[php-src] PR #25217: Fix parse_str error handler use-after-free
| From: | cataphract | Date: | Thu, 05 Nov 2026 17:08:00 +0000 |
| Subject: | [php-src] PR #25217: Fix parse_str error handler use-after-free | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-40330@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/25217
Author: cataphract
Fix a use-after-free in
parse_str() when a parsing warning invokes an error handler
that replaces the by-reference result variable.
Parse into a private array and assign the result only after parsing completes. Add regression
coverage