2017-10-26 21:03:42 +08:00
|
|
|
--TEST--
|
|
|
|
Bug #75420.10 (Indirect modification of magic method argument)
|
|
|
|
--FILE--
|
|
|
|
<?php
|
|
|
|
class Test implements ArrayAccess {
|
2020-02-04 05:52:20 +08:00
|
|
|
public function offsetExists($x) { $GLOBALS["name"] = 24; return true; }
|
|
|
|
public function offsetGet($x) { var_dump($x); return 42; }
|
|
|
|
public function offsetSet($x, $y) { }
|
|
|
|
public function offsetUnset($x) { }
|
2017-10-26 21:03:42 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
$obj = new Test;
|
|
|
|
$name = "foo";
|
|
|
|
$name = str_repeat($name, 2);
|
|
|
|
var_dump($obj[$name] ?? 12);
|
|
|
|
var_dump($name);
|
|
|
|
?>
|
|
|
|
--EXPECT--
|
|
|
|
string(6) "foofoo"
|
|
|
|
int(42)
|
|
|
|
int(24)
|