From b05ff14a9aa8fd98eea9cbeb090f9d64bf302561 Mon Sep 17 00:00:00 2001
From: Xinchen Hui <laruence@gmail.com>
Date: Sun, 24 Sep 2017 17:24:11 +0800
Subject: Fixed bug #75241 (Null pointer dereference in zend_mm_alloc_small()).

---
 Zend/zend_operators.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'Zend/zend_operators.c')

diff --git a/Zend/zend_operators.c b/Zend/zend_operators.c
index 3a8929b83f..d87dba919b 100644
--- a/Zend/zend_operators.c
+++ b/Zend/zend_operators.c
@@ -221,8 +221,10 @@ try_again:
 					if (Z_TYPE(holder) == IS_LONG) {				\
 						if (op == result) {							\
 							zval_ptr_dtor(op);						\
+							ZVAL_LONG(op, Z_LVAL(holder));			\
+						} else {									\
+							(op) = &(holder);						\
 						}											\
-						(op) = &(holder);							\
 					}												\
 					break;											\
 			}														\
-- 
cgit v1.2.1