Repository navigation
sqlite segv #23728
Description
Description
The following code:
<?php
$db = new SQLite3(':memory:');
$db->createFunction('evil', function () {
global $stmt;
$stmt->close();
return 1;
});
$stmt = $db->prepare("SELECT evil()");
$res = $stmt->execute();Resulted in this output (truncated):
==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000063 ... READ
#0 sqlite3ApiExit (libsqlite3.so.0+0x912b4)
#1 sqlite3_step (libsqlite3.so.0+0xe1fb0)
#2 zim_SQLite3Stmt_execute ext/sqlite3/sqlite3.c:1901:16
PHP Version
8.6.0-dev
Operating System
Ubuntu 22.04
Activity
djarfluka commentedon Sep 17, 2026
I believe this is related to #23650
Fix phpGH-23728: crash when a callback destroys the statement being e…