/* +----------------------------------------------------------------------+ | Zend Engine | +----------------------------------------------------------------------+ | Copyright (c) 1998-2018 Zend Technologies Ltd. (http://www.zend.com) | +----------------------------------------------------------------------+ | This source file is subject to version 2.00 of the Zend license, | | that is bundled with this package in the file LICENSE, and is | | available through the world-wide-web at the following url: | | http://www.zend.com/license/2_00.txt. | | If you did not receive a copy of the Zend license and are unable to | | obtain it through the world-wide-web, please send a note to | | license@zend.com so we can mail you a copy immediately. | +----------------------------------------------------------------------+ | Authors: Andi Gutmans | | Zeev Suraski | | Dmitry Stogov | +----------------------------------------------------------------------+ */ /* $Id$ */ #include #include "zend.h" #include "zend_alloc.h" #include "zend_compile.h" #include "zend_extensions.h" #include "zend_API.h" #include "zend_vm.h" static void zend_extension_op_array_ctor_handler(zend_extension *extension, zend_op_array *op_array) { if (extension->op_array_ctor) { extension->op_array_ctor(op_array); } } static void zend_extension_op_array_dtor_handler(zend_extension *extension, zend_op_array *op_array) { if (extension->op_array_dtor) { extension->op_array_dtor(op_array); } } static void op_array_alloc_ops(zend_op_array *op_array, uint32_t size) { op_array->opcodes = erealloc(op_array->opcodes, size * sizeof(zend_op)); } void init_op_array(zend_op_array *op_array, zend_uchar type, int initial_ops_size) { op_array->type = type; op_array->arg_flags[0] = 0; op_array->arg_flags[1] = 0; op_array->arg_flags[2] = 0; op_array->refcount = (uint32_t *) emalloc(sizeof(uint32_t)); *op_array->refcount = 1; op_array->last = 0; op_array->opcodes = NULL; op_array_alloc_ops(op_array, initial_ops_size); op_array->last_var = 0; op_array->vars = NULL; op_array->T = 0; op_array->function_name = NULL; op_array->filename = zend_get_compiled_filename(); op_array->doc_comment = NULL; op_array->arg_info = NULL; op_array->num_args = 0; op_array->required_num_args = 0; op_array->scope = NULL; op_array->prototype = NULL; op_array->live_range = NULL; op_array->try_catch_array = NULL; op_array->last_live_range = 0; op_array->static_variables = NULL; op_array->last_try_catch = 0; op_array->fn_flags = 0; op_array->early_binding = -1; op_array->last_literal = 0; op_array->literals = NULL; op_array->run_time_cache = NULL; op_array->cache_size = 0; memset(op_array->reserved, 0, ZEND_MAX_RESERVED_RESOURCES * sizeof(void*)); if (zend_extension_flags & ZEND_EXTENSIONS_HAVE_OP_ARRAY_CTOR) { zend_llist_apply_with_argument(&zend_extensions, (llist_apply_with_arg_func_t) zend_extension_op_array_ctor_handler, op_array); } } ZEND_API void destroy_zend_function(zend_function *function) { if (function->type == ZEND_USER_FUNCTION) { destroy_op_array(&function->op_array); } else { ZEND_ASSERT(function->type == ZEND_INTERNAL_FUNCTION); ZEND_ASSERT(function->common.function_name); zend_string_release(function->common.function_name); } } ZEND_API void zend_function_dtor(zval *zv) { zend_function *function = Z_PTR_P(zv); if (function->type == ZEND_USER_FUNCTION) { ZEND_ASSERT(function->common.function_name); destroy_op_array(&function->op_array); /* op_arrays are allocated on arena, so we don't have to free them */ } else { ZEND_ASSERT(function->type == ZEND_INTERNAL_FUNCTION); ZEND_ASSERT(function->common.function_name); zend_string_release(function->common.function_name); if (!