From 5bdd53972fe77fc920635c9593f0d9ddb4cc1d5e Mon Sep 17 00:00:00 2001 From: Zeev Suraski Date: Fri, 24 Mar 2000 23:51:34 +0000 Subject: - Fixed a crash when sending a non-variable expression to a runtime-bound function that expected a reference. --- Zend/zend_execute.c | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'Zend') diff --git a/Zend/zend_execute.c b/Zend/zend_execute.c index 0404b6537d..47e0795a89 100644 --- a/Zend/zend_execute.c +++ b/Zend/zend_execute.c @@ -1756,6 +1756,10 @@ send_by_ref: zval *varptr; varptr_ptr = get_zval_ptr_ptr(&opline->op1, Ts, BP_VAR_W); + if (!varptr_ptr) { + zend_error(E_ERROR, "Only variables can be passed by reference"); + } + varptr = *varptr_ptr; if (!PZVAL_IS_REF(varptr)) { -- cgit v1.2.1