[php-src] PR #23258: PFA: Fix UAF of inherited attribute argument value
| From: | arnaud-lb | Date: | Thu, 13 Aug 2026 16:41:28 +0000 |
| Subject: | [php-src] PR #23258: PFA: Fix UAF of inherited attribute argument value | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-37832@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/23258
Author: arnaud-lb
PFAs inherit some attributes by converting them back to AST nodes with
zp_attribute_to_ast(), but this function failed to ADDREF() argument
values, resulting in a UAF.
Bug found by Ryan @ Calif.io