Core dumped in ext/opcache/jit/ir/ir_cfg.c

[YuanchengJiang]

Description

The following code:

<?php
function foo() {
for(;x;)for(;$fusion=1;);
}

Resulted in this output:

/php-src/ext/opcache/jit/ir/ir_cfg.c:681: ir_build_dominators_tree: Assertion `blocks[idom].idom > 0' failed.
Aborted (core dumped)

To reproduce:

-d "zend_extension=/php-src/modules/opcache.so" -d "opcache.enable_cli=1" -d "opcache.jit=1001"

PHP Version

PHP 8.4.0-dev

Operating System

ubuntu 22.04

[iluuu1994]

This doesn't reproduce for me. @dstogov Is the assertion enough for you to be useful?

[dstogov]

It's reproducible. I'll take care.