validate handle

diff --git a/Zend/zend_objects_API.c b/Zend/zend_objects_API.c
index b2f0a9229cfec49b641c4cda958bb89121ddecf1..127661e3e72b6a9fdc0b60e28ffe37d6e7513838 100644 (file)
--- a/Zend/zend_objects_API.c
+++ b/Zend/zend_objects_API.c
@@ -165,7 +165,7 @@ ZEND_API void *zend_object_store_get_object(zval *zobject TSRMLS_DC)
 {
        zend_object_handle handle = Z_OBJ_HANDLE_P(zobject);
 
-       if (!EG(objects_store).object_buckets[handle].valid) {
+       if (handle >= EG(objects_store).top || !EG(objects_store).object_buckets[handle].valid) {
                zend_error(E_ERROR, "Trying to access invalid object");
                return NULL;
        }