Fix incorrect match default branch optimization

Fixes GH-11134
Closes GH-11135

Fix incorrect optimization of ASSIGN_OP may lead to incorrect result (sub assign -> pre dec conversion for null values)

Fix memory leak

Fixes oss-fuzz #52999

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Fix memory leak

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Fix SSA reconstruction when body of "foreach" loop is removed

Disable ASSIGN optimization for values inferred for fatal errors.

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Fix incorrect optimization of ASSIGN_OP that may lead to memory leak

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Fix incorrect JMP optimization

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Fix bug #81652

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Drop pi nodes for both old/new pred in replace_predecessor

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Fixed incorrect optimization that may cause JIT assertion

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Don't replace tmp with cv in YIELD argument

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Handle pi nodes in replace_predecessor

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Check that POST_INC/DEC has use in DFA optimization

Optimize "$x * 2" into "$x + $x"

Pure Intersection types (#6799)

Implement pure intersection types RFC

RFC: https://wiki.php.net/rfc/pure-intersection-types

Co-authored-by: Nikita Popov <nikic@php.net>

Pure Intersection types (#6799)

Implement pure intersection types RFC

RFC: https://wiki.php.net/rfc/pure-intersection-types

Co-authored-by: Nikita Popov <nikic@php.net>
Co-authored-by: Ilija Tovilo <ilutov@php.net>

show more ...

Make can_elide_return_type_check() more robust

Rather than using def_info, check against the actual arg_info type.
As it is stored as a type mask nowadays, this is not much harder,
b

Make can_elide_return_type_check() more robust

Rather than using def_info, check against the actual arg_info type.
As it is stored as a type mask nowadays, this is not much harder,
but more general and more robust as we don't need to deal with
inaccurate cases.

show more ...

Update http->https in license (#6945)

1. Update: http://www.php.net/license/3_01.txt to https, as there is anyway server header "Location:" to https.
2. Update few license 3.0 to 3.01 as

Update http->https in license (#6945)

1. Update: http://www.php.net/license/3_01.txt to https, as there is anyway server header "Location:" to https.
2. Update few license 3.0 to 3.01 as 3.0 states "php 5.1.1, 4.1.1, and earlier".
3. In some license comments is "at through the world-wide-web" while most is without "at", so deleted.
4. fixed indentation in some files before |

show more ...

Remove unnecessary php.h includes from Zend/

The Zend/ directory really shouldn't be including php headers.
These particular includes are plain unnecessary.

Introduce pseudo-keyword ZEND_FALLTHROUGH

And use it instead of comments

Support VERIFY_RETURN_TYPE elision with unused operand

This handles the degenerate case where SCCP replaced the value in
the RETURN opcode with a constant, but the VERIFY_RETURN is still

Support VERIFY_RETURN_TYPE elision with unused operand

This handles the degenerate case where SCCP replaced the value in
the RETURN opcode with a constant, but the VERIFY_RETURN is still
there. We can still apply the same optimization, just don't need
to adjust the use list in this case.

The result is still sub-optimal in that a dead QM_ASSIGN is left
behind.

show more ...

Support prototypes in call graph

Even if we don't know the exact method being called, include it
in the call graph with the is_prototype flag. In particular, we
can still make use of

Support prototypes in call graph

Even if we don't know the exact method being called, include it
in the call graph with the is_prototype flag. In particular, we
can still make use of return types from prototype methods, as
PHP 8 makes LSP violations a hard error.

Most other places are adjusted to skip calls with !is_prototype.
Maybe some of them would be fine, but ignoring them is conservative.

show more ...

Move optimizer into core

This only moves the files, adjusts the build system, exports APIs
and does minor fixups to make sure the code builds.

This does not yet try to make the

Move optimizer into core

This only moves the files, adjusts the build system, exports APIs
and does minor fixups to make sure the code builds.

This does not yet try to make the optimizer usable independently
of opcache.

Closes GH-6642.

show more ...