php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #79791 Assertion failure when unsetting variable during binary op
Submitted: 2020-07-04 18:39 UTC Modified: 2020-07-07 13:59 UTC
From: changochen1 at gmail dot com Assigned:
Status: Closed Package: Scripting Engine problem
PHP Version: 8.0Git-2020-07-04 (Git) OS:
Private report: No CVE-ID: None
View Developer Edit
 [2020-07-04 18:39 UTC] changochen1 at gmail dot com 
Description:
------------
LOG:
---
php: /home/yongheng/php_clean/Zend/zend_operators.c:264: int _zendi_try_convert_scalar_to_number(zval *, zval *): Assertion `0' failed.
---

Test script:
---------------
<?
try {
    $a[  ob_start ( function () {
        list (  array_pop ( $GLOBALS )   => $b ) = 0 ;
    }, 20 )] = $c -=    [];
}
catch ( d ) {}

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2020-07-07 13:39 UTC] nikic@php.net
-Status: Open +Status: Verified
 [2020-07-07 13:39 UTC] nikic@php.net 
Reduced:

<?
set_error_handler(function() {
    unset($GLOBALS['c']);
});
$c -= 1;
 [2020-07-07 13:59 UTC] nikic@php.net
-Summary: Assertion `0' failed in _zendi_try_convert_scalar_to_number +Summary: Assertion failure when unsetting variable during binary op
 [2020-07-07 14:01 UTC] nikic@php.net 
Automatic comment on behalf of nikita.ppv@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=beb002a8670025b683cbe9f7011a9127304a307e
Log: Fixed bug #79791
 [2020-07-07 14:01 UTC] nikic@php.net
-Status: Verified +Status: Closed
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Sat Feb 22 17:01:28 2025 UTC