Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:10244 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 25575 invoked by uid 1010); 2 Jun 2004 12:46:33 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 25372 invoked from network); 2 Jun 2004 12:46:31 -0000 Received: from unknown (HELO mail.zend.com) (192.117.235.230) by pb1.pair.com with SMTP; 2 Jun 2004 12:46:31 -0000 Received: (qmail 11030 invoked from network); 2 Jun 2004 12:46:22 -0000 Received: from shire.zend.office (10.1.2.160) by int.zend.com with SMTP; 2 Jun 2004 12:46:22 -0000 Date: Wed, 2 Jun 2004 15:46:22 +0300 (IDT) X-X-Sender: frodo@shire.zend.office To: Stefan Esser cc: internals@lists.php.net In-Reply-To: <40BDC6F4.2070109@php.net> Message-ID: References: <40BDBD4D.4050905@php.net> <40BDC6F4.2070109@php.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: Re: [PHP-DEV] ZendEngine 2 - Double Free BUG From: stas@zend.com (Stanislav Malyshev) SE>>Maybe you should ask the person who wrote it "why". Well the problem SE>>is not that it frees it. The problem is that the refcount is zero when SE>>the std_setter is called. I think you are right, it should be fixed in zend_post_incdec_property. Do you have reproducing code example so it can be tested? -- Stanislav Malyshev, Zend Products Engineer stas@zend.com http://www.zend.com/ +972-3-6139665 ext.115