fix #36859 (DOMElement crashes when calling __construct when clone'ing)

diff --git a/NEWS b/NEWS
index e1a85de6271adef6aa3fea80ed52dcd7c02414ff..73b40f5604ef6c509aff607bc37f5ecf5933cc5a 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -11,6 +11,8 @@ PHP                                                                        NEWS
 - Removed the E_STRICT deprecation notice from "var". (Ilia)
 - Fixed debug_zval_dump() to support private and protected members. (Dmitry)
 - Fixed SoapFault::getMessage(). (Dmitry)
+- Fixed bug #36859 (DOMElement crashes when calling __construct when 
+  clone'ing). (Tony)
 - Fixed bug #36825 (Exceptions thrown in ArrayObject::offsetGet cause 
   segfault). (Tony)
 - Fixed bug #36820 (Privileged connection with an Oracle password file fails). 

diff --git a/ext/dom/php_dom.c b/ext/dom/php_dom.c
index fcd7b313be35fb5b94d54b52f450cd35f8ecb9fe..0e5bf0bfa464b86ee39e7913ef3bd6f7a90bddb3 100644 (file)
--- a/ext/dom/php_dom.c
+++ b/ext/dom/php_dom.c
@@ -443,6 +443,7 @@ zend_object_value dom_objects_store_clone_obj(zval *zobject TSRMLS_DC)
        retval.handle = zend_objects_store_put(new_object, obj->dtor, obj->free_storage, obj->clone TSRMLS_CC);
        intern = (dom_object *) new_object;
        intern->handle = retval.handle;
+       intern->ptr = NULL;
        retval.handlers = Z_OBJ_HT_P(zobject);
        
        old_object = (dom_object *) obj->object;