mirror of
https://github.com/php/php-src.git
synced 2026-03-24 00:02:20 +01:00
The first while loop sets the bucket variable, and this is freed in out_failure. However, when the second "goto out_failure" is triggered then bucket still refers to the bucket from the first while loop, causing a UAF. Fix this by separating the error paths. Closes GH-17058.