]> granicus.if.org Git - php/commitdiff
Merge branch 'PHP-5.6' into PHP-7.0
authorNikita Popov <nikic@php.net>
Wed, 28 Sep 2016 20:36:36 +0000 (22:36 +0200)
committerNikita Popov <nikic@php.net>
Wed, 28 Sep 2016 20:36:58 +0000 (22:36 +0200)
1  2 
Zend/zend_vm_def.h
Zend/zend_vm_execute.h

index 504bf5783bf6cbb9bd23f6c02f5b1742c438f515,bd843d693465cc4e3127fd25936a8da3dd686298..dcd460ad5d3750b4cf1729defbd88401524e2fdd
@@@ -5232,36 -3879,26 +5232,39 @@@ ZEND_VM_C_LABEL(num_index)
                }
                FREE_OP2();
        } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
 -              if (zend_hash_next_index_insert(Z_ARRVAL(EX_T(opline->result.var).tmp_var), &expr_ptr, sizeof(zval *), NULL) == FAILURE) {
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
+                       zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
 -                      zval_ptr_dtor(&expr_ptr);
++                      zval_ptr_dtor(expr_ptr);
+               }
        }
 -      if ((OP1_TYPE == IS_VAR || OP1_TYPE == IS_CV) && opline->extended_value) {
 -              FREE_OP1_VAR_PTR();
 -      }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -ZEND_VM_HANDLER(71, ZEND_INIT_ARRAY, CONST|TMP|VAR|UNUSED|CV, CONST|TMP|VAR|UNUSED|CV)
 +ZEND_VM_HANDLER(71, ZEND_INIT_ARRAY, CONST|TMP|VAR|UNUSED|CV, CONST|TMPVAR|UNUSED|CV)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
  
 -      array_init(&EX_T(opline->result.var).tmp_var);
 +      array = EX_VAR(opline->result.var);
 +      if (OP1_TYPE != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
 +      }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
 +
 +      if (OP1_TYPE != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
 +              }
 +      }
 +
        if (OP1_TYPE == IS_UNUSED) {
                ZEND_VM_NEXT_OPCODE();
 -#if !defined(ZEND_VM_SPEC) || OP1_TYPE != IS_UNUSED
 +#if !defined(ZEND_VM_SPEC) || (OP1_TYPE != IS_UNUSED)
        } else {
                ZEND_VM_DISPATCH_TO_HANDLER(ZEND_ADD_ARRAY_ELEMENT);
  #endif
index b6375908b0ea9d7ce127a789a1b8367db253efdf,f09d05b71c4971db00ed6399d97af52aa387f2d5..4bc72bd24f67e7606f7dafcde4159f2ec8c2bb7f
@@@ -5983,396 -4712,289 +5983,399 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
        ZEND_VM_NEXT_OPCODE();
  }
  
 -static int ZEND_FASTCALL  ZEND_IS_SMALLER_SPEC_CONST_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op2;
 -      zval *result = &EX_T(opline->result.var).tmp_var;
 -
 -      SAVE_OPLINE();
 -      ZVAL_BOOL(result, fast_is_smaller_function(result,
 -              opline->op1.zv,
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC));
 -
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
  
 -static int ZEND_FASTCALL  ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op2;
 -      zval *result = &EX_T(opline->result.var).tmp_var;
 +      zval *expr_ptr, new_expr;
  
        SAVE_OPLINE();
 -      ZVAL_BOOL(result, fast_is_smaller_or_equal_function(result,
 -              opline->op1.zv,
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC));
 +      if ((IS_CONST == IS_VAR || IS_CONST == IS_CV) &&
 +          UNEXPECTED(opline->extended_value & ZEND_ARRAY_ELEMENT_REF)) {
 +              expr_ptr = NULL;
 +              if (IS_CONST == IS_VAR && UNEXPECTED(expr_ptr == NULL)) {
 +                      zend_throw_error(NULL, "Cannot create references to/from string offsets");
 +                      zend_array_destroy(Z_ARRVAL_P(EX_VAR(opline->result.var)));
 +                      HANDLE_EXCEPTION();
 +              }
 +              ZVAL_MAKE_REF(expr_ptr);
 +              Z_ADDREF_P(expr_ptr);
  
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      } else {
 +              expr_ptr = EX_CONSTANT(opline->op1);
 +              if (IS_CONST == IS_TMP_VAR) {
 +                      /* pass */
 +              } else if (IS_CONST == IS_CONST) {
 +                      if (UNEXPECTED(Z_OPT_COPYABLE_P(expr_ptr))) {
 +                              ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                              zval_copy_ctor_func(&new_expr);
 +                              expr_ptr = &new_expr;
 +                      }
 +              } else if (IS_CONST == IS_CV) {
 +                      ZVAL_DEREF(expr_ptr);
 +                      if (Z_REFCOUNTED_P(expr_ptr)) {
 +                              Z_ADDREF_P(expr_ptr);
 +                      }
 +              } else /* if (IS_CONST == IS_VAR) */ {
 +                      if (UNEXPECTED(Z_ISREF_P(expr_ptr))) {
 +                              zend_refcounted *ref = Z_COUNTED_P(expr_ptr);
  
 -static int ZEND_FASTCALL  ZEND_BW_OR_SPEC_CONST_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op2;
 +                              expr_ptr = Z_REFVAL_P(expr_ptr);
 +                              if (UNEXPECTED(--GC_REFCOUNT(ref) == 0)) {
 +                                      ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                                      expr_ptr = &new_expr;
 +                                      efree_size(ref, sizeof(zend_reference));
 +                              } else if (Z_OPT_REFCOUNTED_P(expr_ptr)) {
 +                                      Z_ADDREF_P(expr_ptr);
 +                              }
 +                      }
 +              }
 +      }
  
 -      SAVE_OPLINE();
 -      bitwise_or_function(&EX_T(opline->result.var).tmp_var,
 -              opline->op1.zv,
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 +      if (IS_CONST != IS_UNUSED) {
  
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +              zval *offset = EX_CONSTANT(opline->op2);
 +              zend_string *str;
 +              zend_ulong hval;
 +
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_CONST != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
 +                              }
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if ((IS_CONST & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if (IS_CONST == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
++                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
++                      zval_ptr_dtor(expr_ptr);
++              }
 +      }
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_BW_AND_SPEC_CONST_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_CONST_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
 -      zend_free_op free_op2;
  
 -      SAVE_OPLINE();
 -      bitwise_and_function(&EX_T(opline->result.var).tmp_var,
 -              opline->op1.zv,
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 +      array = EX_VAR(opline->result.var);
 +      if (IS_CONST != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
 +      }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
  
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      if (IS_CONST != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
 +              }
 +      }
 +
 +      if (IS_CONST == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_CONST != IS_UNUSED)
 +      } else {
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
 +#endif
 +      }
  }
  
 -static int ZEND_FASTCALL  ZEND_BW_XOR_SPEC_CONST_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_UNSET_VAR_SPEC_CONST_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op2;
 +      zval tmp, *varname;
 +      HashTable *target_symbol_table;
 +
  
