Fixed bug #29566 (foreach/string handling strangeness (crash)).

diff --git a/Zend/zend_execute.c b/Zend/zend_execute.c
index d4d80dd763f3438de59e9421ddd0a3151630bc99..da90c8c863af997d80c25253db9ff2ed7836fc2b 100644 (file)
--- a/Zend/zend_execute.c
+++ b/Zend/zend_execute.c
@@ -4049,7 +4049,7 @@ int zend_fe_reset_handler(ZEND_OPCODE_HANDLER_ARGS)
        if (opline->extended_value) {
                array_ptr_ptr = get_zval_ptr_ptr(&opline->op1, EX(Ts), &free_op1, BP_VAR_R);
                if (array_ptr_ptr == NULL) {
-                       MAKE_STD_ZVAL(array_ptr);
+                       ALLOC_INIT_ZVAL(array_ptr);
                } else if (Z_TYPE_PP(array_ptr_ptr) == IS_OBJECT) {
                        ce = Z_OBJCE_PP(array_ptr_ptr);
                        if (!ce || ce->get_iterator == NULL) {