[php-src] PR #24395: Fix GH-24388: Tracing JIT segfault when a trace runs out of side exits
| From: | lazerg | Date: | Sun, 18 Oct 2026 03:49:27 +0000 |
| Subject: | [php-src] PR #24395: Fix GH-24388: Tracing JIT segfault when a trace runs out of side exits | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39529@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24395
Author: lazerg
Once a trace has used all
ZEND_JIT_TRACE_MAX_EXITS exit points,
zend_jit_trace_get_exit_addr() returns NULL. The two overflow guards in
zend_jit_inc_dec() used that address without checking it, so the JIT emitted a guard to
address 0 (assertion in debug builds, segfault in release). They now return 0 like the other guards
do, and the trace gets abandoned instead.
Fixes #24388