\n==10731==    by 0xCA58FE: HPHP::execute_program(int, char**) (in /usr/bin/hhvm)\r\n==10731==    by 0xA1D61F: HPHP::emulate_zend(int, char**) (in /usr/bin/hhvm)\r\n==10731==    by 0xA158F7: main (in /usr/bin/hhvm)\r\n==10731==\r\n==10731== Conditional jump or move depends on uninitialised value(s)\r\n==10731==    at 0x102BC1C: HPHP::jit::collect_aliases(HPHP::jit::IRUnit const&, std::vector<HPHP::jit::Block*, std::allocator<HPHP::jit::Block*> > const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1033472: HPHP::jit::optimizeLoads(HPHP::jit::IRUnit&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11D4539: HPHP::jit::optimize(HPHP::jit::IRUnit&, HPHP::jit::IRBuilder&, HPHP::jit::TransKind) (in /usr/bin/hhvm)\r\n==10731==    by 0x135DCE8: HPHP::jit::MCGenerator::traceCodeGen(HPHP::jit::IRGS&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11B72C9: HPHP::jit::translateRegion(HPHP::jit::IRGS&, HPHP::jit::RegionDesc const&, HPHP::hphp_hash_set<HPHP::jit::ProfSrcKey, HPHP::jit::ProfSrcKey::Hasher, std::equal_to<HPHP::jit::ProfSrcKey> >&, HPHP::jit::TransFlags, HPHP::jit::PostConditions&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1364721: HPHP::jit::MCGenerator::translateWork(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136575A: HPHP::jit::MCGenerator::translate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x13659F3: HPHP::jit::MCGenerator::retranslate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1365D5A: HPHP::jit::MCGenerator::createTranslation(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x13669CA: HPHP::jit::MCGenerator::bindJccFirst(unsigned char*, HPHP::SrcKey, HPHP::SrcKey, bool, bool&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136BAAC: MCGenerator_handleServiceRequest (in /usr/bin/hhvm)\r\n==10731==    by 0x1525845: ??? (in /usr/bin/hhvm)\r\n==10731==\r\n==10731== Conditional jump or move depends on uninitialised value(s)\r\n==10731==    at 0x10180D8: HPHP::jit::(anonymous namespace)::RefineTmpsRec::go(HPHP::jit::Block*) (in /usr/bin/hhvm)\r\n==10731==    by 0x101A236: HPHP::jit::refineTmps(HPHP::jit::IRUnit&, std::vector<HPHP::jit::Block*, std::allocator<HPHP::jit::Block*> > const&, HPHP::jit::StateVector<HPHP::jit::Block, HPHP::jit::Block*> const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x10B037F: HPHP::jit::optimizeRefcounts2(HPHP::jit::IRUnit&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11D4524: HPHP::jit::optimize(HPHP::jit::IRUnit&, HPHP::jit::IRBuilder&, HPHP::jit::TransKind) (in /usr/bin/hhvm)\r\n==10731==    by 0x135DCE8: HPHP::jit::MCGenerator::traceCodeGen(HPHP::jit::IRGS&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11B72C9: HPHP::jit::translateRegion(HPHP::jit::IRGS&, HPHP::jit::RegionDesc const&, HPHP::hphp_hash_set<HPHP::jit::ProfSrcKey, HPHP::jit::ProfSrcKey::Hasher, std::equal_to<HPHP::jit::ProfSrcKey> >&, HPHP::jit::TransFlags, HPHP::jit::PostConditions&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1364721: HPHP::jit::MCGenerator::translateWork(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136575A: HPHP::jit::MCGenerator::translate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x13659F3: HPHP::jit::MCGenerator::retranslate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1365D5A: HPHP::jit::MCGenerator::createTranslation(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1366663: HPHP::jit::MCGenerator::bindJmp(unsigned