--- /dev/null
+--TEST--
+Bug #23788 (*_replace() clobbers referenced array elements)
+--FILE--
+<?php
+$numeric = 123;
+$bool = true;
+$foo = array(&$numeric, &$bool);
+var_dump($foo);
+str_replace("abc", "def", $foo);
+var_dump($foo);
+?>
+--EXPECT--
+array(2) {
+ [0]=>
+ &int(123)
+ [1]=>
+ &bool(true)
+}
+array(2) {
+ [0]=>
+ &int(123)
+ [1]=>
+ &bool(true)
+}
--- /dev/null
+--TEST--
+Bug #17115 (lambda functions produce segfault with static vars)
+--FILE--
+<?php
+$func = create_function('','
+ static $foo = 0;
+ return $foo++;
+');
+var_dump($func());
+var_dump($func());
+var_dump($func());
+?>
+--EXPECT--
+int(0)
+int(1)
+int(2)