Assertion failure in Zend/zend_objects_API.c:189

[YuanchengJiang]

Description

The following code:

<?php
namespace A;
$handler = 'cdb';var_dump($handler);
$db_file = __DIR__.'/test.cdb';var_dump($db_file);
if (($db_file=dba_open($db_file, "r", $handler))!==FALSE) {
$a = dba_firstkey($db_file);var_dump($a);
$keys = $a;var_dump($keys);
for ($i=0; $i < strlen($keys); $i++) {
echo dba_fetch($key, $db_file);var_dump($key);
$key = substr($keys, $i, 1);var_dump($key);
}
}

Resulted in this output (JIT 1211):

...
NULL
/php-src/Zend/zend_objects_API.c:189: void zend_objects_store_del(zend_object *): Assertion `(!(((uintptr_t)((((zend_executor_globals *) (((char*) _tsrm_ls_cache)+(executor_globals_offset)))->objects_store).object_buckets[handle])) & (1<<0)))' failed.
Aborted (core dumped)

non-JIT:

...
NULL
string(1) "1"

PHP Version

nightly

Operating System

ubuntu 22.04

[nielsdos]

Well, I can't reproduce this one for some reason; but I wouldn't be surprised if this is another duplicate of #15981 like the other reports were, given that this uses frameless jumps too and I see the same problem in the assembly code.
Please try to verify by inserting zend_jit_reset_last_valid_opline(&ctx); at line 1466 in zend_jit.c and checking the assembly code with opcache.jit_debug=1 to see if .L8 now resets the opline pointer correctly.

[nielsdos]

Turns out I needed ext/dba/tests/test.cdb in my current working directory. Indeed this is another duplicate of #15981.