char*, HPHP::SrcKey, HPHP::jit::ServiceRequest, HPHP::jit::TransFlags, bool&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136BA58: MCGenerator_handleServiceRequest (in /usr/bin/hhvm)\r\n==10731==\r\n==10731== Conditional jump or move depends on uninitialised value(s)\r\n==10731==    at 0x10180D8: HPHP::jit::(anonymous namespace)::RefineTmpsRec::go(HPHP::jit::Block*) (in /usr/bin/hhvm)\r\n==10731==    by 0x1018294: HPHP::jit::(anonymous namespace)::RefineTmpsRec::go(HPHP::jit::Block*) (in /usr/bin/hhvm)\r\n==10731==    by 0x101A236: HPHP::jit::refineTmps(HPHP::jit::IRUnit&, std::vector<HPHP::jit::Block*, std::allocator<HPHP::jit::Block*> > const&, HPHP::jit::StateVector<HPHP::jit::Block, HPHP::jit::Block*> const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x10B037F: HPHP::jit::optimizeRefcounts2(HPHP::jit::IRUnit&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11D4524: HPHP::jit::optimize(HPHP::jit::IRUnit&, HPHP::jit::IRBuilder&, HPHP::jit::TransKind) (in /usr/bin/hhvm)\r\n==10731==    by 0x135DCE8: HPHP::jit::MCGenerator::traceCodeGen(HPHP::jit::IRGS&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11B72C9: HPHP::jit::translateRegion(HPHP::jit::IRGS&, HPHP::jit::RegionDesc const&, HPHP::hphp_hash_set<HPHP::jit::ProfSrcKey, HPHP::jit::ProfSrcKey::Hasher, std::equal_to<HPHP::jit::ProfSrcKey> >&, HPHP::jit::TransFlags, HPHP::jit::PostConditions&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1364721: HPHP::jit::MCGenerator::translateWork(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136575A: HPHP::jit::MCGenerator::translate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x13659F3: HPHP::jit::MCGenerator::retranslate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1365D5A: HPHP::jit::MCGenerator::createTranslation(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1366663: HPHP::jit::MCGenerator::bindJmp(unsigned char*, HPHP::SrcKey, HPHP::jit::ServiceRequest, HPHP::jit::TransFlags, bool&) (in /usr/bin/hhvm)\r\n==10731==\r\n==10731== Conditional jump or move depends on uninitialised value(s)\r\n==10731==    at 0x10180D8: HPHP::jit::(anonymous namespace)::RefineTmpsRec::go(HPHP::jit::Block*) (in /usr/bin/hhvm)\r\n==10731==    by 0x1018294: HPHP::jit::(anonymous namespace)::RefineTmpsRec::go(HPHP::jit::Block*) (in /usr/bin/hhvm)\r\n==10731==    by 0x1018294: HPHP::jit::(anonymous namespace)::RefineTmpsRec::go(HPHP::jit::Block*) (in /usr/bin/hhvm)\r\n==10731==    by 0x101A236: HPHP::jit::refineTmps(HPHP::jit::IRUnit&, std::vector<HPHP::jit::Block*, std::allocator<HPHP::jit::Block*> > const&, HPHP::jit::StateVector<HPHP::jit::Block, HPHP::jit::Block*> const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x10B037F: HPHP::jit::optimizeRefcounts2(HPHP::jit::IRUnit&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11D4524: HPHP::jit::optimize(HPHP::jit::IRUnit&, HPHP::jit::IRBuilder&, HPHP::jit::TransKind) (in /usr/bin/hhvm)\r\n==10731==    by 0x135DCE8: HPHP::jit::MCGenerator::traceCodeGen(HPHP::jit::IRGS&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11B72C9: HPHP::jit::translateRegion(HPHP::jit::IRGS&, HPHP::jit::RegionDesc const&, HPHP::hphp_hash_set<HPHP::jit::ProfSrcKey, HPHP::jit::ProfSrcKey::Hasher, std::equal_to<HPHP::jit::ProfSrcKey> >&, HPHP::jit::TransFlags, HPHP::jit::PostConditions&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1364721: HPHP::jit::MCGenerator::translateWork(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136575A: