Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
  JIT: Fixed extension handling

Author: dstogov

ext/opcache/jit/zend_jit_arm64.dasc

@@ -12469,6 +12469,9 @@ static int zend_jit_fetch_obj(dasm_State          **Dst,
 
 	if (JIT_G(trigger) == ZEND_JIT_ON_HOT_TRACE
 	 && prop_info
+	 && (opline->opcode != ZEND_FETCH_OBJ_W ||
+	     !(opline->extended_value & ZEND_FETCH_OBJ_FLAGS) ||
+	     !ZEND_TYPE_IS_SET(prop_info->type))
 	 && (!(opline->op1_type & (IS_VAR|IS_TMP_VAR)) || on_this || op1_indirect)) {
 		may_throw = 0;
 	}

ext/opcache/jit/zend_jit_x86.dasc

@@ -13174,6 +13174,9 @@ static int zend_jit_fetch_obj(dasm_State          **Dst,
 
 	if (JIT_G(trigger) == ZEND_JIT_ON_HOT_TRACE
 	 && prop_info
+	 && (opline->opcode != ZEND_FETCH_OBJ_W ||
+	     !(opline->extended_value & ZEND_FETCH_OBJ_FLAGS) ||
+	     !ZEND_TYPE_IS_SET(prop_info->type))
 	 && (!(opline->op1_type & (IS_VAR|IS_TMP_VAR)) || on_this || op1_indirect)) {
 		may_throw = 0;
 	}

ext/opcache/tests/jit/fetch_obj_006.phpt

@@ -0,0 +1,31 @@
+--TEST--
+JIT: FETCH_OBJ 006
+--INI--
+opcache.enable=1
+opcache.enable_cli=1
+opcache.file_update_protection=0
+opcache.jit_buffer_size=1M
+--FILE--
+<?php
+class Test {
+    readonly array $prop;
+}
+
+$test = new Test;
+
+try {
+    throw new Exception;
+} catch (Exception) {}
+
+$appendProp2 = (function() {
+    $this->prop[] = 1;
+})->bindTo($test, Test::class);
+$appendProp2();
+$appendProp2();
+?>
+--EXPECTF--
+Fatal error: Uncaught Error: Cannot modify readonly property Test::$prop in %sfetch_obj_006.php:13
+Stack trace:
+#0 %sfetch_obj_006.php(16): Test->{closure}()
+#1 {main}
+  thrown in %sfetch_obj_006.php on line 13