Merge branch 'bug68799' into PHP-5.4

* bug68799:
  Fix bug #68799: Free called on unitialized pointer

diff --cc NEWS
index 5d8f24c897288f5cb60e741a9384c28a1be07313,fa57ef3161c3d77d060bbb8ec5414c80bc618045..43e4c1e29204b7d27aecd6e53505e502cd5e740f
--- 1/NEWS
--- 2/NEWS
+++ b/NEWS
@@@ -2,17 -2,7 +2,20 @@@ PH
  |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
  ?? ??? 20?? PHP 5.4.37
  - CGI:
--  . Fix bug #68618 (out of bounds read crashes php-cgi). (Stas)
++  . Fixed bug #68618 (out of bounds read crashes php-cgi). (Stas)
++
++- EXIF:
++  . Fix bug #68799: Free called on unitialized pointer. (CVE-2015-0232) (Stas)
 +
 +- Fileinfo:
 +  . Removed readelf.c and related code from libmagic sources
 +    (Remi, Anatol)
 +  . Fixed bug #68735 (fileinfo out-of-bounds memory access).
 +    (Anatol)
 +
 +- OpenSSL:
 +  . Fixed bug #55618 (use case-insensitive cert name matching).
 +    (Daniel Lowrey)
  
  18 Dec 2014 PHP 5.4.36