Fix GH-9997: OpenSSL engine clean up segfault

Author: bukka

NEWS

@@ -24,6 +24,9 @@ PHP                                                                        NEWS
   . Fixed bug GH-9535 (The behavior of mb_strcut in mbstring has been changed in
     PHP8.1). (Nathan Freeman)
 
+- OpenSSL:
+  . Fixed bug GH-9997 (OpenSSL engine clean up segfault). (Jakub Zelenka)
+
 - Pcntl:
   . Fixed bug GH-9298 (Signal handler called after rshutdown leads to crash).
     (Erki Aring)

ext/openssl/openssl.c

@@ -1324,13 +1324,14 @@ PHP_MSHUTDOWN_FUNCTION(openssl)
 #if OPENSSL_VERSION_NUMBER < 0x10100000L || defined (LIBRESSL_VERSION_NUMBER)
 	EVP_cleanup();
 
+	/* prevent accessing locking callback from unloaded extension */
+	CRYPTO_set_locking_callback(NULL);
+
 #ifndef OPENSSL_NO_ENGINE
 	/* Free engine list initialized by OPENSSL_config */
 	ENGINE_cleanup();
 #endif
 
-	/* prevent accessing locking callback from unloaded extension */
-	CRYPTO_set_locking_callback(NULL);
 	/* free allocated error strings */
 	ERR_free_strings();
 	CONF_modules_free();