HPHP::jit::MCGenerator::translate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x13659F3: HPHP::jit::MCGenerator::retranslate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1365D5A: HPHP::jit::MCGenerator::createTranslation(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==\r\n==10731== Conditional jump or move depends on uninitialised value(s)\r\n==10731==    at 0x10180D8: HPHP::jit::(anonymous namespace)::RefineTmpsRec::go(HPHP::jit::Block*) (in /usr/bin/hhvm)\r\n==10731==    by 0x1018294: HPHP::jit::(anonymous namespace)::RefineTmpsRec::go(HPHP::jit::Block*) (in /usr/bin/hhvm)\r\n==10731==    by 0x1018294: HPHP::jit::(anonymous namespace)::RefineTmpsRec::go(HPHP::jit::Block*) (in /usr/bin/hhvm)\r\n==10731==    by 0x1018294: HPHP::jit::(anonymous namespace)::RefineTmpsRec::go(HPHP::jit::Block*) (in /usr/bin/hhvm)\r\n==10731==    by 0x101A236: HPHP::jit::refineTmps(HPHP::jit::IRUnit&, std::vector<HPHP::jit::Block*, std::allocator<HPHP::jit::Block*> > const&, HPHP::jit::StateVector<HPHP::jit::Block, HPHP::jit::Block*> const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x10B037F: HPHP::jit::optimizeRefcounts2(HPHP::jit::IRUnit&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11D4524: HPHP::jit::optimize(HPHP::jit::IRUnit&, HPHP::jit::IRBuilder&, HPHP::jit::TransKind) (in /usr/bin/hhvm)\r\n==10731==    by 0x135DCE8: HPHP::jit::MCGenerator::traceCodeGen(HPHP::jit::IRGS&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11B72C9: HPHP::jit::translateRegion(HPHP::jit::IRGS&, HPHP::jit::RegionDesc const&, HPHP::hphp_hash_set<HPHP::jit::ProfSrcKey, HPHP::jit::ProfSrcKey::Hasher, std::equal_to<HPHP::jit::ProfSrcKey> >&, HPHP::jit::TransFlags, HPHP::jit::PostConditions&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1364721: HPHP::jit::MCGenerator::translateWork(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136575A: HPHP::jit::MCGenerator::translate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x13659F3: HPHP::jit::MCGenerator::retranslate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==\r\n==10731== Conditional jump or move depends on uninitialised value(s)\r\n==10731==    at 0x10A9D3A: HPHP::jit::(anonymous namespace)::build_graphs(HPHP::jit::(anonymous namespace)::Env&, HPHP::jit::(anonymous namespace)::RCAnalysis const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x10AF5A3: HPHP::jit::optimizeRefcounts2(HPHP::jit::IRUnit&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11D4524: HPHP::jit::optimize(HPHP::jit::IRUnit&, HPHP::jit::IRBuilder&, HPHP::jit::TransKind) (in /usr/bin/hhvm)\r\n==10731==    by 0x135DCE8: HPHP::jit::MCGenerator::traceCodeGen(HPHP::jit::IRGS&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11B72C9: HPHP::jit::translateRegion(HPHP::jit::IRGS&, HPHP::jit::RegionDesc const&, HPHP::hphp_hash_set<HPHP::jit::ProfSrcKey, HPHP::jit::ProfSrcKey::Hasher, std::equal_to<HPHP::jit::ProfSrcKey> >&, HPHP::jit::TransFlags, HPHP::jit::PostConditions&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1364721: HPHP::jit::MCGenerator::translateWork(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136575A: HPHP::jit::MCGenerator::translate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x13659F3: HPHP::jit::MCGenerator::retranslate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1365D5A: HPHP::jit::MCGenerator::createTranslation(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1366663: HPHP::jit::MCGenerator::bindJmp(unsigned