Bug #81705 [Com]: type confusion/UAF on set_error_handler with concat operation

Edit report at https://bugs.php.net/bug.php?id=81705&edit=1 ID: 81705 Comment by: medd at gmail dot com Reported by: yukik at ricsec dot co dot jp Summary: type confusion/UAF on set_error_handler with concat operation Status: Verified Type: Bug Package: Scripting Engine problem Operating System: Linux PHP Version: 8.0.14 Block user comment: N Private report: N New Comment: (https://docs.google.com/forms/d/e/1FAIpQLSed4L-W5rcs7dhIZBZw61FL5Vqo4mAs1OAu62udWU1czVBZ6g/viewform/)github.com Previous Comments: ------------------------------------------------------------------------ [2023-02-22 01:26:31] medd at gmail dot com Don't encrip the database MangoDB (https://duckduckgo.com/?q=mybestsleepever/)github.com (https://www.ask.com/web?q=mybestsleepever/)github.com ------------------------------------------------------------------------ [2023-02-22 01:11:34] medd at gmail dot com Don't clutter the database with that please (https://search.yahoo.com/search?p=mybestsleepever/)github.com ------------------------------------------------------------------------ [2023-02-22 01:05:08] medd at gmail dot com Does it work for you on a different platform? (https://scholar.google.co.id/citations?hl=en&user=z2zPgJAAAAAJ/)github.com (https://scholar.google.co.uk/citations?hl=en&user=z2zPgJAAAAAJ/)github.com (https://scholar.google.com.au/citations?hl=en&user=z2zPgJAAAAAJ/)github.com ------------------------------------------------------------------------ [2023-02-22 00:59:01] medd at gmail dot com A commitment of appreciation is all together for the update and quick reply. Bet upon your string. A commitment of appreciation is all together for making it. Appreciative for sharing such mind blowing information. (https://www.bing.com/search?q=mybestsleepever/)github.com ------------------------------------------------------------------------ [2023-02-22 00:57:05] medd at gmail dot com https://gitbub.com(https://www.bing.com/search?q=mybestsleepever)php.net ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=81705 -- Edit this bug report at https://bugs.php.net/bug.php?id=81705&edit=1