Skip to content

Zend: user opcode DISPATCH runs on a stale frame in the TAILCALL VM. - #24109

Open
devnexen wants to merge 3 commits into
php:PHP-8.6from
devnexen:gh24081
Open

devnexen wants to merge 3 commits into
php:PHP-8.6from
devnexen:gh24081

Conversation

@devnexen

@devnexen devnexen commented Oct 3, 2026

Copy link
Copy Markdown
Member

Fix #24081

ZEND_VM_DISPATCH() ran the CALL variant of the handler and returned its next opline to execute_ex(), whose execute_data still pointed at the entry frame. It now tail calls the TAILCALL variant of the handler.

Fix php#24081

ZEND_VM_DISPATCH() ran the CALL variant of the handler and returned its
next opline to execute_ex(), whose execute_data still pointed at the
entry frame. It now tail calls the TAILCALL variant of the handler.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug] User opcode handlers resume execution against a stale frame under ZEND_VM_KIND_TAILCALL

1 participant