Skip to content

[pull] master from php:master#1033

Merged
pull[bot] merged 4 commits into
turkdevops:masterfrom
php:master
Jun 25, 2026
Merged

[pull] master from php:master#1033
pull[bot] merged 4 commits into
turkdevops:masterfrom
php:master

Conversation

@pull

@pull pull Bot commented Jun 25, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

arshidkv12 and others added 4 commits June 25, 2026 23:36
…22453)

Fix #22449, a NULL pointer dereference in `user_filter_factory_create()`
POC:
```php
<?php
try {
stream_filter_register("rotator_notWorking", rotate_filter_nw::class);
class rotate_filter_nw extends php_user_filter
{
function filter($in, $out, &$consumed, $closing): int
{
$stream = fopen('php://memory', 'w+');
stream_filter_append($stream, "rotator_notWorking");
}
}
$stream = fopen('php://memory', 'w+');
stream_filter_append($stream, "rotator_notWorking");
} catch (\Throwable $_ffl_e) {}
```
Resulted in this output:
```
/home/fuzz/WorkSpace/fusion-fuzz/projects/php/php-src/Zend/zend_hash.c:55:7: runtime error: member access within null pointer of type 'const HashTable' (aka 'const struct _zend_array')
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /home/fuzz/WorkSpace/fusion-fuzz/projects/php/php-src/Zend/zend_hash.c:55:7 in 
```
This will make it both easier to consume the error information and reduce the
chance for mistakes when settings errors, because not every field will need to
be set manually.

The functions that have been removed as part of this change were added in
master only, thus removing those is not an API change between the latest stable
(PHP 8.5) and this PR.

Fixes #22420.
Addressing a few late review comments
@pull pull Bot locked and limited conversation to collaborators Jun 25, 2026
@pull pull Bot added the ⤵️ pull label Jun 25, 2026
@pull pull Bot merged commit 6d98178 into turkdevops:master Jun 25, 2026
0 of 2 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants