Re: [ZEND-ENGINE-CVS] cvs: ZendEngine2 /tests bug24773.phpt
| From: | Ilia Alshanetsky | Date: | Thu, 04 Dec 2003 00:19:09 +0000 |
| Subject: | Re: [ZEND-ENGINE-CVS] cvs: ZendEngine2 /tests bug24773.phpt | ||
| References: | 1 | Groups: | php.zend-engine.cvs |
| Request: | Send a blank email to php-zend-engine-cvs+get-2060@lists.php.net to get a copy of this message | ||
On December 3, 2003 06:06 pm, Andi Gutmans wrote:
> Just curious. Why is this unset() of integers treated as arrays? Isn't this
> example, strings being treated as arrays?
It actually should say non-arrays rather then integers, I'll fix it shortly.
The patch that was applied however is wrong, in the event $a is not a string
the == IS_STRING_OFFSET (in zend_execute.c line 1949 (Ze2) and 1313 (Ze1))
uses an un-initialized value, which could result in a crash or memory
corruption.
Ex:
php -r ' $a=1; unset($a["abc"]["gfe"]["dd"]); '
Ilia