Description:
------------
When CURLFile is disabled using disable_classes, curl_file_create() and new CURLFile() only give warnings. The class is still constructed even when strict types are enabled.

Worse, if the object was constructed with no arguments using either method, working with it further causes a segfault when the class is disabled. The segfault happens in interactive mode and CGI. I also tested CLI, which does not have the problem.

Another strange problem is that some longer filenames do not cause a segfault. For example, name the file file123456789.php, and the var_dump() line outputs NULL.

All of the described behavior happens in PHP 7.2 and the master branch from Git.

Test script:
---------------
CLI:
php-cgi -ddisable_classes=CURLFile -ffile.php

file.php:
<?php
$a = new CURLFile();
var_dump($a->name);

Expected result:
----------------
An error about the class being disabled.

Actual result:
--------------
<br />
<b>Warning</b>:  CURLFile() has been disabled for security reasons in <b>REDACTED/file.php</b> on line <b>2</b><br />
UNKNOWN:0
Segmentation fault (core dumped)