Fix lazy __isset case

Lazy objects call magic methods before initializing lazy objects when undeclared
proeprties are accessed.

Author: iluuu1994

ext/reflection/php_reflection.c

@@ -6676,20 +6676,8 @@ ZEND_METHOD(ReflectionProperty, isReadable)
 
 	zend_class_entry *ce = obj ? obj->ce : intern->ce;
 	if (!prop) {
-		if (obj) {
-			/* __isset call needs to happen on lazy object, so copy obj. */
-			zend_object *instance = obj;
-retry_dynamic:
-			if (zend_lazy_object_must_init(instance)) {
-				instance = zend_lazy_object_init(instance);
-				if (!instance) {
-					RETURN_THROWS();
-				}
-				goto retry_dynamic;
-			}
-			if (instance->properties && zend_hash_find_ptr(instance->properties, ref->unmangled_name)) {
-				RETURN_TRUE;
-			}
+		if (obj && obj->properties && zend_hash_find_ptr(obj->properties, ref->unmangled_name)) {
+			RETURN_TRUE;
 		}
 handle_magic_get:
 		if (ce->__get) {
@@ -6708,6 +6696,15 @@ ZEND_METHOD(ReflectionProperty, isReadable)
 			}
 			RETURN_TRUE;
 		}
+		if (obj && zend_lazy_object_must_init(obj)) {
+			obj = zend_lazy_object_init(obj);
+			if (!obj) {
+				RETURN_THROWS();
+			}
+			if (obj->properties && zend_hash_find_ptr(obj->properties, ref->unmangled_name)) {
+				RETURN_TRUE;
+			}
+		}
 		RETURN_FALSE;
 	}
 

ext/reflection/tests/ReflectionProperty_isReadable_lazy_isset.phpt

@@ -0,0 +1,33 @@
+--TEST--
+Test ReflectionProperty::isReadable() lazy isset
+--CREDITS--
+Arnaud Le Blanc (arnaud-lb)
+--FILE--
+<?php
+
+#[AllowDynamicProperties]
+class A {
+    public $_;
+
+    public function __construct() {
+        $this->prop = 1;
+    }
+
+    public function __isset($name) {
+        return false;
+    }
+
+    public function __get($name) {
+        return null;
+    }
+}
+
+$rc = new ReflectionClass(A::class);
+$obj = $rc->newLazyProxy(fn() => new A);
+
+$rp = new ReflectionProperty(new A, 'prop');
+var_dump($rp->isReadable(null, $obj));
+
+?>
+--EXPECT--
+bool(false)