[GIT-PULLS] [php-src] PR #23141: ext/libxml: php_libxml_node_free_list() stack overflow on deep detach…

[email protected] (devnexen)
Newsgroups php.git-pulls
Message-ID <[email protected]> 
Pull Request: https://github.com/php/php-src/pull/23141
Author: devnexen

…ed subtrees.

Fix #23118

php_libxml_node_free_list() iterated over siblings but recursed into node->children, so destroying a detached subtree nested deeply enough overflowed the C stack. This runs from the object destructor, where an Error cannot be propagated, so the traversal was made iterative: it walks down to the deepest freeable node and back up through the parent, keeping xmlRemoveID() in pre-order because it reads the attribute value out of the attribute's children.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.