fixed: WWW-Authenticate -> header_line got only freed when safe_mode was activ

fixed: WWW-Authenticate -> content of header_line was changed after it was freed

diff --git a/main/SAPI.c b/main/SAPI.c
index 396927685e652fba01aeb33c0bf1fed80c35608a..13bf1db4cd00c476d320b2b84c4d04719ba67a6a 100644 (file)
--- a/main/SAPI.c
+++ b/main/SAPI.c
@@ -521,7 +521,7 @@ SAPI_API int sapi_add_header_ex(char *header_line, uint header_line_len, zend_bo
                                        efree(result);
                                        efree(Z_STRVAL_P(repl_temp));
                                        efree(repl_temp);
-                               }
+                               } else efree(header_line);
 #else
                                if(PG(safe_mode)) {
                                        myuid = php_getuid();
@@ -532,10 +532,9 @@ SAPI_API int sapi_add_header_ex(char *header_line, uint header_line_len, zend_bo
                                        sapi_header.header = newheader;
                                        sapi_header.header_len = newlen;
                                        efree(result);
-                               }
+                               } else efree(header_line);
 #endif
                        }
-                       *colon_offset = ':';
                }
        }