Merge branch 'PHP-7.2' into PHP-7.3

diff --cc NEWS
index 18ddbee6ba947685ff3d9f0eb50de2265f061a2f,736d57a5515932a4c8db896264579b9eaf25b8b0..9a4239b488a748ce0c8dd6b6f8505acd7d26562b
--- 1/NEWS
--- 2/NEWS
+++ b/NEWS
@@@ -55,17 -20,15 +55,19 @@@ PH
    . Fixed bug #76839 (socket_recvfrom may return an invalid 'from' address
      on MacOS). (Michael Meyer)
  
 +- SPL:
 +  . Fixed bug #77298 (segfault occurs when add property to unserialized empty
 +    ArrayObject). (jhdxr)
 +
  - Standard:
    . Fixed bug #77395 (segfault about array_multisort). (Laruence)
+   . Fixed bug #77439 (parse_str segfaults when inserting item into existing
+     array). (Nikita)
  
 -10 Jan 2019, PHP 7.2.14
 +10 Jan 2019, PHP 7.3.1
  
  - Core:
 -  . Fixed bug #77369 (memcpy with negative length via crafted DNS response). (Stas)
 +  . Fixed bug #76654 (Build failure on Mac OS X on 32-bit Intel). (Ryandesign)
    . Fixed bug #71041 (zend_signal_startup() needs ZEND_API).
      (Valentin V. Bartenev)
    . Fixed bug #76046 (PHP generates "FE_FREE" opcode on the wrong line).

diff --cc main/php_variables.c
index ca8d8b73344231d0cfb7386cd6919eeb1ab824a6,916fc1295b4c0a78b6a539d4540e3208a6207792..5ac61a4fa09a1291662a1cb7baf80eb956751c3d
--- 1/main/php_variables.c
--- 2/main/php_variables.c
+++ b/main/php_variables.c
@@@ -222,8 -216,10 +222,10 @@@ PHPAPI void php_register_variable_ex(ch
                                                gpc_element_p = Z_INDIRECT_P(gpc_element_p);
                                        }
                                        if (Z_TYPE_P(gpc_element_p) != IS_ARRAY) {
 -                                              zval_ptr_dtor(gpc_element_p);
 +                                              zval_ptr_dtor_nogc(gpc_element_p);
                                                array_init(gpc_element_p);
+                                       } else {
+                                               SEPARATE_ARRAY(gpc_element_p);
                                        }
                                }
                        }