mirror of
https://github.com/php/php-src.git
synced 2024-09-21 18:07:23 +00:00
38 lines
615 B
PHP
38 lines
615 B
PHP
--TEST--
|
|
GH-10169: Fix use-after-free when releasing object during property assignment
|
|
--FILE--
|
|
<?php
|
|
class A
|
|
{
|
|
public string $prop;
|
|
}
|
|
class B
|
|
{
|
|
public function __toString()
|
|
{
|
|
global $a;
|
|
$a = null;
|
|
return str_repeat('a', 1);
|
|
}
|
|
}
|
|
|
|
$a = new A();
|
|
try {
|
|
$a->prop = new B();
|
|
} catch (Error $e) {
|
|
echo $e->getMessage(), "\n";
|
|
}
|
|
|
|
$a = new A();
|
|
$a->prop = '';
|
|
try {
|
|
$a->prop = new B();
|
|
} catch (Error $e) {
|
|
echo $e->getMessage(), "\n";
|
|
}
|
|
|
|
?>
|
|
--EXPECT--
|
|
Object was released while assigning to property A::$prop
|
|
Object was released while assigning to property A::$prop
|