Skip to content

Commit 9376c4e

Browse files
committed
Fix uaf
1 parent 2c8d2eb commit 9376c4e

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

Zend/zend_compile.c

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3610,22 +3610,22 @@ static void zend_compile_assign_ref(znode *result, zend_ast *ast, uint32_t type)
36103610
opline->opcode = ZEND_ASSIGN_OBJ_REF;
36113611
opline->extended_value &= ~ZEND_FETCH_REF;
36123612
opline->extended_value |= flags;
3613-
zend_emit_op_data(&source_node);
36143613
if (result) {
36153614
*result = target_node;
36163615
} else {
36173616
SET_UNUSED(opline->result);
36183617
}
3618+
zend_emit_op_data(&source_node);
36193619
} else if (opline && opline->opcode == ZEND_FETCH_STATIC_PROP_W) {
36203620
opline->opcode = ZEND_ASSIGN_STATIC_PROP_REF;
36213621
opline->extended_value &= ~ZEND_FETCH_REF;
36223622
opline->extended_value |= flags;
3623-
zend_emit_op_data(&source_node);
36243623
if (result) {
36253624
*result = target_node;
36263625
} else {
36273626
SET_UNUSED(opline->result);
36283627
}
3628+
zend_emit_op_data(&source_node);
36293629
} else {
36303630
opline = zend_emit_op(result, ZEND_ASSIGN_REF, &target_node, &source_node);
36313631
opline->extended_value = flags;

0 commit comments

Comments
 (0)