- Need to seperate if the hash isn't a reference

Zend/zend_execute.c

@@ -2140,6 +2140,8 @@ send_by_ref:
 					if (container) {
 						HashTable *ht;
 
+						SEPARATE_ZVAL_IF_NOT_REF(container);
+
 						switch ((*container)->type) {
 							case IS_ARRAY:
 								ht = (*container)->value.ht;