Merge branch 'PHP-8.2' into PHP-8.3

* PHP-8.2:
Fixed inorrect QM_ASSIGN elimination

Merge branch 'PHP-8.1' into PHP-8.2

* PHP-8.1:
Fixed inorrect QM_ASSIGN elimination

Fixed inorrect QM_ASSIGN elimination

Fixes oss-fuzz #63771

Merge branch 'PHP-8.2'

* PHP-8.2:
Fixed incorrect QM_ASSIGN elimination

Merge branch 'PHP-8.1' into PHP-8.2

* PHP-8.1:
Fixed incorrect QM_ASSIGN elimination

Fixed incorrect QM_ASSIGN elimination

Fixes OSS Fuzz #60895

Merge branch 'PHP-8.2'

* PHP-8.2:
Fixed incorrect QM_ASSIGN elimination

Merge branch 'PHP-8.1' into PHP-8.2

* PHP-8.1:
Fixed incorrect QM_ASSIGN elimination

Fixed incorrect QM_ASSIGN elimination

Fixes OSS Fuzz #60735

Allow arbitrary expressions in static variable initializer

Closes GH-9301

Merge branch 'PHP-8.2'

* PHP-8.2:
Fix GH-11245 (In some specific cases SWITCH with one default statement will cause segfault)

Merge branch 'PHP-8.1' into PHP-8.2

* PHP-8.1:
Fix GH-11245 (In some specific cases SWITCH with one default statement will cause segfault)

Fix GH-11245 (In some specific cases SWITCH with one default statement will cause segfault)

The block optimizer pass allows the use of sources of the preceding
block if the block is a fo

Fix GH-11245 (In some specific cases SWITCH with one default statement will cause segfault)

The block optimizer pass allows the use of sources of the preceding
block if the block is a follower and not a target. This causes issues
when trying to remove FREE instructions: if the source is not in the
block of the FREE, then the FREE and source are still removed. Therefore
the other successor blocks, which must consume or FREE the temporary,
will still contain the FREE opline. This opline will now refer to a
temporary that doesn't exist anymore, which most of the time results in
a crash. For these kind of non-local scenarios, we'll let the SSA
based optimizations handle those cases.

Closes GH-11251.

show more ...

Merge branch 'PHP-8.2'

* PHP-8.2:
Fix incorrect optimization

Fix incorrect optimization

Fixes oss-fuzz #57482

zend_compiler, ...: use `uint8_t` instead of `zend_uchar` (#10621)

`zend_uchar` suggests that the value is an ASCII character, but here,
it's about very small integers. This is misleadi

zend_compiler, ...: use `uint8_t` instead of `zend_uchar` (#10621)

`zend_uchar` suggests that the value is an ASCII character, but here,
it's about very small integers. This is misleading, so let's use a
C99 integer instead.

On all architectures currently supported by PHP, `zend_uchar` and
`uint8_t` are identical. This change is only about code readability.

show more ...

Merge branch 'PHP-8.1' into PHP-8.2

Fix incorrect comparison in block optimization pass

We're in the case of ZEND_JMPZ_EX or ZEND_JMPNZ_EX. The opcode gets
overwritten and only after the overwriting gets checked if we're i

Fix incorrect comparison in block optimization pass

We're in the case of ZEND_JMPZ_EX or ZEND_JMPNZ_EX. The opcode gets
overwritten and only after the overwriting gets checked if we're in a
JMPZ or JMPNZ case. This results in a wrong optimization.

Close GH-10329

show more ...

Fix memory leak because of incorrect optimization

Fixes oss-fuzz #54488

Merge branch 'PHP-8.1'

* PHP-8.1:
Fix memory leak

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Fix memory leak

Merge branch 'PHP-8.1'

* PHP-8.1:
Optimizer: Fix inorrect constant substitution in FETCH_LIST_R

Optimizer: Fix inorrect constant substitution in FETCH_LIST_R

Fixes oss-fuzz #45429

Remove JMPZNZ opcode

While JMPZNZ can avoid execution of a separate JMP opcode in some
cases, it also prevents smart branch optimization, so creating
JMPZNZ may actually have a negat

Remove JMPZNZ opcode

While JMPZNZ can avoid execution of a separate JMP opcode in some
cases, it also prevents smart branch optimization, so creating
JMPZNZ may actually have a negative effect. It also adds additional
complexity for optimizations.

Drop JMPZNZ in favor of JMPZ+JMP or JMPNZ+JMP.

Closes GH-7857.

show more ...

Add helper for convertion to CHECK_VAR/FREE/NOP

This is a recurring pattern whenever an instruction with an
operand is deleted.