Skip to content

Fix parse_str error handler use-after-free - #25217

Open
cataphract wants to merge 1 commit into
php:PHP-8.2from
cataphract:PHP-8.2
Open

cataphract wants to merge 1 commit into
php:PHP-8.2from
cataphract:PHP-8.2

Conversation

@cataphract

Copy link
Copy Markdown
Contributor

Fix a use-after-free in parse_str() when a parsing warning invokes an error handler that replaces the by-reference result variable.

Parse into a private array and assign the result only after parsing completes. Add regression coverage

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant