]> granicus.if.org Git - php/commitdiff
Fixed bug #50723 (Bug in garbage collector causes crash)
authorDmitry Stogov <dmitry@php.net>
Tue, 2 Feb 2010 12:32:29 +0000 (12:32 +0000)
committerDmitry Stogov <dmitry@php.net>
Tue, 2 Feb 2010 12:32:29 +0000 (12:32 +0000)
Zend/zend_execute.h

index a3ded0160f7a59690cbed3690ea2dd6943086a35..d34eb1acbd3ece4f0a03ae7d84041890bb35c695 100644 (file)
@@ -246,7 +246,7 @@ static inline void *zend_vm_stack_alloc(size_t size TSRMLS_DC)
                int extra = (ZEND_MM_ALIGNMENT - ((zend_uintptr_t)EG(argument_stack)->top & (ZEND_MM_ALIGNMENT - 1))) / sizeof(void*);
 
                if (UNEXPECTED(size + extra + ZEND_MM_ALIGNED_SIZE(sizeof(void*)) / sizeof(void*) >
-                   (zend_uintptr_t)EG(argument_stack)->end - (zend_uintptr_t)EG(argument_stack)->top)) {
+                   (zend_uintptr_t)(EG(argument_stack)->end - EG(argument_stack)->top))) {
                        zend_vm_stack_extend(size TSRMLS_CC);
                } else {
                        void **old_top = EG(argument_stack)->top;