|
php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login |
PatchesPull RequestsHistoryAllCommentsChangesGit/SVN commits
[2020-02-11 18:24 UTC] requinix@php.net
-Status: Open
+Status: Feedback
[2020-02-11 18:24 UTC] requinix@php.net
[2020-02-11 18:42 UTC] changochen1 at gmail dot com
-Status: Feedback
+Status: Open
[2020-02-11 18:42 UTC] changochen1 at gmail dot com
[2020-02-11 18:46 UTC] requinix@php.net
-Status: Open
+Status: Not a bug
[2020-02-11 18:46 UTC] requinix@php.net
|
|||||||||||||||||||||||||||
Copyright © 2001-2025 The PHP GroupAll rights reserved. |
Last updated: Sun Dec 14 16:00:01 2025 UTC |
Description: ------------ See poc below. Run script: ``` php -f poc.php ``` Php version: ``` PHP 8.0.0-dev (cli) (built: Jan 31 2020 21:52:09) ( NTS ) ``` We can't get a stack dump because it just throws an exception. Test script: --------------- <?php class foo { } $result = get_declared_classes ( ) ; var_dump ( empty ( $a [ $i = 'expected_array' ] [ var_dump ( set_error_handler ( function & ( $severity , $message , $file ) { echo $result [ 1 ] = $result [ ( $obj ) ] = $class_name < 2 ; var_dump ( $name ) ; $result [ $a [ 0 ] = $s ] -= var_dump ( $GLOBALS = var_export ( $result ) [ ] = $buffer ) [ 'foo' ] ; echo $GLOBALS [ 1 ] = [ ( $obj ) ] = [ var_dump ( ini_get ( 'error_reporting' ) [ $d = ( $result [ include $a_var -= 0 ] % -1 + get_parent_class ( $functions [ unlink ( strtolower ( $a [ $i = __DIR__ ] [ ++ $i ] >= $a [ ++ $i ] [ ++ $i ] ) ) ] ) ) . array ( 0 , 1 ) ] = $s % -2147483647 ) ] < 2 ; ; } , ) -> $arg1 , ) [ $i = [ unlink ( include $GLOBALS [ 0 ] -= 0 , ) => '0' ] ] [ ++ $i ] = ( $v + ( '-.1' * 50 ) ) ] [ 0 ] ) ) ; ?>