Assertion failure in Zend/zend_vm_execute.h:2915

[YuanchengJiang]

Description

The following code:

<?php
namespace X;
$iterator =
    new \RegexIterator(
        new \ArrayIterator(['A.phpt', 'B.phpt', 'C.phpt']),
        '/\.phpt$/'
    )
;
foreach ($iterator as $foo) {
    var_dump($foo);
    preg_replace('/\.phpt$/', '', '');
}
echo "Done", PHP_EOL;
echo preg_match('/a{1,3}b/U', 'ab');
echo(1);
?>

Resulted in this output:

php: Zend/zend_vm_execute.h:2915: int zend_fe_fetch_object_helper_SPEC(zend_execute_data *): Assertion `zval_get_type(&(*(array))) == 8' failed.
Aborted (core dumped)

To reproduce:

-d "zend_extension=/php-src/modules/opcache.so" -d "opcache.enable=1" -d "opcache.enable_cli=1" -d "opcache.jit=1111"

PHP Version

nightly

Operating System

ubuntu 22.04

[iluuu1994]

This can be simplified to:

namespace X;

preg_replace('/\.phpt$/', '', '');

It's caused by frameless calls. Hence, possibly related to #15981.

[nielsdos]

Yes, I can confirm by inspecting the assembly that the assembly code is missing the necessary opline store is missing in the executed successor block. Forcing the store to happen always does indeed fix the problem. So this is a duplicate of #15981.