From: Dmitry Stogov <dmitry@zend.com>
Date: Fri, 23 Jan 2015 14:10:05 +0000 (+0300)
Subject: Fixed possible double free of class static members
X-Git-Tag: PRE_PHP7_REMOVALS~25^2~16
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=a7f1bf3ec5b9b7849bbde6730235c597c299bcd1;p=php

Fixed possible double free of class static members
---

diff --git a/Zend/zend_opcode.c b/Zend/zend_opcode.c
index 9f25784940..aa2abb2f6b 100644
--- a/Zend/zend_opcode.c
+++ b/Zend/zend_opcode.c
@@ -151,13 +151,15 @@ ZEND_API void zend_cleanup_user_class_data(zend_class_entry *ce)
 	}
 	if (ce->static_members_table) {
 		zval *static_members = ce->static_members_table;
+		int count = ce->default_static_members_count;
 		int i;
 
-		ce->static_members_table = NULL;
-		for (i = 0; i < ce->default_static_members_count; i++) {
+		ce->default_static_members_count = 0;
+		ce->default_static_members_table = ce->static_members_table = NULL;
+		for (i = 0; i < count; i++) {
 			zval_ptr_dtor(&static_members[i]);
-			ZVAL_UNDEF(&static_members[i]);
 		}
+		efree(static_members);
 	}
 }