#34259 [Fbk->Opn]: ArrayAccess interface and Apache crush
| From: | gabaden at gmail dot com | Date: | Fri, 26 Aug 2005 07:07:53 +0000 |
| Subject: | #34259 [Fbk->Opn]: ArrayAccess interface and Apache crush | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-84007@lists.php.net to get a copy of this message | ||
ID: 34259
User updated by: gabaden at gmail dot com
Reported By: gabaden at gmail dot com
-Status: Feedback
+Status: Open
Bug Type: SPL related
Operating System: winxp sp2
PHP Version: 5.0.4
New Comment:
In the latest snapshot this problem was fixed.
Previous Comments:
------------------------------------------------------------------------
[2005-08-26 08:56:51] derick@php.net
Please try using this CVS snapshot:
http://snaps.php.net/php5-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php5-win32-latest.zip
------------------------------------------------------------------------
[2005-08-25 21:46:30] gabaden at gmail dot com
Description:
------------
ArrayAccess(AA) interface bug.
If you try get element of obj, which implements AA interface by
index($obj[$index]) and $index result of any scalar
operation($obj[$index+1], it will crush apache server.
p.s. sorry for my English.
Reproduce code:
---------------
[code]
class Collection implements ArrayAccess
{
private $items = null;
private $counter = null;
function __construct()
{
$this->items = array();
$this->counter = 0;
}
function add($obj)
{
$this->items[$this->counter++] = $obj;
}
function offsetExists($offset)
{
if (isset($this->items[$offset]))
{
return true;
}
return false;
}
function offsetGet($offset)
{
if (isset($this->items[$offset]))
{
return $this->items[$offset];
}
}
function offsetSet($offset, $value)
{
// readonly
}
function offsetUnset($offset)
{
// readonly
}
function count()
{
return $this->counter;
}
}
$arr = array("key1"=>0,
"key2"=>"");
$arr["key1"] = 1;
$arr["key2"] = "test";
$arr1[] = $arr;
$col = new Collection();
$col->add($arr1);
$num = $col->count();
if ($num > 0)
{
for($i=0;$i<$num;$i++)
{
echo "<pre>";
print_r($col[$i+0]); //crush
echo "</pre>";
}
}
[/code]
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=34259&edit=1