From 16a816b92c15f25dae8402110ba0193a4bb5bb9c Mon Sep 17 00:00:00 2001 From: Marcus Boerger Date: Mon, 15 Sep 2003 20:20:14 +0000 Subject: [PATCH] Bugfix #25547 --- Zend/zend_execute.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/Zend/zend_execute.c b/Zend/zend_execute.c index 6d0111f936..5cf85d3478 100644 --- a/Zend/zend_execute.c +++ b/Zend/zend_execute.c @@ -763,6 +763,8 @@ fetch_string_dim: retval = &EG(uninitialized_zval_ptr); break; case BP_VAR_RW: + offset_key = estrndup(offset_key, offset_key_length); + /* calling an user error handler may free zval dim, so we copy the string */ zend_error(E_NOTICE,"Undefined index: %s", offset_key); /* break missing intentionally */ case BP_VAR_W: { @@ -771,6 +773,9 @@ fetch_string_dim: new_zval->refcount++; zend_symtable_update(ht, offset_key, offset_key_length+1, &new_zval, sizeof(zval *), (void **) &retval); } + if (type == BP_VAR_RW) { + efree(offset_key); + } break; } } -- 2.40.0