Still Works on PHP 8.5.12

Text on the meme

still works on 8.5.12! Build complete. Don't forget to run 'make test'. php-8.5.12 💗💗💗💗 USE_ZEND_ALLOC=0 ./sapi/cli/php -n ~/projects/other/php/poc.php ==84757==ERROR: AddressSanitizer: attempting double-free on 0x... in thread T0: #0 0x0000105ed368 in free+0x7c #1 0x000103bf1e10 in __zend_free zend_alloc.c:3976 #2 0x000103b5e20 in _efree zend_alloc.c:2928 #14 0x0001040d20b8 in ZEND_DO_FCALL_SPEC_RETVAL_UNUSED_TAILCALL_HANDLER zend_vm_execute.h:57869 #15 0x000103d83280 in execute_ex zend_vm_execute.h:113626 #16 0x000103d83de4 in zend_execute zend_vm_execute.h:122038 #17 0x0001044414a4 in zend_execute_script zend_execute.c:1990 #18 0x0001039676b4 in php_execute_script_ext main.c:2688 #19 0x000103967c48 in php_execute_script main.c:2728 #20 0x0001044408d4 in do_cli php_cli.c:960 #21 0x000104446c48 in main php_cli.c:1383 #22 0x00010187c840 in start+0x1b4c (dyld:arm64e+0x204e0)

What it means

A social media post claims that a PHP exploit still works on version 8.5.12, but the terminal output immediately shows an AddressSanitizer double-free error. The joke is the programmer’s ironic definition of “still works”: the code runs far enough to crash in a recognizable way, making it a reaction to fragile software, broken tests, or dubious legacy code.

Objects

social media post / публикация в соцсети terminal window / окно терминала PHP source code / исходный код PHP command line / командная строка error message / сообщение об ошибке computer screen / экран компьютера black redaction box / чёрный прямоугольник с цензурой text caption / текстовая подпись heart emojis / эмодзи-сердца