SplFixedArray assertion failure with get_object_vars

[YuanchengJiang]

Description

The following code:

<?php
class MySplFixedArray extends SplFixedArray {
public $x;
}
class X {}
$array = new MySplFixedArray(2);
$array->{0} = new X();
try {get_object_vars($array);} catch (Exception $e) { echo($e); }

Resulted in this output:

php: /home/phpfuzz/WorkSpace/flowfusion/php-src/Zend/zend_hash.c:1163: zval *_zend_hash_index_add_or_update_i(HashTable *, zend_ulong, zval *, uint32_t): Assertion `(flag & (1<<3)) == 0' failed.
Aborted (core dumped)

PHP Version

nightly

Operating System

ubuntu 22.04

[nielsdos]

Doesn't repro on 8.3, but it does on 8.4.

[nielsdos]

Bisected to 780a828 (property hooks)

[nielsdos]

Sigh: https://3v4l.org/rEdH1