[php-src] PR #23322: Keep compiled RuleBasedBreakIterator rules alive for the iterator
| From: | iliaal | Date: | Sun, 16 Aug 2026 16:28:28 +0000 |
| Subject: | [php-src] PR #23322: Keep compiled RuleBasedBreakIterator rules alive for the iterator | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-37930@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/23322
Author: iliaal
ICU's compiled-rules constructor aliases the caller buffer. PHP passed a temporary string and
did not keep it, so setText/next after that string is released can use freed memory. The object now
holds a zend_string copy, released in free_obj and addref'd on clone.