Edit report at https://bugs.php.net/bug.php?id=62744&edit=1
ID: 62744 Updated by: fel...@php.net Reported by: larue...@php.net Summary: dangling pointers made by zend_disable_class Status: Open Type: Bug Package: Scripting Engine problem PHP Version: 5.3.15 -Assigned To: +Assigned To: laruence Block user comment: N Private report: N New Comment: Have it been already fixed? Previous Comments: ------------------------------------------------------------------------ [2012-08-04 03:27:39] larue...@php.net Automatic comment on behalf of laruence Revision: http://git.php.net/?p=php-src.git;a=commit;h=03a1fcabf31210d3f304bfacf5096ce43c2b8f93 Log: Fixed bug #62744 (dangling pointers made by zend_disable_class) ------------------------------------------------------------------------ [2012-08-04 03:24:36] larue...@php.net Automatic comment on behalf of laruence Revision: http://git.php.net/?p=php-src.git;a=commit;h=03a1fcabf31210d3f304bfacf5096ce43c2b8f93 Log: Fixed bug #62744 (dangling pointers made by zend_disable_class) ------------------------------------------------------------------------ [2012-08-04 02:41:52] larue...@php.net Automatic comment on behalf of laruence Revision: http://git.php.net/?p=php-src.git;a=commit;h=03a1fcabf31210d3f304bfacf5096ce43c2b8f93 Log: Fixed bug #62744 (dangling pointers made by zend_disable_class) ------------------------------------------------------------------------ [2012-08-04 02:29:16] larue...@php.net Description: ------------ this bug is found by digging bug #62737 Extensions use zend_register_internal_class to register class, and they often preserved the return value and reuse that pointer instead of search in class table when that class will be used. but when user specific disable_classes in php.ini zend_disable_class will delete the corresponding class entry, then make the pointer which is preserved by extension become a wild pointer. http://lxr.php.net/xref/PHP_5_3/Zend/zend_API.c#2348 Test script: --------------- similar as #62733 Expected result: ---------------- none Actual result: -------------- none ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=62744&edit=1
