Repository navigation
Assertion failure in ext/dom/parentnode/tree.c #16151
Description
Description
The following code:
<?php
$comment = new DOMComment ( "h" );
$element = new DOMElement ( "N" , "W" , "y" );
$attr = new DOMAttr ( "c" , "n" );
$doc = new DOMDocument ( );
$doc -> adoptNode ( $element );
$element -> setAttributeNodeNS ( $attr );
$attr -> insertBefore ( $comment );
$comment -> replaceWith ( "Q" );Resulted in this output:
php: /tmp/php-afl/ext/dom/parentnode/tree.c:243: _Bool dom_is_pre_insert_valid_without_step_1(php_libxml_ref_obj *, xmlNodePtr, xmlNodePtr, xmlNodePtr, xmlDocPtr): Assertion `!php_dom_pre_insert_is_parent_invalid(parentNode)' failed.
But I expected this output instead:
no crash
PHP Version
PHP 8.4.0-dev
Operating System
No response
Activity
ndossche commentedon Oct 1, 2024
Problem is that the constraints of the DOM tree are broken because a comment is inserted as a child of an attribute, this should not be possible. This is because the old DOM doesn't follow spec, bleh
Fix phpGH-16151: Assertion failure in ext/dom/parentnode/tree.c
Merge branch 'PHP-8.2' into PHP-8.3
Merge branch 'PHP-8.3' into PHP-8.4
Merge branch 'PHP-8.4'
Fix GH-16151: Assertion failure in ext/dom/parentnode/tree.c