Added null case to gmp_zval_binary_ui_op

Author: SakiTakamachi

ext/gmp/gmp.c

@@ -707,13 +707,21 @@ static inline void gmp_zval_binary_ui_op(zval *return_value, zval *a_arg, zval *
 	mpz_ptr gmpnum_a, gmpnum_b, gmpnum_result;
 	gmp_temp_t temp_a, temp_b;
 
-	FETCH_GMP_ZVAL(gmpnum_a, a_arg, temp_a, is_operator ? 0 : 1);
+	if (UNEXPECTED(is_operator && Z_TYPE_P(a_arg) == IS_NULL)) {
+		mpz_set_si(gmpnum_a, 0);
+	} else {
+		FETCH_GMP_ZVAL(gmpnum_a, a_arg, temp_a, is_operator ? 0 : 1);
+	}
 
 	if (gmp_ui_op && Z_TYPE_P(b_arg) == IS_LONG && Z_LVAL_P(b_arg) >= 0) {
 		gmpnum_b = NULL;
 		temp_b.is_used = 0;
 	} else {
-		FETCH_GMP_ZVAL_DEP(gmpnum_b, b_arg, temp_b, temp_a, is_operator ? 0 : 2);
+		if (UNEXPECTED(is_operator && Z_TYPE_P(b_arg) == IS_NULL)) {
+			mpz_set_si(gmpnum_b, 0);
+		} else {
+			FETCH_GMP_ZVAL_DEP(gmpnum_b, b_arg, temp_b, temp_a, is_operator ? 0 : 2);
+		}
 	}
 
 	if (check_b_zero) {