blob: e679bb692870871c98107c6501c33d04a00345af (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
--TEST--
Bug #54238 (use-after-free in substr_replace())
--FILE--
<?php
$f = array(array('A', 'A'));
$z = substr_replace($f, $f, $f, 1);
var_dump($z, $f);
?>
--EXPECTF--
Warning: Array to string conversion in %s on line %d
Warning: Array to string conversion in %s on line %d
array(1) {
[0]=>
string(9) "AArrayray"
}
array(1) {
[0]=>
array(2) {
[0]=>
string(1) "A"
[1]=>
string(1) "A"
}
}
|