mirror of
https://github.com/php/php-src.git
synced 2024-11-24 10:24:11 +08:00
Fixed crash of invalid pointer derefer (laruence)
This commit is contained in:
parent
7a428d98ca
commit
b0f419540a
@ -2361,12 +2361,12 @@ static zend_always_inline void i_cleanup_unfinished_execution(zend_execute_data
|
||||
{
|
||||
if (EX(func)->op_array.T_liveliness
|
||||
&& op_num < EX(func)->op_array.last
|
||||
&& EX(func)->op_array.T_liveliness[op_num] != (uint32_t) - 1) {
|
||||
&& EX(func)->op_array.T_liveliness[op_num] != (uint32_t)-1) {
|
||||
uint32_t *off = EX(func)->op_array.T_liveliness + EX(func)->op_array.T_liveliness[op_num];
|
||||
uint32_t *catch_off = NULL;
|
||||
uint32_t var = *off;
|
||||
|
||||
if (catch_op_num) {
|
||||
if (catch_op_num && EX(func)->op_array.T_liveliness[catch_op_num] != (uint32_t)-1) {
|
||||
catch_off = EX(func)->op_array.T_liveliness + EX(func)->op_array.T_liveliness[catch_op_num];
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user