Bug #5393: Potential bug in php3_request_shutdown()
| From: | priit at bluemoon dot ee | Date: | Wed, 05 Jul 2000 22:26:56 +0000 |
| Subject: | Bug #5393: Potential bug in php3_request_shutdown() | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-23509@lists.php.net to get a copy of this message | ||
From: priit@bluemoon.ee
Operating system: SunOS 2.7 / RH Linux 6.1
PHP version: 3.0.16
PHP Bug Type: Other
Bug description: Potential bug in php3_request_shutdown()
By looking at code I discovered potential bug in php3_request_shutdown(): When cleaning up function
state stack last_symbol_table is initated to NULL, then function_states in function_state_stack are
freed from top to bottom, while updating/checking last_symbol_table and in the end current
function_state is freed. BUT logically current function_state belongs to top of the stack and not to
bottom, to witch symbol_table last_symbol_table will point to
Fix:
Set last_symbol_table to GLOBAL(function_state).symbol_table, free function_state and then proceed
with function_state_stack freeing