blob: 172b1e6224ec50cb69ba2983896a84eb082ef599 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
--TEST--
Crash when function parameter modified via unexpected reference
--FILE--
<?php
class Test {
public function __toString() {
global $my_var;
$my_var = 0;
return ",";
}
}
$my_var = str_repeat("A", 64);
$data = call_user_func_array("explode", array(new Test(), &$my_var));
$my_var = str_repeat("A", 64);
$data = call_user_func_array("str_replace", array(&$my_var, new Test(), "foo"));
echo "Done.\n";
?>
--EXPECT--
Done.
|