        SAVE_OPLINE();
 -      bitwise_xor_function(&EX_T(opline->result.var).tmp_var,
 -              opline->op1.zv,
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 +      if (IS_CONST == IS_CV &&
 +          IS_CONST == IS_UNUSED &&
 +          (opline->extended_value & ZEND_QUICK_SET)) {
 +              zval *var = EX_VAR(opline->op1.var);
  
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +              if (Z_REFCOUNTED_P(var)) {
 +                      zend_refcounted *garbage = Z_COUNTED_P(var);
  
 -static int ZEND_FASTCALL  ZEND_BOOL_XOR_SPEC_CONST_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op2;
 +                      if (!--GC_REFCOUNT(garbage)) {
 +                              ZVAL_UNDEF(var);
 +                              zval_dtor_func_for_ptr(garbage);
 +                      } else {
 +                              zval *z = var;
 +                              ZVAL_DEREF(z);
 +                              if (Z_COLLECTABLE_P(z) && UNEXPECTED(!Z_GC_INFO_P(z))) {
 +                                      ZVAL_UNDEF(var);
 +                                      gc_possible_root(Z_COUNTED_P(z));
 +                              } else {
 +                                      ZVAL_UNDEF(var);
 +                              }
 +                      }
 +              } else {
 +                      ZVAL_UNDEF(var);
 +              }
 +              ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +      }
  
 -      SAVE_OPLINE();
 -      boolean_xor_function(&EX_T(opline->result.var).tmp_var,
 -              opline->op1.zv,
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 +      varname = EX_CONSTANT(opline->op1);
  
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      ZVAL_UNDEF(&tmp);
 +      if (IS_CONST != IS_CONST && Z_TYPE_P(varname) != IS_STRING) {
 +              if (IS_CONST == IS_CV && UNEXPECTED(Z_TYPE_P(varname) == IS_UNDEF)) {
 +                      varname = GET_OP1_UNDEF_CV(varname, BP_VAR_R);
 +              }
 +              ZVAL_STR(&tmp, zval_get_string(varname));
 +              varname = &tmp;
 +      }
  
 -static int ZEND_FASTCALL  ZEND_FETCH_DIM_R_SPEC_CONST_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op2;
 -      zval *container;
 +      if (IS_CONST != IS_UNUSED) {
 +              zend_class_entry *ce;
  
 -      SAVE_OPLINE();
 -      container = opline->op1.zv;
 -      zend_fetch_dimension_address_read(&EX_T(opline->result.var), container, _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC), IS_TMP_VAR, BP_VAR_R TSRMLS_CC);
 -      zval_dtor(free_op2.var);
 -      if (IS_CONST != IS_VAR || !(opline->extended_value & ZEND_FETCH_ADD_LOCK)) {
 +              if (IS_CONST == IS_CONST) {
 +                      ce = CACHED_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op2)));
 +                      if (UNEXPECTED(ce == NULL)) {
 +                              ce = zend_fetch_class_by_name(Z_STR_P(EX_CONSTANT(opline->op2)), EX_CONSTANT(opline->op2) + 1, ZEND_FETCH_CLASS_DEFAULT | ZEND_FETCH_CLASS_EXCEPTION);
 +                              if (UNEXPECTED(ce == NULL)) {
 +                                      if (EXPECTED(!EG(exception))) {
 +                                              zend_throw_error(NULL, "Class '%s' not found", Z_STRVAL_P(EX_CONSTANT(opline->op2)));
 +                                      }
 +                                      if (IS_CONST != IS_CONST && Z_TYPE(tmp) != IS_UNDEF) {
 +                                              zend_string_release(Z_STR(tmp));
 +                                      }
 +
 +                                      HANDLE_EXCEPTION();
 +                              }
 +                              CACHE_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op2)), ce);
 +                      }
 +              } else {
 +                      ce = Z_CE_P(EX_VAR(opline->op2.var));
 +              }
 +              zend_std_unset_static_property(ce, Z_STR_P(varname));
 +      } else {
 +              target_symbol_table = zend_get_target_symbol_table(execute_data, opline->extended_value & ZEND_FETCH_TYPE_MASK);
 +              zend_hash_del_ind(target_symbol_table, Z_STR_P(varname));
 +      }
  
 +      if (IS_CONST != IS_CONST && Z_TYPE(tmp) != IS_UNDEF) {
 +              zend_string_release(Z_STR(tmp));
        }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_INIT_STATIC_METHOD_CALL_SPEC_CONST_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ISSET_ISEMPTY_VAR_SPEC_CONST_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zval *function_name;
 -      zend_class_entry *ce;
 -      call_slot *call = EX(call_slots) + opline->result.num;
 -
 -      SAVE_OPLINE();
 +      zval *value;
 +      int result;
  
 -      if (IS_CONST == IS_CONST) {
 -              /* no function found. try a static method in class */
 -              if (CACHED_PTR(opline->op1.literal->cache_slot)) {
 -                      ce = CACHED_PTR(opline->op1.literal->cache_slot);
 -              } else {
 -                      ce = zend_fetch_class_by_name(Z_STRVAL_P(opline->op1.zv), Z_STRLEN_P(opline->op1.zv), opline->op1.literal + 1, opline->extended_value TSRMLS_CC);
 -                      if (UNEXPECTED(EG(exception) != NULL)) {
 +      if (IS_CONST == IS_CV &&
 +          IS_CONST == IS_UNUSED &&
 +          (opline->extended_value & ZEND_QUICK_SET)) {
 +              value = EX_VAR(opline->op1.var);
 +              if (opline->extended_value & ZEND_ISSET) {
 +                      result =
 +                              Z_TYPE_P(value) > IS_NULL &&
 +                          (!Z_ISREF_P(value) || Z_TYPE_P(Z_REFVAL_P(value)) != IS_NULL);
 +              } else /* if (opline->extended_value & ZEND_ISEMPTY) */ {
 +                      SAVE_OPLINE();
 +                      result = !i_zend_is_true(value);
 +                      if (UNEXPECTED(EG(exception))) {
                                HANDLE_EXCEPTION();
                        }
 -                      if (UNEXPECTED(ce == NULL)) {
 -                              zend_error_noreturn(E_ERROR, "Class '%s' not found", Z_STRVAL_P(opline->op1.zv));
 -                      }
 -                      CACHE_PTR(opline->op1.literal->cache_slot, ce);
                }
 -              call->called_scope = ce;
 +              ZEND_VM_SMART_BRANCH(result, 0);
 +              ZVAL_BOOL(EX_VAR(opline->result.var), result);
 +              ZEND_VM_SET_NEXT_OPCODE(opline + 1);
 +              ZEND_VM_CONTINUE();
        } else {
 -              ce = EX_T(opline->op1.var).class_entry;
  
