_ZendTestMagicCallForward does not handle references well

[YuanchengJiang]

Description

The following code:

<?php
$cls = new _ZendTestMagicCallForward();
$fusion = $cls;
function &foo() {
}
$fusion->foo()->foo()->{$foo->bar()} ??= 42;

Resulted in this output:

php: Zend/zend_vm_execute.h:3545: int ZEND_CALL_TRAMPOLINE_SPEC_HANDLER(zend_execute_data *): Assertion `(call->func->common.fn_flags & (1 << 12)) ? (zval_get_type(&(*(ret))) == 10) : !(zval_get_type(&(*(ret))) == 10)' failed.
Aborted (core dumped)

PHP Version

nightly

Operating System

ubuntu 22.04

[nielsdos]

Well, this is internal testing code that was never meant to be used this way, so I'm not sure it makes much sense to "fix" this.
Although the patch for this is very simple, so might as well I guess...