serializer: must duplicate unserialize_callback_func global zstr

Girgias · Girgias · commit c8e655b947e1 · 2026-07-30T13:40:05.000+01:00
diff --git a/ext/standard/var_unserializer.re b/ext/standard/var_unserializer.re
@@ -1256,7 +1256,7 @@ object ":" uiv ":" ["]	{
 		}
 
 		/* Call unserialize callback */
-		ZVAL_STR_COPY(&user_func, PG(unserialize_callback_func));
+		ZVAL_STR(&user_func, zend_string_dup(PG(unserialize_callback_func), false));
 
 		ZVAL_STR(&args[0], class_name);
 		BG(serialize_lock)++;

Original file line number	Diff line number	Diff line change
`@@ -1256,7 +1256,7 @@ object ":" uiv ":" ["] {`
`1256`	`1256`	`}`
`1257`	`1257`
`1258`	`1258`	`/* Call unserialize callback */`
`1259`		`- ZVAL_STR_COPY(&user_func, PG(unserialize_callback_func));`
	`1259`	`+ ZVAL_STR(&user_func, zend_string_dup(PG(unserialize_callback_func), false));`
`1260`	`1260`
`1261`	`1261`	`ZVAL_STR(&args[0], class_name);`
`1262`	`1262`	`BG(serialize_lock)++;`