[php-src] PR #22974: SAPI: clear current_user and content_type_dup after releasing them
| From: | iliaal | Date: | Fri, 31 Jul 2026 14:43:43 +0000 |
| Subject: | [php-src] PR #22974: SAPI: clear current_user and content_type_dup after releasing them | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-37415@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/22974
Author: iliaal
sapi_deactivate_module() frees current_user and
content_type_dup but leaves both pointers set, unlike auth_user,
auth_password and auth_digest right above them. Nothing reads either field
between the free and the next sapi_activate(), so this is consistency rather than a
live bug, and a second deactivate would double-free.
This is older than the zend_string conversion in php/php-src#22902, so it targets 8.4.