Skip to content

Fix missing write lock validation in SplHeap::next()#21448

Closed
ndossche wants to merge 2 commits intophp:PHP-8.4from
ndossche:spl-heap-wlock
Closed

Fix missing write lock validation in SplHeap::next()#21448
ndossche wants to merge 2 commits intophp:PHP-8.4from
ndossche:spl-heap-wlock

Conversation

@ndossche
Copy link
Member

@ndossche ndossche commented Mar 14, 2026

Reported by @cnitlrt and @arnoldasr

@ndossche ndossche requested a review from Girgias as a code owner March 14, 2026 23:05
@ndossche ndossche linked an issue Mar 15, 2026 that may be closed by this pull request
@ndossche ndossche closed this in 8796d75 Mar 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SplHeap::next() Write-Lock Bypass - Use-After-Free

2 participants