Re: [PHP-DEV] ZendEngine 2 - Double Free BUG

2004-06-03 Thread Marcus Boerger
Hello Stefan, i made a fix for TSRM which is comitted but disabled by #if MBO_0 could you add #define MBO_0 at the to of TSRM/TSRM.c and check if that helps a bit? marcus Wednesday, June 2, 2004, 2:59:49 PM, you wrote: > Stanislav Malyshev wrote: >> I think you are right, it should be fixed in

Re: [PHP-DEV] ZendEngine 2 - Double Free BUG

2004-06-02 Thread Stefan Esser
Stanislav Malyshev wrote: I think you are right, it should be fixed in zend_post_incdec_property. Do you have reproducing code example so it can be tested? No it cannot be tested. In the default configuration Zend_MM is activated. This will catch double frees. No violation will happen when it i

Re: [PHP-DEV] ZendEngine 2 - Double Free BUG

2004-06-02 Thread Stanislav Malyshev
SE>>Maybe you should ask the person who wrote it "why". Well the problem SE>>is not that it frees it. The problem is that the refcount is zero when SE>>the std_setter is called. I think you are right, it should be fixed in zend_post_incdec_property. Do you have reproducing code example so it can

Re: [PHP-DEV] ZendEngine 2 - Double Free BUG

2004-06-02 Thread Stefan Esser
Stanislav Malyshev wrote: SE>>Z_OBJ_HT_P(object)->write_property(object, property, z TSRMLS_CC); SE>> SE>>within this function z is freed and Why should write_property free z? static int zend_std_call_setter(zval *object, zval *member, zval *value TSRMLS_DC) { zval **call_args[2];

Re: [PHP-DEV] ZendEngine 2 - Double Free BUG

2004-06-02 Thread Stanislav Malyshev
SE>>Z_OBJ_HT_P(object)->write_property(object, property, z TSRMLS_CC); SE>> SE>>within this function z is freed and Why should write_property free z? -- Stanislav Malyshev, Zend Products Engineer [EMAIL PROTECTED] http://www.zend.com/ +972-3-6139665 ext.115 -- PHP Internals - PHP Runtime D