cvs: php-src(PHP_4_4) /ext/session session.c

iliaa Sun Mar 25 14:33:53 2007 UTC Modified files: (Branch: PHP_4_4) /php-src/ext/session session.c Log: Fixed MOPB-32-2007 (Double free inside session_decode()) http://cvs.php.net/viewvc.cgi/php-src/ext/session/session.c?r1=1.336.2.53.2.15&r2=1.336.2.53.2.16&diff_format=u Index: php-src/ext/session/session.c diff -u php-src/ext/session/session.c:1.336.2.53.2.15 php-src/ext/session/session.c:1.336.2.53.2.16 --- php-src/ext/session/session.c:1.336.2.53.2.15 Wed Mar 14 19:42:59 2007 +++ php-src/ext/session/session.c Sun Mar 25 14:33:53 2007 @@ -17,7 +17,7 @@ +----------------------------------------------------------------------+ */ -/* $Id: session.c,v 1.336.2.53.2.15 2007/03/14 19:42:59 iliaa Exp $ */ +/* $Id: session.c,v 1.336.2.53.2.16 2007/03/25 14:33:53 iliaa Exp $ */ #ifdef HAVE_CONFIG_H #include "config.h" @@ -535,7 +535,6 @@ if (zend_hash_find(&EG(symbol_table), name, namelen + 1, (void **) &tmp) == SUCCESS) { if ((Z_TYPE_PP(tmp) == IS_ARRAY && Z_ARRVAL_PP(tmp) == &EG(symbol_table)) || *tmp == PS(http_session_vars)) { - efree(name); goto skip; } }