[GIT-PULLS] [php-src] PR #23322: Keep compiled RuleBasedBreakIterator rules alive for the iterator
[email protected] (iliaal)
| Newsgroups | php.git-pulls |
|---|---|
| Message-ID | <[email protected]> |
Pull Request: https://github.com/php/php-src/pull/23322 Author: iliaal ICU's compiled-rules constructor aliases the caller buffer. PHP passed a temporary string and did not keep it, so setText/next after that string is released can use freed memory. The object now holds a zend_string copy, released in free_obj and addref'd on clone.