diff options
| author | Stanislav Malyshev <stas@php.net> | 2014-08-30 18:32:12 -0700 |
|---|---|---|
| committer | Stanislav Malyshev <stas@php.net> | 2014-09-02 12:31:03 -0700 |
| commit | 53fa6c5b6b5b09059ba54c8912d0c0aef57aa4ff (patch) | |
| tree | 75f760285a6cd432a00eb9063581550649439265 | |
| parent | 30aceaf1a7cf9ef6f32806463212323c6ab89f09 (diff) | |
| download | php-git-53fa6c5b6b5b09059ba54c8912d0c0aef57aa4ff.tar.gz | |
Fix bug #67644 - Memory corruption & crash during ob_start function callback
| -rw-r--r-- | NEWS | 2 | ||||
| -rw-r--r-- | main/main.c | 6 |
2 files changed, 8 insertions, 0 deletions
@@ -6,6 +6,8 @@ PHP NEWS . Fixed bug #47358 (glob returns error, should be empty array()). (Pierre) . Fixed bug #65463 (SIGSEGV during zend_shutdown()). (Keyur Govande) . Fixed bug #66036 (Crash on SIGTERM in apache process). (Keyur Govande) + . Fixed bug #67644 (Memory corruption & crash during ob_start function + callback). (Stas) - OpenSSL: . Fixed bug #41631 (socket timeouts not honored in blocking SSL reads). diff --git a/main/main.c b/main/main.c index 8546500f32..e0b0916185 100644 --- a/main/main.c +++ b/main/main.c @@ -1767,6 +1767,12 @@ void php_request_shutdown(void *dummy) } } zend_end_try(); + /* Output buffer handlers may have created new objects. Mark these objects + as destructed to avoid calling their dtors too late on shutdown when + all dtors were supposed to be cleaned + */ + zend_objects_store_mark_destructed(&EG(objects_store) TSRMLS_CC); + /* 4. Reset max_execution_time (no longer executing php code after response sent) */ zend_try { zend_unset_timeout(TSRMLS_C); |