[php-src] PR #24711: Fix GH-24707: Use-after-free in opendir() when user wrapper unregisters itself
| From: | lazerg | Date: | Mon, 26 Oct 2026 01:17:35 +0000 |
| Subject: | [php-src] PR #24711: Fix GH-24707: Use-after-free in opendir() when user wrapper unregisters itself | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39887@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24711
Author: lazerg
When a user wrapper's dir_opendir() unregisters the wrapper, the opener drops the last
reference and frees it, then _php_stream_opendir() reads wrapper->wops->label to report the
error. This copies the wrapper name before calling the opener, the same way
_php_stream_open_wrapper_ex() already does for fopen().
Fixes #24707