MFH: Fixed bug #27295 (memory leak inside sscanf()).

diff --git a/NEWS b/NEWS
index 0088192f7e6dee30344a598f67211f7b3958cd05..c97980486077f519b65b2872b288a5fabd3894d4 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,7 @@
 PHP 4                                                                      NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 ?? Feb 2004, Version 4.3.5
+- Fixed bug #27295 (memory leak inside sscanf()). (Ilia)
 - Fixed bug #27293 (two crashes inside image2wbmp()). (Ilia)
 - Fixed bug #27278 (*printf() functions treat arguments as if passed by
   reference). (Ilia)

diff --git a/ext/standard/scanf.c b/ext/standard/scanf.c
index fe4bc3ef1443065842731a1cd6bc8a5e379ed588..f86dd8e99736de28c781688cf10a832cc783e747 100644 (file)
--- a/ext/standard/scanf.c
+++ b/ext/standard/scanf.c
@@ -923,7 +923,7 @@ PHPAPI int php_sscanf_internal(     char *string, char *format,
             if (!(flags & SCAN_SUPPRESS)) {
                 if (numVars) {
                     current = args[objIndex++];
-                    convert_to_string( *current );
+                    zval_dtor( *current );
                     ZVAL_STRINGL( *current, string, end-string, 1);
                 } else {
                     add_index_stringl(*return_value, objIndex++, string, end-string, 1);