[php-src] PR #24511: JIT: Fix use-after-free in ASSIGN_DIM_OP with CONCAT
| From: | jorgsowa | Date: | Wed, 21 Oct 2026 21:19:54 +0000 |
| Subject: | [php-src] PR #24511: JIT: Fix use-after-free in ASSIGN_DIM_OP with CONCAT | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39679@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24511
Author: jorgsowa
Concatenation into an empty element shares the OP_DATA string, so its refcount may be >1 when
OP_DATA is freed.