[php-src] Issue #20991: SIGABRT in `zend_compile_func_array_map()` (zend_compile.c:5072) with `Assertion 0 && "not implemented"`

[email protected] (iany0)
Newsgroups php.bugs
Message-ID <[email protected]>
Issue: https://github.com/php/php-src/issues/20991
Author: iany0

### Description

The following code:

```php
<?php

function foo(string $key): string {
    throw new \Exception('Test');
}

array_filter(
    array_combine(
        ['a'],
        array_map(j::foo(...),['a']),
ay_combine(
        ['a'],
        array_map(j::foo(  ['a'],
        array_map(j::foo(...),['a']),
ay_combine(
        ['a'],
        array_map(j::foo(...),['a']),
    ),
    ...),['a']),
    ),
    ),
);

?>
```

Resulted in this output:
```
Running LLVMFuzzerInitialize ...
continue...
Reading 375 bytes from poc_4
php-fuzz-parser: /home/unimelb.edu.au/wenqiyan/fuzzingdynamiq/subjects/testphp/php-src/Zend/zend_compile.c:5072: zend_result zend_compile_func_array_map(znode *, zend_ast_list *, zend_string *, uint32_t): Assertion `0 && "not implemented"' failed.
Aborted
```

This reproduces with php-fuzz-parser (fuzzing harness).


### PHP Version

```plain
PHP 8.6.0-dev
```

### Operating System

_No response_
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.