char*, HPHP::SrcKey, HPHP::jit::ServiceRequest, HPHP::jit::TransFlags, bool&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136BA58: MCGenerator_handleServiceRequest (in /usr/bin/hhvm)\r\n==10731==    by 0x1525845: ??? (in /usr/bin/hhvm)\r\n==10731==\r\n==10731== Conditional jump or move depends on uninitialised value(s)\r\n==10731==    at 0x10A84C3: void HPHP::jit::(anonymous namespace)::rc_analyze_inst<HPHP::jit::(anonymous namespace)::build_graphs(HPHP::jit::(anonymous namespace)::Env&, HPHP::jit::(anonymous namespace)::RCAnalysis const&)::{lambda(HPHP::jit::Block*)#1}, HPHP::jit::(anonymous namespace)::NodeAdder>(HPHP::jit::(anonymous namespace)::Env&, HPHP::jit::IRInstruction&, HPHP::jit::(anonymous namespace)::RCState&, HPHP::jit::(anonymous namespace)::build_graphs(HPHP::jit::(anonymous namespace)::Env&, HPHP::jit::(anonymous namespace)::RCAnalysis const&)::{lambda(HPHP::jit::Block*)#1}, HPHP::jit::(anonymous namespace)::NodeAdder) (in /usr/bin/hhvm)\r\n==10731==    by 0x10A9CD4: HPHP::jit::(anonymous namespace)::build_graphs(HPHP::jit::(anonymous namespace)::Env&, HPHP::jit::(anonymous namespace)::RCAnalysis const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x10AF5A3: HPHP::jit::optimizeRefcounts2(HPHP::jit::IRUnit&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11D4524: HPHP::jit::optimize(HPHP::jit::IRUnit&, HPHP::jit::IRBuilder&, HPHP::jit::TransKind) (in /usr/bin/hhvm)\r\n==10731==    by 0x135DCE8: HPHP::jit::MCGenerator::traceCodeGen(HPHP::jit::IRGS&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11B72C9: HPHP::jit::translateRegion(HPHP::jit::IRGS&, HPHP::jit::RegionDesc const&, HPHP::hphp_hash_set<HPHP::jit::ProfSrcKey, HPHP::jit::ProfSrcKey::Hasher, std::equal_to<HPHP::jit::ProfSrcKey> >&, HPHP::jit::TransFlags, HPHP::jit::PostConditions&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1364721: HPHP::jit::MCGenerator::translateWork(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136575A: HPHP::jit::MCGenerator::translate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x13659F3: HPHP::jit::MCGenerator::retranslate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1365D5A: HPHP::jit::MCGenerator::createTranslation(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1366663: HPHP::jit::MCGenerator::bindJmp(unsigned char*, HPHP::SrcKey, HPHP::jit::ServiceRequest, HPHP::jit::TransFlags, bool&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136BA58: MCGenerator_handleServiceRequest (in /usr/bin/hhvm)\r\n==10731==\r\n==10731== Conditional jump or move depends on uninitialised value(s)\r\n==10731==    at 0x10AAEA7: HPHP::jit::(anonymous namespace)::find_alias_sets(HPHP::jit::(anonymous namespace)::Env&)::{lambda(HPHP::jit::SSATmp*)#1}::operator()(HPHP::jit::SSATmp*) const (in /usr/bin/hhvm)\r\n==10731==    by 0x10AE9EE: HPHP::jit::optimizeRefcounts2(HPHP::jit::IRUnit&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11D4524: HPHP::jit::optimize(HPHP::jit::IRUnit&, HPHP::jit::IRBuilder&, HPHP::jit::TransKind) (in /usr/bin/hhvm)\r\n==10731==    by 0x135DCE8: HPHP::jit::MCGenerator::traceCodeGen(HPHP::jit::IRGS&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11B72C9: HPHP::jit::translateRegion(HPHP::jit::IRGS&, HPHP::jit::RegionDesc const&, HPHP::hphp_hash_set<HPHP::jit::ProfSrcKey, HPHP::jit::ProfSrcKey::Hasher, std::equal_to<HPHP::jit::ProfSrcKey> >&, HPHP::jit::TransFlags, HPHP::jit::PostConditions&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1364721: HPHP::jit::MCGenerator::translateWork(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136575A: HPHP::jit::MCGenerator::translate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x13659F3: HPHP::jit::MCGenerator::retranslate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1365D5A: HPHP::jit::MCGenerator::createTranslation(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1366FDB: HPHP::jit::MCGenerator::handleResume(bool) (in /usr/bin/hhvm)\r\n==10731==    by 0x1D6001D6: ???