- Only free when result != op1

diff --git a/Zend/zend_operators.c b/Zend/zend_operators.c
index ece7d04dcdc9f863e1e2fcc1d0a98c7a7cfb7898..47b0f6d9e75d8e304b24717915532c077351b09c 100644 (file)
--- a/Zend/zend_operators.c
+++ b/Zend/zend_operators.c
@@ -907,9 +907,9 @@ ZEND_API int concat_function(zval *result, zval *op1, zval *op2)
                memcpy(result->value.str.val+op1->value.str.len, op2->value.str.val,op2->value.str.len);
                result->value.str.val[result->value.str.len] = 0;
                result->type = IS_STRING;
-       }
-       if (use_copy1) {
-               zval_dtor(op1);
+               if (use_copy1) {
+                       zval_dtor(op1);
+               }
        }
        if (use_copy2) {
                zval_dtor(op2);