Internet Bug Bounty · Report #152281

Use After Free/Double Free in Garbage Collection

Validstatus

4upvotes

13 Oct 2019disclosed

How it was found

I don't know if the bug is qualified.

I reported this bug since php some guys added this commit: https://github.com/php/php-src/commit/1c84b55adea936b065a20102202bea3d1d243225 Then they had reverted this commit before PHP updates release: https://github.com/php/php-src/commit/171c759d791f809ebc31711fd0b0b5bb632cd2cc So I think this bug have been fixed. if I don't submit this bug until php updates release, then this bug will be tagged as Type: Security and fix in next PHP updates release.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original