Never, ever, overwrite the refcount element of a connected zval!

diff --git a/Zend/zend_execute.c b/Zend/zend_execute.c
index aaf5b427e7bbedc4466248ee9c7aa4ff1b6e03ee..9f3b75afd9e26d419f8e1ace537165ad50a4b0d4 100644 (file)
--- a/Zend/zend_execute.c
+++ b/Zend/zend_execute.c
@@ -2612,7 +2612,7 @@ int zend_do_fcall_common_helper(ZEND_OPCODE_HANDLER_ARGS)
 
        if (EG(This)) {
                if (EG(exception) && EX(fbc)->common.fn_flags&ZEND_ACC_CTOR) {
-                       EG(This)->refcount = 1;
+                       EG(This)->refcount--;
                        zval_ptr_dtor(&EG(This));
                } else if (should_change_scope) {
                        zval_ptr_dtor(&EG(This));