Skip to content

Commit caaca18

Browse files
nielsdoscharmitro
authored andcommitted
Fix phpGH-17040: SimpleXML's unset can break DOM objects
Don't free the underlying nodes if we still have objects pointing to them, otherwise the objects are left with a NULL node pointer. Closes phpGH-17046.
1 parent c69bba8 commit caaca18

File tree

3 files changed

+308
-223
lines changed

3 files changed

+308
-223
lines changed

NEWS

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,9 @@ PHP NEWS
88
- Iconv:
99
. Fixed bug GH-17047 (UAF on iconv filter failure). (nielsdos)
1010

11+
- SimpleXML:
12+
. Fixed bug GH-17040 (SimpleXML's unset can break DOM objects). (nielsdos)
13+
1114
- Streams:
1215
. Fixed bug GH-17037 (UAF in user filter when adding existing filter name due
1316
to incorrect error handling). (nielsdos)

0 commit comments

Comments
 (0)