Assertion failure in zend_enum_fetch_case_name() when calling array_walk() on an enum case value after try/catch block

Description

The following code:

<?php
enum Foo: int {
case Bar = 0;
}
try {
$bar = Foo::Bar;
} catch (Error $e) {
}
$fusion = $bar;
array_walk($fusion, function($tk) {
});
var_dump(get_defined_vars());

Resulted in this output:

php: /home/phpfuzz/WorkSpace/flowfusion/php-src/Zend/zend_enum.h:72: zval *zend_enum_fetch_case_name(zend_object *): Assertion `zval_get_type(&(*(name))) == 6' failed.
Aborted (core dumped)

To reproduce:

./php-src/sapi/cli/php  ./test.php

Commit:

cdc0366bbb366934e91b5461d524226ecb26c891

Configurations:

CC="clang-12" CXX="clang++-12" CFLAGS="-DZEND_VERIFY_TYPE_INFERENCE" CXXFLAGS="-DZEND_VERIFY_TYPE_INFERENCE" ./configure --enable-debug --enable-address-sanitizer --enable-undefined-sanitizer --enable-re2c-cgoto --enable-fpm --enable-litespeed --enable-phpdbg-debug --enable-zts --enable-bcmath --enable-calendar --enable-dba --enable-dl-test --enable-exif --enable-ftp --enable-gd --enable-gd-jis-conv --enable-mbstring --enable-pcntl --enable-shmop --enable-soap --enable-sockets --enable-sysvmsg --enable-zend-test --with-zlib --with-bz2 --with-curl --with-enchant --with-gettext --with-gmp --with-mhash --with-ldap --with-libedit --with-readline --with-snmp --with-sodium --with-xsl --with-zip --with-mysqli --with-pdo-mysql --with-pdo-pgsql --with-pgsql --with-sqlite3 --with-pdo-sqlite --with-webp --with-jpeg --with-freetype --enable-sigchild --with-readline --with-pcre-jit --with-iconv

Operating System:

Ubuntu 20.04 Host, Docker 0599jiangyc/flowfusion:latest

This report is automatically generated by FlowFusion

PHP Version

nightly

Operating System

No response

Commencez par reproduire l’assertion avec le script et la configuration de débogage fournis, puis examinez zend_enum.h autour de zend_enum_fetch_case_name() ainsi que le chemin de array_walk(). Retracez pourquoi la valeur du enum case atteint cette assertion après le bloc try/catch ; le travail est terminé lorsque la reproduction n’abandonne plus tout en préservant le comportement correct de l’enum.