Fixed incorrect reference counter inference

Author: dstogov

ext/opcache/Optimizer/zend_inference.c

@@ -2505,7 +2505,7 @@ static zend_always_inline int _zend_update_type_info(
 			}
 			if (t1 & (MAY_BE_RC1|MAY_BE_RCN)) {
 				tmp |= (t1 & (MAY_BE_RC1|MAY_BE_RCN));
-				if (opline->op1_type == IS_CV) {
+				if (opline->opcode == ZEND_COPY_TMP || opline->op1_type == IS_CV) {
 					tmp |= MAY_BE_RCN;
 				}
 			}

ext/opcache/Optimizer/zend_ssa.c

@@ -770,6 +770,14 @@ static zend_always_inline int _zend_ssa_rename_op(const zend_op_array *op_array,
 				//NEW_SSA_VAR(opline->op2.var)
 			}
 			break;
+		case ZEND_COPY_TMP:
+			if (build_flags & ZEND_SSA_RC_INFERENCE) {
+				ssa_ops[k].op1_def = ssa_vars_count;
+				var[EX_VAR_TO_NUM(opline->op1.var)] = ssa_vars_count;
+				ssa_vars_count++;
+				//NEW_SSA_VAR(opline->op1.var)
+			}
+			break;
 		default:
 			break;
 	}

ext/opcache/tests/jit/copy_tmp_002.phpt

@@ -0,0 +1,15 @@
+--TEST--
+JIT COPY_TMP: 002
+--INI--
+opcache.enable=1
+opcache.enable_cli=1
+opcache.file_update_protection=0
+opcache.jit_buffer_size=1M
+opcache.protect_memory=1
+--FILE--
+<?php
+$x[~"abc"] ??= 0;
+?>
+DONE
+--EXPECT--
+DONE