32 lines
404 B
PHP
32 lines
404 B
PHP
--TEST--
|
|
Bug #72530: Use After Free in GC with Certain Destructors
|
|
--FILE--
|
|
<?php
|
|
|
|
class ryat {
|
|
var $ryat;
|
|
var $chtg;
|
|
|
|
function __destruct() {
|
|
$this->chtg = $this->ryat;
|
|
$this->ryat = 1;
|
|
}
|
|
}
|
|
|
|
$o = new ryat;
|
|
$o->ryat = $o;
|
|
$x =& $o->chtg;
|
|
|
|
unset($o);
|
|
gc_collect_cycles();
|
|
var_dump($x);
|
|
|
|
?>
|
|
--EXPECT--
|
|
object(ryat)#1 (2) {
|
|
["ryat"]=>
|
|
int(1)
|
|
["chtg"]=>
|
|
*RECURSION*
|
|
}
|