Segmentation fault in JIT mode 1135

[YuanchengJiang]

Description

The following code:

<?php
class Test {
}
$appendProp2 = (function() {
$this->prop[] = 1;
})->bindTo($test, Test::class);
$appendProp2();

To reproduce:

-d "opcache.jit_hot_func=1" -d "opcache.protect_memory=1" -d "zend_extension=/php-src/modules/opcache.so" -d "opcache.enable_cli=1" -d "opcache.jit=1135"

PHP Version

PHP 8.4.0-dev

Operating System

ubuntu 22.04

[cmb69]

Can't reproduce with PHP-8.3, so might again be related to the new JIT implementation based on IR. cc @dstogov