From 84559dab096c4b0223b3c8bb6afae20e796a154c Mon Sep 17 00:00:00 2001
From: tianfenghan <rango@swoole.com>
Date: Sun, 9 Aug 2026 21:10:47 +0800
Subject: [PATCH] fix(include): make ZendVM unwind lifetime safe

---
 src/CompilerBase.php                       | 19 +--------------
 tests/compiler/include_require/001.phpt    | 28 ++++++++++++++++++----
 tests/compiler/include_require/Hello.php   |  2 +-
 tests/compiler/include_require/no-leak.ini |  1 +
 4 files changed, 26 insertions(+), 24 deletions(-)
 create mode 100644 tests/compiler/include_require/no-leak.ini

diff --git a/src/CompilerBase.php b/src/CompilerBase.php
index beb3484b..8939283c 100644
--- a/src/CompilerBase.php
+++ b/src/CompilerBase.php
@@ -3544,26 +3544,9 @@ class CompilerBase implements PropertyAccessContext
                 break;
         }
 
-        /**
-         * If an included PHP file encounters a fatal error during execution—for example,
-         * incorrect function arguments—an exception will be thrown, unwinding directly from
-         * the Zend VM stack through the C++ stack. In the original implementation,
-         * there were several "undestroyed temporary objects." When the exception propagates back,
-         * those objects need to be destroyed. However, by that time the environment
-         * is already in a corrupted/inconsistent state, and attempting to destroy them causes a crash.
-         */
         $fileName = $this->parseIdentifier($expr->expr);
-        return <<<EOL
-            zend_string *filename = nullptr;
 
-            {
-                php::Str temp = $fileName;
-                filename = temp.str();
-                zend_string_addref(filename);
-            }
-            
-            php::include(filename, $type)
-EOL;
+        return "php::include(php::Var($fileName), $type)";
     }
 
     protected function parseScalarFloat(Node\Scalar\Float_ $expr): string
diff --git a/tests/compiler/include_require/001.phpt b/tests/compiler/include_require/001.phpt
index c99c7b16..56eedaa1 100644
--- a/tests/compiler/include_require/001.phpt
+++ b/tests/compiler/include_require/001.phpt
@@ -1,17 +1,35 @@
 --TEST--
-The compiled program calls its own functions via the Zend VM.
+include/require unwind safely when ZendVM calls a compiled function that throws
+--ENV--
+PHPRC=tests/compiler/include_require/no-leak.ini
 --FILE--
 <?php
 declare(strict_types=1);
 function Hello(string $value) {}
 
-function main() {
+function includePath(string $name): string
+{
+    return implode('', [__DIR__, '/', ucfirst(strtolower($name)), '.php']);
+}
+
+function main(): void
+{
+    // Keep this name: generated helper variables must not collide with PHP locals.
+    $filename = includePath('hello');
+
+    try {
+        include $filename;
+    } catch (ArgumentCountError $e) {
+        echo "include ArgumentCountError\n";
+    }
+
     try {
-        require __DIR__ . '/Hello.php';
+        require includePath('hello');
     } catch (ArgumentCountError $e) {
-        echo "ArgumentCountError Error";
+        echo "require ArgumentCountError\n";
     }
 }
 ?>
 --EXPECT--
-ArgumentCountError Error
+include ArgumentCountError
+require ArgumentCountError
diff --git a/tests/compiler/include_require/Hello.php b/tests/compiler/include_require/Hello.php
index 91224ec5..96b684de 100644
--- a/tests/compiler/include_require/Hello.php
+++ b/tests/compiler/include_require/Hello.php
@@ -1,3 +1,3 @@
 <?php
 declare(strict_types=1);
-Hello();
\ No newline at end of file
+Hello();
diff --git a/tests/compiler/include_require/no-leak.ini b/tests/compiler/include_require/no-leak.ini
new file mode 100644
index 00000000..526636d7
--- /dev/null
+++ b/tests/compiler/include_require/no-leak.ini
@@ -0,0 +1 @@
+report_memleaks=0