Skip to content

Commit 8793f99

Browse files
committed
Merge branch 'PHP-8.3'
* PHP-8.3: Fix GH-13680: Segfault with session_decode and compilation error
2 parents f1a22d0 + b58dc6f commit 8793f99

File tree

2 files changed

+28
-2
lines changed

2 files changed

+28
-2
lines changed

ext/session/session.c

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -272,16 +272,17 @@ static zend_result php_session_decode(zend_string *data) /* {{{ */
272272
php_error_docref(NULL, E_WARNING, "Unknown session.serialize_handler. Failed to decode session object");
273273
return FAILURE;
274274
}
275+
zend_result result = SUCCESS;
275276
zend_try {
276277
if (PS(serializer)->decode(ZSTR_VAL(data), ZSTR_LEN(data)) == FAILURE) {
277278
php_session_cancel_decode();
278-
return FAILURE;
279+
result = FAILURE;
279280
}
280281
} zend_catch {
281282
php_session_cancel_decode();
282283
zend_bailout();
283284
} zend_end_try();
284-
return SUCCESS;
285+
return result;
285286
}
286287
/* }}} */
287288

ext/session/tests/gh13680.phpt

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
--TEST--
2+
GH-13680 (Segfault with session_decode and compilation error)
3+
--EXTENSIONS--
4+
session
5+
--SKIPIF--
6+
<?php include('skipif.inc'); ?>
7+
--INI--
8+
session.use_cookies=0
9+
session.use_strict_mode=0
10+
session.cache_limiter=
11+
session.serialize_handler=php_serialize
12+
session.save_handler=files
13+
error_reporting=E_ALL
14+
--FILE--
15+
<?php
16+
session_start();
17+
session_decode('foo');
18+
class Test extends DateTime {
19+
public static function createFromFormat($format, $datetime, $timezone = null): Wrong {}
20+
}
21+
?>
22+
--EXPECTF--
23+
Warning: session_decode(): Failed to decode session object. Session has been destroyed in %s on line %d
24+
25+
Fatal error: Could not check compatibility between Test::createFromFormat($format, $datetime, $timezone = null): Wrong and DateTime::createFromFormat(string $format, string $datetime, ?DateTimeZone $timezone = null): DateTime|false, because class Wrong is not available in %s on line %d

0 commit comments

Comments
 (0)