From d8ad2f4695ebd6dc2d4e668d9baeac1c071791a6 Mon Sep 17 00:00:00 2001
From: Xinchen Hui <laruence@gmail.com>
Date: Wed, 25 Dec 2019 13:14:08 +0800
Subject: Fixed bug #79029 (Use After Free's in XMLReader / XMLWriter)

---
 ext/libxml/libxml.c | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'ext/libxml')

diff --git a/ext/libxml/libxml.c b/ext/libxml/libxml.c
index efccf0a407..837cc7ad98 100644
--- a/ext/libxml/libxml.c
+++ b/ext/libxml/libxml.c
@@ -355,6 +355,8 @@ static void *php_libxml_streams_IO_open_wrapper(const char *filename, const char
 	context = php_stream_context_from_zval(Z_ISUNDEF(LIBXML(stream_context))? NULL : &LIBXML(stream_context), 0);
 
 	ret_val = php_stream_open_wrapper_ex(path_to_open, (char *)mode, REPORT_ERRORS, NULL, context);
+	/* Prevent from closing this by fclose() */
+	((php_stream*)ret_val)->flags |= PHP_STREAM_FLAG_NO_FCLOSE;
 	if (isescaped) {
 		xmlFree(resolved_path);
 	}
-- 
cgit v1.2.1