mirror of
https://github.com/php/php-src.git
synced 2026-03-24 00:02:20 +01:00
46ac878f6a
If the variable_ptr and fetched value are the same or overlap, then we get a UAF. Prevent this by delaying destruction. Closes GH-18588.
18 lines
195 B
PHP
18 lines
195 B
PHP
--TEST--
|
|
OSS-Fuzz #417078295
|
|
--FILE--
|
|
<?php
|
|
|
|
function foo() {
|
|
$a = new stdClass();
|
|
static $a = $a;
|
|
debug_zval_dump($a);
|
|
}
|
|
|
|
foo();
|
|
|
|
?>
|
|
--EXPECT--
|
|
object(stdClass)#1 (0) refcount(2){
|
|
}
|