[php-src] PR #23830: Fix OSS-Fuzz #5674034779193344: Read of uninitialized memory in is_cacheable_stream_path()
| From: | ndossche | Date: | Mon, 21 Sep 2026 19:08:09 +0000 |
| Subject: | [php-src] PR #23830: Fix OSS-Fuzz #5674034779193344: Read of uninitialized memory in is_cacheable_stream_path() | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-38694@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/23830
Author: ndossche
memcmp() will read inside the padding bytes of the zend_string, which are not initialized. This is
not exploitable because they're 8 padding bytes and the length of "file://" and
"phar://" is 7 so the mismatch happens at the length-of-the-string index; returning non-0
anyway.