 -              if (opline->extended_value == ZEND_FETCH_CLASS_PARENT || opline->extended_value == ZEND_FETCH_CLASS_SELF) {
 -                      call->called_scope = EG(called_scope);
 -              } else {
 -                      call->called_scope = ce;
 +              zval tmp, *varname;
 +
 +              SAVE_OPLINE();
 +              varname = EX_CONSTANT(opline->op1);
 +              ZVAL_UNDEF(&tmp);
 +              if (IS_CONST != IS_CONST && Z_TYPE_P(varname) != IS_STRING) {
 +                      ZVAL_STR(&tmp, zval_get_string(varname));
 +                      varname = &tmp;
                }
 -      }
  
 -      if (IS_CONST == IS_CONST &&
 -          IS_TMP_VAR == IS_CONST &&
 -          CACHED_PTR(opline->op2.literal->cache_slot)) {
 -              call->fbc = CACHED_PTR(opline->op2.literal->cache_slot);
 -      } else if (IS_CONST != IS_CONST &&
 -                 IS_TMP_VAR == IS_CONST &&
 -                 (call->fbc = CACHED_POLYMORPHIC_PTR(opline->op2.literal->cache_slot, ce))) {
 -              /* do nothing */
 -      } else if (IS_TMP_VAR != IS_UNUSED) {
 -              char *function_name_strval = NULL;
 -              int function_name_strlen = 0;
 -              zend_free_op free_op2;
 +              if (IS_CONST != IS_UNUSED) {
 +                      zend_class_entry *ce;
  
 -              if (IS_TMP_VAR == IS_CONST) {
 -                      function_name_strval = Z_STRVAL_P(opline->op2.zv);
 -                      function_name_strlen = Z_STRLEN_P(opline->op2.zv);
 -              } else {
 -                      function_name = _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC);
 +                      if (IS_CONST == IS_CONST) {
 +                              if (IS_CONST == IS_CONST && EXPECTED((ce = CACHED_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op1)))) != NULL)) {
 +                                      value = CACHED_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op1)) + sizeof(void*));
  
 -                      if (UNEXPECTED(Z_TYPE_P(function_name) != IS_STRING)) {
 -                              if (UNEXPECTED(EG(exception) != NULL)) {
 -                                      HANDLE_EXCEPTION();
 +                                      /* check if static properties were destoyed */
 +                                      if (UNEXPECTED(CE_STATIC_MEMBERS(ce) == NULL)) {
 +                                              value = NULL;
 +                                      }
 +
 +                                      goto is_var_return;
 +                              } else if (UNEXPECTED((ce = CACHED_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op2)))) == NULL)) {
 +                                      ce = zend_fetch_class_by_name(Z_STR_P(EX_CONSTANT(opline->op2)), EX_CONSTANT(opline->op2) + 1, ZEND_FETCH_CLASS_DEFAULT | ZEND_FETCH_CLASS_EXCEPTION);
 +                                      if (UNEXPECTED(ce == NULL)) {
 +                                              ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +                                      }
 +                                      CACHE_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op2)), ce);
                                }
 -                              zend_error_noreturn(E_ERROR, "Function name must be a string");
                        } else {
 -                              function_name_strval = Z_STRVAL_P(function_name);
 -                              function_name_strlen = Z_STRLEN_P(function_name);
 -                      }
 -              }
 +                              ce = Z_CE_P(EX_VAR(opline->op2.var));
 +                              if (IS_CONST == IS_CONST &&
 +                                  (value = CACHED_POLYMORPHIC_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op1)), ce)) != NULL) {
  
 -              if (function_name_strval) {
 -                      if (ce->get_static_method) {
 -                              call->fbc = ce->get_static_method(ce, function_name_strval, function_name_strlen TSRMLS_CC);
 -                      } else {
 -                              call->fbc = zend_std_get_static_method(ce, function_name_strval, function_name_strlen, ((IS_TMP_VAR == IS_CONST) ? (opline->op2.literal + 1) : NULL) TSRMLS_CC);
 -                      }
 -                      if (UNEXPECTED(call->fbc == NULL)) {
 -                              zend_error_noreturn(E_ERROR, "Call to undefined method %s::%s()", ce->name, function_name_strval);
 -                      }
 -                      if (IS_TMP_VAR == IS_CONST &&
 -                          EXPECTED(call->fbc->type <= ZEND_USER_FUNCTION) &&
 -                          EXPECTED((call->fbc->common.fn_flags & (ZEND_ACC_CALL_VIA_HANDLER|ZEND_ACC_NEVER_CACHE)) == 0)) {
 -                              if (IS_CONST == IS_CONST) {
 -                                      CACHE_PTR(opline->op2.literal->cache_slot, call->fbc);
 -                              } else {
 -                                      CACHE_POLYMORPHIC_PTR(opline->op2.literal->cache_slot, ce, call->fbc);
 +                                      /* check if static properties were destoyed */
 +                                      if (UNEXPECTED(CE_STATIC_MEMBERS(ce) == NULL)) {
 +                                              value = NULL;
 +                                      }
 +
 +                                      goto is_var_return;
                                }
                        }
 -              }
 -              if (IS_TMP_VAR != IS_CONST) {
 -                      zval_dtor(free_op2.var);
 -              }
 -      } else {
 -              if (UNEXPECTED(ce->constructor == NULL)) {
 -                      zend_error_noreturn(E_ERROR, "Cannot call constructor");
 -              }
 -              if (EG(This) && Z_OBJCE_P(EG(This)) != ce->constructor->common.scope && (ce->constructor->common.fn_flags & ZEND_ACC_PRIVATE)) {
 -                      zend_error_noreturn(E_ERROR, "Cannot call private %s::__construct()", ce->name);
 -              }
 -              call->fbc = ce->constructor;
 -      }
  
 -      if (call->fbc->common.fn_flags & ZEND_ACC_STATIC) {
 -              call->object = NULL;
 -      } else {
 -              if (EG(This) &&
 -                  Z_OBJ_HT_P(EG(This))->get_class_entry &&
 -                  !instanceof_function(Z_OBJCE_P(EG(This)), ce TSRMLS_CC)) {
 -                  /* We are calling method of the other (incompatible) class,
 -                     but passing $this. This is done for compatibility with php-4. */
 -                      if (call->fbc->common.fn_flags & ZEND_ACC_ALLOW_STATIC) {
 -                              zend_error(E_DEPRECATED, "Non-static method %s::%s() should not be called statically, assuming $this from incompatible context", call->fbc->common.scope->name, call->fbc->common.function_name);
 -                      } else {
 -                              /* An internal function assumes $this is present and won't check that. So PHP would crash by allowing the call. */
 -                              zend_error_noreturn(E_ERROR, "Non-static method %s::%s() cannot be called statically, assuming $this from incompatible context", call->fbc->common.scope->name, call->fbc->common.function_name);
 +                      value = zend_std_get_static_property(ce, Z_STR_P(varname), 1);
 +
 +                      if (IS_CONST == IS_CONST && value) {
 +                              CACHE_POLYMORPHIC_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op1)), ce, value);
                        }
 +              } else {
 +                      HashTable *target_symbol_table = zend_get_target_symbol_table(execute_data, opline->extended_value & ZEND_FETCH_TYPE_MASK);
 +                      value = zend_hash_find_ind(target_symbol_table, Z_STR_P(varname));
                }
 -              if ((call->object = EG(This))) {
 -                      Z_ADDREF_P(call->object);
 -                      call->called_scope = Z_OBJCE_P(call->object);
 +
 +              if (IS_CONST != IS_CONST && Z_TYPE(tmp) != IS_UNDEF) {
 +                      zend_string_release(Z_STR(tmp));
                }
 -      }
  
