TypePHP 编译器
https://swoole.com/aot/
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
24 lines
541 B
24 lines
541 B
--TEST--
|
|
GH-16649: array_splice UAF when array is released entirely
|
|
--SKIPIF--
|
|
<?php die("skip AOT does not support destructor interaction with array_splice"); ?>
|
|
--FILE--
|
|
<?php
|
|
class C {
|
|
function __destruct() {
|
|
global $arr;
|
|
$arr = null;
|
|
}
|
|
}
|
|
|
|
$arr = ["1", new C, "2"];
|
|
|
|
try {
|
|
array_splice($arr, 1, 2);
|
|
echo "ERROR: Should have thrown exception\n";
|
|
} catch (Error $e) {
|
|
echo "Exception caught: " . $e->getMessage() . "\n";
|
|
}
|
|
?>
|
|
--EXPECT--
|
|
Exception caught: Array was modified during array_splice operation
|
|
|