Skip to content

SIGABRT in zend_compile_func_array_map() (zend_compile.c:5072) with Assertion 0 && "not implemented" #20991

Closed

Description

@iany0

Description

The following code:

<?php

function foo(string $key): string {
    throw new \Exception('Test');
}

array_filter(
    array_combine(
        ['a'],
        array_map(j::foo(...),['a']),
ay_combine(
        ['a'],
        array_map(j::foo(  ['a'],
        array_map(j::foo(...),['a']),
ay_combine(
        ['a'],
        array_map(j::foo(...),['a']),
    ),
    ...),['a']),
    ),
    ),
);

?>

Resulted in this output:

Running LLVMFuzzerInitialize ...
continue...
Reading 375 bytes from poc_4
php-fuzz-parser: /home/unimelb.edu.au/wenqiyan/fuzzingdynamiq/subjects/testphp/php-src/Zend/zend_compile.c:5072: zend_result zend_compile_func_array_map(znode *, zend_ast_list *, zend_string *, uint32_t): Assertion `0 && "not implemented"' failed.
Aborted

This reproduces with php-fuzz-parser (fuzzing harness).

PHP Version

PHP 8.6.0-dev

Operating System

No response

Activity

  1. iluuu1994 commented on Jan 21, 2026

    @iluuu1994
    Member

    Looks related to GH-20934. /cc @TimWolla

  2. added a commit that references this issue on Jan 23, 2026
    bafd299
  3. self-assigned this
    on Jan 23, 2026
  4. added a commit that references this issue on Jan 26, 2026
    6a17feb
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions