MFH: Fixed bug #34420 (Possible crash inside curl_multi_remove_handle()).

diff --git a/NEWS b/NEWS
index c8a0c5ade304af2d9afc09b656dbddcc6045e551..7ba55c4c7fd0461a4c7f5c29f932f6f5ad0f3d8e 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -23,6 +23,7 @@ PHP                                                                        NEWS
 - Fixed "make test" to work for phpized extensions. (Hartmut, Jani)
 - Fixed failing queries (FALSE returned) with mysqli_query() on 64 bit systems.
   (Andrey)
+- Fixed bug #34420 (Possible crash inside curl_multi_remove_handle()). (Ilia)
 - Fixed bug #34331 (php crashes when variables_order is empty). (Ilia)
 - Fixed bug #34311 (unserialize() crashes with chars above 191 dec). (Nuno)
 - Fixed bug #34310 (foreach($arr as $c->d => $x) crashes). (Dmitry)

diff --git a/ext/curl/multi.c b/ext/curl/multi.c
index 9a4ea0702cf6dbb5b14ac7422b8dda4611bd6bbe..dbc8087a0488c58ed1e47ff3be58290ee3fd97e0 100644 (file)
--- a/ext/curl/multi.c
+++ b/ext/curl/multi.c
@@ -111,8 +111,6 @@ PHP_FUNCTION(curl_multi_remove_handle)
        ZEND_FETCH_RESOURCE(mh, php_curlm *, &z_mh, -1, le_curl_multi_handle_name, le_curl_multi_handle);
        ZEND_FETCH_RESOURCE(ch, php_curl *, &z_ch, -1, le_curl_name, le_curl);
 
-       zval_ptr_dtor(&z_ch);
-
        --ch->uses;
        
        RETURN_LONG((long) curl_multi_remove_handle(mh->multi, ch->cp));