[php-src] PR #25329: Fix use-after-free when a string offset warning releases the string
| From: | jorgsowa | Date: | Sun, 08 Nov 2026 19:02:24 +0000 |
| Subject: | [php-src] PR #25329: Fix use-after-free when a string offset warning releases the string | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-40447@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/25329
Author: jorgsowa
The error handler may release the container string while the "Illegal string offset"
warning (VM read) or the undefined offset warning (JIT FETCH_DIM_IS) is raised. Hold a reference
across the warning, like the other string offset warnings already do.
Follow-up of https://github.com/php/php-src/pull/25298/files#r4506797067