[php-src] Issue #9598: FFI use after free for nested FFI::addr() calls

Issue: https://github.com/php/php-src/issues/9598 Author: iluuu1994 ### Description The following code: ```php <?php $ffi = \FFI::cdef(<<<'CPP' typedef struct { int8_t a; } Example; CPP); $struct = $ffi->new('Example'); $structPtrPtr = \FFI::addr(\FFI::addr($struct)); var_dump($structPtrPtr[0][0]); ``` Resulted in this output: ``` ==41372==ERROR: AddressSanitizer: heap-use-after-free on address 0x6080000155e8 at pc 0x000000abe914 bp 0x7fff49086750 sp 0x7fff49086748 READ of size 8 at 0x6080000155e8 thread T0 #0 0xabe913 in zend_ffi_cdata_to_zval /home/ilutov/Developer/php-src/ext/ffi/ffi.c:536 #1 0xac9a12 in zend_ffi_cdata_read_dim /home/ilutov/Developer/php-src/ext/ffi/ffi.c:1358 #2 0x199e053 in zend_fetch_dimension_address_read /home/ilutov/Developer/php-src/Zend/zend_execute.c:2776 #3 0x199e98c in zend_fetch_dimension_address_read_R_slow /home/ilutov/Developer/php-src/Zend/zend_execute.c:2815 #4 0x1be4c29 in ZEND_FETCH_DIM_R_SPEC_CV_CONST_HANDLER /home/ilutov/Developer/php-src/Zend/zend_vm_execute.h:40435 #5 0x1c8d02a in execute_ex /home/ilutov/Developer/php-src/Zend/zend_vm_execute.h:59300 #6 0x1c922b1 in zend_execute /home/ilutov/Developer/php-src/Zend/zend_vm_execute.h:60133 #7 0x18badc7 in zend_execute_scripts /home/ilutov/Developer/php-src/Zend/zend.c:1799 #8 0x1570f16 in php_execute_script /home/ilutov/Developer/php-src/main/main.c:2541 #9 0x204c5fc in do_cli /home/ilutov/Developer/php-src/sapi/cli/php_cli.c:965 #10 0x20502d7 in main /home/ilutov/Developer/php-src/sapi/cli/php_cli.c:1367 #11 0x7fb5dca2954f in __libc_start_call_main (/usr/lib64/../lib64/libc.so.6+0x2954f) #12 0x7fb5dca29608 in __libc_start_main@@GLIBC_2.34 (/usr/lib64/../lib64/libc.so.6+0x29608) #13 0x603ef4 in _start (/home/ilutov/Developer/php-src/sapi/cli/php+0x603ef4) ``` But I expected this output instead: ``` object(FFI\CData:struct <anonymous>)#6 (1) { ["a"]=> int(0) } ``` ### PHP Version PHP-8.1, probably also PHP-8.0 ### Operating System _No response_