We need to release the trampoline before the closure (but haven't figured out why...)

Author: Girgias

Zend/zend_API.h

@@ -743,15 +743,13 @@ static zend_always_inline bool zend_fcc_equals(const zend_fcall_info_cache* a, c
 static zend_always_inline void zend_fcc_addref(zend_fcall_info_cache *fcc)
 {
 	ZEND_ASSERT(ZEND_FCC_INITIALIZED(*fcc) && "FCC Not initialized, possibly refetch trampoline freed by ZPP?");
-	/*
 	if (UNEXPECTED(fcc->function_handler == &EG(trampoline))) {
 		zend_function *copy = emalloc(sizeof(zend_function));
 
 		memcpy(copy, fcc->function_handler, sizeof(zend_function));
 		fcc->function_handler->common.function_name = NULL;
 		fcc->function_handler = copy;
 	}
-	*/
 	if (fcc->object) {
 		GC_ADDREF(fcc->object);
 	}
@@ -768,13 +766,15 @@ static zend_always_inline void zend_fcc_dup(/* restrict */ zend_fcall_info_cache
 
 static zend_always_inline void zend_fcc_dtor(zend_fcall_info_cache *fcc)
 {
+	ZEND_ASSERT(fcc->function_handler);
 	if (fcc->object) {
 		OBJ_RELEASE(fcc->object);
 	}
+	/* Will free trampoline if it is set */
+	zend_release_fcall_info_cache(fcc);
 	if (fcc->closure) {
 		OBJ_RELEASE(fcc->closure);
 	}
-	zend_release_fcall_info_cache(fcc);
 	memcpy(fcc, &empty_fcall_info_cache, sizeof(zend_fcall_info_cache));
 }