Bug #81705 [Com]: type confusion/UAF on set_error_handler with concat operation

Edit report at https://bugs.php.net/bug.php?id=81705&edit=1 ID: 81705 Comment by: ma dot ster dot train dot ing365 at gmail dot com Reported by: yukik at ricsec dot co dot jp Summary: type confusion/UAF on set_error_handler with concat operation Status: Verified Type: Bug Package: Scripting Engine problem Operating System: Linux PHP Version: 8.0.14 Block user comment: N Private report: N New Comment: (https://pastelink.net/d1g7rycn/)php.net (https://pastelink.net/lwrd0wqg/)php.net Previous Comments: ------------------------------------------------------------------------ [2023-02-26 10:42:17] master dot tra dot ining365 at gmail dot com (https://pastelink.net/d1g7rycn/)github.com (https://pastelink.net/d1g7rycn/)github.com (https://scholar.google.com.pa/citations?user=7mSx2nwAAAAJ)github.com (https://scholar.google.com.pe/citations?user=7mSx2nwAAAAJ)github.com (https://scholar.google.com.ph/citations?user=7mSx2nwAAAAJ)github.com (https://scholar.google.com.pk/citations?user=7mSx2nwAAAAJ)github.com (https://scholar.google.co.kr/citations?user=7mSx2nwAAAAJ)github.com (https://scholar.google.com.mx/citations?user=7mSx2nwAAAAJ)github.com (https://scholar.google.com.my/citations?user=7mSx2nwAAAAJ)github.com (https://scholar.google.com.ni/citations?user=7mSx2nwAAAAJ)github.com (https://scholar.google.nl/citations?user=7mSx2nwAAAAJ)github.com (https://scholar.google.no/citations?user=7mSx2nwAAAAJ)github.com (https://scholar.google.co.nz/citations?user=7mSx2nwAAAAJ)github.com ------------------------------------------------------------------------ [2023-02-23 04:10:36] medd at gmail dot com (https://docs.google.com/forms/d/e/1FAIpQLSed4L-W5rcs7dhIZBZw61FL5Vqo4mAs1OAu62udWU1czVBZ6g/viewform/)github.com ------------------------------------------------------------------------ [2023-02-22 01:26:31] medd at gmail dot com Don't encrip the database MangoDB (https://duckduckgo.com/?q=mybestsleepever/)github.com (https://www.ask.com/web?q=mybestsleepever/)github.com ------------------------------------------------------------------------ [2023-02-22 01:11:34] medd at gmail dot com Don't clutter the database with that please (https://search.yahoo.com/search?p=mybestsleepever/)github.com ------------------------------------------------------------------------ [2023-02-22 01:05:08] medd at gmail dot com Does it work for you on a different platform? (https://scholar.google.co.id/citations?hl=en&user=z2zPgJAAAAAJ/)github.com (https://scholar.google.co.uk/citations?hl=en&user=z2zPgJAAAAAJ/)github.com (https://scholar.google.com.au/citations?hl=en&user=z2zPgJAAAAAJ/)github.com ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=81705 -- Edit this bug report at https://bugs.php.net/bug.php?id=81705&edit=1