diff options
| author | Nikita Popov <nikita.ppv@gmail.com> | 2020-01-21 11:26:24 +0100 |
|---|---|---|
| committer | Nikita Popov <nikita.ppv@gmail.com> | 2020-01-21 11:26:24 +0100 |
| commit | fcdb610a0ccfdc597b1124da002f72ad0bbe82d7 (patch) | |
| tree | 3aa39540aaacce583534583f1297574e5a33715b | |
| parent | 5217666a782b6af00d3154841adc30691305a8ec (diff) | |
| download | php-git-fcdb610a0ccfdc597b1124da002f72ad0bbe82d7.tar.gz | |
Fix double free in array_reduce
return_value needs to be explicitly nulled out in the failure case.
| -rw-r--r-- | ext/standard/array.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ext/standard/array.c b/ext/standard/array.c index 14ff138004..3624881c4c 100644 --- a/ext/standard/array.c +++ b/ext/standard/array.c @@ -6057,7 +6057,7 @@ PHP_FUNCTION(array_reduce) } else { zval_ptr_dtor(&args[1]); zval_ptr_dtor(&args[0]); - return; + RETURN_NULL(); } } ZEND_HASH_FOREACH_END(); |