diff options
| author | Nikita Popov <nikita.ppv@gmail.com> | 2018-03-05 15:28:58 +0100 |
|---|---|---|
| committer | Nikita Popov <nikita.ppv@gmail.com> | 2018-03-05 15:32:21 +0100 |
| commit | fd5bd37ab129595d51cc05199437c8af3388b3b9 (patch) | |
| tree | 0aa6b9a79b0297079ebe4348679d58af6118740a /Zend/zend_ptr_stack.c | |
| parent | 27a603e8116b9efb36f55bb5c9327dc23183ab7c (diff) | |
| download | php-git-fd5bd37ab129595d51cc05199437c8af3388b3b9.tar.gz | |
Revert "Fixed bug #75961 (Strange references behavior)"
This reverts commit 94e9d0a2ae76bad712495d820d3962e401085fef.
This code needs to be mindful about modifications to the array
happening during callback execution. It was written in a way that
only accessed the reference, which is guaranteed not to move. The
changed implementation instead accesses the array slot, leading to
use-after-free.
Run ext/standard/tests/array/bug61967.phpt under valgrind to see
the issue.
Diffstat (limited to 'Zend/zend_ptr_stack.c')
0 files changed, 0 insertions, 0 deletions