php/archived-php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2026-03-24 00:02:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix crash when toggleAttribute() is used without a document

Browse Source
This commit is contained in:
Niels Dossche
2023-12-22 21:12:59 +01:00
parent f20edf0fb3
commit b2d778c36e
3 changed files with 19 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
NEWS
View File

@@ -20,6 +20,7 @@ PHP NEWS
- DOM: - DOM:
. Fixed bug GH-12870 (Creating an xmlns attribute results in a DOMException). . Fixed bug GH-12870 (Creating an xmlns attribute results in a DOMException).
(nielsdos) (nielsdos)
. Fix crash when toggleAttribute() is used without a document. (nielsdos)
- FFI: - FFI:
. Fixed bug GH-9698 (stream_wrapper_register crashes with FFI\CData). . Fixed bug GH-9698 (stream_wrapper_register crashes with FFI\CData).

2
ext/dom/element.c
View File

@@ -1554,7 +1554,7 @@ PHP_METHOD(DOMElement, toggleAttribute)
} }
/* Step 2 */ /* Step 2 */
if (thisp->doc->type == XML_HTML_DOCUMENT_NODE && (thisp->ns == NULL || xmlStrEqual(thisp->ns->href, (const xmlChar *) "http://www.w3.org/1999/xhtml"))) { if (thisp->doc != NULL && thisp->doc->type == XML_HTML_DOCUMENT_NODE && (thisp->ns == NULL || xmlStrEqual(thisp->ns->href, (const xmlChar *) "http://www.w3.org/1999/xhtml"))) {
qname_tmp = zend_str_tolower_dup_ex(qname, qname_length); qname_tmp = zend_str_tolower_dup_ex(qname, qname_length);
if (qname_tmp != NULL) { if (qname_tmp != NULL) {
qname = qname_tmp; qname = qname_tmp;

17
ext/dom/tests/DOMElement_toggleAttribute_without_document.phpt Normal file
View File

@@ -0,0 +1,17 @@
--TEST--
DOMElement::toggleAttribute() without a document
--EXTENSIONS--
dom
--FILE--
<?php
$element = new DOMElement("container");
$element->toggleAttribute('foo', true);
$dom = new DOMDocument;
$element = $dom->importNode($element, true);
echo $dom->saveXML($element), "\n";
?>
--EXPECT--
<container foo=""/>