Fixed memory corruption because of double free()

diff --git a/ext/session/session.c b/ext/session/session.c
index a9a478df4b42bb2688b55f3d171aca6862421398..4ae18eca5244b9327d3747dec20a7746376fd9aa 100644 (file)
--- a/ext/session/session.c
+++ b/ext/session/session.c
@@ -1838,6 +1838,7 @@ static PHP_RSHUTDOWN_FUNCTION(session)
        for (i = 0; i < 6; i++) {
                if (PS(mod_user_names).names[i] != NULL) {
                        zval_ptr_dtor(&PS(mod_user_names).names[i]);
+                       PS(mod_user_names).names[i] = NULL;
                }
        }