#24772 [Opn->Csd]: Applying isset() to a dereferenced string causes leak

ID: 24772 Updated by: iliaa@php.net Reported By: moriyoshi@php.net -Status: Open +Status: Closed Bug Type: Scripting Engine problem Operating System: irrelevant PHP Version: 4CVS-2003-07-23 (stable) New Comment: This bug has been fixed in CVS. In case this was a PHP problem, snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. In case this was a documentation problem, the fix will show up soon at http://www.php.net/manual/. In case this was a PHP.net website problem, the change will show up on the PHP.net site and on the mirror sites in short time. Thank you for the report, and for helping us make PHP better. This was fixed on Monday, latest CVS sources do not have this problem. Previous Comments: ------------------------------------------------------------------------ [2003-07-23 13:34:48] moriyoshi@php.net Oops, I was using the wrong binary.. ------------------------------------------------------------------------ [2003-07-23 13:28:43] moriyoshi@php.net Description: ------------ Applying isset() to a dereference element of the string causes a very small leak. Reproduce code: --------------- <?php $a = "string"; var_dump(isset($a{0})); ?> Expected result: ---------------- bool(true) Actual result: -------------- /home/koizumi/src/php-src-4/Zend/zend_execute.c(2399) : Freeing 0x0837545C (2 bytes), script=/tmp/test.php 2397: zval *str = T->EA.data.str_offset.str; 2398: char c = str->value.str.val[T->EA.data.str_offset.offset]; 2399: T->tmp_var.value.str.val = estrndup(&c, 1); 2400: T->tmp_var.value.str.len = 1; 2401: isset = 1; 2402: } ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=24772&edit=1