--TEST-- Type change in pre/post-increment (use-after-free) --FILE-- foo = "1" . str_repeat("0", 2); try { $x = ++$o->foo; } catch (Throwable $e) { echo $e->getMessage() . "\n"; } var_dump($o->foo); try { $x = $o->foo++; } catch (Throwable $e) { echo $e->getMessage() . "\n"; } var_dump($o->foo); unset($o); ?> --EXPECT-- Cannot assign int to property A::$foo of type string string(3) "100" Cannot assign int to property A::$foo of type string string(3) "100"