 -      call->num_additional_args = 0;
 -      call->is_ctor_call = 0;
 -      EX(call) = call;
 +is_var_return:
 +              if (opline->extended_value & ZEND_ISSET) {
 +                      result = value && Z_TYPE_P(value) > IS_NULL &&
 +                          (!Z_ISREF_P(value) || Z_TYPE_P(Z_REFVAL_P(value)) != IS_NULL);
 +              } else /* if (opline->extended_value & ZEND_ISEMPTY) */ {
 +                      result = !value || !i_zend_is_true(value);
 +              }
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +              ZEND_VM_SMART_BRANCH(result, 1);
 +              ZVAL_BOOL(EX_VAR(opline->result.var), result);
 +              ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +      }
  }
  
 -static int ZEND_FASTCALL  ZEND_CASE_SPEC_CONST_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ISSET_ISEMPTY_DIM_OBJ_SPEC_CONST_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op2;
 +
 +      zval *container;
 +      int result;
 +      zend_ulong hval;
 +      zval *offset;
  
        SAVE_OPLINE();
 -      is_equal_function(&EX_T(opline->result.var).tmp_var,
 -                               opline->op1.zv,
 -                               _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 +      container = EX_CONSTANT(opline->op1);
  
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      if (IS_CONST == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
  
 -static int ZEND_FASTCALL  ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 +              HANDLE_EXCEPTION();
 +      }
  
 -      zval *expr_ptr;
 +      offset = EX_CONSTANT(opline->op2);
  
 -      SAVE_OPLINE();
 -      if ((IS_CONST == IS_VAR || IS_CONST == IS_CV) && opline->extended_value) {
 -              zval **expr_ptr_ptr = NULL;
 +      if (IS_CONST != IS_UNUSED && EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +              HashTable *ht;
 +              zval *value;
 +              zend_string *str;
  
 -              if (IS_CONST == IS_VAR && UNEXPECTED(expr_ptr_ptr == NULL)) {
 -                      zend_error_noreturn(E_ERROR, "Cannot create references to/from string offsets");
 +isset_dim_obj_array:
 +              ht = Z_ARRVAL_P(container);
 +isset_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_CONST != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index_prop;
 +                              }
 +                      }
 +str_index_prop:
 +                      value = zend_hash_find_ind(ht, str);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index_prop:
 +                      value = zend_hash_index_find(ht, hval);
 +              } else if ((IS_CONST & (IS_VAR|IS_CV)) && EXPECTED(Z_ISREF_P(offset))) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto isset_again;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_RESOURCE) {
 +                      hval = Z_RES_HANDLE_P(offset);
 +                      goto num_index_prop;
 +              } else if (IS_CONST == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index_prop;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type in isset or empty");
 +                      goto isset_not_found;
                }
 -              SEPARATE_ZVAL_TO_MAKE_IS_REF(expr_ptr_ptr);
 -              expr_ptr = *expr_ptr_ptr;
 -              Z_ADDREF_P(expr_ptr);
 -      } else {
 -              expr_ptr=opline->op1.zv;
 -              if (0) { /* temporary variable */
 -                      zval *new_expr;
 -
 -                      ALLOC_ZVAL(new_expr);
 -                      INIT_PZVAL_COPY(new_expr, expr_ptr);
 -                      expr_ptr = new_expr;
 -              } else if (IS_CONST == IS_CONST || PZVAL_IS_REF(expr_ptr)) {
 -                      zval *new_expr;
  
 -                      ALLOC_ZVAL(new_expr);
 -                      INIT_PZVAL_COPY(new_expr, expr_ptr);
 -                      expr_ptr = new_expr;
 -                      zendi_zval_copy_ctor(*expr_ptr);
 -
 -              } else if (IS_CONST == IS_CV) {
 -                      Z_ADDREF_P(expr_ptr);
 +              if (opline->extended_value & ZEND_ISSET) {
 +                      /* > IS_NULL means not IS_UNDEF and not IS_NULL */
 +                      result = value != NULL && Z_TYPE_P(value) > IS_NULL &&
 +                          (!Z_ISREF_P(value) || Z_TYPE_P(Z_REFVAL_P(value)) != IS_NULL);
 +              } else /* if (opline->extended_value & ZEND_ISEMPTY) */ {
 +                      result = (value == NULL || !i_zend_is_true(value));
 +              }
 +              goto isset_dim_obj_exit;
 +      } else if ((IS_CONST & (IS_VAR|IS_CV)) && Z_ISREF_P(container)) {
 +              container = Z_REFVAL_P(container);
 +              if (EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +                      goto isset_dim_obj_array;
                }
        }
  
@@@ -7744,185 -6555,96 +7747,188 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
  {
        USE_OPLINE
  
 -      zval *expr_ptr;
 -
        SAVE_OPLINE();
 -      if ((IS_CONST == IS_VAR || IS_CONST == IS_CV) && opline->extended_value) {
 -              zval **expr_ptr_ptr = NULL;
 -
 -              if (IS_CONST == IS_VAR && UNEXPECTED(expr_ptr_ptr == NULL)) {
 -                      zend_error_noreturn(E_ERROR, "Cannot create references to/from string offsets");
 -              }
 -              SEPARATE_ZVAL_TO_MAKE_IS_REF(expr_ptr_ptr);
 -              expr_ptr = *expr_ptr_ptr;
 -              Z_ADDREF_P(expr_ptr);
 +      if (IS_CONST == IS_UNUSED) {
 +              zend_verify_missing_return_type(EX(func), CACHE_ADDR(opline->op2.num));
        } else {
 -              expr_ptr=opline->op1.zv;
 -              if (0) { /* temporary variable */
 -                      zval *new_expr;
 +/* prevents "undefined variable opline" errors */
 +#if 0 || (IS_CONST != IS_UNUSED)
 +              zval *retval_ref, *retval_ptr;
  
 -                      ALLOC_ZVAL(new_expr);
 -                      INIT_PZVAL_COPY(new_expr, expr_ptr);
 -                      expr_ptr = new_expr;
 -              } else if (IS_CONST == IS_CONST || PZVAL_IS_REF(expr_ptr)) {
 -                      zval *new_expr;
 +              zend_arg_info *ret_info = EX(func)->common.arg_info - 1;
  
 -                      ALLOC_ZVAL(new_expr);
 -                      INIT_PZVAL_COPY(new_expr, expr_ptr);
 -                      expr_ptr = new_expr;
 -                      zendi_zval_copy_ctor(*expr_ptr);
 +              retval_ref = retval_ptr = EX_CONSTANT(opline->op1);
  
