[php-src] PR #23749: ext/zip: ZipArchive::close() use-after-free from a progress or cancel…
| From: | devnexen | Date: | Fri, 18 Sep 2026 04:05:33 +0000 |
| Subject: | [php-src] PR #23749: ext/zip: ZipArchive::close() use-after-free from a progress or cancel… | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-38555@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/23749
Author: devnexen
… callback.
Fix #23747
ZipArchive::close() called from a progress or cancel callback ran a nested zip_close() that failed,
then zip_discard() freed the archive while the outer zip_close() from close() or open() was still
using it. Track the close in progress and throw an Error from close() and open() meanwhile.