[php-src] PR #24524: Fix GH-24523: UAF in zend_test_compile_to_ast() on parse error
| From: | lazerg | Date: | Thu, 22 Oct 2026 04:30:00 +0000 |
| Subject: | [php-src] PR #24524: Fix GH-24523: UAF in zend_test_compile_to_ast() on parse error | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39689@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24524
Author: lazerg
On a parse error zend_compile_string_to_ast() frees the arena and returns NULL, but
zend_test_compile_to_ast() still destroyed the arena it got back. It now returns early when there is
no AST, same as get_default_via_ast() in zend_API.c.
Fixes #24523