Niels Dossche
e0b1b693e3
Fix OSS-Fuzz #371445205 : Heap-use-after-free in attr_free
...
zend_hash_get_current_key() does not return a string with incremented
refcount, so it shouldn't get released. This release caused a UAF later
when the attribute was destroyed. This wasn't noticed earlier because
object_init_with_constructor() was only ever tested with interned
strings.
Closes GH-16349.
2024-10-11 09:07:08 +02:00
..
2024-07-02 09:44:25 +02:00
2023-09-15 14:57:10 +02:00
2020-09-18 14:28:32 +02:00
2020-09-02 20:26:50 +02:00
2020-09-18 14:28:32 +02:00
2020-09-21 12:37:44 +02:00
2024-06-10 15:12:22 +02:00
2020-09-18 14:28:32 +02:00
2021-05-21 11:40:23 +02:00
2020-09-02 20:26:50 +02:00
2020-09-02 20:26:50 +02:00
2020-09-02 20:26:50 +02:00
2020-09-18 14:28:32 +02:00
2023-07-13 15:45:32 +01:00
2020-09-18 14:28:32 +02:00
2020-09-27 11:35:48 +02:00
2020-09-27 11:35:48 +02:00
2021-06-11 11:57:42 +02:00
2020-09-18 14:28:32 +02:00
2020-09-02 20:26:50 +02:00
2020-09-02 20:26:50 +02:00
2020-09-18 14:28:32 +02:00
2024-05-06 12:38:56 +02:00
2024-05-06 12:38:56 +02:00
2024-05-06 12:38:56 +02:00
2020-09-02 20:26:50 +02:00
2020-09-02 20:26:50 +02:00
2020-09-02 20:26:50 +02:00
2020-09-18 14:28:32 +02:00
2020-09-02 20:26:50 +02:00
2020-09-21 10:50:29 +02:00
2020-09-27 10:42:58 +02:00
2020-09-27 10:42:58 +02:00
2024-02-04 23:02:02 +01:00
2024-05-06 12:38:56 +02:00
2024-05-06 12:38:56 +02:00
2022-04-23 11:16:28 +02:00
2024-10-11 09:07:08 +02:00