Skip to content

PFA: Fix UAF of inherited attribute argument value - #23258

Draft
arnaud-lb wants to merge 1 commit into
php:masterfrom
arnaud-lb:pfa-bug-5
Draft

PFA: Fix UAF of inherited attribute argument value#23258
arnaud-lb wants to merge 1 commit into
php:masterfrom
arnaud-lb:pfa-bug-5

Conversation

@arnaud-lb

Copy link
Copy Markdown
Member

PFAs inherit some attributes by converting them back to AST nodes with zp_attribute_to_ast(), but this function failed to ADDREF() argument values, resulting in a UAF.

Bug found by Ryan @ Calif.io

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant