[php-src] PR #24427: Fix use-after-free of CURLOPT_STDERR stream on cloned curl handle
| From: | lacatoire | Date: | Mon, 19 Oct 2026 12:06:23 +0000 |
| Subject: | [php-src] PR #24427: Fix use-after-free of CURLOPT_STDERR stream on cloned curl handle | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39588@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24427
Author: lacatoire
_php_setup_easy_copy_handlers() copies the write, read and
write_header streams but not std_err. The clone never checks that the
stream is still open, so libcurl keeps writing to a FILE* freed when the stream is
closed.
Copy std_err like the other handlers.