diff options
| author | Xinchen Hui <laruence@gmail.com> | 2015-11-13 19:39:59 -0800 |
|---|---|---|
| committer | Anatol Belski <ab@php.net> | 2015-11-17 13:15:44 +0100 |
| commit | 2aa400a0ffba12a551015e329ab53829d25b3805 (patch) | |
| tree | b8ed09a94677d6b20a3c31f934e21598a6a4a11c | |
| parent | 815e456a7ada4865d1dfb3fbc90bfece4a02ba9e (diff) | |
| download | php-git-2aa400a0ffba12a551015e329ab53829d25b3805.tar.gz | |
Fixed bug #70910 (extract() breaks variable references)
| -rw-r--r-- | ext/standard/array.c | 13 | ||||
| -rw-r--r-- | ext/standard/tests/array/bug70910.phpt | 13 |
2 files changed, 24 insertions, 2 deletions
diff --git a/ext/standard/array.c b/ext/standard/array.c index 88818fe78f..0b15605a60 100644 --- a/ext/standard/array.c +++ b/ext/standard/array.c @@ -1895,8 +1895,8 @@ PHP_FUNCTION(extract) } if (Z_TYPE(final_name) == IS_STRING && php_valid_var_name(Z_STRVAL(final_name), Z_STRLEN(final_name))) { + zval *orig_var; if (extract_refs) { - zval *orig_var; ZVAL_MAKE_REF(entry); Z_ADDREF_P(entry); @@ -1913,7 +1913,16 @@ PHP_FUNCTION(extract) } else { ZVAL_DEREF(entry); if (Z_REFCOUNTED_P(entry)) Z_ADDREF_P(entry); - zend_hash_update_ind(symbol_table, Z_STR(final_name), entry); + if ((orig_var = zend_hash_find(symbol_table, Z_STR(final_name))) != NULL) { + if (Z_TYPE_P(orig_var) == IS_INDIRECT) { + orig_var = Z_INDIRECT_P(orig_var); + } + ZVAL_DEREF(orig_var); + zval_ptr_dtor(orig_var); + ZVAL_COPY_VALUE(orig_var, entry); + } else { + zend_hash_update(symbol_table, Z_STR(final_name), entry); + } } count++; } diff --git a/ext/standard/tests/array/bug70910.phpt b/ext/standard/tests/array/bug70910.phpt new file mode 100644 index 0000000000..c7eb36c490 --- /dev/null +++ b/ext/standard/tests/array/bug70910.phpt @@ -0,0 +1,13 @@ +--TEST-- +Bug #70910 (extract() breaks variable references) +--FILE-- +<?php +$var = 'original value'; +$ref =& $var; + +$hash = ['var' => 'new value']; + +extract($hash); +var_dump($var === $ref); +--EXPECT-- +bool(true) |