Fixed COUNT_RECURSIVE reference handling

1 files changed, 3 insertions, 0 deletions

diff --git a/ext/standard/array.c b/ext/standard/array.c
index cbcfecc895..ce0fcad5ab 100644
--- a/ext/standard/array.c
+++ b/ext/standard/array.c
@@ -288,6 +288,9 @@ static int php_count_recursive(zval *array, long mode TSRMLS_DC) /* {{{ */
 				zend_hash_move_forward_ex(Z_ARRVAL_P(array), &pos)
 			) {
 				Z_ARRVAL_P(array)->nApplyCount++;
+				if (Z_TYPE_P(element) == IS_REFERENCE) {
+					element = Z_REFVAL_P(element);
+				}
 				cnt += php_count_recursive(element, COUNT_RECURSIVE TSRMLS_CC);
 				Z_ARRVAL_P(array)->nApplyCount--;
 			}