 +              if (IS_CONST == IS_CONST) {
 +                      ZVAL_COPY(EX_VAR(opline->result.var), retval_ptr);
 +                      retval_ref = retval_ptr = EX_VAR(opline->result.var);
 +              } else if (IS_CONST == IS_VAR) {
 +                      if (UNEXPECTED(Z_TYPE_P(retval_ptr) == IS_INDIRECT)) {
 +                              retval_ptr = Z_INDIRECT_P(retval_ptr);
 +                      }
 +                      ZVAL_DEREF(retval_ptr);
                } else if (IS_CONST == IS_CV) {
 -                      Z_ADDREF_P(expr_ptr);
 +                      ZVAL_DEREF(retval_ptr);
 +              }
 +
 +              if (UNEXPECTED(!ret_info->class_name
 +                      && ret_info->type_hint != IS_CALLABLE
 +                      && !ZEND_SAME_FAKE_TYPE(ret_info->type_hint, Z_TYPE_P(retval_ptr))
 +                      && !(EX(func)->op_array.fn_flags & ZEND_ACC_RETURN_REFERENCE)
 +                      && retval_ref != retval_ptr)
 +              ) {
 +                      /* A cast might happen - unwrap the reference if this is a by-value return */
 +                      if (Z_REFCOUNT_P(retval_ref) == 1) {
 +                              ZVAL_UNREF(retval_ref);
 +                      } else {
 +                              Z_DELREF_P(retval_ref);
 +                              ZVAL_COPY(retval_ref, retval_ptr);
 +                      }
 +                      retval_ptr = retval_ref;
 +              }
 +              zend_verify_return_type(EX(func), retval_ptr, CACHE_ADDR(opline->op2.num));
 +
 +              if (UNEXPECTED(EG(exception) != NULL)) {
 +                      if (IS_CONST == IS_CONST) {
 +                              zval_ptr_dtor_nogc(retval_ptr);
 +                      } else {
 +
 +                      }
                }
 +#endif
        }
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +}
  
 -      if (IS_UNUSED != IS_UNUSED) {
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      USE_OPLINE
  
 -              zval *offset = NULL;
 -              ulong hval;
 +      zval *expr_ptr, new_expr;
  
 -              switch (Z_TYPE_P(offset)) {
 -                      case IS_DOUBLE:
 -                              hval = zend_dval_to_lval(Z_DVAL_P(offset));
 -                              goto num_index;
 -                      case IS_LONG:
 -                      case IS_BOOL:
 -                              hval = Z_LVAL_P(offset);
 -num_index:
 -                              zend_hash_index_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_STRING:
 -                              if (IS_UNUSED == IS_CONST) {
 -                                      hval = Z_HASH_P(offset);
 -                              } else {
 -                                      ZEND_HANDLE_NUMERIC_EX(Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, goto num_index);
 -                                      hval = str_hash(Z_STRVAL_P(offset), Z_STRLEN_P(offset));
 -                              }
 -                              zend_hash_quick_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_NULL:
 -                              zend_hash_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), "", sizeof(""), &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      default:
 -                              zend_error(E_WARNING, "Illegal offset type");
 -                              zval_ptr_dtor(&expr_ptr);
 -                              /* do nothing */
 -                              break;
 +      SAVE_OPLINE();
 +      if ((IS_CONST == IS_VAR || IS_CONST == IS_CV) &&
 +          UNEXPECTED(opline->extended_value & ZEND_ARRAY_ELEMENT_REF)) {
 +              expr_ptr = NULL;
 +              if (IS_CONST == IS_VAR && UNEXPECTED(expr_ptr == NULL)) {
 +                      zend_throw_error(NULL, "Cannot create references to/from string offsets");
 +                      zend_array_destroy(Z_ARRVAL_P(EX_VAR(opline->result.var)));
 +                      HANDLE_EXCEPTION();
                }
 +              ZVAL_MAKE_REF(expr_ptr);
 +              Z_ADDREF_P(expr_ptr);
  
        } else {
 -              if (zend_hash_next_index_insert(Z_ARRVAL(EX_T(opline->result.var).tmp_var), &expr_ptr, sizeof(zval *), NULL) == FAILURE) {
 -                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
 -                      zval_ptr_dtor(&expr_ptr);
 +              expr_ptr = EX_CONSTANT(opline->op1);
 +              if (IS_CONST == IS_TMP_VAR) {
 +                      /* pass */
 +              } else if (IS_CONST == IS_CONST) {
 +                      if (UNEXPECTED(Z_OPT_COPYABLE_P(expr_ptr))) {
 +                              ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                              zval_copy_ctor_func(&new_expr);
 +                              expr_ptr = &new_expr;
 +                      }
 +              } else if (IS_CONST == IS_CV) {
 +                      ZVAL_DEREF(expr_ptr);
 +                      if (Z_REFCOUNTED_P(expr_ptr)) {
 +                              Z_ADDREF_P(expr_ptr);
 +                      }
 +              } else /* if (IS_CONST == IS_VAR) */ {
 +                      if (UNEXPECTED(Z_ISREF_P(expr_ptr))) {
 +                              zend_refcounted *ref = Z_COUNTED_P(expr_ptr);
 +
 +                              expr_ptr = Z_REFVAL_P(expr_ptr);
 +                              if (UNEXPECTED(--GC_REFCOUNT(ref) == 0)) {
 +                                      ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                                      expr_ptr = &new_expr;
 +                                      efree_size(ref, sizeof(zend_reference));
 +                              } else if (Z_OPT_REFCOUNTED_P(expr_ptr)) {
 +                                      Z_ADDREF_P(expr_ptr);
 +                              }
 +                      }
                }
        }
 -      if ((IS_CONST == IS_VAR || IS_CONST == IS_CV) && opline->extended_value) {
  
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
 +      if (IS_UNUSED != IS_UNUSED) {
 +
 +              zval *offset = NULL;
 +              zend_string *str;
 +              zend_ulong hval;
 +
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_UNUSED != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
 +                              }
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if ((IS_UNUSED & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if (IS_UNUSED == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +
 +      } else {
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
++                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
++                      zval_ptr_dtor(expr_ptr);
++              }
        }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_INIT_ARRAY_SPEC_CONST_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_CONST_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
  
 -      array_init(&EX_T(opline->result.var).tmp_var);
 +      array = EX_VAR(opline->result.var);
 +      if (IS_CONST != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
 +      }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
 +
 +      if (IS_CONST != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
 +              }
 +      }
 +
        if (IS_CONST == IS_UNUSED) {
                ZEND_VM_NEXT_OPCODE();
 -#if 0 || IS_CONST != IS_UNUSED
 +#if 0 || (IS_CONST != IS_UNUSED)
        } else {
 -              return ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
  #endif
        }
  }
@@@ -9494,320 -7972,162 +9500,323 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
  {
        USE_OPLINE
  
