[php-src] PR #25331: ext/opcache: Fix JIT code emitted past the buffer end on 32-bit
| From: | iliaal | Date: | Mon, 09 Nov 2026 00:40:21 +0000 |
| Subject: | [php-src] PR #25331: ext/opcache: Fix JIT code emitted past the buffer end on 32-bit | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-40453@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/25331
Author: iliaal
On 32-bit builds the JIT buffer end is only 8-byte aligned, so when the buffer is nearly full
ir_emit_code() can round the entry past the end; the unsigned space check then wraps and the code is
encoded out of bounds. This is the nightly x86 crash in gh25165.phpt from #25182. The same change
went to dstogov/ir as dstogov/ir#318.