[GIT-PULLS] [php-src] PR #23123: Zend: is_callable() wrongly accepts objects with no get_closure handler.
[email protected] (devnexen)
| Newsgroups | php.git-pulls |
|---|---|
| Message-ID | <[email protected]> |
Pull Request: https://github.com/php/php-src/pull/23123 Author: devnexen Fix #23121 zend_is_callable_at_frame() tested `get_closure && get_closure(...) == FAILURE`, so a NULL handler short circuited past the error branch into the success path, leaving fcc->function_handler NULL. zend_fcc_addref() then asserted and call_user_func() dereferenced the null zend_function.