[GIT-PULLS] [php-src] PR #22623: ext/dom: Use-after-free with namespace nodes from XSLTProcessor::regi…

[email protected] (devnexen)
Newsgroups php.git-pulls
Message-ID <[email protected]> 
Pull Request: https://github.com/php/php-src/pull/22623
Author: devnexen

…sterPHPFunctions().

Fix #22621

Namespace parents from an external document() were wrapped directly instead of through the proxy factory, so they skipped the copy that keeps non-main-document nodes alive. A DOMNameSpaceNode retained by userland then dangled once xsltFreeTransformContext() freed the external document. Route the namespace parent through the proxy factory too.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.