Description:
------------
$name is changed from string to int in the __isset() call, so that the subsequent __get() call crashes.

Test script:
---------------
<?php

class Test {
    public function __isset($x) { $GLOBALS['name'] = 24; return true; }
    public function __get($x) { var_dump($x); return 42; }
}

$obj = new Test;
$name = "foo";
var_dump($obj->$name ?? 12);