com php-src: Fixed access to uninitialized data and attempt to double free: ext/gmp/gmp.c

Commit: f1720348ca7cfea9e88a294faf0ec077c66786f1 Author: Dmitry Stogov <dmitry@zend.com> Tue, 13 May 2014 12:57:42 +0400 Parents: 7b1cb4922f42417e5cdb954c54570f9a575d7839 Branches: phpng Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=f1720348ca7cfea9e88a294faf0ec077c66786f1 Log: Fixed access to uninitialized data and attempt to double free Changed paths: M ext/gmp/gmp.c Diff: diff --git a/ext/gmp/gmp.c b/ext/gmp/gmp.c index df7c912..e2ece55 100644 --- a/ext/gmp/gmp.c +++ b/ext/gmp/gmp.c @@ -565,6 +565,7 @@ static int gmp_unserialize(zval *object, zend_class_entry *ce, const unsigned ch int retval = FAILURE; php_unserialize_data_t unserialize_data = (php_unserialize_data_t) data; + ZVAL_UNDEF(&zv); PHP_VAR_UNSERIALIZE_INIT(unserialize_data); gmp_create(object, &gmpnum TSRMLS_CC); @@ -579,6 +580,7 @@ static int gmp_unserialize(zval *object, zend_class_entry *ce, const unsigned ch goto exit; } zval_dtor(&zv); + ZVAL_UNDEF(&zv); if (!php_var_unserialize(&zv, &p, max, &unserialize_data TSRMLS_CC) || Z_TYPE(zv) != IS_ARRAY