/php-src/ |
H A D | .gdbinit | 234 set $prop = (zend_property_info*)$p->val.value.ptr 260 printf "pointer: %p", $zvalue->value.ptr 364 printf "%s\n", (char*)$val->value.ptr 367 set $func = (zend_function*)$val->value.ptr 371 set $const = (zend_constant *)$val->value.ptr 520 usage: print_pi <ptr> 617 usage: print_zstr <ptr> [max length] 654 usage: lookup_root [ptr].
|
/php-src/TSRM/ |
H A D | tsrm_win32.c | 65 shm_pair *ptr; in tsrm_win32_dtor() local 72 for (ptr = globals->shm; ptr < (globals->shm + globals->shm_size); ptr++) { in tsrm_win32_dtor() 377 for (ptr = TWG(process); ptr < (TWG(process) + TWG(process_size)); ptr++) { in process_get() 384 return ptr; in process_get() 395 return ptr; in process_get() 400 shm_pair *ptr; in shm_get() local 403 for (ptr = TWG(shm); ptr < (TWG(shm) + TWG(shm_size)); ptr++) { in shm_get() 415 return ptr; in shm_get() 426 memset(ptr, 0, sizeof(*ptr)); in shm_get() 427 return ptr; in shm_get() [all …]
|
/php-src/Zend/ |
H A D | Zend.m4 | 237 void *ptr;
|
H A D | zend.c | 1980 void **ptr; in zend_map_ptr_new() local 1988 ptr = (void**)CG(map_ptr_real_base) + CG(map_ptr_last); in zend_map_ptr_new() 1989 *ptr = NULL; in zend_map_ptr_new() 1991 return ZEND_MAP_PTR_PTR2OFFSET(ptr); in zend_map_ptr_new() 1997 void **ptr; in zend_map_ptr_extend() local 2005 ptr = (void**)CG(map_ptr_real_base) + CG(map_ptr_last); in zend_map_ptr_extend() 2006 memset(ptr, 0, (last - CG(map_ptr_last)) * sizeof(void*)); in zend_map_ptr_extend()
|
H A D | zend_API.c | 2879 while (ptr->fname) { in zend_register_functions() 2880 fname_len = strlen(ptr->fname); in zend_register_functions() 2882 …internal_function->doc_comment = ptr->doc_comment ? zend_string_init_interned(ptr->doc_comment, st… in zend_register_functions() 2893 if (ptr->flags) { in zend_register_functions() 2906 if (ptr->arg_info) { in zend_register_functions() 2919 if (ZEND_ARG_IS_VARIADIC(&ptr->arg_info[ptr->num_args])) { in zend_register_functions() 3117 ptr++; in zend_register_functions() 3122 while (ptr->fname) { in zend_register_functions() 3130 ptr++; in zend_register_functions() 3153 while (ptr->fname) { in zend_unregister_functions() [all …]
|
H A D | zend_alloc.c | 469 return ptr; in zend_mm_mmap_fixed() 489 return ptr; in zend_mm_mmap_fixed() 505 return ptr; in zend_mm_mmap() 507 void *ptr; in zend_mm_mmap() 535 return ptr; in zend_mm_mmap() 747 ptr = (void*)((char*)ptr + alignment - offset); 756 ptr = (char*)ptr + offset; 1742 list->ptr = ptr; 1760 if (list->ptr == ptr) { 1783 if (list->ptr == ptr) { [all …]
|
H A D | zend_alloc.h | 129 _efree(ptr); \ 133 efree_size(ptr, size) 138 efree(ptr) 140 efree_rel(ptr) 154 #define efree(ptr) _efree((ptr) ZEND_FILE_LINE_CC ZEND_FILE_LINE_EMPTY_CC) argument 190 #define pefree(ptr, persistent) ((persistent)?free(ptr):efree(ptr)) argument 193 free(ptr); \ 195 efree_size(ptr, size);\ 203 #define perealloc_recoverable(ptr, size, persistent) ((persistent)?realloc((ptr), (size)):erealloc_… argument 209 #define pefree_rel(ptr, persistent) ((persistent)?free(ptr):efree_rel(ptr)) argument [all …]