(function->common.fn_flags & ZEND_ACC_ARENA_ALLOCATED)) { pefree(function, 1); } } } ZEND_API void zend_cleanup_op_array_data(zend_op_array *op_array) { if (op_array->static_variables && !(GC_FLAGS(op_array->static_variables) & IS_ARRAY_IMMUTABLE)) { zend_hash_clean(op_array->static_variables); } } ZEND_API void zend_cleanup_user_class_data(zend_class_entry *ce) { /* Clean all parts that can contain run-time data */ /* Note that only run-time accessed data need to be cleaned up, pre-defined data can not contain objects and thus are not probelmatic */ if (ce->ce_flags & ZEND_HAS_STATIC_IN_METHODS) { zend_function *func; ZEND_HASH_FOREACH_PTR(&ce->function_table, func) { if (func->type == ZEND_USER_FUNCTION) { zend_cleanup_op_array_data((zend_op_array *) func); } } ZEND_HASH_FOREACH_END(); } if (ce->static_members_table) { zval *static_members = ce->static_members_table; zval *p = static_members; zval *end = p + ce->default_static_members_count; ce->default_static_members_count = 0; ce->default_static_members_table = ce->static_members_table = NULL; while (p != end) { i_zval_ptr_dtor(p ZEND_FILE_LINE_CC); p++; } efree(static_members); } } ZEND_API void zend_cleanup_internal_class_data(zend_class_entry *ce) { if (CE_STATIC_MEMBERS(ce)) { zval *static_members = CE_STATIC_MEMBERS(ce); zval *p = static_members; zval *end = p + ce->default_static_members_count; #ifdef ZTS CG(static_members_table)[(zend_intptr_t)(ce->static_members_table)] = NULL; #else ce->static_members_table = NULL; #endif ce->ce_flags &= ~ZEND_ACC_CONSTANTS_UPDATED; while (p != end) { i_zval_ptr_dtor(p ZEND_FILE_LINE_CC); p++; } efree(static_members); } } void _destroy_zend_class_traits_info(zend_class_entry *ce) { if (ce->num_traits > 0 && ce->traits) { efree(ce->traits); } if (ce->trait_aliases) { size_t i = 0; while (ce->trait_aliases[i]) { if (ce->trait_aliases[i]->trait_method) { if (ce->trait_aliases[i]->trait_method->method_name) { zend_string_release(ce->trait_aliases[i]->trait_method->method_name); } if (ce->trait_aliases[i]->trait_method->class_name) { zend_string_release(ce->trait_aliases[i]->trait_method->class_name); } efree(ce->trait_aliases[i]->trait_method); } if (ce->trait_aliases[i]->alias) { zend_string_release(ce->trait_aliases[i]->alias); } efree(ce->trait_aliases[i]); i++; } efree(ce->trait_aliases); } if (ce->trait_precedences) { size_t i = 0; while (ce->trait_precedences[i]) { zend_string_release(ce->trait_precedences[i]->trait_method->method_name); zend_string_release(ce->trait_precedences[i]->trait_method->class_name); efree(ce->trait_precedences[i]->trait_method); if (ce->trait_precedences[i]->exclude_from_classes) { size_t j = 0; zend_trait_precedence *cur_precedence = ce->trait_precedences[i]; while (cur_precedence->exclude_from_classes[j].class_name) { zend_string_release(cur_precedence->exclude_from_classes[j].class_name); j++; } efree(ce->trait_precedences[i]->exclude_from_classes); } efree(ce->trait_precedences[i]); i++; } efree(ce->trait_precedences); } } ZEND_API void destroy_zend_class(zval *zv) { zend_property_info *prop_info; zend_class_entry *ce = Z_PTR_P(zv); if (--ce->refcount > 0) { return; } switch (ce->type) { case ZEND_USER_CLASS: if (ce->default_properties_table) { zval *p = ce->default_properties_table; zval *end = p + ce->default_properties_count; while (p != end) { i_zval_ptr_dtor(p ZEND_FILE_LINE_CC); p++; } efree(ce->default_properties_table); } if (ce->default_static_members_table) { zval *p = ce->default_static_members_table; zval *end = p + ce->default_static_members_count; while (p != end) { i_zval_ptr_dtor(p ZEND_FILE_LINE_CC); p++; } efree(ce->default_static_members_table); } ZEND_HASH_FOREACH_PTR(&ce->properties_info, prop_info) { if (prop_info->ce == ce || (prop_info->flags & ZEND_ACC_SHADOW)) { zend_string_release(prop_info->name); if (prop_info->doc_comment) { zend_string_release(prop_info->doc_comment); } } } ZEND_HASH_FOREACH_END(); zend_hash_destroy(&ce->properties_info); zend_string_release(ce->name); zend_hash_destroy(&ce->function_table); if (zend_hash_num_elements(&ce->constants_table)) { zend_class_constant *c; ZEND_HASH_FOREACH_PTR(&ce->constants_table, c) { if (c->ce == ce) { zval_ptr_dtor(&c->value); if (c->doc_comment) { zend_string_release(c->doc_comment); } } } ZEND_HASH_FOREACH_END(); } zend_hash_destroy(&ce->constants_table); if (ce->num_interfaces > 0 && ce->interfaces) { efree(ce->interfaces); } if (ce->info.user.doc_comment) { zend_string_release(ce->info.user.doc_comment); } _destroy_zend_class_traits_info(ce); break; case ZEND_INTERNAL_CLASS: if (ce->default_properties_table) { zval *p = ce->default_properties_table; zval *end = p + ce->default_properties_count; while (p != end) { zval_internal_ptr_dtor(p); p++; } free(ce->default_properties_table); } if (ce->default_static_members_table) { zval *p = ce->default_static_members_table; zval *end = p + ce->default_static_members_count; while (p != end) { zval_internal_ptr_dtor(p); p++; } free(ce->default_static_members_table); } zend_hash_destroy(&ce->properties_info); zend_string_release(ce->name); zend_hash_destroy(&ce->function_table); if (zend_hash_num_elements(&ce->constants_table)) { zend_class_constant *c; ZEND_HASH_FOREACH_PTR(&ce->constants_table, c) { zval_internal_ptr_dtor(&c->value); if (c->doc_comment && c->ce == ce) { zend_string_release(c->doc_comment); } } ZEND_HASH_FOREACH_END(); zend_hash_destroy(&ce->constants_table); } if (ce->num_interfaces > 0) { free(ce->interfaces); } free(ce); break; } } void zend_class_add_ref(zval *zv) { zend_class_entry *ce = Z_PTR_P(zv); ce->refcount++; } ZEND_API void destroy_op_array(zend_op_array *op_array) { zval *literal = op_array->literals; zval *end; uint32_t i; if (op_array->static_variables && !(GC_FLAGS(op_array->static_variables) & IS_ARRAY_IMMUTABLE)) { if (--GC_REFCOUNT(op_array->static_variables) == 0) { zend_array_destroy(op_array->static_variables); } } if (op_array->run_time_cache && !op_array->function_name) { efree(op_array->run_time_cache); op_array->run_time_cache = NULL; } if (!op_array->refcount || --(*op_array->refcount) > 0) { return; } efree_size(op_array->refcount, sizeof(*(op_array->refcount))); if (op_array->vars) { i = op_array->last_var; while (i > 0) { i--; zend_string_release(op_array->vars[i]); } efree(op_array->vars); } if (literal) { end = literal + op_array->last_literal; while (literal < end) { zval_ptr_dtor_nogc(literal); literal++; } efree(op_array->literals); } efree(op_array->opcodes); if (op_array->function_name) { zend_string_release(op_array->function_name); } if (op_array->doc_comment) { zend_string_release(op_array->doc_comment); } if (op_array->live_range) { efree(op_array->live_range); } if (op_array->try_catch_array) { efree(op_array->try_catch_array); } if (zend_extension_flags & ZEND_EXTENSIONS_HAVE_OP_ARRAY_DTOR) { if (op_array->fn_flags & ZEND_ACC_DONE_PASS_TWO) { zend_llist_apply_with_argument(&zend_extensions, (llist_apply_with_arg_func_t) zend_extension_op_array_dtor_handler, op_array); } } if (op_array->arg_info) { uint32_t num_args = op_array->num_args; zend_arg_info *arg_info = op_array->arg_info; if (op_array->fn_flags & ZEND_ACC_HAS_RETURN_TYPE) { arg_info--; num_args++; } if (op_array->fn_flags & ZEND_ACC_VARIADIC) { num_args++; } for (i = 0 ; i < num_args; i++) { if (arg_info[i].name) { zend_string_release(arg_info[i].name); } if (arg_info[i].class_name) { zend_string_release(arg_info[i].class_name); } } efree(arg_info); } } void init_op(zend_op *op) { memset(op, 0, sizeof(zend_op)); op->lineno = CG(zend_lineno); SET_UNUSED(op->result); } zend_op *get_next_op(zend_op_array *op_array) { uint32_t next_op_num = op_array->last++; zend_op *next_op; if (next_op_num >= CG(context).opcodes_size) { CG(context).opcodes_size *= 4; op_array_alloc_ops(op_array, CG(context).opcodes_size); } next_op = &(op_array->opcodes[next_op_num]); init_op(next_op); return next_op; } uint32_t get_next_op_number(zend_op_array *op_array) { return op_array->last; } zend_brk_cont_element *get_next_brk_cont_element(void) { CG(context).last_brk_cont++; CG(context).brk_cont_array = erealloc(CG(context).brk_cont_array, sizeof(zend_brk_cont_element) * CG(context).last_brk_cont); return &CG(context).brk_cont_array[CG(context).last_brk_cont-1]; } static void zend_update_extended_info(zend_op_array *op_array) { zend_op *opline = op_array->opcodes, *end=opline+op_array->last; while (oplineopcode == ZEND_EXT_STMT) { if (opline+1opcode == ZEND_EXT_STMT) { opline->opcode = ZEND_NOP; opline++; continue; } if (opline+1lineno = (opline+1)->lineno; } } else { opline->opcode = ZEND_NOP; } } opline++; } } static void zend_extension_op_array_handler(zend_extension *extension, zend_op_array *op_array) { if (extension->op_array_handler) { extension->op_array_handler(op_array); } } static void zend_check_finally_breakout(zend_op_array *op_array, uint32_t op_num, uint32_t dst_num) { int i; for (i = 0; i < op_array->last_try_catch; i++) { if ((op_num < op_array->try_catch_array[i].finally_op || op_num >= op_array->try_catch_array[i].finally_end) && (dst_num >= op_array->try_catch_array[i].finally_op && dst_num <= op_array->try_catch_array[i].finally_end)) { CG(in_compilation) = 1; CG(active_op_array) = op_array; CG(zend_lineno) = op_array->opcodes[op_num].lineno; zend_error_noreturn(E_COMPILE_ERROR, "jump into a finally block is disallowed"); } else if ((op_num >= op_array->try_catch_array[i].finally_op && op_num <= op_array->try_catch_array[i].finally_end) && (dst_num > op_array->try_catch_array[i].finally_end || dst_num < op_array->try_catch_array[i].finally_op)) { CG(in_compilation) = 1; CG(active_op_array) = op_array; CG(zend_lineno) = op_array->opcodes[op_num].lineno; zend_error_noreturn(E_COMPILE_ERROR, "jump out of a finally