This is the phpt test case that we use to verify projectzero bug 9279:
http://www.projectzero.org/bugzilla/show_bug.cgi?id=9279

--TEST--
IBM-DB2: ProjectZero bug 9279 - db2_bind_param()
--SKIPIF--
<?php require_once('skipif.inc'); ?>
--FILE--
<?php

require_once('connection.inc');

function checked_db2_execute($stmt) {
	db2_execute($stmt);
	$row = db2_fetch_array($stmt);
	var_dump($row);
}

function sample_db2_bind_param($conn) {
	$sql =  "SELECT RTRIM(name) FROM animals WHERE breed = ? ORDER BY id";
	$stmt = db2_prepare( $conn, $sql );
	// bind variable in local scope
	$var = "cat";
	db2_bind_param($stmt, 1, "var", DB2_PARAM_IN);
	return $stmt;
}

$conn = db2_connect($database, $user, $password);

if ($conn) {
	// case 1: calling db2_bind_param() in one function, then calling db2_execute()
	// 	in another function.
	$stmt = sample_db2_bind_param($conn);
	checked_db2_execute($stmt);
	
	// case 2: calling db2_bind_param() in a function but performing db2_execute() 
	//	in the global scope.
	
	$stmt = sample_db2_bind_param($conn);
	db2_execute($stmt);
	$row = db2_fetch_array($stmt);
	var_dump($row);
	
	// case 3: make sure no other cases of PHP global variables "bleeding through" 
	// 	into local scope
	
	$stmt = sample_db2_bind_param($conn);
	// create a global variable but it won't impact dumping result
	$var = 'dog';
	db2_execute($stmt);
	$row = db2_fetch_array($stmt);
	var_dump($row);
	
	db2_close($conn);
}
else {
	echo "Connection failed.\n";
}
?>
--EXPECT--
array(1) {
  [0]=>
  string(4) "Pook"
}
array(1) {
  [0]=>
  string(4) "Pook"
}
array(1) {
  [0]=>
  string(4) "Pook"
}

Sorry, but your problem does not imply a bug in PECL itself.  For a
list of more appropriate places to ask for help using PECL, please
visit http://pecl.php.net/support.php as this bug system is not the
appropriate forum for asking support questions. 

Thank you for your interest in PECL.

Hi,

There is a issue with scope of variable ($var) in your script. For case 1 and 2, scope of $var is only inside sample_db2_bind_param() and is not available inside main script or checked_db2_execute() function. 

So, for case 1 you need to define $var in checked_db2_execute() function (before calling db2_execute() function). 

And for case 2, define $var before calling db2_execute() function (as you have done in case 3).

Regards,
Ambrish Bhargava