Skip to content

Segmentation fault in Zend/zend_vm_execute.h:30160 in JIT #16635

@YuanchengJiang

Description

@YuanchengJiang

Description

The following code:

<?php
namespace Foo;
var_dump(class_exists('\foo'));
class test {
function __construct() {
}
function test() {
}
}
$x1=1;
$x2=1;
var_dump('sodium_crypto_kdf_derive_from_key');
$callret=sodium_crypto_kdf_derive_from_key($x1,$x2,$x1,$x2);
print_r($callret);
?>

Resulted in this output (JIT 1211):

Zend/zend_vm_execute.h:30160:8: runtime error: shift exponent 326 is too large for 32-bit type 'uint32_t' (aka 'unsigned int')

But I expected this output instead (non-JIT):

string(33) "sodium_crypto_kdf_derive_from_key"

Fatal error: Uncaught SodiumException: sodium_crypto_kdf_derive_from_key(): Argument #1 ($subkey_length) must be greater than or equal to SODIUM_CRYPTO_KDF_BYTES_MIN

PHP Version

nightly

Operating System

ubuntu 22.04

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions