@@ -0,0 +1,27 @@
+--TEST--
+Request #6768 (list() construct reference assignment)
+--FILE--
+<?php
+
+$arr = [1, 2, [3, 4]];
+
+list(&$a, $b, list(&$c, $d)) = $arr;
+
+list($a, $b, $c, $d) = [4, 3, 2, 1];
+
+var_dump($arr);
+--EXPECT--
+array(3) {
+  [0]=>
+  &int(4)
+  [1]=>
+  int(2)
+  [2]=>
+  array(2) {
+    [0]=>
+    &int(2)
+    [1]=>
+    int(4)
+  }
+}
+
@@ -5806,14 +5806,15 @@ void zend_do_add_static_array_element(znode *result, znode *offset, const znode
 }
 /* }}} */
 
-void zend_do_add_list_element(const znode *element TSRMLS_DC) /* {{{ */
+void zend_do_add_list_element(const znode *element, zend_bool by_ref TSRMLS_DC) /* {{{ */
 {
 	list_llist_element lle;
 
 	if (element) {
 		zend_check_writable_variable(element);
 
 		lle.var = *element;
+		lle.by_ref = by_ref;
 		zend_llist_copy(&lle.dimensions, &CG(dimension_llist));
 		zend_llist_prepend_element(&CG(list_llist), &lle);
 	}
@@ -5854,7 +5855,8 @@ void zend_do_list_end(znode *result, znode *expr TSRMLS_DC) /* {{{ */
 
 	le = CG(list_llist).head;
 	while (le) {
-		zend_llist *tmp_dimension_llist = &((list_llist_element *)le->data)->dimensions;
+		list_llist_element *ld = (list_llist_element *) le->data;
+		zend_llist *tmp_dimension_llist = &ld->dimensions;
 		dimension = tmp_dimension_llist->head;
 		while (dimension) {
 			opline = get_next_op(CG(active_op_array) TSRMLS_CC);
@@ -5885,9 +5887,13 @@ void zend_do_list_end(znode *result, znode *expr TSRMLS_DC) /* {{{ */
 			GET_NODE(&last_container, opline->result);
 			dimension = dimension->next;
 		}
-		((list_llist_element *) le->data)->value = last_container;
-		zend_llist_destroy(&((list_llist_element *) le->data)->dimensions);
-		zend_do_assign(result, &((list_llist_element *) le->data)->var, &((list_llist_element *) le->data)->value TSRMLS_CC);
+		ld->value = last_container;
+		zend_llist_destroy(&ld->dimensions);
+		if (ld->by_ref) {
+			zend_do_assign_ref(result, &ld->var, &ld->value TSRMLS_CC);
+		} else {
+			zend_do_assign(result, &ld->var, &ld->value TSRMLS_CC);
+		}
 		zend_do_free(result TSRMLS_CC);
 		le = le->next;
 	}
 
@@ -370,6 +370,7 @@ typedef struct _list_llist_element {
 	znode var;
 	zend_llist dimensions;
 	znode value;
+	zend_bool by_ref;
 } list_llist_element;
 
 union _temp_variable;
@@ -586,7 +587,7 @@ void zend_do_add_array_element(znode *result, const znode *expr, const znode *of
 void zend_do_add_static_array_element(znode *result, znode *offset, const znode *expr);
 void zend_do_list_init(TSRMLS_D);
 void zend_do_list_end(znode *result, znode *expr TSRMLS_DC);
-void zend_do_add_list_element(const znode *element TSRMLS_DC);
+void zend_do_add_list_element(const znode *element, zend_bool by_ref TSRMLS_DC);
 void zend_do_new_list_begin(TSRMLS_D);
 void zend_do_new_list_end(TSRMLS_D);
 
 
@@ -1136,9 +1136,10 @@ assignment_list:
 
 
 assignment_list_element:
-		variable								{ zend_do_add_list_element(&$1 TSRMLS_CC); }
+		variable								{ zend_do_add_list_element(&$1, 0 TSRMLS_CC); }
+	|	'&' variable							{ zend_do_add_list_element(&$2, 1 TSRMLS_CC); }
 	|	T_LIST '(' { zend_do_new_list_begin(TSRMLS_C); } assignment_list ')'	{ zend_do_new_list_end(TSRMLS_C); }
-	|	/* empty */							{ zend_do_add_list_element(NULL TSRMLS_CC); }
+	|	/* empty */								{ zend_do_add_list_element(NULL, 0 TSRMLS_CC); }
 ;
Original file line number	Diff line number	Diff line change
`@@ -1136,9 +1136,10 @@ assignment_list:`
`1136`	`1136`
`1137`	`1137`
`1138`	`1138`	`assignment_list_element:`
`1139`		`- variable { zend_do_add_list_element(&$1 TSRMLS_CC); }`
	`1139`	`+ variable { zend_do_add_list_element(&$1, 0 TSRMLS_CC); }`
	`1140`	`+ \| '&' variable { zend_do_add_list_element(&$2, 1 TSRMLS_CC); }`
`1140`	`1141`	`\| T_LIST '(' { zend_do_new_list_begin(TSRMLS_C); } assignment_list ')' { zend_do_new_list_end(TSRMLS_C); }`
`1141`		`- \| /* empty */ { zend_do_add_list_element(NULL TSRMLS_CC); }`
	`1142`	`+ \| /* empty */ { zend_do_add_list_element(NULL, 0 TSRMLS_CC); }`
`1142`	`1143`	`;`
`1143`	`1144`
`1144`	`1145`