diff options
author | Nikita Popov <nikita.ppv@gmail.com> | 2020-09-03 09:45:54 +0200 |
---|---|---|
committer | Nikita Popov <nikita.ppv@gmail.com> | 2020-09-03 09:49:29 +0200 |
commit | 573ad182d21df2457a0a2f6fd3c075e1f0bfca44 (patch) | |
tree | 027144874b94ed9a8cca790faa91a984defa9dfe /ext/phar/tests | |
parent | 54dbd3eccc867f456f257ce11556b50fcbee2ccf (diff) | |
download | php-git-573ad182d21df2457a0a2f6fd3c075e1f0bfca44.tar.gz |
Handle memory limit error during string reallocation correctly
Do not decrement the refcount before allocating the new string,
as the allocation operation may bail out and cause a use-after-free
lateron. We can only decrement the refcount once the allocation
has succeeded.
Fixes oss-fuzz #25384.
Diffstat (limited to 'ext/phar/tests')
0 files changed, 0 insertions, 0 deletions