- one more place which seems to have needed fixing. I don't have time to look

  more into it. I hope we don't have anymore places which need fixing.

diff --git a/Zend/zend_execute.c b/Zend/zend_execute.c
index 7b5ddd34a547a5f1b6b642ffbf791fd2047d7420..a4b44e41250511079c6c381bf52b124c4609be70 100644 (file)
--- a/Zend/zend_execute.c
+++ b/Zend/zend_execute.c
@@ -1417,8 +1417,8 @@ overloaded_function_call_cont:
                        case ZEND_SEND_VAR:
                                if (function_being_called
                                        && function_being_called->common.arg_types
-                                       && opline->op2.u.opline_num<function_being_called->common.arg_types[0]
-                                       && function_being_called->common.arg_types[1+opline->op2.u.opline_num]==BYREF_FORCE) {
+                                       && opline->op2.u.opline_num<=function_being_called->common.arg_types[0]
+                                       && function_being_called->common.arg_types[opline->op2.u.opline_num]==BYREF_FORCE) {
                                                goto send_by_ref;
                                }
                                {