 -      SAVE_OPLINE();
 -      if (IS_TMP_VAR == IS_TMP_VAR) {
 -              zendi_zval_dtor(EX_T(opline->op1.var).tmp_var);
 +      zval *function_name;
 +      zend_fcall_info_cache fcc;
 +      char *error = NULL;
 +      zend_function *func;
 +      zend_class_entry *called_scope;
 +      zend_object *object;
 +      zend_execute_data *call;
 +      uint32_t call_info = ZEND_CALL_NESTED_FUNCTION;
 +
 +      SAVE_OPLINE();
 +      function_name = _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var);
 +      if (zend_is_callable_ex(function_name, NULL, 0, NULL, &fcc, &error)) {
 +              func = fcc.function_handler;
 +              if (func->common.fn_flags & ZEND_ACC_CLOSURE) {
 +                      /* Delay closure destruction until its invocation */
 +                      if (IS_CV & (IS_VAR|IS_CV)) {
 +                              ZVAL_DEREF(function_name);
 +                      }
 +                      ZEND_ASSERT(GC_TYPE((zend_object*)func->common.prototype) == IS_OBJECT);
 +                      GC_REFCOUNT((zend_object*)func->common.prototype)++;
 +                      call_info |= ZEND_CALL_CLOSURE;
 +              }
 +              called_scope = fcc.called_scope;
 +              object = fcc.object;
 +              if (object) {
 +                      call_info |= ZEND_CALL_RELEASE_THIS;
 +                      GC_REFCOUNT(object)++; /* For $this pointer */
 +              }
 +              if (error) {
 +                      efree(error);
 +                      /* This is the only soft error is_callable() can generate */
 +                      zend_error(E_DEPRECATED,
 +                              "Non-static method %s::%s() should not be called statically",
 +                              ZSTR_VAL(func->common.scope->name), ZSTR_VAL(func->common.function_name));
 +                      if (UNEXPECTED(EG(exception) != NULL)) {
 +                              HANDLE_EXCEPTION();
 +                      }
 +              }
        } else {
 -              zval_ptr_dtor(&EX_T(opline->op1.var).var.ptr);
 +              zend_internal_type_error(EX_USES_STRICT_TYPES(), "%s() expects parameter 1 to be a valid callback, %s", Z_STRVAL_P(EX_CONSTANT(opline->op1)), error);
 +              efree(error);
 +              func = (zend_function*)&zend_pass_function;
 +              called_scope = NULL;
 +              object = NULL;
        }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +
 +      call = zend_vm_stack_push_call_frame(call_info,
 +              func, opline->extended_value, called_scope, object);
 +      call->prev_execute_data = EX(call);
 +      EX(call) = call;
 +
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_RETURN_SPEC_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_CATCH_SPEC_CONST_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zval *retval_ptr;
 -      zend_free_op free_op1;
 +      zend_class_entry *ce, *catch_ce;
 +      zend_object *exception;
 +      zval *ex;
  
        SAVE_OPLINE();
 -      retval_ptr = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -      if (!EG(return_value_ptr_ptr)) {
 -              zval_dtor(free_op1.var);
 -      } else {
 -              if (IS_TMP_VAR == IS_CONST ||
 -                  IS_TMP_VAR == IS_TMP_VAR ||
 -                  PZVAL_IS_REF(retval_ptr)) {
 -                      zval *ret;
 +      /* Check whether an exception has been thrown, if not, jump over code */
 +      zend_exception_restore();
 +      if (EG(exception) == NULL) {
 +              ZEND_VM_SET_OPCODE(&EX(func)->op_array.opcodes[opline->extended_value]);
 +              ZEND_VM_CONTINUE(); /* CHECK_ME */
 +      }
 +      catch_ce = CACHED_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op1)));
 +      if (UNEXPECTED(catch_ce == NULL)) {
 +              catch_ce = zend_fetch_class_by_name(Z_STR_P(EX_CONSTANT(opline->op1)), EX_CONSTANT(opline->op1) + 1, ZEND_FETCH_CLASS_NO_AUTOLOAD);
  
 -                      ALLOC_ZVAL(ret);
 -                      INIT_PZVAL_COPY(ret, retval_ptr);
 -                      if (IS_TMP_VAR != IS_TMP_VAR) {
 -                              zval_copy_ctor(ret);
 -                      }
 -                      *EG(return_value_ptr_ptr) = ret;
 +              CACHE_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op1)), catch_ce);
 +      }
 +      ce = EG(exception)->ce;
  
 -              } else if ((IS_TMP_VAR == IS_CV || IS_TMP_VAR == IS_VAR) &&
 -                         retval_ptr == &EG(uninitialized_zval)) {
 -                      zval *ret;
 +#ifdef HAVE_DTRACE
 +      if (DTRACE_EXCEPTION_CAUGHT_ENABLED()) {
 +              DTRACE_EXCEPTION_CAUGHT((char *)ce->name);
 +      }
 +#endif /* HAVE_DTRACE */
  
 -                      if (IS_TMP_VAR == IS_VAR) {
 -                              Z_DELREF_P(retval_ptr);
 -                      }
 -                      ALLOC_INIT_ZVAL(ret);
 -                      *EG(return_value_ptr_ptr) = ret;
 -              } else {
 -                      *EG(return_value_ptr_ptr) = retval_ptr;
 -                      if (IS_TMP_VAR == IS_CV) {
 -                              Z_ADDREF_P(retval_ptr);
 +      if (ce != catch_ce) {
 +              if (!catch_ce || !instanceof_function(ce, catch_ce)) {
 +                      if (opline->result.num) {
 +                              zend_throw_exception_internal(NULL);
 +                              HANDLE_EXCEPTION();
                        }
 +                      ZEND_VM_SET_OPCODE(&EX(func)->op_array.opcodes[opline->extended_value]);
 +                      ZEND_VM_CONTINUE(); /* CHECK_ME */
                }
        }
 -      return zend_leave_helper_SPEC(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +
 +      exception = EG(exception);
 +      ex = EX_VAR(opline->op2.var);
 +      if (UNEXPECTED(Z_ISREF_P(ex))) {
 +              ex = Z_REFVAL_P(ex);
 +      }
 +      zval_ptr_dtor(ex);
 +      ZVAL_OBJ(ex, EG(exception));
 +      if (UNEXPECTED(EG(exception) != exception)) {
 +              GC_REFCOUNT(EG(exception))++;
 +              HANDLE_EXCEPTION();
 +      } else {
 +              EG(exception) = NULL;
 +              ZEND_VM_NEXT_OPCODE();
 +      }
  }
  
 -static int ZEND_FASTCALL  ZEND_RETURN_BY_REF_SPEC_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_CASE_SPEC_CONST_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zval *retval_ptr;
 -      zval **retval_ptr_ptr;
 -      zend_free_op free_op1;
  
 -      SAVE_OPLINE();
 +      zval *op1, *op2, *result;
  
 +      op1 = EX_CONSTANT(opline->op1);
 +      op2 = _get_zval_ptr_cv_undef(execute_data, opline->op2.var);
        do {
 -              if (IS_TMP_VAR == IS_CONST || IS_TMP_VAR == IS_TMP_VAR ||
 -                  (IS_TMP_VAR == IS_VAR && opline->extended_value == ZEND_RETURNS_VALUE)) {
 -                      /* Not supposed to happen, but we'll allow it */
 -                      zend_error(E_NOTICE, "Only variable references should be returned by reference");
 +              int result;
  
