From: Ilia Alshanetsky <iliaa@php.net>
Date: Tue, 25 Nov 2003 02:19:47 +0000 (+0000)
Subject: Fixed bug #26384 (crash inside domxslt->process() due to a double free).
X-Git-Tag: php-4.3.5RC1~176
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=bbd07ddfffd4afac4b670242a02bb501643e489e;p=php

Fixed bug #26384 (crash inside domxslt->process() due to a double free).
---

diff --git a/NEWS b/NEWS
index ab54bdc1a7..1c0ee37b0d 100644
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,7 @@ PHP 4                                                                      NEWS
 ?? ??? 2003, Version 4.3.5
 - Fixed header handler in NSAPI SAPI module (header->replace was ignored,
   send_default_content_type now sends value from php.ini). (Uwe Schindler)
+- Fixed bug #26384 (crash in domxslt->process()). (Ilia)
 - Fixed bug #26355 (flock() doesn't initialize the wouldblock argument). (Ilia)
 - Fixed bug #26309 (Fixed argument parsing for imageftbbox()). (Ilia)
 - Fixed bug #26285 (escapeshellarg() uses wrong quotes on windows). (Ilia)
diff --git a/ext/domxml/php_domxml.c b/ext/domxml/php_domxml.c
index 224cfb861d..a741b50ea8 100644
--- a/ext/domxml/php_domxml.c
+++ b/ext/domxml/php_domxml.c
@@ -729,7 +729,6 @@ static void php_free_xml_doc(zend_rsrc_list_entry *rsrc TSRMLS_DC)
 	xmlDoc *doc = (xmlDoc *) rsrc->ptr;
 
 	if (doc) {
-		node_list_wrapper_dtor(doc->children, 1 TSRMLS_CC);
 		node_wrapper_dtor((xmlNodePtr) doc);
 		xmlFreeDoc(doc);
 	}