Merge branch 'PHP-8.1'

* PHP-8.1:
  Also make sure binary op operands can't be undef

Author: nikic

ext/opcache/jit/zend_jit.c

@@ -2649,6 +2649,9 @@ static bool zend_jit_next_is_send_result(const zend_op *opline)
 
 static bool zend_jit_supported_binary_op(zend_uchar op, uint32_t op1_info, uint32_t op2_info)
 {
+	if ((op1_info & MAY_BE_UNDEF) || (op2_info & MAY_BE_UNDEF)) {
+		return false;
+	}
 	switch (op) {
 		case ZEND_POW:
 		case ZEND_DIV:
@@ -3091,9 +3094,6 @@ static int zend_jit(const zend_op_array *op_array, zend_ssa *ssa, const zend_op
 						}
 						op1_info = OP1_INFO();
 						op2_info = OP2_INFO();
-						if ((op1_info & MAY_BE_UNDEF) || (op2_info & MAY_BE_UNDEF)) {
-							break;
-						}
 						if (!zend_jit_supported_binary_op(
 								opline->extended_value, op1_info, op2_info)) {
 							break;

ext/opcache/jit/zend_jit_trace.c

@@ -4323,9 +4323,6 @@ static const void *zend_jit_trace(zend_jit_trace_rec *trace_buffer, uint32_t par
 						CHECK_OP1_TRACE_TYPE();
 						op2_info = OP2_INFO();
 						CHECK_OP2_TRACE_TYPE();
-						if ((op1_info & MAY_BE_UNDEF) || (op2_info & MAY_BE_UNDEF)) {
-							break;
-						}
 						if (!zend_jit_supported_binary_op(
 								opline->extended_value, op1_info, op2_info)) {
 							break;
@@ -4350,11 +4347,6 @@ static const void *zend_jit_trace(zend_jit_trace_rec *trace_buffer, uint32_t par
 						}
 						goto done;
 					case ZEND_ASSIGN_DIM_OP:
-						if (opline->extended_value == ZEND_POW
-						 || opline->extended_value == ZEND_DIV) {
-							// TODO: check for division by zero ???
-							break;
-						}
 						if (opline->result_type != IS_UNUSED) {
 							break;
 						}

ext/opcache/tests/jit/assign_dim_op_003.phpt

@@ -0,0 +1,16 @@
+--TEST--
+JIT ASSIGN_DIM_OP: Undefined variable variation
+--INI--
+opcache.enable=1
+opcache.enable_cli=1
+opcache.file_update_protection=0
+opcache.jit_buffer_size=1M
+--FILE--
+<?php
+$a = [];
+$a[] &= $b;
+?>
+--EXTENSIONS--
+opcache
+--EXPECTF--
+Warning: Undefined variable $b in %s on line %d