fix references values for imagecrop rectangle array.

Author: devnexen

ext/gd/gd.c

@@ -3881,7 +3881,7 @@ PHP_FUNCTION(imagecrop)
 
 	im = php_gd_libgdimageptr_from_zval_p(IM);
 
-	if ((tmp = zend_hash_str_find(Z_ARRVAL_P(z_rect), "x", sizeof("x") -1)) != NULL) {
+	if ((tmp = zend_hash_str_find_deref(Z_ARRVAL_P(z_rect), "x", sizeof("x") -1)) != NULL) {
 		if (!php_gd_zval_try_get_c_int(tmp, "x", &rect.x)) {
 			RETURN_THROWS();
 		}
@@ -3890,7 +3890,7 @@ PHP_FUNCTION(imagecrop)
 		RETURN_THROWS();
 	}
 
-	if ((tmp = zend_hash_str_find(Z_ARRVAL_P(z_rect), "y", sizeof("y") - 1)) != NULL) {
+	if ((tmp = zend_hash_str_find_deref(Z_ARRVAL_P(z_rect), "y", sizeof("y") - 1)) != NULL) {
 		if (!php_gd_zval_try_get_c_int(tmp, "y", &rect.y)) {
 			RETURN_THROWS();
 		}
@@ -3899,7 +3899,7 @@ PHP_FUNCTION(imagecrop)
 		RETURN_THROWS();
 	}
 
-	if ((tmp = zend_hash_str_find(Z_ARRVAL_P(z_rect), "width", sizeof("width") - 1)) != NULL) {
+	if ((tmp = zend_hash_str_find_deref(Z_ARRVAL_P(z_rect), "width", sizeof("width") - 1)) != NULL) {
 		if (!php_gd_zval_try_get_c_int(tmp, "width", &rect.width)) {
 			RETURN_THROWS();
 		}
@@ -3908,7 +3908,7 @@ PHP_FUNCTION(imagecrop)
 		RETURN_THROWS();
 	}
 
-	if ((tmp = zend_hash_str_find(Z_ARRVAL_P(z_rect), "height", sizeof("height") - 1)) != NULL) {
+	if ((tmp = zend_hash_str_find_deref(Z_ARRVAL_P(z_rect), "height", sizeof("height") - 1)) != NULL) {
 		if (!php_gd_zval_try_get_c_int(tmp, "height", &rect.height)) {
 			RETURN_THROWS();
 		}

ext/gd/tests/gh18005.phpt

@@ -69,8 +69,11 @@ try {
 try {
 	imagecrop($img, ["x" => 0, "y" => 0, "width" => 0, "height" => new A()]);
 } catch (\ValueError $e) {
-	echo $e->getMessage();
+	echo $e->getMessage() . PHP_EOL;
 }
+
+$one = 1;
+var_dump(imagecrop($img, ["x" => &$one, "y" => &$one, "width" => &$one, "height" => &$one]));
 ?>
 --EXPECTF--
 imagesetstyle(): Argument #2 ($style) must only have element of type int, A given
@@ -85,3 +88,5 @@ imagecrop(): Argument #2 ($rectangle) "x" key must be of type int, A given
 imagecrop(): Argument #2 ($rectangle) "y" key must be of type int, A given
 imagecrop(): Argument #2 ($rectangle) "width" key must be of type int, A given
 imagecrop(): Argument #2 ($rectangle) "height" key must be of type int, A given
+object(GdImage)#2 (0) {
+}