diff options
| author | Nikita Popov <nikic@php.net> | 2016-07-29 19:07:04 +0200 |
|---|---|---|
| committer | Nikita Popov <nikic@php.net> | 2016-07-29 19:07:04 +0200 |
| commit | 8a442a33c319a9663212e732dda4cd717d4efff6 (patch) | |
| tree | 7c11790368ff76d9912e6f69fe4598505fc655a7 | |
| parent | 1666e80cb90c3c88bfd00522999e862625222e9b (diff) | |
| download | php-git-8a442a33c319a9663212e732dda4cd717d4efff6.tar.gz | |
Fix ref handling in array_merge/replace_recursive()
As usual, if the reference has rc=1 it really isn't a reference.
| -rw-r--r-- | ext/standard/array.c | 26 | ||||
| -rw-r--r-- | ext/standard/tests/array/array_merge_replace_recursive_refs.phpt | 38 |
2 files changed, 46 insertions, 18 deletions
diff --git a/ext/standard/array.c b/ext/standard/array.c index e5c38f2906..538460bdcc 100644 --- a/ext/standard/array.c +++ b/ext/standard/array.c @@ -3075,16 +3075,12 @@ PHPAPI int php_array_merge_recursive(HashTable *dest, HashTable *src) /* {{{ */ } zval_ptr_dtor(&tmp); } else { - if (Z_REFCOUNTED_P(src_entry)) { - Z_ADDREF_P(src_entry); - } - zend_hash_add_new(dest, string_key, src_entry); + zval *zv = zend_hash_add_new(dest, string_key, src_entry); + zval_add_ref(zv); } } else { - if (Z_REFCOUNTED_P(src_entry)) { - Z_ADDREF_P(src_entry); - } - zend_hash_next_index_insert_new(dest, src_entry); + zval *zv = zend_hash_next_index_insert_new(dest, src_entry); + zval_add_ref(zv); } } ZEND_HASH_FOREACH_END(); return 1; @@ -3134,11 +3130,8 @@ PHPAPI int php_array_replace_recursive(HashTable *dest, HashTable *src) /* {{{ * (Z_TYPE_P(dest_entry) != IS_ARRAY && (!Z_ISREF_P(dest_entry) || Z_TYPE_P(Z_REFVAL_P(dest_entry)) != IS_ARRAY))) { - if (Z_REFCOUNTED_P(src_entry)) { - Z_ADDREF_P(src_entry); - } - zend_hash_update(dest, string_key, src_entry); - + zval *zv = zend_hash_update(dest, string_key, src_entry); + zval_add_ref(zv); continue; } } else { @@ -3147,11 +3140,8 @@ PHPAPI int php_array_replace_recursive(HashTable *dest, HashTable *src) /* {{{ * (Z_TYPE_P(dest_entry) != IS_ARRAY && (!Z_ISREF_P(dest_entry) || Z_TYPE_P(Z_REFVAL_P(dest_entry)) != IS_ARRAY))) { - if (Z_REFCOUNTED_P(src_entry)) { - Z_ADDREF_P(src_entry); - } - zend_hash_index_update(dest, num_key, src_entry); - + zval *zv = zend_hash_index_update(dest, num_key, src_entry); + zval_add_ref(zv); continue; } } diff --git a/ext/standard/tests/array/array_merge_replace_recursive_refs.phpt b/ext/standard/tests/array/array_merge_replace_recursive_refs.phpt new file mode 100644 index 0000000000..ac8be2ba2f --- /dev/null +++ b/ext/standard/tests/array/array_merge_replace_recursive_refs.phpt @@ -0,0 +1,38 @@ +--TEST-- +array_merge/replace_recursive() should unwrap references with rc=1 +--FILE-- +<?php + +$x = 24; +$arr1 = [[42]]; +$arr2 = [[&$x]]; +unset($x); +$arr3 = array_replace_recursive($arr1, $arr2); +$arr2[0][0] = 12; +var_dump($arr3); + +unset($arr1, $arr2, $arr3); + +$x = 24; +$arr1 = [42]; +$arr2 = [&$x]; +unset($x); +$arr3 = array_merge_recursive($arr1, $arr2); +$arr2[0] = 12; +var_dump($arr3); + +?> +--EXPECT-- +array(1) { + [0]=> + array(1) { + [0]=> + int(24) + } +} +array(2) { + [0]=> + int(42) + [1]=> + int(24) +} |