3v4l.org

run code in 200+ php & hhvm versions
Bugs & Features
<?php ob_start('assert'); echo '$a=create_function("","phpinf();")===$a()'; ob_get_flush();
based on EjmvE
Finding entry points
Branch analysis from position: 0
Jump found. Position 1 = -2
filename:       /in/8PrSB
function name:  (null)
number of ops:  7
compiled vars:  none
line     #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   3     0  E >   INIT_FCALL                                               'ob_start'
         1        SEND_VAL                                                 'assert'
         2        DO_ICALL                                                 
   4     3        ECHO                                                     '%24a%3Dcreate_function%28%22%22%2C%22phpinf%28%29%3B%22%29%3D%3D%3D%24a%28%29'
   5     4        INIT_FCALL                                               'ob_get_flush'
         5        DO_ICALL                                                 
         6      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 7.3.0