Poison custom chunk_alloc as well

danog · danog · commit 1275855ec8fc · 2025-07-23T10:31:07.000+02:00
diff --git a/Zend/zend_alloc.c b/Zend/zend_alloc.c
@@ -938,6 +938,7 @@ static void *zend_mm_chunk_alloc(zend_mm_heap *heap, size_t size, size_t alignme
 	if (UNEXPECTED(heap->storage)) {
 		void *ptr = heap->storage->handlers.chunk_alloc(heap->storage, size, alignment);
 		ZEND_ASSERT(((uintptr_t)((char*)ptr + (alignment-1)) & (alignment-1)) == (uintptr_t)ptr);
+		ZEND_MM_POISON(ptr, size);
 		return ptr;
 	}
 #endif

Original file line number	Diff line number	Diff line change
`@@ -938,6 +938,7 @@ static void zend_mm_chunk_alloc(zend_mm_heap heap, size_t size, size_t alignme`
`938`	`938`	`if (UNEXPECTED(heap->storage)) {`
`939`	`939`	`void *ptr = heap->storage->handlers.chunk_alloc(heap->storage, size, alignment);`
`940`	`940`	`ZEND_ASSERT(((uintptr_t)((char*)ptr + (alignment-1)) & (alignment-1)) == (uintptr_t)ptr);`
	`941`	`+ ZEND_MM_POISON(ptr, size);`
`941`	`942`	`return ptr;`
`942`	`943`	`}`
`943`	`944`	`#endif`