Bug #81603 [NEW]: zend_gc_delref: Assertion failed

From: mbeccati Operating system: Ubuntu 20.04.2 LTS PHP version: 7.4.26RC1 Package: Reproducible crash Bug Type: Bug Bug description:zend_gc_delref: Assertion failed Description: ------------ Running the test suite of phpspec main branch currently fails with a segfault and an assertion failure. No such failure on latest PHP 7.3 or PHP 8.0 from git. Configure line was: --with-zip --enable-gd --with-freetype --with-jpeg --with-webp --with-xpm --with-openssl --enable-debug --without-pear --with-mysql-sock=/var/run/mysqld/mysqld.sock --with-mysqli=mysqlnd --with-pgsql=/usr --enable-pdo --with-pdo-sqlite --with-pdo-mysql=mysqlnd --with-pdo-pgsql=/usr --with-zlib --with-iconv --enable-bcmath --enable-ftp --enable-mbstring --with-curl --with-gettext --enable-intl --enable-sockets --enable-shmop --enable-sysvmsg --enable-sysvsem --enable-sysvshm --enable-soap --enable-fpm --enable-pcntl Test script: --------------- git clone git@github.com:phpspec/phpspec.git cd phpspec composer update --prefer-dist php74/bin/php bin/phpspec run Expected result: ---------------- No segfault Actual result: -------------- php: .../Zend/zend_types.h:1039: zend_gc_delref: Assertion `p->refcount > 0' failed. Aborted (core dumped) #4 0x0000555555ddc546 in zend_gc_delref (p=0x7ffff2b91ae0) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_types.h:1039 __PRETTY_FUNCTION__ = "zend_gc_delref" #5 0x0000555555ddd8e7 in gc_mark_grey (ref=0x7ffff2b91ae0, stack=0x7fffffff8f70) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_gc.c:872 ht = 0x0 p = 0x7ffff37aaf68 end = 0x7ffff37aaf68 zv = 0x7ffff37aaf68 _stack = 0x7fffffff8f70 _top = 2 #6 0x0000555555dddd25 in gc_mark_roots (stack=0x7fffffff8f70) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_gc.c:977 current = 0x7ffff4112888 last = 0x7ffff4112890 #7 0x0000555555ddf03e in zend_gc_collect_cycles () at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_gc.c:1452 current = 0x16f2608630 last = 0x555555d6fcc4 <zend_emit_op+221> gc_flags = 0 idx = 0 end = 0 p = 0x7ffff29ef378 stack = {prev = 0x0, next = 0x7ffff2605000, data = {0x7ffff29878c0, 0x7ffff29879b0, 0x7ffff2cb9de0, 0x7ffff30a5de0, 0x7ffff2804de0, 0x7ffff2fa94e0, 0x7ffff2b55cc0, 0x7ffff2b766c0, 0x7ffff2b95240, 0x7ffff2bdf960, 0x7ffff2fbd780, 0x7ffff2d172a0, 0x7ffff2f1d3c0, 0x7ffff2fb3000, 0x7ffff2d436c0, 0x7ffff2b3ff00, 0x7ffff2b475a0, 0x7ffff2b21780, 0x7ffff2dda360, 0x7ffff2faccc0, 0x7ffff2d3f1e0, 0x7ffff2b77540, 0x7ffff2b93d20, 0x7ffff2b79480, 0x7ffff2fb13c0, 0x7ffff2a20690, 0x7ffff2a883c0, 0x7ffff3e8a840, 0x7ffff3f22360, 0x7ffff3f223c0, 0x7ffff3e8a8a0, 0x7ffff3e8a900, 0x7ffff3f22420, 0x7ffff3f22480, 0x7ffff3f224e0, 0x7ffff3e8aa20, 0x7ffff3e8aae0, 0x7ffff3f22540, 0x7ffff3f225a0, 0x7ffff3e8ab40, 0x7ffff3e8aba0, 0x7ffff3e8ac00, 0x7ffff3e8ac60, 0x7ffff3f22600, 0x7ffff3f22660, 0x7ffff3f23d80, 0x7ffff3f271c0, 0x7ffff3f272a0, 0x7ffff3f23e40, 0x7ffff3f27380, 0x7ffff3f23f00, 0x7ffff3f27460, 0x7ffff3f27540, 0x7ffff3f27620, 0x7ffff3f27700, 0x7ffff3f277e0, 0x7ffff3f278c0, 0x7ffff3f279a0, 0x7ffff3f27a80, 0x7ffff3f27b60, 0x7ffff3f27c40, 0x7ffff3f27d20, 0x7ffff3f27e00, 0x7ffff3f27ee0, 0x7ffff3f28000, 0x7ffff3f280e0, 0x7ffff3f281c0, 0x7ffff3f282a0, 0x7ffff3f28380, 0x7ffff3f28460, 0x7ffff3f28540, 0x7ffff3f28620, 0x7ffff3f29000, 0x7ffff3f290c0, 0x7ffff3f29180, 0x7ffff3f29240, 0x7ffff3f29300, 0x7ffff3f293c0, 0x7ffff3f29480, 0x7ffff3f29540, 0x7ffff3f29600, 0x7ffff3f28700, 0x7ffff3f287e0, 0x7ffff3f296c0, 0x7ffff3f29780, 0x7ffff3f288c0, 0x7ffff3f289a0, 0x7ffff3f28a80, 0x7ffff3f28b60, 0x7ffff3f28c40, 0x7ffff3f28d20, 0x7ffff3f29840, 0x7ffff3f28e00, 0x7ffff3f28ee0, 0x7ffff3f2a000, 0x7ffff3f2a0e0, 0x7ffff3f2a1c0, 0x7ffff3f2a2a0, 0x7ffff3f29900, 0x7ffff3f2a380, 0x7ffff3f2a460, 0x7ffff3f2a540, 0x7ffff3f2a620, 0x7ffff3f2a700, 0x7ffff3f25100, 0x7ffff3f2a7e0, 0x7ffff3f2a8c0, 0x7ffff3f299c0, 0x7ffff3f2a9a0, 0x7ffff3f2aa80, 0x7ffff3f29a80, 0x7ffff3f2ab60, 0x7ffff3f2ac40, 0x7ffff3f29b40, 0x7ffff3f2ad20, 0x7ffff3f29c00, 0x7ffff3f2ae00, 0x7ffff3f25200, 0x7ffff3f2aee0, 0x7ffff3f2b000, 0x7ffff3f25300, 0x7ffff3f29cc0, 0x7ffff3f29d80, 0x7ffff3f29e40, 0x7ffff3f2b0e0, 0x7ffff3f29f00, 0x7ffff3f2c000, 0x7ffff3f2c0c0, 0x7ffff3f2b1c0, 0x7ffff3f25400, 0x7ffff3f2b2a0, 0x7ffff3f2b380, 0x7ffff3f2b460, 0x7ffff3f2b540, 0x7ffff3f2b620, 0x7ffff3f2b700, 0x7ffff3f2b7e0, 0x7ffff3f2b8c0, 0x7ffff3f2b9a0, 0x7ffff3f2ba80, 0x7ffff3f2bb60, 0x7ffff3f2bc40, 0x7ffff3f2bd20, 0x7ffff3f2be00, 0x7ffff3f2bee0, 0x7ffff3f2d000, 0x7ffff3f2c180, 0x7ffff3f2d0e0, 0x7ffff3f2d1c0, 0x7ffff3f2d2a0, 0x7ffff3f2d380, 0x7ffff3f2d460, 0x7ffff3f2d540, 0x7ffff3f2d620, 0x7ffff3f2d700, 0x7ffff3f2c240, 0x7ffff3f2d7e0, 0x7ffff3f2d8c0, 0x7ffff3f2d9a0, 0x7ffff3f2da80, 0x7ffff3f2c300, 0x7ffff3f2db60, 0x7ffff3f2c3c0, 0x7ffff3f2dc40, 0x7ffff3f2c480, 0x7ffff3f2dd20, 0x7ffff3f2c540, 0x7ffff3f2c600, 0x7ffff3f2c6c0, 0x7ffff3f2de00, 0x7ffff3f2dee0, 0x7ffff3f2e000, 0x7ffff3f2e0e0, 0x7ffff3f2c780, 0x7ffff3f2c840, 0x7ffff3f2c900, 0x7ffff3f2c9c0, 0x7ffff3f2ca80, 0x7ffff3f2e1c0, 0x7ffff3f2cb40, 0x7ffff3f2cc00, 0x7ffff3f2ccc0, 0x7ffff3f2e2a0, 0x7ffff3f2cd80, 0x7ffff3f2ce40, 0x7ffff3f2e380, 0x7ffff3f2cf00, 0x7ffff3f2f000, 0x7ffff3f2f0c0, 0x7ffff3f2e460, 0x7ffff3f2f180, 0x7ffff3f2f240, 0x7ffff3f2f300, 0x7ffff3f2f3c0, 0x7ffff3f2f480, 0x7ffff3f2f540, 0x7ffff3f2f600, 0x7ffff3f2f6c0, 0x7ffff3f2f780, 0x7ffff3f2f840...}} count = 0 #8 0x0000555555ddcd77 in gc_possible_root_when_full (ref=0x7ffff2987960) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_gc.c:592 idx = 21845 newRoot = 0x20 __PRETTY_FUNCTION__ = "gc_possible_root_when_full" #9 0x0000555555ddcf00 in gc_possible_root (ref=0x7ffff2987960) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_gc.c:642 idx = 0 newRoot = 0x0 __PRETTY_FUNCTION__ = "gc_possible_root" #10 0x0000555555db74de in gc_check_possible_root (ref=0x7ffff2987960) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_gc.h:83 No locals. #11 0x0000555555db7530 in i_zval_ptr_dtor (zval_ptr=0x7ffff36e0ac8) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_variables.h:46 ref = 0x7ffff2987960 #12 0x0000555555dbc8f3 in zend_array_destroy (ht=0x7ffff2b91ae0) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_hash.c:1611 p = 0x7ffff36e0ac8 end = 0x7ffff36e0ae8 __PRETTY_FUNCTION__ = "zend_array_destroy" #13 0x0000555555d9ffb8 in rc_dtor_func (p=0x7ffff2b91ae0) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_variables.c:57 __PRETTY_FUNCTION__ = "rc_dtor_func" #14 0x0000555555d9ff37 in i_zval_ptr_dtor (zval_ptr=0x7ffff375a588) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_variables.h:44 ref = 0x7ffff2b91ae0 #15 0x0000555555da015d in zval_ptr_dtor (zval_ptr=0x7ffff375a588) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_variables.c:84 No locals. #16 0x0000555555b71b87 in php_usort (execute_data=0x7ffff3e18000, return_value=0x7fffffffa220, compare_func=0x555555b71217 <php_array_user_compare>, renumber=1 '\001') at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/ext/standard/array.c:1040 array = 0x7ffff375a588 arr = 0x7ffff28180c0 retval = 1 '\001' old_user_compare_fci = {size = 0, function_name = {value = {lval = 0, dval = 0, counted = 0x0, str = 0x0, arr = 0x0, obj = 0x0, res = 0x0, ref = 0x0, ast = 0x0, zv = 0x0, ptr = 0x0, ce = 0x0, func = 0x0, ww = {w1 = 0, w2 = 0}}, u1 = {v = {type = 0 '\000', type_flags = 0 '\000', u = {extra = 0}}, type_info = 0}, u2 = {next = 0, cache_slot = 0, opline_num = 0, lineno = 0, num_args = 0, fe_pos = 0, fe_iter_idx = 0, access_flags = 0, property_guard = 0, constant_flags = 0, extra = 0}}, retval = 0x0, params = 0x0, object = 0x0, no_separation = 0 '\000', param_count = 0} old_user_compare_fci_cache = {function_handler = 0x0, calling_scope = 0x0, called_scope = 0x0, object = 0x0} __PRETTY_FUNCTION__ = "php_usort" #17 0x0000555555b71cbb in zif_usort (execute_data=0x7ffff3e18000, return_value=0x7fffffffa220) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/ext/standard/array.c:1052 No locals. #18 0x0000555555e198bc in ZEND_DO_FCALL_BY_NAME_SPEC_RETVAL_UNUSED_HANDLER () at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_vm_execute.h:1442 retval = {value = {lval = 140737285029984, dval = 6.9533457622282644e-310, counted = 0x7ffff3e18060, str = 0x7ffff3e18060, arr = 0x7ffff3e18060, obj = 0x7ffff3e18060, res = 0x7ffff3e18060, ref = 0x7ffff3e18060, ast = 0x7ffff3e18060, zv = 0x7ffff3e18060, ptr = 0x7ffff3e18060, ce = 0x7ffff3e18060, func = 0x7ffff3e18060, ww = {w1 = 4091641952, w2 = 32767}}, u1 = {v = {type = 1 '\001', type_flags = 0 '\000', u = {extra = 0}}, type_info = 1}, u2 = {next = 32767, cache_slot = 32767, opline_num = 32767, lineno = 32767, num_args = 32767, fe_pos = 32767, fe_iter_idx = 32767, access_flags = 32767, property_guard = 32767, constant_flags = 32767, extra = 32767}} call = 0x7ffff3e18000 fbc = 0x555556beecd0 ret = 0x7fffffffa220 __PRETTY_FUNCTION__ = "ZEND_DO_FCALL_BY_NAME_SPEC_RETVAL_UNUSED_HANDLER" #19 0x0000555555e85096 in execute_ex (ex=0x7ffff3e17b10) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_vm_execute.h:53513 orig_opline = 0x7ffff2eb93e0 orig_execute_data = 0x7ffff3e17940 #20 0x0000555555d8ae33 in zend_call_function (fci=0x7fffffffa590, fci_cache=0x7fffffffa570) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_execute_API.c:820 call_via_handler = 0 current_opline_before_exception = 0x7ffff30ca300 i = 3 call = 0x7ffff3e17b10 dummy_execute_data = {opline = 0x30800000000, call = 0x7fffffffa598, return_value = 0x7ffff3e17ad0, func = 0x7ffff2e17780, This = {value = {lval = 140737488332016, dval = 6.9533558066832385e-310, counted = 