Description:
------------
Using a combined operator on an array within an object causes apache to crash. Assigning the object's property to a temporary variable ($someArray = $bar->someArray) and then working with $someArray works as a workaround. Also this doesn't only apply to just arrays, $foo->bar->value += 1; crashes apache as well. Furthermore, this behaviour is also witnessed under version 5.2.2 and could not be reproduced on Gentoo Linux 2.6.19.

Reproduce code:
---------------
// Uncomment any lines below to achieve the same result

// $bar = new stdClass();

// $bar->someArray = array();

$bar->someArray[0] +=  1;

Expected result:
----------------
$bar to be an object, with the property $someArray to be an array containing the int value 1 at index 0 :

object(stdClass)#1 (1) {
  ["someArray"]=>
  array(1) {
    [0]=>
    int(1)
  }
}

Actual result:
--------------
Apache crashes, independent of combined operator or index.