Prevent invalid run_time_cache allocation for "bad" internal functions

dstogov · dstogov · commit 171049b6d387 · 2024-10-14T12:35:51.000+03:00
diff --git a/ext/opcache/jit/zend_jit_helpers.c b/ext/opcache/jit/zend_jit_helpers.c
@@ -42,7 +42,7 @@ static zend_never_inline zend_op_array* ZEND_FASTCALL zend_jit_init_func_run_tim
 {
 	void **run_time_cache;
 
-	if (!RUN_TIME_CACHE(op_array)) {
+	if (op_array->type == ZEND_USER_FUNCTION && !RUN_TIME_CACHE(op_array)) {
 		run_time_cache = zend_arena_alloc(&CG(arena), op_array->cache_size);
 		memset(run_time_cache, 0, op_array->cache_size);
 		ZEND_MAP_PTR_SET(op_array->run_time_cache, run_time_cache);

Original file line number	Diff line number	Diff line change
`@@ -42,7 +42,7 @@ static zend_never_inline zend_op_array* ZEND_FASTCALL zend_jit_init_func_run_tim`
`42`	`42`	`{`
`43`	`43`	`void **run_time_cache;`
`44`	`44`
`45`		`- if (!RUN_TIME_CACHE(op_array)) {`
	`45`	`+ if (op_array->type == ZEND_USER_FUNCTION && !RUN_TIME_CACHE(op_array)) {`
`46`	`46`	`run_time_cache = zend_arena_alloc(&CG(arena), op_array->cache_size);`
`47`	`47`	`memset(run_time_cache, 0, op_array->cache_size);`
`48`	`48`	`ZEND_MAP_PTR_SET(op_array->run_time_cache, run_time_cache);`