GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Assertion in zend_std_read_property: unset() of a hooked property through ArrayObject · Issue #25308 · php/php-src

Assertion in zend_std_read_property: unset() of a hooked property through ArrayObject #25308

New issue
Copy link
New issue
Copy link
Open
Open
Assertion in zend_std_read_property: unset() of a hooked property through ArrayObject#25308
Copy link
Labels
BugStatus: Needs Triage

Description

@YuanchengJiang
YuanchengJiang
opened on Nov 8, 2026
Issue body actions

Description

The following code:

<?php
class C {
    public $prop = 'x' {
        set => $value;
    }
}
$c = new C;
$ao = new ArrayObject($c);
unset($ao['prop']);
var_dump($c->prop);

Resulted in this output:

php: Zend/zend_object_handlers.c:838: zval *zend_std_read_property(zend_object *, zend_string *, int, void **, zval *): Assertion `(*(retval)).u2.extra & (1<<0)' failed.
Aborted (core dumped)

To reproduce: ./sapi/cli/php test.php

Commit:

33a61f765a94e018a8d55d962a73e8c8331ee256

Configurations:

CC="clang-12" CXX="clang++-12" CFLAGS="-DZEND_VERIFY_TYPE_INFERENCE" CXXFLAGS="-DZEND_VERIFY_TYPE_INFERENCE" ./configure --enable-debug --enable-address-sanitizer --enable-undefined-sanitizer --enable-re2c-cgoto --enable-zts --enable-bcmath --enable-calendar --enable-dba --enable-dl-test --enable-exif --enable-ftp --enable-gd --enable-gd-jis-conv --enable-mbstring --enable-pcntl --enable-shmop --enable-soap --enable-sockets --enable-sysvmsg --enable-zend-test --with-zlib --with-bz2 --with-curl --with-enchant --with-gettext --with-gmp --with-mhash --with-ldap --with-libedit --with-readline --with-snmp --with-sodium --with-xsl --with-zip --with-mysqli --with-pdo-mysql --with-pdo-pgsql --with-pgsql --with-sqlite3 --with-pdo-sqlite --with-webp --with-jpeg --with-freetype --enable-sigchild --with-pcre-jit --with-iconv

Operating System:

Ubuntu 20.04 Host, Docker 0599jiangyc/flowfusion:latest

This report is automatically generated by FlowFusion

PHP Version

nightly

Operating System

No response

Activity

  1. YuanchengJiang
    added
    Bug
    Status: Needs Triage
    on Nov 8, 2026
  2. Girgias commented on Nov 8, 2026

    @Girgias
    Girgias
    on Nov 8, 2026
    Member
    More actions

    Might mark this as Won't fix as using objects as backing storage in ArrayObject has been deprecated for exactly these sort of reasons.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    BugStatus: Needs Triage

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

      You are visitor 01402520 — GeezerVison does not store the pages you look up.
      Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.