From 2d393762198fabd572488ab2242cbead604fb1b0 Mon Sep 17 00:00:00 2001 From: Dmitry Stogov Date: Mon, 9 Jul 2007 08:56:29 +0000 Subject: [PATCH] Fixed bug #41919 --- Zend/tests/bug41919.phpt | 11 +++++++++++ Zend/zend_execute.c | 4 ++++ 2 files changed, 15 insertions(+) create mode 100644 Zend/tests/bug41919.phpt diff --git a/Zend/tests/bug41919.phpt b/Zend/tests/bug41919.phpt new file mode 100644 index 0000000000..3ba9ae0ec4 --- /dev/null +++ b/Zend/tests/bug41919.phpt @@ -0,0 +1,11 @@ +--TEST-- +Bug #41919 (crash in string to array conversion) +--FILE-- +bar[1] = "bang"; + +echo "ok\n"; +?> +--EXPECTF-- +Fatal error: Cannot use string offset as an object in %s/bug41919.php on line %d diff --git a/Zend/zend_execute.c b/Zend/zend_execute.c index f632fe7d3b..8a761db62e 100644 --- a/Zend/zend_execute.c +++ b/Zend/zend_execute.c @@ -1239,6 +1239,10 @@ static void zend_fetch_property_address(temp_variable *result, zval **container_ { zval *container; + if (!container_ptr) { + zend_error_noreturn(E_ERROR, "Cannot use string offset as an object"); + } + container = *container_ptr; if (container == EG(error_zval_ptr)) { if (result) { -- 2.50.1