Repository navigation
Segmentation fault when resizing hash table iterator list while adding #16054
Description
Description
The following code:
<?php
$multi_array = array ('zero', array (1, 2, 3), 'two');
next($multi_array);
end($multi_array);
$multi_array[] = &$multi_array;
$fusion = $multi_array;
$v1=$definedVars[array_rand($definedVars = get_defined_vars())];
$ary = array(
0 => array(
(binary) "binary",
"abc2",
1,
),
(binary) "binary" => array(
2,
"b",
3 => array(
4,
"c",
),
"4abc" => array(
4,
"c",
),
),
);
$it = new RecursiveTreeIterator(new RecursiveArrayIterator($fusion), 0);
foreach($it as $k => $v) {
}
?>PHP Version
PHP 8.4.0-dev
Operating System
ubuntu 22.04
Activity
cmb69 commentedon Sep 25, 2024
Not sure if that's an engine issue, or some misuse by Spl. Anyhow, PHP-8.3 (and possibly older branches are affected as well).
ndossche commentedon Sep 25, 2024
Let's be honest, we all know which one of the two it is ;)
I can have a look at both these SPL issues if you're not already working on it.
ndossche commentedon Sep 25, 2024
This already corrupts the heap:
ndossche commentedon Sep 25, 2024
Oh actually, this may be engine related for once...
[-]Segmentation fault in Zend/zend_hash.c[/-][+]Segmentation fault when resizing hash table iterator while adding[/+][-]Segmentation fault when resizing hash table iterator while adding[/-][+]Segmentation fault when resizing hash table iterator list while adding[/+]Fix GH-16054: Segmentation fault when resizing hash table iterator li…
Merge branch 'PHP-8.3' into PHP-8.4
Merge branch 'PHP-8.4'