Fix bug #69448

ReflectionClass::newInstanceWithoutConstructor should not call
object_init_ex when the class is internal and final. This is because
the class dtor may rely on the ctor being called and in some cases
this will cause a segfault.

diff --git a/ext/reflection/php_reflection.c b/ext/reflection/php_reflection.c
index 47cf107b19afab0fb167552e45e64085c0a2bb7a..bec69b2bbd20afd28e908fd1f1ed6b062d0674d4 100644 (file)
--- a/ext/reflection/php_reflection.c
+++ b/ext/reflection/php_reflection.c
@@ -4315,6 +4315,7 @@ ZEND_METHOD(reflection_class, newInstanceWithoutConstructor)
 
        if (ce->create_object != NULL && ce->ce_flags & ZEND_ACC_FINAL) {
                zend_throw_exception_ex(reflection_exception_ptr, 0, "Class %s is an internal class marked as final that cannot be instantiated without invoking its constructor", ce->name->val);
+               return;
        }
 
        object_init_ex(return_value, ce);