block is disallowed"); } } } static uint32_t zend_get_brk_cont_target(const zend_op_array *op_array, const zend_op *opline) { int nest_levels = opline->op2.num; int array_offset = opline->op1.num; zend_brk_cont_element *jmp_to; do { jmp_to = &CG(context).brk_cont_array[array_offset]; if (nest_levels > 1) { array_offset = jmp_to->parent; } } while (--nest_levels > 0); return opline->opcode == ZEND_BRK ? jmp_to->brk : jmp_to->cont; } ZEND_API int pass_two(zend_op_array *op_array) { zend_op *opline, *end; if (!ZEND_USER_CODE(op_array->type)) { return 0; } if (CG(compiler_options) & ZEND_COMPILE_EXTENDED_INFO) { zend_update_extended_info(op_array); } if (CG(compiler_options) & ZEND_COMPILE_HANDLE_OP_ARRAY) { if (zend_extension_flags & ZEND_EXTENSIONS_HAVE_OP_ARRAY_HANDLER) { zend_llist_apply_with_argument(&zend_extensions, (llist_apply_with_arg_func_t) zend_extension_op_array_handler, op_array); } } if (CG(context).vars_size != op_array->last_var) { op_array->vars = (zend_string**) erealloc(op_array->vars, sizeof(zend_string*)*op_array->last_var); CG(context).vars_size = op_array->last_var; } if (CG(context).opcodes_size != op_array->last) { op_array->opcodes = (zend_op *) erealloc(op_array->opcodes, sizeof(zend_op)*op_array->last); CG(context).opcodes_size = op_array->last; } if (CG(context).literals_size != op_array->last_literal) { op_array->literals = (zval*)erealloc(op_array->literals, sizeof(zval) * op_array->last_literal); CG(context).literals_size = op_array->last_literal; } opline = op_array->opcodes; end = opline + op_array->last; while (opline < end) { switch (opline->opcode) { case ZEND_FAST_CALL: opline->op1.opline_num = op_array->try_catch_array[opline->op1.num].finally_op; ZEND_PASS_TWO_UPDATE_JMP_TARGET(op_array, opline, opline->op1); break; case ZEND_BRK: case ZEND_CONT: { uint32_t jmp_target = zend_get_brk_cont_target(op_array, opline); if (op_array->fn_flags & ZEND_ACC_HAS_FINALLY_BLOCK) { zend_check_finally_breakout(op_array, opline - op_array->opcodes, jmp_target); } opline->opcode = ZEND_JMP; opline->op1.opline_num = jmp_target; opline->op2.num = 0; ZEND_PASS_TWO_UPDATE_JMP_TARGET(op_array, opline, opline->op1); } break; case ZEND_GOTO: zend_resolve_goto_label(op_array, opline); if (op_array->fn_flags & ZEND_ACC_HAS_FINALLY_BLOCK) { zend_check_finally_breakout(op_array, opline - op_array->opcodes, opline->op1.opline_num); } /* break omitted intentionally */ case ZEND_JMP: ZEND_PASS_TWO_UPDATE_JMP_TARGET(op_array, opline, opline->op1); break; case ZEND_JMPZNZ: /* absolute index to relative offset */ opline->extended_value = ZEND_OPLINE_NUM_TO_OFFSET(op_array, opline, opline->extended_value); /* break omitted intentionally */ case ZEND_JMPZ: case ZEND_JMPNZ: case ZEND_JMPZ_EX: case ZEND_JMPNZ_EX: case ZEND_JMP_SET: case ZEND_COALESCE: case ZEND_FE_RESET_R: case ZEND_FE_RESET_RW: ZEND_PASS_TWO_UPDATE_JMP_TARGET(op_array, opline, opline->op2); break; case ZEND_ASSERT_CHECK: { /* If result of assert is unused, result of check is unused as well */ zend_op *call = &op_array->opcodes[opline->op2.opline_num - 1]; if (call->opcode == ZEND_EXT_FCALL_END) { call--; } if (call->result_type == IS_UNUSED) { opline->result_type = IS_UNUSED; } ZEND_PASS_TWO_UPDATE_JMP_TARGET(op_array, opline, opline->op2); break; } case ZEND_DECLARE_ANON_CLASS: case ZEND_DECLARE_ANON_INHERITED_CLASS: case