Skip to content

ext/libxml: Clear released node pointers - #367

Closed
iliaal wants to merge 1 commit into
PHP-8.4from
fix/aph-simplexml-reconstruction-uaf-w04g-84-work
Closed

iliaal wants to merge 1 commit into
PHP-8.4from
fix/aph-simplexml-reconstruction-uaf-w04g-84-work

Conversation

@iliaal

@iliaal iliaal commented Sep 24, 2026

Copy link
Copy Markdown
Owner

Clear the consumed libxml node pointer after releasing its wrapper so SimpleXML reconstruction cannot retain a freed node.

Clear the consumed libxml node pointer when releasing an object resource so
SimpleXML reconstruction does not retain a dangling wrapper. Retained child
nodes keep their document reference and remain usable.
@iliaal

iliaal commented Sep 26, 2026

Copy link
Copy Markdown
Owner Author

Promoted as php#23931.

@iliaal iliaal closed this Sep 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant