File php-unserialize-null-ptr-deref.patch of Package php5.openSUSE_Leap_42.1_Update
http://git.php.net/?p=php-src.git;a=commitdiff;h=13f1c276ab72cf1a8a400fd013b9289d0018a340
Index: ext/standard/var_unserializer.re
===================================================================
--- ext/standard/var_unserializer.re.orig 2014-12-30 09:31:06.509843894 +0100
+++ ext/standard/var_unserializer.re 2014-12-30 09:32:36.810979870 +0100
@@ -58,7 +58,13 @@
PHPAPI void var_push_dtor(php_unserialize_data_t *var_hashx, zval **rval)
{
- var_entries *var_hash = (*var_hashx)->last_dtor;
+ var_entries *var_hash;
+
+ if (!var_hashx || !*var_hashx) {
+ return;
+ }
+
+ var_hash = (*var_hashx)->last_dtor;
#if VAR_ENTRIES_DBG
fprintf(stderr, "var_push_dtor(%ld): %d\n", var_hash?var_hash->used_slots:-1L, Z_TYPE_PP(rval));
#endif