[php-src] PR #23600: soap: reject self-referential schema group and attributeGroup fix-up
| From: | iliaal | Date: | Sun, 06 Sep 2026 15:07:50 +0000 |
| Subject: | [php-src] PR #23600: soap: reject self-referential schema group and attributeGroup fix-up | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-38350@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/23600
Author: iliaal
schema_content_model_fixup() and schema_attributegroup_fixup() follow a
group ref back into schema_type_fixup() with nothing tracking which types
are already being fixed up, so a schema whose group or attributeGroup references itself recurses
until the C stack is exhausted. The sdl context now tracks the in-progress types and raises a parse
error when one is re-entered.
Both tests segfault without the change.