[curl] Free pushed handle when CURLMOPT_PUSHFUNCTION denies or throws - #297

Closed

iliaal wants to merge 9 commits into

fix/curl-push-deny-leak-84

Commits on Sep 18, 2026

ext/xsl: XSLTProcessor::importStylesheet() use-after-free during a transformation.
devnexen
committed
b55c619
ext/zip: ZipArchive::close() use-after-free from a progress or cancel callback.
devnexen
committed
132403d

Commits on Sep 19, 2026

Fix GH-23729: DOMXPath::__construct() use-after-free during an evaluation
devnexen
committed
a74f826
Fix GH-22567 (Windows ZTS CLI SAPI should refresh its TSRMLS cache during request activation)

matyhtf
authored and
Girgias
committed
4e64a26
Fix heap over-read in cli_get_prompt() for empty cli.prompt
iliaal
committed
c2c01ae
Fix three Win32-only defects in proc_open descriptor handling
iliaal
committed
8d0d630
Fix OSS-Fuzz #546798343: Heap-buffer-overflow in zend_delete_call_instructions with callable conversion
ndossche
committed
3213c3f

Commits on Sep 20, 2026