Skip to content

Commit 1b45efb

Browse files
committed
Fix type inference
This fixes oss-fuzz #47920
1 parent 4b8bbfb commit 1b45efb

File tree

2 files changed

+19
-1
lines changed

2 files changed

+19
-1
lines changed

Zend/Optimizer/zend_inference.c

+1-1
Original file line numberDiff line numberDiff line change
@@ -3227,7 +3227,7 @@ static zend_always_inline int _zend_update_type_info(
32273227
tmp |= t1 & (MAY_BE_RC1|MAY_BE_RCN);
32283228
}
32293229
if (opline->op2_type == IS_UNUSED) {
3230-
if (t1 & (MAY_BE_UNDEF|MAY_BE_NULL)) {
3230+
if (t1 & (MAY_BE_UNDEF|MAY_BE_NULL|MAY_BE_FALSE)) {
32313231
key_type |= MAY_BE_ARRAY_PACKED;
32323232
}
32333233
if (t1 & MAY_BE_ARRAY) {
+18
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
--TEST--
2+
Type inference 010: FRTCH_DIM_W
3+
--INI--
4+
opcache.enable=1
5+
opcache.enable_cli=1
6+
opcache.optimization_level=-1
7+
--FILE--
8+
<?php
9+
function foo() {
10+
$x = false;
11+
$x[] = &$y;
12+
}
13+
foo();
14+
?>
15+
DONE
16+
--EXPECTF--
17+
Deprecated: Automatic conversion of false to array is deprecated in %sinference_010.php on line 4
18+
DONE

0 commit comments

Comments
 (0)