Description:
------------
After foreach by reference, with the array value changing, the array is passed to the str_replace() as a subject. It's expected to get the array back unchanged, but it's broken with a "Notice: Array to string conversion".

This is only PHP 7 related, earlier versions are OK.

https://3v4l.org/iOlfo

Test script:
---------------
$a = array(
	array("one" => array("a"=>"0000", "b"=>"1111")),
);

//foreach by reference, changing the array value
foreach($a as &$record)
{
	$record["one"]["a"] = "2222";
}

var_dump($a);

var_dump(str_replace("2", "3", $a));

Expected result:
----------------
array(1) {
  [0]=>
  &array(1) {
    ["one"]=>
    array(2) {
      ["a"]=>
      string(4) "2222"
      ["b"]=>
      string(4) "1111"
    }
  }
}
array(1) {
  [0]=>
  array(1) {
    ["one"]=>
    array(2) {
      ["a"]=>
      string(4) "2222"
      ["b"]=>
      string(4) "1111"
    }
  }
}

Actual result:
--------------
array(1) {
  [0]=>
  &array(1) {
    ["one"]=>
    array(2) {
      ["a"]=>
      string(4) "2222"
      ["b"]=>
      string(4) "1111"
    }
  }
}

Notice: Array to string conversion in /in/iOlfo on line 14
array(1) {
  [0]=>
  string(5) "Array"
}