blob: fbd5b8604af43adff5086e5a4f2e1a2040b45aab (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
--TEST--
Bug #73900: Use After Free in unserialize() SplFixedArray
--FILE--
<?php
$a = new stdClass;
$b = new SplFixedArray(1);
$b[0] = $a;
$c = &$b[0];
var_dump($c);
?>
--EXPECT--
object(stdClass)#1 (0) {
}
|