 -                      retval_ptr = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -                      if (!EG(return_value_ptr_ptr)) {
 -                              if (IS_TMP_VAR == IS_TMP_VAR) {
 -                                      zval_dtor(free_op1.var);
 +              if (EXPECTED(Z_TYPE_P(op1) == IS_LONG)) {
 +                      if (EXPECTED(Z_TYPE_P(op2) == IS_LONG)) {
 +                              result = (Z_LVAL_P(op1) == Z_LVAL_P(op2));
 +                      } else if (EXPECTED(Z_TYPE_P(op2) == IS_DOUBLE)) {
 +                              result = ((double)Z_LVAL_P(op1) == Z_DVAL_P(op2));
 +                      } else {
 +                              break;
 +                      }
 +              } else if (EXPECTED(Z_TYPE_P(op1) == IS_DOUBLE)) {
 +                      if (EXPECTED(Z_TYPE_P(op2) == IS_DOUBLE)) {
 +                              result = (Z_DVAL_P(op1) == Z_DVAL_P(op2));
 +                      } else if (EXPECTED(Z_TYPE_P(op2) == IS_LONG)) {
 +                              result = (Z_DVAL_P(op1) == ((double)Z_LVAL_P(op2)));
 +                      } else {
 +                              break;
 +                      }
 +              } else if (EXPECTED(Z_TYPE_P(op1) == IS_STRING)) {
 +                      if (EXPECTED(Z_TYPE_P(op2) == IS_STRING)) {
 +                              if (Z_STR_P(op1) == Z_STR_P(op2)) {
 +                                      result = 1;
 +                              } else if (Z_STRVAL_P(op1)[0] > '9' || Z_STRVAL_P(op2)[0] > '9') {
 +                                      if (Z_STRLEN_P(op1) != Z_STRLEN_P(op2)) {
 +                                              result = 0;
 +                                      } else {
 +                                              result = (memcmp(Z_STRVAL_P(op1), Z_STRVAL_P(op2), Z_STRLEN_P(op1)) == 0);
 +                                      }
 +                              } else {
 +                                      result = (zendi_smart_strcmp(Z_STR_P(op1), Z_STR_P(op2)) == 0);
                                }
 -                      } else if (!1) { /* Not a temp var */
 -                              zval *ret;
  
 -                              ALLOC_ZVAL(ret);
 -                              INIT_PZVAL_COPY(ret, retval_ptr);
 -                              zval_copy_ctor(ret);
 -                              *EG(return_value_ptr_ptr) = ret;
                        } else {
 -                              zval *ret;
 -
 -                              ALLOC_ZVAL(ret);
 -                              INIT_PZVAL_COPY(ret, retval_ptr);
 -                              *EG(return_value_ptr_ptr) = ret;
 +                              break;
                        }
 +              } else {
                        break;
                }
 +              ZEND_VM_SMART_BRANCH(result, 0);
 +              ZVAL_BOOL(EX_VAR(opline->result.var), result);
 +              ZEND_VM_NEXT_OPCODE();
 +      } while (0);
 +
 +      SAVE_OPLINE();
 +      if (IS_CONST == IS_CV && UNEXPECTED(Z_TYPE_P(op1) == IS_UNDEF)) {
 +              op1 = GET_OP1_UNDEF_CV(op1, BP_VAR_R);
 +      } else if ((IS_CONST & IS_VAR) && UNEXPECTED(Z_ISREF_P(op1))) {
 +              /* Don't keep lock on reference, lock the value instead */
 +              if (UNEXPECTED(Z_REFCOUNT_P(op1) == 1)) {
 +                      ZVAL_UNREF(op1);
 +              } else {
 +                      Z_DELREF_P(op1);
 +                      ZVAL_COPY(op1, Z_REFVAL_P(op1));
 +              }
 +      }
 +      if (IS_CV == IS_CV && UNEXPECTED(Z_TYPE_P(op2) == IS_UNDEF)) {
 +              op2 = GET_OP2_UNDEF_CV(op2, BP_VAR_R);
 +      }
 +      result = EX_VAR(opline->result.var);
 +      compare_function(result, op1, op2);
 +      ZVAL_BOOL(result, Z_LVAL_P(result) == 0);
  
 -              retval_ptr_ptr = NULL;
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +}
 +
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      USE_OPLINE
  
 -              if (IS_TMP_VAR == IS_VAR && UNEXPECTED(retval_ptr_ptr == NULL)) {
 -                      zend_error_noreturn(E_ERROR, "Cannot return string offsets by reference");
 +      zval *expr_ptr, new_expr;
 +
 +      SAVE_OPLINE();
 +      if ((IS_CONST == IS_VAR || IS_CONST == IS_CV) &&
 +          UNEXPECTED(opline->extended_value & ZEND_ARRAY_ELEMENT_REF)) {
 +              expr_ptr = NULL;
 +              if (IS_CONST == IS_VAR && UNEXPECTED(expr_ptr == NULL)) {
 +                      zend_throw_error(NULL, "Cannot create references to/from string offsets");
 +                      zend_array_destroy(Z_ARRVAL_P(EX_VAR(opline->result.var)));
 +                      HANDLE_EXCEPTION();
                }
 +              ZVAL_MAKE_REF(expr_ptr);
 +              Z_ADDREF_P(expr_ptr);
  
 -              if (IS_TMP_VAR == IS_VAR && !Z_ISREF_PP(retval_ptr_ptr)) {
 -                      if (opline->extended_value == ZEND_RETURNS_FUNCTION &&
 -                          EX_T(opline->op1.var).var.fcall_returned_reference) {
 -                      } else if (EX_T(opline->op1.var).var.ptr_ptr == &EX_T(opline->op1.var).var.ptr) {
 -                              zend_error(E_NOTICE, "Only variable references should be returned by reference");
 -                              if (EG(return_value_ptr_ptr)) {
 -                                      zval *ret;
 +      } else {
 +              expr_ptr = EX_CONSTANT(opline->op1);
 +              if (IS_CONST == IS_TMP_VAR) {
 +                      /* pass */
 +              } else if (IS_CONST == IS_CONST) {
 +                      if (UNEXPECTED(Z_OPT_COPYABLE_P(expr_ptr))) {
 +                              ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                              zval_copy_ctor_func(&new_expr);
 +                              expr_ptr = &new_expr;
 +                      }
 +              } else if (IS_CONST == IS_CV) {
 +                      ZVAL_DEREF(expr_ptr);
 +                      if (Z_REFCOUNTED_P(expr_ptr)) {
 +                              Z_ADDREF_P(expr_ptr);
 +                      }
 +              } else /* if (IS_CONST == IS_VAR) */ {
 +                      if (UNEXPECTED(Z_ISREF_P(expr_ptr))) {
 +                              zend_refcounted *ref = Z_COUNTED_P(expr_ptr);
  
