- Notifications
You must be signed in to change notification settings - Fork8k
Closed
Description
Description
Run the following test file (phpt):
--TEST--UBSan phpdbg_frame member access within null pointer of type 'zval'--FILE--<?phpclass C { public function __destruct() { echo __METHOD__, "\n"; }}$fiber = new Fiber(function () { $c = new C(); $fiber = Fiber::getCurrent(); Fiber::suspend();});$fiber->start();gc_collect_cycles();$fiber = null;gc_collect_cycles();?>--PHPDBG--rtev 1 + 2cq--EXPECT--C::__destruct
Resulted in this output:
[Successful compilation of /test.php]prompt> [Uncaught GracefulExit in on line 0: ]>00014: Fiber::suspend(); 00015: }); 00016:prompt> frame #0: {closure}() at /test.php:14//php-src/sapi/phpdbg/phpdbg_frame.c:295:2: runtime error: member access within null pointer of type 'zval' (aka 'struct _zval_struct')SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /php-src/sapi/phpdbg/phpdbg_frame.c:295:2 in
PHP Version
PHP 8.4.0-dev
Operating System
ubuntu 22.04