28 lines
453 B
PHP
28 lines
453 B
PHP
--TEST--
|
|
Array object clobbering by user error handler
|
|
--FILE--
|
|
<?php
|
|
class A implements ArrayAccess {
|
|
public function &offsetGet($n): mixed {
|
|
return null;
|
|
}
|
|
public function offsetSet($n, $v): void {
|
|
}
|
|
public function offsetUnset($n): void {
|
|
}
|
|
public function offsetExists($n): bool {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
set_error_handler(function () {
|
|
$GLOBALS['a'] = null;
|
|
});
|
|
|
|
$a = new A;
|
|
$a[$c];
|
|
?>
|
|
DONE
|
|
--EXPECT--
|
|
DONE
|