From 56b6e0dd14e376bc1131c5afb037419910daabf8 Mon Sep 17 00:00:00 2001 From: Bob Weinand Date: Sun, 5 Jul 2015 02:00:38 +0200 Subject: [PATCH] Fix use after free with opcache (interned strings) --- Zend/zend_compile.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Zend/zend_compile.c b/Zend/zend_compile.c index eb1a318ea51..2d41f3fda6c 100644 --- a/Zend/zend_compile.c +++ b/Zend/zend_compile.c @@ -5074,7 +5074,8 @@ void zend_compile_class_decl(zend_ast *ast) /* {{{ */ name = zend_new_interned_string(name); lcname = zend_new_interned_string(lcname); } else { - lcname = name = zend_generate_anon_class_name(decl->lex_pos); + name = zend_generate_anon_class_name(decl->lex_pos); + lcname = zend_string_copy(name); /* this normally is an interned string, except with opcache. We need a proper copy here or opcache will fail with use after free. */ } ce->type = ZEND_USER_CLASS;