Segmentation fault when resizing hash table iterator list while adding

[YuanchengJiang]

Description

The following code:

<?php
$multi_array = array ('zero', array (1, 2, 3), 'two');
next($multi_array);
end($multi_array);
$multi_array[] = &$multi_array;
$fusion = $multi_array;
$v1=$definedVars[array_rand($definedVars = get_defined_vars())];
$ary = array(
    0 => array(
        (binary) "binary",
        "abc2",
        1,
    ),
    (binary) "binary" => array(
        2,
        "b",
        3 => array(
            4,
            "c",
        ),
        "4abc" => array(
            4,
            "c",
        ),
    ),
);
$it = new RecursiveTreeIterator(new RecursiveArrayIterator($fusion), 0);
foreach($it as $k => $v) {
}
?>

PHP Version

PHP 8.4.0-dev

Operating System

ubuntu 22.04

[cmb69]

Not sure if that's an engine issue, or some misuse by Spl. Anyhow, PHP-8.3 (and possibly older branches are affected as well).

[nielsdos]

Not sure if that's an engine issue, or some misuse by Spl.

Let's be honest, we all know which one of the two it is ;)
I can have a look at both these SPL issues if you're not already working on it.

[nielsdos]

This already corrupts the heap:

<?php
$multi_array = ['zero'];
$multi_array[] =& $multi_array;
$it = new RecursiveTreeIterator(new RecursiveArrayIterator($multi_array), 0);
foreach($it as $k => $v) {
}

[nielsdos]

Oh actually, this may be engine related for once...