On 26.11.2016 at 13:55, Christoph M. Becker wrote: > On 26.11.2016 at 12:45, Nikita Popov wrote: > >> The fact that php_pcre.c uses zval_dtor() is simply a bug, because code like >> >> $obj = new stdClass; >> $obj->obj = $obj; >> preg_match('/./', 'x', $obj); >> >> leaks. > > Indeed. At least preg_replace()'s $count parameter has the same issue. > Is there already a bug report about this?
FTR: reported as <https://bugs.php.net/bug.php?id=73612>. -- Christoph M. Becker -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php