From: Antony Dovgal <tony2001@php.net>
Date: Wed, 27 Jun 2007 08:53:05 +0000 (+0000)
Subject: MFB: fix #41813 (segmentation fault when using string offset as an object)
X-Git-Tag: BEFORE_IMPORT_OF_MYSQLND~377
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=057dd32f2254d73f9a3def96f0b6ccbd1ed3c81f;p=php

MFB: fix #41813 (segmentation fault when using string offset as an object)
patch by judas dot iscariote at gmail dot com
---

diff --git a/Zend/zend_execute.c b/Zend/zend_execute.c
index 0792be6e77..f632fe7d3b 100644
--- a/Zend/zend_execute.c
+++ b/Zend/zend_execute.c
@@ -552,6 +552,10 @@ static inline void zend_assign_to_object(znode *result, zval **object_ptr, znode
 	zval *value = get_zval_ptr(value_op, Ts, &free_value, BP_VAR_R);
 	zval **retval = &T(result->u.var).var.ptr;
 
+	if (!object_ptr) {
+		zend_error_noreturn(E_ERROR, "Cannot use string offset as an array");
+	}
+
 	if (*object_ptr == EG(error_zval_ptr)) {
 		FREE_OP(free_op2);
 		if (!RETURN_VALUE_UNUSED(result)) {