Bug 1649481 - php: memory leak in the garbage collector when using cyclic references
Summary: php: memory leak in the garbage collector when using cyclic references
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1649482 1649483
Blocks: 1649486
TreeView+ depends on / blocked
 
Reported: 2018-11-13 17:05 UTC by Laura Pardo
Modified: 2019-09-29 15:02 UTC (History)
5 users (show)

Fixed In Version: php 7.2.12, php 7.1.24
Clone Of:
Environment:
Last Closed: 2018-11-16 09:51:50 UTC
Embargoed:


Attachments (Terms of Use)

Description Laura Pardo 2018-11-13 17:05:57 UTC
A flaw was found in php before versions 7.2.12 and 7.1.24. When a specifically structured cyclic reference is created the garbage collector fails to detect it which causes the references to never be freed. This leads to a memory leak.


References:
https://bugs.php.net/bug.php?id=76946
https://secure.php.net/ChangeLog-7.php

Upstream Patch:
http://git.php.net/?p=php-src.git;a=commit;h=83e2b9e2202da6cc25bdaac67a58022b90be88e7

Comment 1 Laura Pardo 2018-11-13 17:06:27 UTC
Created php tracking bugs for this issue:

Affects: fedora-all [bug 1649482]

Comment 3 Stefan Cornelius 2018-11-16 09:51:50 UTC
I think this qualifies more as "normal" bug than a security issue: overall, the chances of this happening are rare, I doubt that this is really suitable to be triggered remotely (to a degree where this becomes a real problem), and if you can execute PHP code, you can do much worse than this.

Thus, from a security perspective, I'll close this as NOTABUG.


Note You need to log in before you can comment on or make changes to this bug.