Fix GH-15502: Crash with JIT and Excimer (#15601)

dstogov · web-flow · commit eb87de1c8747 · 2024-08-27T21:12:29.000+03:00
diff --git a/ext/opcache/jit/zend_jit_trace.c b/ext/opcache/jit/zend_jit_trace.c
@@ -6959,7 +6959,7 @@ static const void *zend_jit_trace(zend_jit_trace_rec *trace_buffer, uint32_t par
 					for (i = 0; i < op_array->last_var + op_array->T; i++) {
 						SET_STACK_TYPE(stack, i, IS_UNKNOWN, 1);
 					}
-					exit_point = zend_jit_trace_get_exit_point(opline, ZEND_JIT_EXIT_TO_VM);
+					exit_point = zend_jit_trace_get_exit_point(zend_jit_traces[t->link].opline, ZEND_JIT_EXIT_TO_VM);
 					timeout_exit_addr = zend_jit_trace_get_exit_addr(exit_point);
 					if (!timeout_exit_addr) {
 						goto jit_failure;

Original file line number	Diff line number	Diff line change
`@@ -6959,7 +6959,7 @@ static const void zend_jit_trace(zend_jit_trace_rec trace_buffer, uint32_t par`
`6959`	`6959`	`for (i = 0; i < op_array->last_var + op_array->T; i++) {`
`6960`	`6960`	`SET_STACK_TYPE(stack, i, IS_UNKNOWN, 1);`
`6961`	`6961`	`}`
`6962`		`- exit_point = zend_jit_trace_get_exit_point(opline, ZEND_JIT_EXIT_TO_VM);`
	`6962`	`+ exit_point = zend_jit_trace_get_exit_point(zend_jit_traces[t->link].opline, ZEND_JIT_EXIT_TO_VM);`
`6963`	`6963`	`timeout_exit_addr = zend_jit_trace_get_exit_addr(exit_point);`
`6964`	`6964`	`if (!timeout_exit_addr) {`
`6965`	`6965`	`goto jit_failure;`