diff options
| author | Zeev Suraski <zeev@php.net> | 2000-03-24 23:51:34 +0000 |
|---|---|---|
| committer | Zeev Suraski <zeev@php.net> | 2000-03-24 23:51:34 +0000 |
| commit | 5bdd53972fe77fc920635c9593f0d9ddb4cc1d5e (patch) | |
| tree | d7895a99c41f7317b3f825d1d266d96e61679ae6 /Zend | |
| parent | 7b02e9fc358d0cd8adb871c8efe2e09a8f55eeb6 (diff) | |
| download | php-git-5bdd53972fe77fc920635c9593f0d9ddb4cc1d5e.tar.gz | |
- Fixed a crash when sending a non-variable expression to a runtime-bound function
that expected a reference.
Diffstat (limited to 'Zend')
| -rw-r--r-- | Zend/zend_execute.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/Zend/zend_execute.c b/Zend/zend_execute.c index 0404b6537d..47e0795a89 100644 --- a/Zend/zend_execute.c +++ b/Zend/zend_execute.c @@ -1756,6 +1756,10 @@ send_by_ref: zval *varptr; varptr_ptr = get_zval_ptr_ptr(&opline->op1, Ts, BP_VAR_W); + if (!varptr_ptr) { + zend_error(E_ERROR, "Only variables can be passed by reference"); + } + varptr = *varptr_ptr; if (!PZVAL_IS_REF(varptr)) { |