|
H A D | zend_arena.h | 29 char *ptr; member 56 char *ptr = arena->ptr; in zend_arena_alloc() local 61 arena->ptr = ptr + size; in zend_arena_alloc() 76 return (void*) ptr; in zend_arena_alloc() 96 return arena->ptr; in zend_arena_checkpoint() 116 if ((char*)ptr > (char*)arena && (char*)ptr <= arena->ptr) { in zend_arena_contains() 132 void **ptr; member 154 void **ptr; in zend_arena_destroy() local 155 for (ptr = arena->ptrs; ptr < arena->ptr; ptr++) { in zend_arena_destroy() 156 efree(*ptr); in zend_arena_destroy() [all …]
|
H A D | zend_call_stack.c | 599 static bool zend_call_stack_get_netbsd_vm(zend_call_stack *stack, void **ptr) in zend_call_stack_get_netbsd_vm() argument 620 *ptr = malloc(len); in zend_call_stack_get_netbsd_vm() 622 if (sysctl(mib, 5, *ptr, &len, NULL, 0) != 0) { in zend_call_stack_get_netbsd_vm() 626 start = (char *)*ptr; in zend_call_stack_get_netbsd_vm() 659 void *ptr = NULL; in zend_call_stack_get_netbsd() local 660 bool r = zend_call_stack_get_netbsd_vm(stack, &ptr); in zend_call_stack_get_netbsd() 661 free(ptr); in zend_call_stack_get_netbsd()
|
H A D | zend_closures.c | 194 void *ptr; in ZEND_METHOD() local 197 ptr = emalloc(my_function->op_array.cache_size); in ZEND_METHOD() 198 ZEND_MAP_PTR_INIT(my_function->op_array.run_time_cache, ptr); in ZEND_METHOD() 199 memset(ptr, 0, my_function->op_array.cache_size); in ZEND_METHOD() 734 void *ptr; in zend_create_closure_ex() local 775 ptr = ZEND_MAP_PTR_GET(func->op_array.run_time_cache); in zend_create_closure_ex() 776 if (!ptr in zend_create_closure_ex() 780 if (!ptr in zend_create_closure_ex() 790 ZEND_MAP_PTR_SET(func->op_array.run_time_cache, ptr); in zend_create_closure_ex() 794 ptr = emalloc(func->op_array.cache_size); in zend_create_closure_ex() [all …]
|
H A D | zend_compile.h | 127 unsigned char *ptr; member
|
H A D | zend_execute.c | 221 void *ptr; in zend_vm_stack_extend() local 232 return ptr; in zend_vm_stack_extend() 312 return ptr; in _get_zval_cv_lookup() 709 if (ptr && ptr->func && ZEND_USER_CODE(ptr->func->common.type)) { in zend_verify_arg_error() 1375 if (ptr && ptr->func && ZEND_USER_CODE(ptr->func->common.type)) { in zend_missing_arg_error() 3151 ZVAL_NEW_REF(ptr, ptr); in zend_handle_fetch_obj_flags() 3733 list->ptr[0] = source_list->ptr; in zend_ref_add_type_source() 3766 ptr = list->ptr; in zend_ref_del_type_source() 3768 while (ptr < end && *ptr != prop) { in zend_ref_del_type_source() 3769 ptr++; in zend_ref_del_type_source() [all …]
|
H A D | zend_execute.h | 119 : (ref)->sources.ptr) 444 #define CACHE_PTR(num, ptr) do { \ argument 456 slot[1] = (ptr); \ 463 (slot)[0] = (ptr); \ 471 (slot)[1] = (ptr); \ 476 #define IS_SPECIAL_CACHE_VAL(ptr) \ argument 477 (((uintptr_t)(ptr)) & CACHE_SPECIAL) 483 (((uintptr_t)(ptr)) >> 1) 519 if (_source_list->ptr) { \ 522 _prop = _list->ptr; \ [all …]
