[php-src] PR #24629: ext/dom: fix UAF on namespace axis results with foreign-doc XPath cal…
| From: | devnexen | Date: | Sat, 24 Oct 2026 02:36:51 +0000 |
| Subject: | [php-src] PR #24629: ext/dom: fix UAF on namespace axis results with foreign-doc XPath cal… | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39796@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24629
Author: devnexen
…lback nodes
Follow-up to https://github.com/php/php-src/pull/24570#issuecomment-6375965729
The namespace node branch of php_xpath_eval() still created the parent element with the
DOMXPath's own dom, so with a foreign-doc callback node the parent proxy referenced the wrong
document. Use dom_xpath_intern_for_doc() there too.