From 948868470324c0cf8f920ed1132719c55e496d2b Mon Sep 17 00:00:00 2001
From: Niels Dossche <7771979+nielsdos@users.noreply.github.com>
Date: Wed, 19 Mar 2025 23:48:58 +0100
Subject: [PATCH] Add test for GH-18113

Fixed in https://github.com/dstogov/ir/pull/110 and merged via b932c267.

Closes GH-18113.
---
 NEWS                               |  2 ++
 ext/opcache/tests/jit/gh18113.phpt | 47 ++++++++++++++++++++++++++++++
 2 files changed, 49 insertions(+)
 create mode 100644 ext/opcache/tests/jit/gh18113.phpt

diff --git a/NEWS b/NEWS
index 91331aadba9..28706b7d679 100644
--- a/NEWS
+++ b/NEWS
@@ -61,6 +61,8 @@ PHP                                                                        NEWS
   . Fixed bug GH-17966 (Symfony JIT 1205 assertion failure). (nielsdos)
   . Fixed bug GH-18037 (SEGV Zend/zend_execute.c). (nielsdos)
   . Fixed bug GH-18050 (IN_ARRAY optimization in DFA pass is broken). (ilutov)
+  . Fixed bug GH-18113 (stack-buffer-overflow ext/opcache/jit/ir/ir_sccp.c).
+    (nielsdos)
 
 - Standard:
   . Fix memory leaks in array_any() / array_all(). (nielsdos)
diff --git a/ext/opcache/tests/jit/gh18113.phpt b/ext/opcache/tests/jit/gh18113.phpt
new file mode 100644
index 00000000000..194bb403032
--- /dev/null
+++ b/ext/opcache/tests/jit/gh18113.phpt
@@ -0,0 +1,47 @@
+--TEST--
+GH-18113 (stack-buffer-overflow ext/opcache/jit/ir/ir_sccp.c)
+--EXTENSIONS--
+opcache
+--INI--
+opcache.jit=1205
+--FILE--
+<?php
+function lookup($s){
+switch($fusion){
+case 1: return 1;
+case 4: return 4;
+case 5: return 5;
+case 14: return 14;
+case 15: return 15;
+case 488: return 488;
+case 489: return 489;
+case 490: return 490;
+case 491: return 491;
+case 492: return 492;
+case 493: return 493;
+case 494: return 494;
+case 495: return 495;
+case 496: return 496;
+case 497: return 497;
+case 498: return 498;
+case 499: return 499;
+case 500: return 500;
+case 501: return 501;
+case 502: return 502;
+case 503: return 503;
+case 504: return 504;
+case 505: return 505;
+case 506: return 506;
+case 507: return 507;
+case 508: return 508;
+case 509: return 509;
+case 510: return 510;
+case 511: return 511;
+case 512: return 512;
+case 513: return 513;
+};
+}
+echo "Done\n";
+?>
+--EXPECT--
+Done