Signed integer overflow in ext/standard/array.c

[YuanchengJiang]

Description

The following code:

<?php
$a = array(
(string)(-PHP_INT_MAX-1),
);
foreach($a as $var) {
}
range($var,NULL,$var);

Resulted in this output:

/php-src/ext/standard/array.c:3000:10: runtime error: signed integer overflow: -9223372036854775808 * -1 cannot be represented in type 'long'
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /php-src/ext/standard/array.c:3000:10

PHP Version

PHP 8.4.0-dev

Operating System

ubuntu 22.04