Don't use CE for by-ref arguments

Author: nikic

Zend/tests/assign_obj_to_ref_inference.phpt

@@ -24,10 +24,19 @@ function test2($o) {
     }
 }
 
+function test3(Test &$o) {
+    $GLOBALS['r'] = new stdClass;
+    $GLOBALS['r']->x = 3.141;
+    var_dump(is_float($o->x));
+}
+
 test1();
 test2(new Test);
+$r = new Test;
+test3($r);
 
 ?>
 --EXPECT--
 bool(true)
 bool(true)
+bool(true)

ext/opcache/Optimizer/zend_inference.c

@@ -2936,6 +2936,7 @@ static zend_always_inline int _zend_update_type_info(
 			tmp = zend_fetch_arg_info_type(script, arg_info, &ce);
 			if (ZEND_ARG_SEND_MODE(arg_info)) {
 				tmp |= MAY_BE_REF;
+				ce = NULL;
 			}
 
 			if (opline->opcode == ZEND_RECV_VARIADIC) {