]> granicus.if.org Git - php/commit
Fix #79091: heap use-after-free in session_create_id()
authorChristoph M. Becker <cmbecker69@gmx.de>
Mon, 20 Jan 2020 17:05:00 +0000 (18:05 +0100)
committerStanislav Malyshev <stas@php.net>
Tue, 21 Jan 2020 05:43:42 +0000 (21:43 -0800)
commitf79c7742746907d676989cb7f97fb4f7cd26789f
tree74eb9c8b2a31f7defe5fc009aa692745bf399b84
parent864f5ef12f588b30236f80cb60021485a4a78f9a
Fix #79091: heap use-after-free in session_create_id()

If the `new_id` is released, we must not use it again.
ext/session/session.c
ext/session/tests/bug79091.phpt [new file with mode: 0644]