Prevent double free

dstogov · dstogov · commit 898312a3851c · 2021-08-24T12:17:41.000+03:00
diff --git a/Zend/zend_closures.c b/Zend/zend_closures.c
@@ -478,6 +478,7 @@ static void zend_closure_free_storage(zend_object *object) /* {{{ */
 		/* We don't own the static variables of fake closures. */
 		if (!(closure->func.op_array.fn_flags & ZEND_ACC_FAKE_CLOSURE)) {
 			zend_destroy_static_vars(&closure->func.op_array);
+			closure->func.op_array.static_variables = NULL;
 		}
 		destroy_op_array(&closure->func.op_array);
 	} else if (closure->orig_internal_handler == zend_closure_call_magic) {

Original file line number	Diff line number	Diff line change
`@@ -478,6 +478,7 @@ static void zend_closure_free_storage(zend_object object) / {{{ */`
`478`	`478`	`/* We don't own the static variables of fake closures. */`
`479`	`479`	`if (!(closure->func.op_array.fn_flags & ZEND_ACC_FAKE_CLOSURE)) {`
`480`	`480`	`zend_destroy_static_vars(&closure->func.op_array);`
	`481`	`+ closure->func.op_array.static_variables = NULL;`
`481`	`482`	`}`
`482`	`483`	`destroy_op_array(&closure->func.op_array);`
`483`	`484`	`} else if (closure->orig_internal_handler == zend_closure_call_magic) {`