0x7fffffffa4f0, str = 0x7fffffffa4f0, arr = 0x7fffffffa4f0, obj = 0x7fffffffa4f0, res = 0x7fffffffa4f0, ref = 0x7fffffffa4f0, ast = 0x7fffffffa4f0, zv = 0x7fffffffa4f0, ptr = 0x7fffffffa4f0, ce = 0x7fffffffa4f0, func = 0x7fffffffa4f0, ww = {w1 = 4294943984, w2 = 32767}}, u1 = {v = {type = 23 '\027', type_flags = 199 '\307', u = {extra = 21945}}, type_info = 1438238487}, u2 = { next = 21845, cache_slot = 21845, opline_num = 21845, lineno = 21845, num_args = 21845, fe_pos = 21845, fe_iter_idx = 21845, access_flags = 21845, property_guard = 21845, constant_flags = 21845, extra = 21845}}, prev_execute_data = 0xffffffffffffffff, symbol_table = 0x7fffffffa560, run_time_cache = 0xffffa4f0} fci_cache_local = {function_handler = 0x7fffffffa570, calling_scope = 0x7fffffffa590, called_scope = 0xffffffff, object = 0x7ffff3e17ad0} func = 0x7ffff2e177b8 call_info = 33686280 object_or_called_scope = 0x7ffff2c476c0 __PRETTY_FUNCTION__ = "zend_call_function" #21 0x0000555555ba2e49 in zif_call_user_func (execute_data=0x7ffff3e17a80, return_value=0x7ffff3e17a70) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/ext/standard/basic_functions.c:4935 retval = {value = {lval = 0, dval = 0, counted = 0x0, str = 0x0, arr = 0x0, obj = 0x0, res = 0x0, ref = 0x0, ast = 0x0, zv = 0x0, ptr = 0x0, ce = 0x0, func = 0x0, ww = {w1 = 0, w2 = 0}}, u1 = {v = {type = 0 '\000', type_flags = 0 '\000', u = {extra = 0}}, type_info = 0}, u2 = {next = 32767, cache_slot = 32767, opline_num = 32767, lineno = 32767, num_args = 32767, fe_pos = 32767, fe_iter_idx = 32767, access_flags = 32767, property_guard = 32767, constant_flags = 32767, extra = 32767}} fci = {size = 56, function_name = {value = {lval = 140737268250496, dval = 6.9533449332114068e-310, counted = 0x7ffff2e17780, str = 0x7ffff2e17780, arr = 0x7ffff2e17780, obj = 0x7ffff2e17780, res = 0x7ffff2e17780, ref = 0x7ffff2e17780, ast = 0x7ffff2e17780, zv = 0x7ffff2e17780, ptr = 0x7ffff2e17780, ce = 0x7ffff2e17780, func = 0x7ffff2e17780, ww = {w1 = 4074862464, w2 = 32767}}, u1 = {v = {type = 8 '\b', type_flags = 3 '\003', u = {extra = 0}}, type_info = 776}, u2 = {next = 32767, cache_slot = 32767, opline_num = 32767, lineno = 32767, num_args = 32767, fe_pos = 32767, fe_iter_idx = 32767, access_flags = 32767, property_guard = 32767, constant_flags = 32767, extra = 32767}}, retval = 0x7fffffffa560, params = 0x7ffff3e17ae0, object = 0x7ffff2c476c0, no_separation = 1 '\001', param_count = 3} fci_cache = {function_handler = 0x7ffff2e177b8, calling_scope = 0x7ffff31cde58, called_scope = 0x7ffff31cde58, object = 0x7ffff2c476c0} __PRETTY_FUNCTION__ = "zif_call_user_func" #22 0x0000555555e19c56 in ZEND_DO_FCALL_BY_NAME_SPEC_RETVAL_USED_HANDLER () at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_vm_execute.h:1526 retval = {value = {lval = 140737285028272, dval = 6.9533457621436804e-310, counted = 0x7ffff3e179b0, str = 0x7ffff3e179b0, arr = 0x7ffff3e179b0, obj = 0x7ffff3e179b0, res = 0x7ffff3e179b0, ref = 0x7ffff3e179b0, ast = 0x7ffff3e179b0, zv = 0x7ffff3e179b0, ptr = 0x7ffff3e179b0, ce = 0x7ffff3e179b0, func = 0x7ffff3e179b0, ww = {w1 = 4091640240, w2 = 32767}}, u1 = {v = {type = 224 '\340', type_flags = 71 'G', u = {extra = 62103}}, type_info = 4070000608}, u2 = {next = 32767, cache_slot = 32767, opline_num = 32767, lineno = 32767, num_args = 32767, fe_pos = 32767, fe_iter_idx = 32767, access_flags = 32767, property_guard = 32767, constant_flags = 32767, extra = 32767}} call = 0x7ffff3e17a80 fbc = 0x555556c281a0 ret = 0x7ffff3e17a70 __PRETTY_FUNCTION__ = "ZEND_DO_FCALL_BY_NAME_SPEC_RETVAL_USED_HANDLER" #23 0x0000555555e850aa in execute_ex (ex=0x7ffff3e167f0) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_vm_execute.h:53517 orig_opline = 0x7ffff30cb640 orig_execute_data = 0x7ffff3e164d0 #24 0x0000555555d8ae33 in zend_call_function (fci=0x7fffffffa9d0, fci_cache=0x7fffffffa9b0) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_execute_API.c:820 call_via_handler = 0 current_opline_before_exception = 0x7ffff3166f20 i = 4 call = 0x7ffff3e167f0 dummy_execute_data = {opline = 0x5555566b19e8, call = 0x40, return_value = 0x7fffffffa8c0, func = 0x555555d6893a <_safe_emalloc+85>, This = {value = {lval = 0, dval = 0, counted = 0x0, str = 0x0, arr = 0x0, obj = 0x0, res = 0x0, ref = 0x0, ast = 0x0, zv = 0x0, ptr = 0x0, ce = 0x0, func = 0x0, ww = {w1 = 0, w2 = 0}}, u1 = {v = {type = 74 'J', type_flags = 91 '[', u = {extra = 21974}}, type_info = 1440111434}, u2 = {next = 3113, cache_slot = 3113, opline_num = 3113, lineno = 3113, num_args = 3113, fe_pos = 3113, fe_iter_idx = 3113, access_flags = 3113, property_guard = 3113, constant_flags = 3113, extra = 3113}}, prev_execute_data = 0x7ffff343c780, symbol_table = 0x7ffff343c780, run_time_cache = 0x7fffffffa8d0} fci_cache_local = {function_handler = 0x7fffffffa880, calling_scope = 0x555555d686c3 <_emalloc+124>, called_scope = 0x0, object = 0xc2900000000} func = 0x7ffff343cdd0 call_info = 33686280 object_or_called_scope = 0x7ffff2898d90 __PRETTY_FUNCTION__ = "zend_call_function" #25 0x0000555555ab57c9 in reflection_method_invoke (execute_data=0x7ffff3e16780, return_value=0x7fffffffaa60, variadic=0) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/ext/reflection/php_reflection.c:3168 retval = {value = {lval = 3328601648896, dval = 1.6445477234100404e-311, counted = 0x307001e6f00, str = 0x307001e6f00, arr = 0x307001e6f00, obj = 0x307001e6f00, res = 0x307001e6f00, ref = 0x307001e6f00, ast = 0x307001e6f00, zv = 0x307001e6f00, ptr = 0x307001e6f00, ce = 0x307001e6f00, func = 0x307001e6f00, ww = {w1 = 1994496, w2 = 775}}, u1 = {v = {type = 0 '\000', type_flags = 0 '\000', u = {extra = 0}}, type_info = 0}, u2 = {next = 32767, cache_slot = 32767, opline_num = 32767, lineno = 32767, num_args = 32767, fe_pos = 32767, fe_iter_idx = 32767, access_flags = 32767, property_guard = 32767, constant_flags = 32767, extra = 32767}} params = 0x7ffff2f47f60 val = 0x7ffff2d6b928 object = 0x7ffff3e167d0 intern = 0x7ffff39830a0 mptr = 0x7ffff343cdd0 i = -203331616 argc = 4 result = -22144 fci = {size = 56, function_name = {value = {lval = 0, dval = 0, counted = 0x0, str = 0x0, arr = 0x0, obj = 0x0, res = 0x0, ref = 0x0, ast = 0x0, zv = 0x0, ptr = 0x0, ce = 0x0, func = 0x0, ww = {w1 = 0, w2 = 0}}, u1 = {v = {type = 0 '\000', type_flags = 0 '\000', u = {extra = 0}}, type_info = 0}, u2 = { next = 21845, cache_slot = 21845, opline_num = 21845, lineno = 21845, num_args = 21845, fe_pos = 21845, fe_iter_idx = 21845, access_flags = 21845, property_guard = 21845, constant_flags = 21845, extra = 21845}}, retval = 0x7fffffffa9a0, params = 0x7ffff2f47f60, object = 0x7ffff2898d90, no_separation = 1 '\001', param_count = 4} fcc = {function_handler = 0x7ffff343cdd0, calling_scope = 0x7ffff3e167e0, called_scope = 0x7ffff343c780, object = 0x7ffff2898d90} obj_ce = 0x7ffff343c780 param_array = 0x7ffff3e167e0 #26 0x0000555555ab5983 in zim_reflection_method_invokeArgs (execute_data=0x7ffff3e16780, return_value=0x7fffffffaa60) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/ext/reflection/php_reflection.c:3204 No locals. #27 0x0000555555e1a048 in ZEND_DO_FCALL_SPEC_RETVAL_UNUSED_HANDLER () at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_vm_execute.h:1618 call = 0x7ffff3e16780 fbc = 0x555556d70680 ret = 0x7fffffffaa60 retval = {value = {lval = 140737488333440, dval = 6.9533558067535934e-310, counted = 0x7fffffffaa80, str = 0x7fffffffaa80, arr = 0x7fffffffaa80, obj = 0x7fffffffaa80, res = 0x7fffffffaa80, ref = 0x7fffffffaa80, ast = 0x7fffffffaa80, zv = 0x7fffffffaa80, ptr = 0x7fffffffaa80, ce = 0x7fffffffaa80, func = 0x7fffffffaa80, ww = {w1 = 4294945408, w2 = 32767}}, u1 = {v = {type = 1 '\001', type_flags = 0 '\000', u = {extra = 0}}, type_info = 1}, u2 = {next = 21845, cache_slot = 21845, opline_num = 21845, lineno = 21845, num_args = 21845, fe_pos = 21845, fe_iter_idx = 21845, access_flags = 21845, property_guard = 21845, constant_flags = 21845, extra = 21845}} __PRETTY_FUNCTION__ = "ZEND_DO_FCALL_SPEC_RETVAL_UNUSED_HANDLER" #28 0x0000555555e850be in execute_ex (ex=0x7ffff3e14020) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_vm_execute.h:53521 orig_opline = 0x0 orig_execute_data = 0x0 #29 0x0000555555e8a05d in zend_execute (op_array=0x7ffff3e82300, return_value=0x0) at /home/atlassian/bamboo/local-working-dir/PHP-SRC9-BUIL/Zend/zend_vm_execute.h:57617 execute_data = 0x7ffff3e14020 object_or_called_scope = 0x0 call_info = 1245184 -- Edit bug report at https://bugs.php.net/bug.php?id=81603&edit=1 -- Fix committed: https://bugs.php.net/fix.php?id=81603&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=81603&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=81603&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=81603&r=needscript Try newer version: https://bugs.php.net/fix.php?id=81603&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=81603&r=support Expected behavior: https://bugs.php.net/fix.php?id=81603&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=81603&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=81603&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=81603&r=globals PHP version support discontinued: https://bugs.php.net/fix.php?id=81603&r=phptooold Daylight Savings: https://bugs.php.net/fix.php?id=81603&r=dst IIS Stability: https://bugs.php.net/fix.php?id=81603&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=81603&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=81603&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=81603&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=81603&r=mysqlcfg