[php-src] PR #24732: Fix GH-24729: UAF in ReflectionClass::setStaticPropertyValue()
| From: | lazerg | Date: | Mon, 26 Oct 2026 08:57:57 +0000 |
| Subject: | [php-src] PR #24732: Fix GH-24729: UAF in ReflectionClass::setStaticPropertyValue() | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39901@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24732
Author: lazerg
The old value was destroyed while
variable_ptr still pointed into the reference, so a
destructor that dropped that reference left us writing into freed memory. Write the new value first
and destroy the old one afterwards.
Fixes #24729