From: Jay Smith <jay@php.net>
Date: Thu, 11 Sep 2003 17:28:27 +0000 (+0000)
Subject: Fixed bug #25494 (array_merge allowing "false" as argument (silent when
X-Git-Tag: php-4.3.4RC1~65
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=491347fba6160c778eeaf8b52c6ac21ac7436d1f;p=php

Fixed bug #25494 (array_merge allowing "false" as argument (silent when
non-array is passed))
# Now throws E_NOTICE for non-array args as per Ilia's suggestion.
---

diff --git a/NEWS b/NEWS
index d81a001c27..203051cf16 100644
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,8 @@ PHP 4                                                                      NEWS
 - Fixed crash bug when non-existing save/serializer handler was used. (Jani)
 - Fixed memory leak in gethostbynamel() if an error occurs. (Sara)
 - Fixed FastCGI being unable to bind to a specific IP. (Sascha)
+- Fixed bug #25494 (array_merge allowing "false" as argument (silent when 
+  non-array is passed)). (Jay)
 - Fixed bug #23488 (zlib.output_compression overrides Vary header). (Stefan)
 - Fixed bug #25463 (ext/cpdf: compile failure with bundled GD)
 - Fixed bug #25429 (fix copying of stdin using copy() function). (Ilia)
diff --git a/ext/standard/array.c b/ext/standard/array.c
index 19e3e86fd5..42d6b772d3 100644
--- a/ext/standard/array.c
+++ b/ext/standard/array.c
@@ -2055,6 +2055,9 @@ static void php_array_merge_wrapper(INTERNAL_FUNCTION_PARAMETERS, int recursive)
 	array_init(return_value);
 	
 	for (i=0; i<argc; i++) {
+		if (Z_TYPE_PP(args[i]) != IS_ARRAY) {
+			php_error_docref(NULL TSRMLS_CC, E_NOTICE, "Argument #%d is not an array", i+1);
+		}
 		SEPARATE_ZVAL(args[i]);
 		convert_to_array_ex(args[i]);
 		php_array_merge(Z_ARRVAL_P(return_value), Z_ARRVAL_PP(args[i]), recursive TSRMLS_CC);