Description:
------------
Found 2 leaks in zend_execute.c when executing Zend/tests/bug22836.phpt.

/usr/src/dev/php-src_5_0_clean/Zend/zend_execute.c(616) :  Freeing 0x1BF0F544 (4 bytes), script=/www/index.php
/usr/src/dev/php-src_5_0_clean/Zend/zend_variables.c(137) : Actual location (location was relayed)
/usr/src/dev/php-src_5_0_clean/Zend/zend_execute.c(271) :  Freeing 0x1BF0FBB4 (16 bytes), script=/www/index.php


Reproduce code:
---------------
The same as in bug #22836.
Pasting it here for additional convenience.
<?php

function &f()
{
        $x = "foo";
        var_dump($x);
        print "'$x'\n";
        return ($a);
}
for ($i = 0; $i < 8; $i++) {
        $h =& f();
}
?>