Skip to content

GH-23043: broken session id code can cause zend_mm_heap corrupted - #23046

Open
ndossche wants to merge 2 commits into
php:PHP-8.4from
ndossche:fix-23043
Open

GH-23043: broken session id code can cause zend_mm_heap corrupted#23046
ndossche wants to merge 2 commits into
php:PHP-8.4from
ndossche:fix-23043

Conversation

@ndossche

@ndossche ndossche commented Aug 4, 2026

Copy link
Copy Markdown
Member

Includes also a related bonus fix

The id must be reset to NULL before calling code that can invoke
userland code, as the id remains visible after release due to a stale
pointer.
@ndossche
ndossche requested a review from Girgias as a code owner August 4, 2026 19:01
@ndossche ndossche linked an issue Aug 4, 2026 that may be closed by this pull request

@Girgias Girgias left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

gah how the hell did it take that long to get noticed ;-;

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

broken session id code can cause zend_mm_heap corrupted

2 participants