[php-src] PR #24194: Optimizer/sccp.c: Fix NULL pointer dereference in ZEND_ASSIGN_OBJ_OP
| From: | Ti-Mis | Date: | Thu, 08 Oct 2026 13:07:37 +0000 |
| Subject: | [php-src] PR #24194: Optimizer/sccp.c: Fix NULL pointer dereference in ZEND_ASSIGN_OBJ_OP | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39252@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24194
Author: Ti-Mis
get_op2_value() can return NULL when the SSA operand is unavailable. The ZEND_ASSIGN_OBJ_OP path did
not check op2 before passing it to ct_eval_fetch_obj(), which eventually dereferences it in
fetch_obj_prop().
Add a NULL check before calling ct_eval_fetch_obj() to prevent the invalid dereference.