Skip to content

Heads-up: 8.4.27 / 8.5.12 images ship a SimpleXML double-free regression (php-src#24488) #1706

Open

Description

@jogoossens

For users landing here after zend_mm_heap corrupted crashes on the 8.4.27 / 8.5.12 images: this is an upstream regression from the 21 October release (php/php-src#24488). SimpleXML objects caught in a reference cycle make the GC double-free their properties table; json_decode(json_encode($xml), true) is a common trigger.

The fix is approved (php/php-src#24494) and will arrive with the next upstream release; 8.3.36 and 8.2.35 are not affected. I understand the images track upstream without extra patches, so this is mainly so people can find the cause. Feel free to close.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions