MFZE1

diff --git a/Zend/zend_execute.c b/Zend/zend_execute.c
index fb0f8b0835d52f34b69a3a08c11d1d778af52451..507435d855a797d1709fa8e8b97c7f46ac20c882 100644 (file)
--- a/Zend/zend_execute.c
+++ b/Zend/zend_execute.c
@@ -2171,6 +2171,10 @@ do_fcall_common:
                                                
                                                retval_ptr_ptr = get_zval_ptr_ptr(&EX(opline)->op1, EX(Ts), BP_VAR_W);
 
+                                               if (!retval_ptr_ptr) {
+                                                       zend_error(E_ERROR, "Cannot return overloaded elements or string offsets by reference");
+                                               }
+
                                                SEPARATE_ZVAL_TO_MAKE_IS_REF(retval_ptr_ptr);
                                                (*retval_ptr_ptr)->refcount++;