Use after free vulnerability in phar_parse_zipfile

How it was found

Malformed phar file with cache configuration leads freed memory as hash key when it inserts into the hash table.

More detail information and original report is here: https://bugs.php.net/bug.php?id=79797 and it was assigned CVE-2020-7068.

Impact

Through this vulnerability that inserts freed memory into the hash table that manages alias file names, an attacker may gain memory information.