blob: c7f66f05a00f2c4b82e7b3ef55ed8dcdbe87af35 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
--TEST--
Crash when function parameter modified via unexpected reference
--FILE--
<?php
class Test {
public function __toString() {
global $my_var;
$my_var = 0;
return ",";
}
}
$my_var = str_repeat("A",64);
$data = call_user_func_array("explode",array(new Test(), &$my_var));
$my_var=array(1,2,3);
$data = call_user_func_array("implode",array(&$my_var, new Test()));
echo "Done.\n";
?>
--EXPECT--
Done.
|
