diff options
| author | Dmitry Stogov <dmitry@zend.com> | 2015-12-21 15:57:53 +0300 |
|---|---|---|
| committer | Dmitry Stogov <dmitry@zend.com> | 2015-12-21 15:57:53 +0300 |
| commit | 0402f05ba38ce0fd9a74d16193c668c8b46b55dd (patch) | |
| tree | 8f311cdea4bf3d73abdfe326f59f0fa281542a5e /Zend/zend_vm_execute.h | |
| parent | 53bfb6618d13083b769014cbdcb845f787a7cf28 (diff) | |
| download | php-git-0402f05ba38ce0fd9a74d16193c668c8b46b55dd.tar.gz | |
Fixed possible crash on Zend/tests/bug71154.phpt
Diffstat (limited to 'Zend/zend_vm_execute.h')
| -rw-r--r-- | Zend/zend_vm_execute.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/Zend/zend_vm_execute.h b/Zend/zend_vm_execute.h index 52a122c94a..d1814a037c 100644 --- a/Zend/zend_vm_execute.h +++ b/Zend/zend_vm_execute.h @@ -15957,8 +15957,8 @@ static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_FE_FETCH_RW_SPEC_VAR_HANDLER(Z ZVAL_DEREF(array); if (EXPECTED(Z_TYPE_P(array) == IS_ARRAY)) { + pos = zend_hash_iterator_pos_ex(Z_FE_ITER_P(EX_VAR(opline->op1.var)), array); fe_ht = Z_ARRVAL_P(array); - pos = zend_hash_iterator_pos(Z_FE_ITER_P(EX_VAR(opline->op1.var)), fe_ht); p = fe_ht->arData + pos; while (1) { if (UNEXPECTED(pos >= fe_ht->nNumUsed)) { |