|
H A D | zend_extensions.c | 317 char *ptr = zend_arena_calloc(&CG(arena), functions, rt_size); in zend_init_internal_run_time_cache() local 322 ZEND_MAP_PTR_SET(zif->run_time_cache, (void *)ptr); in zend_init_internal_run_time_cache() 323 ptr += rt_size; in zend_init_internal_run_time_cache() 330 ZEND_MAP_PTR_SET(zif->run_time_cache, (void *)ptr); in zend_init_internal_run_time_cache() 331 ptr += rt_size; in zend_init_internal_run_time_cache()
|
H A D | zend_gc.c | 149 #define GC_GET_PTR(ptr) \ argument 150 ((void*)(((uintptr_t)(ptr)) & ~GC_BITS)) 152 #define GC_IS_ROOT(ptr) \ argument 153 ((((uintptr_t)(ptr)) & GC_BITS) == GC_ROOT) 154 #define GC_IS_UNUSED(ptr) \ argument 156 #define GC_IS_GARBAGE(ptr) \ argument 158 #define GC_IS_DTOR_GARBAGE(ptr) \ argument 161 #define GC_MAKE_GARBAGE(ptr) \ argument 162 ((void*)(((uintptr_t)(ptr)) | GC_GARBAGE)) 163 #define GC_MAKE_DTOR_GARBAGE(ptr) \ argument [all …]
|
H A D | zend_gc.h | 144 zend_get_gc_buffer *gc_buffer, void *ptr) { in zend_get_gc_buffer_add_ptr() argument 148 ZVAL_PTR(gc_buffer->cur, ptr); in zend_get_gc_buffer_add_ptr()
|
H A D | zend_generators.c | 204 leaf->node.ptr.root = NULL; in clear_link_to_leaf() 205 generator->node.ptr.leaf = NULL; in clear_link_to_leaf() 213 if (generator->node.ptr.root) { in clear_link_to_root() 214 generator->node.ptr.root->node.ptr.leaf = NULL; in clear_link_to_root() 215 generator->node.ptr.root = NULL; in clear_link_to_root() 419 generator->node.ptr.root = NULL; in zend_generator_create() 436 if (!ptr->func && Z_TYPE(ptr->This) == IS_OBJECT) { in zend_generator_check_placeholder_frame() 450 return ptr; in zend_generator_check_placeholder_frame() 504 from->node.ptr.leaf = leaf; in zend_generator_yield_from() 505 leaf->node.ptr.root = from; in zend_generator_yield_from() [all …]
|
H A D | zend_generators.h | 53 } ptr; member 107 ZEND_API zend_execute_data *zend_generator_check_placeholder_frame(zend_execute_data *ptr); 118 zend_generator *root = generator->node.ptr.root; in zend_generator_get_current()
|
/php-src/Zend/tests/ |
H A D | bug69805.phpt | 2 Bug #69805 (null ptr deref and seg fault in zend_resolve_class_name)
|
H A D | bug69905.phpt | 2 Bug #69905 (null ptr deref and segfault in ZEND_FETCH_DIM_RW_SPEC_VAR_UNUSED_HANDLER)
|
H A D | bug70124.phpt | 2 Bug #70124 (null ptr deref / seg fault in ZEND_HANDLE_EXCEPTION_SPEC_HANDLER)
|
H A D | bug70782.phpt | 2 Bug #70782: null ptr deref and segfault (zend_get_class_fetch_type)
|
H A D | bug70895.phpt | 2 Bug #70895 null ptr deref and segfault with crafted callable
|
H A D | bug70898.phpt | 2 Bug #70895 null ptr deref and segfault with crafted callable
|
H A D | bug70912.phpt | 2 Bug #70912 (Null ptr dereference when class property is initialised to a dereferenced value)
|