ZEND_CATCH: case ZEND_FE_FETCH_R: case ZEND_FE_FETCH_RW: /* absolute index to relative offset */ opline->extended_value = ZEND_OPLINE_NUM_TO_OFFSET(op_array, opline, opline->extended_value); break; case ZEND_RETURN: case ZEND_RETURN_BY_REF: if (op_array->fn_flags & ZEND_ACC_GENERATOR) { opline->opcode = ZEND_GENERATOR_RETURN; } break; } if (opline->op1_type == IS_CONST) { ZEND_PASS_TWO_UPDATE_CONSTANT(op_array, opline->op1); } else if (opline->op1_type & (IS_VAR|IS_TMP_VAR)) { opline->op1.var = (uint32_t)(zend_intptr_t)ZEND_CALL_VAR_NUM(NULL, op_array->last_var + opline->op1.var); } if (opline->op2_type == IS_CONST) { ZEND_PASS_TWO_UPDATE_CONSTANT(op_array, opline->op2); } else if (opline->op2_type & (IS_VAR|IS_TMP_VAR)) { opline->op2.var = (uint32_t)(zend_intptr_t)ZEND_CALL_VAR_NUM(NULL, op_array->last_var + opline->op2.var); } if (opline->result_type & (IS_VAR|IS_TMP_VAR)) { opline->result.var = (uint32_t)(zend_intptr_t)ZEND_CALL_VAR_NUM(NULL, op_array->last_var + opline->result.var); } ZEND_VM_SET_OPCODE_HANDLER(opline); opline++; } if (op_array->live_range) { int i; for (i = 0; i < op_array->last_live_range; i++) { op_array->live_range[i].var = (uint32_t)(zend_intptr_t)ZEND_CALL_VAR_NUM(NULL, op_array->last_var + (op_array->live_range[i].var / sizeof(zval))) | (op_array->live_range[i].var & ZEND_LIVE_MASK); } } op_array->fn_flags |= ZEND_ACC_DONE_PASS_TWO; return 0; } ZEND_API unary_op_type get_unary_op(int opcode) { switch (opcode) { case ZEND_BW_NOT: return (unary_op_type) bitwise_not_function; case ZEND_BOOL_NOT: return (unary_op_type) boolean_not_function; default: return (unary_op_type) NULL; } } ZEND_API binary_op_type get_binary_op(int opcode) { switch (opcode) { case ZEND_ADD: case ZEND_ASSIGN_ADD: return (binary_op_type) add_function; case ZEND_SUB: case ZEND_ASSIGN_SUB: return (binary_op_type) sub_function; case ZEND_MUL: case ZEND_ASSIGN_MUL: return (binary_op_type) mul_function; case ZEND_POW: return (binary_op_type) pow_function; case ZEND_DIV: case ZEND_ASSIGN_DIV: return (binary_op_type) div_function; case ZEND_MOD: case ZEND_ASSIGN_MOD: return (binary_op_type) mod_function; case ZEND_SL: case ZEND_ASSIGN_SL: return (binary_op_type) shift_left_function; case ZEND_SR: case ZEND_ASSIGN_SR: return (binary_op_type) shift_right_function; case ZEND_FAST_CONCAT: case ZEND_CONCAT: case ZEND_ASSIGN_CONCAT: return (binary_op_type) concat_function; case ZEND_IS_IDENTICAL: return (binary_op_type) is_identical_function; case ZEND_IS_NOT_IDENTICAL: return (binary_op_type) is_not_identical_function; case ZEND_IS_EQUAL: return (binary_op_type) is_equal_function; case ZEND_IS_NOT_EQUAL: return (binary_op_type) is_not_equal_function; case ZEND_IS_SMALLER: return (binary_op_type) is_smaller_function; case ZEND_IS_SMALLER_OR_EQUAL: return (binary_op_type) is_smaller_or_equal_function; case ZEND_SPACESHIP: return (binary_op_type) compare_function; case ZEND_BW_OR: case ZEND_ASSIGN_BW_OR: return (binary_op_type) bitwise_or_function; case ZEND_BW_AND: case ZEND_ASSIGN_BW_AND: return (binary_op_type) bitwise_and_function; case ZEND_BW_XOR: case ZEND_ASSIGN_BW_XOR: return (binary_op_type) bitwise_xor_function; case ZEND_BOOL_XOR: return (binary_op_type) boolean_xor_function; default: return (binary_op_type) NULL; } } /* * Local variables: * tab-width: 4 * c-basic-offset: 4 * indent-tabs-mode: t * End: */