\r\n==10731==    by 0x26C1C18: ??? (in /usr/bin/hhvm)\r\n==10731==\r\n==10731== Conditional jump or move depends on uninitialised value(s)\r\n==10731==    at 0x10AAF05: HPHP::jit::(anonymous namespace)::find_alias_sets(HPHP::jit::(anonymous namespace)::Env&)::{lambda(HPHP::jit::SSATmp*)#1}::operator()(HPHP::jit::SSATmp*) const (in /usr/bin/hhvm)\r\n==10731==    by 0x10AE9EE: HPHP::jit::optimizeRefcounts2(HPHP::jit::IRUnit&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11D4524: HPHP::jit::optimize(HPHP::jit::IRUnit&, HPHP::jit::IRBuilder&, HPHP::jit::TransKind) (in /usr/bin/hhvm)\r\n==10731==    by 0x135DCE8: HPHP::jit::MCGenerator::traceCodeGen(HPHP::jit::IRGS&) (in /usr/bin/hhvm)\r\n==10731==    by 0x11B72C9: HPHP::jit::translateRegion(HPHP::jit::IRGS&, HPHP::jit::RegionDesc const&, HPHP::hphp_hash_set<HPHP::jit::ProfSrcKey, HPHP::jit::ProfSrcKey::Hasher, std::equal_to<HPHP::jit::ProfSrcKey> >&, HPHP::jit::TransFlags, HPHP::jit::PostConditions&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1364721: HPHP::jit::MCGenerator::translateWork(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x136575A: HPHP::jit::MCGenerator::translate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x13659F3: HPHP::jit::MCGenerator::retranslate(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1365D5A: HPHP::jit::MCGenerator::createTranslation(HPHP::jit::TranslArgs const&) (in /usr/bin/hhvm)\r\n==10731==    by 0x1366FDB: HPHP::jit::MCGenerator::handleResume(bool) (in /usr/bin/hhvm)\r\n==10731==    by 0x1D6001D6: ???\r\n==10731==    by 0x26C1C18: ??? (in /usr/bin/hhvm)\r\n==10731==\r\n\r\nFatal error: Maximum execution time of 30 seconds exceeded in /home/daniel/mpdf_test/vendor/mpdf/mpdf/mpdf.php on line 1526\r\n==10731==\r\n==10731== HEAP SUMMARY:\r\n==10731==     in use at exit: 13,495,534 bytes in 21,373 blocks\r\n==10731==   total heap usage: 1,316,991 allocs, 1,295,618 frees, 223,032,920 bytes allocated\r\n==10731==\r\n==10731== LEAK SUMMARY:\r\n==10731==    definitely lost: 1,592 bytes in 198 blocks\r\n==10731==    indirectly lost: 0 bytes in 0 blocks\r\n==10731==      possibly lost: 0 bytes in 0 blocks\r\n==10731==    still reachable: 13,493,942 bytes in 21,175 blocks\r\n==10731==                       of which reachable via heuristic:\r\n==10731==                         stdstring          : 11,690 bytes in 291 blocks\r\n==10731==                         newarray           : 2,928 bytes in 152 blocks\r\n==10731==         suppressed: 0 bytes in 0 blocks\r\n==10731== Rerun with --leak-check=full to see details of leaked memory\r\n==10731==\r\n==10731== For counts of detected and suppressed errors, rerun with: -v\r\n==10731== Use --track-origins=yes to see where uninitialised values come from\r\n==10731== ERROR SUMMARY: 144 errors from 10 contexts (suppressed: 0 from 0)\r\n```\r\n\r\ncan't get a ```bt``` in gdb (I tried ```gdb --args hhvm --php --mode=debug ./pdf_test.php```) though."}}