<?php
$array = range(0, 7);
class helper{
public $a1;
public $a2;
public $a3;
public $a4;
public $a5;
public $a6;
public $a7;
public $a8;
public $a9;
public $a10;
public $a11;
public $a12;
public $a13;
public $a14;
public function hello() {
echo "maple";
}
}
set_error_handler(function($err, $msg) {
global $array;
global $helper;
$array[] = 1; // force resize
$helper = new helper();
});
function crash() {
global $array;
global $helper;
$array[0] = $var; // undefined notice
$helper->hello();
$helper->$a1 = 1337;
}
crash();
maplezend_mm_heap corrupted
Process exited with code 134.
Output for 8.2.0 - 8.2.27, 8.3.0 - 8.3.16
maple
Fatal error: Uncaught Error: Cannot create dynamic property helper::$ in /in/0HHbQ:36
Stack trace:
#0 /in/0HHbQ(39): crash()
#1 {main}
thrown in /in/0HHbQ on line 36
Process exited with code 255.
maple
Fatal error: Cannot access empty property in /in/0HHbQ on line 36
Process exited with code 255.
Output for 5.1.0 - 5.1.6, 5.2.0 - 5.2.17
Parse error: syntax error, unexpected T_FUNCTION, expecting ')' in /in/0HHbQ on line 24
Process exited with code 255.
Output for 5.0.0 - 5.0.5
Parse error: parse error, unexpected T_FUNCTION, expecting ')' in /in/0HHbQ on line 24
Process exited with code 255.
Output for 4.4.2 - 4.4.9
Parse error: syntax error, unexpected T_STRING, expecting T_OLD_FUNCTION or T_FUNCTION or T_VAR or '}' in /in/0HHbQ on line 5
Process exited with code 255.
Parse error: parse error, unexpected T_STRING, expecting T_OLD_FUNCTION or T_FUNCTION or T_VAR or '}' in /in/0HHbQ on line 5
Process exited with code 255.
Output for 4.3.2 - 4.3.4
Parse error: parse error, expecting `T_OLD_FUNCTION' or `T_FUNCTION' or `T_VAR' or `'}'' in /in/0HHbQ on line 5
Process exited with code 255.