From: Dmitry Stogov <dmitry@php.net>
Date: Tue, 29 Jan 2008 10:45:19 +0000 (+0000)
Subject: Fixed bug #43505 (Assign by reference bug)
X-Git-Tag: RELEASE_2_0_0a1~725
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=5d1e742056b44754ae32441ce66d79995baebd18;p=php

Fixed bug #43505 (Assign by reference bug)
---

diff --git a/ext/standard/array.c b/ext/standard/array.c
index 390012c107..bf472e10a2 100644
--- a/ext/standard/array.c
+++ b/ext/standard/array.c
@@ -324,7 +324,7 @@ PHP_FUNCTION(count)
 			if (Z_OBJ_HT_P(array)->get_class_entry && instanceof_function(Z_OBJCE_P(array), spl_ce_Countable TSRMLS_CC)) {
 				zend_call_method_with_0_params(&array, NULL, NULL, "count", &retval);
 				if (retval) {
-					convert_to_long(retval);
+					convert_to_long_ex(&retval);
 					RETVAL_LONG(Z_LVAL_P(retval));
 					zval_ptr_dtor(&retval);
 				}
diff --git a/ext/standard/tests/array/bug43505.phpt b/ext/standard/tests/array/bug43505.phpt
new file mode 100644
index 0000000000..72d26b6ea4
--- /dev/null
+++ b/ext/standard/tests/array/bug43505.phpt
@@ -0,0 +1,43 @@
+--TEST--
+Bug #43505 (Assign by reference bug)
+--INI--
+error_reporting=0
+--FILE--
+<?php
+class Test implements Countable {
+    public function count() {
+        return $some;
+    }
+}
+
+$obj = new Test();
+
+$a = array();
+$b =& $a['test'];
+var_dump($a);
+
+$t = count($obj);
+
+$a = array();
+$b =& $a['test'];
+var_dump($a);
+?>
+--EXPECT--
+array(1) {
+  ["test"]=>
+  &NULL
+}
+array(1) {
+  ["test"]=>
+  &NULL
+}
+--UEXPECT--
+array(1) {
+  [u"test"]=>
+  &NULL
+}
+array(1) {
+  [u"test"]=>
+  &NULL
+}
+