mirror of
https://github.com/php/php-src.git
synced 2026-03-30 04:02:19 +02:00
28 lines
518 B
PHP
28 lines
518 B
PHP
--TEST--
|
|
Bug #77843: Use after free with json serializer
|
|
--SKIPIF--
|
|
<?php if(!extension_loaded('json')) die('skip json extension not loaded') ?>
|
|
--FILE--
|
|
<?php
|
|
|
|
class X implements JsonSerializable {
|
|
public $prop = "value";
|
|
public function jsonSerialize() {
|
|
global $arr;
|
|
unset($arr[0]);
|
|
var_dump($this);
|
|
return $this;
|
|
}
|
|
}
|
|
|
|
$arr = [new X()];
|
|
var_dump(json_encode([&$arr]));
|
|
|
|
?>
|
|
--EXPECT--
|
|
object(X)#1 (1) {
|
|
["prop"]=>
|
|
string(5) "value"
|
|
}
|
|
string(20) "[[{"prop":"value"}]]"
|