Fix unserialize key leak

php · Jul 11, 2024 · 67f6e6d · 67f6e6d
1 parent 69b664a
commit 67f6e6d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/ext/standard/var_unserializer.re b/ext/standard/var_unserializer.re
@@ -563,6 +563,7 @@ static int is_property_visibility_changed(zend_class_entry *ce, zval *key)
  php_error_docref(NULL, E_WARNING,
  "Cannot unserialize value for hooked property %s::$%s",
  ZSTR_VAL(existing_propinfo->ce->name), Z_STRVAL_P(key));
+ zval_ptr_dtor_str(key);
  return -1;
  }
  }