[php-src] PR #23737: ext/xsl: XSLTProcessor::importStylesheet() use-after-free during a tr…
| From: | devnexen | Date: | Thu, 17 Sep 2026 19:04:48 +0000 |
| Subject: | [php-src] PR #23737: ext/xsl: XSLTProcessor::importStylesheet() use-after-free during a tr… | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-38541@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/23737
Author: devnexen
…ansformation.
Fix #23730
Importing a stylesheet from a php:function callback freed the stylesheet libxslt was still applying,
and the transformation methods kept using the stale pointer to save the result. The transformation
depth is now tracked on the object and importStylesheet() throws while it is non-zero.