summaryrefslogtreecommitdiff
path: root/ext/spl
diff options
context:
space:
mode:
authorReeze Xia <reeze@php.net>2015-11-05 13:46:03 +0800
committerReeze Xia <reeze@php.net>2015-11-05 13:46:03 +0800
commit51218b3b9dc612b2db7511f93296f975b6c2aa9d (patch)
treecc0164c11672de0fe9bed198b8daab3b920ec1fe /ext/spl
parent227c898cd9b763adc5c8371b02a82e5f8351fc5f (diff)
downloadphp-git-51218b3b9dc612b2db7511f93296f975b6c2aa9d.tar.gz
Fixed bug #70852 Segfault getting NULL offset of an ArrayObject.
Diffstat (limited to 'ext/spl')
-rw-r--r--ext/spl/spl_array.c4
-rw-r--r--ext/spl/tests/bug70852.phpt11
2 files changed, 13 insertions, 2 deletions
diff --git a/ext/spl/spl_array.c b/ext/spl/spl_array.c
index 6ebbb7c068..f977aa3244 100644
--- a/ext/spl/spl_array.c
+++ b/ext/spl/spl_array.c
@@ -325,13 +325,13 @@ string_offest:
if (zend_symtable_find(ht, key, len, (void **) &retval) == FAILURE) {
switch (type) {
case BP_VAR_R:
- zend_error(E_NOTICE, "Undefined index: %s", Z_STRVAL_P(offset));
+ zend_error(E_NOTICE, "Undefined index: %s", key);
case BP_VAR_UNSET:
case BP_VAR_IS:
retval = &EG(uninitialized_zval_ptr);
break;
case BP_VAR_RW:
- zend_error(E_NOTICE,"Undefined index: %s", Z_STRVAL_P(offset));
+ zend_error(E_NOTICE,"Undefined index: %s", key);
case BP_VAR_W: {
zval *value;
ALLOC_INIT_ZVAL(value);
diff --git a/ext/spl/tests/bug70852.phpt b/ext/spl/tests/bug70852.phpt
new file mode 100644
index 0000000000..da7c00bb66
--- /dev/null
+++ b/ext/spl/tests/bug70852.phpt
@@ -0,0 +1,11 @@
+--TEST--
+Bug #70852 Segfault getting NULL offset of an ArrayObject
+--FILE--
+<?php
+$y = new ArrayObject();
+echo $y[NULL];
+?>
+===DONE===
+--EXPECTF--
+Notice: Undefined index: in %s on line %d
+===DONE===