[php-src] PR #25100: Fix GH-25092: Double free in Phar::copy() on link and mounted entries
| From: | lazerg | Date: | Sat, 31 Oct 2026 17:24:06 +0000 |
| Subject: | [php-src] PR #25100: Fix GH-25092: Double free in Phar::copy() on link and mounted entries | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-40148@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/25100
Author: lazerg
Phar::copy() memcpy()s the old entry into the new one, so link and
tmp end up shared between the two manifest entries and both free them on shutdown. This
duplicates them the same way phar_update_cached_entry() and
convertToData() already do; tmp is hit when copying a mounted file.
Fixes #25092