summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDmitry Stogov <dmitry@zend.com>2017-10-26 14:12:08 +0300
committerDmitry Stogov <dmitry@zend.com>2017-10-26 14:12:08 +0300
commit502cfddf28c4a01d7f2d23f35ff6244ae7428103 (patch)
treee5ceb68d854504555e7fea345b91be280fba659c
parentbc59289b7a25219ea2179554dc26c88e533250a5 (diff)
downloadphp-git-502cfddf28c4a01d7f2d23f35ff6244ae7428103.tar.gz
Backport tests
-rw-r--r--Zend/tests/bug75420.7.phpt17
-rw-r--r--Zend/tests/bug75420.8.phpt17
2 files changed, 34 insertions, 0 deletions
diff --git a/Zend/tests/bug75420.7.phpt b/Zend/tests/bug75420.7.phpt
new file mode 100644
index 0000000000..0b9743a880
--- /dev/null
+++ b/Zend/tests/bug75420.7.phpt
@@ -0,0 +1,17 @@
+--TEST--
+Bug #75420.7 (Indirect modification of magic method argument)
+--FILE--
+<?php
+class Test {
+ public function __set($x,$v) { $GLOBALS["name"] = 24; var_dump($x); }
+}
+
+$obj = new Test;
+$name = "foo";
+$name = str_repeat($name, 2);
+$obj->$name = 1;
+var_dump($name);
+?>
+--EXPECT--
+string(6) "foofoo"
+int(24)
diff --git a/Zend/tests/bug75420.8.phpt b/Zend/tests/bug75420.8.phpt
new file mode 100644
index 0000000000..2d57c8b1cb
--- /dev/null
+++ b/Zend/tests/bug75420.8.phpt
@@ -0,0 +1,17 @@
+--TEST--
+Bug #75420.8 (Indirect modification of magic method argument)
+--FILE--
+<?php
+class Test {
+ public function __set($x,$v) { $GLOBALS["obj"] = 24; var_dump($this); }
+}
+
+$obj = new Test;
+$name = "foo";
+$obj->$name = 1;
+var_dump($obj);
+?>
+--EXPECT--
+object(Test)#1 (0) {
+}
+int(24)