diff options
| author | Antony Dovgal <tony2001@php.net> | 2006-02-14 22:10:55 +0000 |
|---|---|---|
| committer | Antony Dovgal <tony2001@php.net> | 2006-02-14 22:10:55 +0000 |
| commit | d43d0903624204fbfc88e235a0abc1e3597d5488 (patch) | |
| tree | 893f464d5c07a70d959bc243e2ab33d64e1020a1 /Zend/zend_strtod.c | |
| parent | 3608dd4c11827b8db5f610c95e4beab84cb8b0b7 (diff) | |
| download | php-git-d43d0903624204fbfc88e235a0abc1e3597d5488.tar.gz | |
fix leak in zend_strtod() on big doubles
add new test
Diffstat (limited to 'Zend/zend_strtod.c')
| -rw-r--r-- | Zend/zend_strtod.c | 18 |
1 files changed, 17 insertions, 1 deletions
diff --git a/Zend/zend_strtod.c b/Zend/zend_strtod.c index 87d755006a..3ad2c5f155 100644 --- a/Zend/zend_strtod.c +++ b/Zend/zend_strtod.c @@ -1250,7 +1250,7 @@ zend_strtod _double rv, rv0; Long L; ULong y, z; - Bigint *bb, *bb1, *bd, *bd0, *bs, *delta; + Bigint *bb, *bb1, *bd, *bd0, *bs, *delta, *tmp; double result; CONST char decimal_point = '.'; @@ -1776,5 +1776,21 @@ zend_strtod if (se) *se = (char *)s; result = sign ? -value(rv) : value(rv); + + for (i = 0; i <= Kmax; i++) { + Bigint **listp = &freelist[i]; + while ((tmp = *listp) != NULL) { + *listp = tmp->next; + free(tmp); + } + freelist[i] = NULL; + } + + while (p5s) { + tmp = p5s; + p5s = p5s->next; + free(tmp); + } + return result; } |