From bb38ad7768bd583a1cff9e89125402d2ac28d018 Mon Sep 17 00:00:00 2001
From: Julien Quiaios <julien.quiaios@gmail.com>
Date: Fri, 5 May 2023 07:36:17 -0400
Subject: [PATCH] Add new test for array_fill() to cover the case when the
 parameter count is too large (#11184)

---
 .../tests/array/array_fill_error2.phpt        | 23 +++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 ext/standard/tests/array/array_fill_error2.phpt

diff --git a/ext/standard/tests/array/array_fill_error2.phpt b/ext/standard/tests/array/array_fill_error2.phpt
new file mode 100644
index 00000000000..1f8b841c842
--- /dev/null
+++ b/ext/standard/tests/array/array_fill_error2.phpt
@@ -0,0 +1,23 @@
+--TEST--
+Test array_fill() function : error conditions - count is too large
+--SKIPIF--
+<?php if (PHP_INT_SIZE != 8) die("skip this test is for 64bit platform only"); ?>
+--FILE--
+<?php
+$intMax = 2147483647;
+
+// calling array_fill() with 'count' larger than INT_MAX
+try {
+    $array = array_fill(0, $intMax+1, 1);
+} catch (\ValueError $e) {
+    echo $e->getMessage() . "\n";
+}
+
+// calling array_fill() with 'count' equals to INT_MAX
+$array = array_fill(0, $intMax, 1);
+
+?>
+--EXPECTF--
+array_fill(): Argument #2 ($count) is too large
+
+Fatal error: Possible integer overflow in memory allocation (%d * %d + %d) in %s on line %d