Bug #75573 [Com]: Segmentation fault in 7.1.12 and 7.0.26

Edit report at https://bugs.php.net/bug.php?id=75573&edit=1 ID: 75573 Comment by: thomas at shadowweb dot org Reported by: manuel-php at mausz dot at Summary: Segmentation fault in 7.1.12 and 7.0.26 Status: Closed Type: Bug Package: Reproducible crash Operating System: Linux PHP Version: 7.1.12 Block user comment: N Private report: N New Comment: This bug should be re-opened and the fix also applied to the 7.0 branch... Patch for 7.0.26 looks like this: --- Zend/zend_object_handlers.c.org 2017-11-21 12:57:10.000000000 +0100 +++ Zend/zend_object_handlers.c 2017-11-30 14:42:29.154940011 +0100 @@ -602,8 +602,8 @@ zval_ptr_dtor(&tmp_object); goto exit; } else { - zval_ptr_dtor(&tmp_object); if (Z_STRVAL_P(member)[0] == '\0') { + zval_ptr_dtor(&tmp_object); if (Z_STRLEN_P(member) == 0) { zend_throw_error(NULL, "Cannot access empty property"); retval = &EG(uninitialized_zval); Thanks in advance Previous Comments: ------------------------------------------------------------------------ [2017-11-29 21:47:05] rob-phpbugs at tigertech dot com I agree that this patch solves the problem on PHP 7.1.12 in my testing. It does seem that a different patch is needed for 7.0.26, though, as the logic appears to be slightly different. ------------------------------------------------------------------------ [2017-11-29 18:53:17] maunel-php at mausz dot at @Xinchen: I'm unable to find the backport for the PHP 7.0 branch. ------------------------------------------------------------------------ [2017-11-29 18:32:20] post at minhost dot no I applied this patch http://git.php.net/?p=php-src.git;a=commit;h=3b9ba7b6bd9e24bdbeca8e8e3f24cee2fccc51d8 to PHP 7.1.12 and it seems to have fixed the crashes I reported in Bug #75579 Can I also use this same patch for PHP 7.0.26, or must I wait for a modified patch for that PHP version? ------------------------------------------------------------------------ [2017-11-29 18:08:02] post at minhost dot no Related To: Bug #75579 ------------------------------------------------------------------------ [2017-11-29 18:08:02] post at minhost dot no Related To: Bug #75579 ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=75573 -- Edit this bug report at https://bugs.php.net/bug.php?id=75573&edit=1