 -                                      ALLOC_ZVAL(ret);
 -                                      INIT_PZVAL_COPY(ret, *retval_ptr_ptr);
 -                                      zval_copy_ctor(ret);
 -                                      *EG(return_value_ptr_ptr) = ret;
 +                              expr_ptr = Z_REFVAL_P(expr_ptr);
 +                              if (UNEXPECTED(--GC_REFCOUNT(ref) == 0)) {
 +                                      ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                                      expr_ptr = &new_expr;
 +                                      efree_size(ref, sizeof(zend_reference));
 +                              } else if (Z_OPT_REFCOUNTED_P(expr_ptr)) {
 +                                      Z_ADDREF_P(expr_ptr);
                                }
 -                              break;
                        }
                }
 +      }
  
 -              if (EG(return_value_ptr_ptr)) {
 -                      SEPARATE_ZVAL_TO_MAKE_IS_REF(retval_ptr_ptr);
 -                      Z_ADDREF_PP(retval_ptr_ptr);
 +      if (IS_CV != IS_UNUSED) {
  
 -                      *EG(return_value_ptr_ptr) = *retval_ptr_ptr;
 -              }
 -      } while (0);
 +              zval *offset = _get_zval_ptr_cv_undef(execute_data, opline->op2.var);
 +              zend_string *str;
 +              zend_ulong hval;
  
 -      return zend_leave_helper_SPEC(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_CV != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
 +                              }
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if ((IS_CV & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if (IS_CV == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
++                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
++                      zval_ptr_dtor(expr_ptr);
++              }
 +      }
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_THROW_SPEC_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_CONST_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
 -      zval *value;
 -      zval *exception;
 -      zend_free_op free_op1;
  
 -      SAVE_OPLINE();
 -      value = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 +      array = EX_VAR(opline->result.var);
 +      if (IS_CONST != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
 +      }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
  
 -      if (IS_TMP_VAR == IS_CONST || UNEXPECTED(Z_TYPE_P(value) != IS_OBJECT)) {
 -              if (UNEXPECTED(EG(exception) != NULL)) {
 -                      HANDLE_EXCEPTION();
 +      if (IS_CONST != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
                }
 -              zend_error_noreturn(E_ERROR, "Can only throw objects");
        }
  
 -      zend_exception_save(TSRMLS_C);
 -      /* Not sure if a complete copy is what we want here */
 -      ALLOC_ZVAL(exception);
 -      INIT_PZVAL_COPY(exception, value);
 -      if (!1) {
 -              zval_copy_ctor(exception);
 +      if (IS_CONST == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_CONST != IS_UNUSED)
 +      } else {
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
 +#endif
        }
 -
 -      zend_throw_exception_object(exception TSRMLS_CC);
 -      zend_exception_restore(TSRMLS_C);
 -
 -      HANDLE_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_SEND_VAL_SPEC_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ISSET_ISEMPTY_DIM_OBJ_SPEC_CONST_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
  
@@@ -11150,831 -9350,662 +11159,834 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
  
                        HANDLE_EXCEPTION();
                }
 -              zend_error_noreturn(E_ERROR, "Call to a member function %s() on %s", function_name_strval, zend_get_type_by_const(Z_TYPE_P(call->object)));
 +              if ((IS_TMP_VAR|IS_VAR) == IS_CONST &&
 +                  EXPECTED(fbc->type <= ZEND_USER_FUNCTION) &&
 +                  EXPECTED(!(fbc->common.fn_flags & (ZEND_ACC_CALL_VIA_TRAMPOLINE|ZEND_ACC_NEVER_CACHE))) &&
 +                  EXPECTED(obj == orig_obj)) {
 +                      CACHE_POLYMORPHIC_PTR(Z_CACHE_SLOT_P(function_name), called_scope, fbc);
 +              }
        }
  
 -      if ((call->fbc->common.fn_flags & ZEND_ACC_STATIC) != 0) {
 -              call->object = NULL;
 -      } else {
 -              if (!PZVAL_IS_REF(call->object)) {
 -                      Z_ADDREF_P(call->object); /* For $this pointer */
 -              } else {
 -                      zval *this_ptr;
 -                      ALLOC_ZVAL(this_ptr);
 -                      INIT_PZVAL_COPY(this_ptr, call->object);
 -                      zval_copy_ctor(this_ptr);
 -                      call->object = this_ptr;
 -              }
 +      call_info = ZEND_CALL_NESTED_FUNCTION;
 +      if (UNEXPECTED((fbc->common.fn_flags & ZEND_ACC_STATIC) != 0)) {
 +              obj = NULL;
 +      } else if (IS_CONST & (IS_VAR|IS_TMP_VAR|IS_CV)) {
 +              /* CV may be changed indirectly (e.g. when it's a reference) */
 +              call_info = ZEND_CALL_NESTED_FUNCTION | ZEND_CALL_RELEASE_THIS;
 +              GC_REFCOUNT(obj)++; /* For $this pointer */
        }
  
 -      call->num_additional_args = 0;
 -      call->is_ctor_call = 0;
 +      call = zend_vm_stack_push_call_frame(call_info,
 +              fbc, opline->extended_value, called_scope, obj);
 +      call->prev_execute_data = EX(call);
        EX(call) = call;
  
 +      zval_ptr_dtor_nogc(free_op2);
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 -
 -static int ZEND_FASTCALL  ZEND_CASE_SPEC_TMP_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1;
 -
 -      SAVE_OPLINE();
 -      is_equal_function(&EX_T(opline->result.var).tmp_var,
 -                               _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -                               opline->op2.zv TSRMLS_CC);
 -
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_STATIC_METHOD_CALL_SPEC_CONST_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op1;
 -      zval *expr_ptr;
 +      zval *function_name;
 +      zend_class_entry *ce;
 +      zend_object *object;
 +      zend_function *fbc;
 +      zend_execute_data *call;
  
        SAVE_OPLINE();
 -      if ((IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_CV) && opline->extended_value) {
 -              zval **expr_ptr_ptr = NULL;
  
 -              if (IS_TMP_VAR == IS_VAR && UNEXPECTED(expr_ptr_ptr == NULL)) {
 -                      zend_error_noreturn(E_ERROR, "Cannot create references to/from string offsets");
 +      if (IS_CONST == IS_CONST) {
 +              /* no function found. try a static method in class */
 +              ce = CACHED_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op1)));
 +              if (UNEXPECTED(ce == NULL)) {
 +                      ce = zend_fetch_class_by_name(Z_STR_P(EX_CONSTANT(opline->op1)), EX_CONSTANT(opline->op1) + 1, ZEND_FETCH_CLASS_DEFAULT |  ZEND_FETCH_CLASS_EXCEPTION);
 +                      if (UNEXPECTED(ce == NULL)) {
 +                              if (UNEXPECTED(EG(exception) != NULL)) {
 +                                      HANDLE_EXCEPTION();
 +                              }
 +                              zend_throw_error(NULL, "Class '%s' not found", Z_STRVAL_P(EX_CONSTANT(opline->op1)));
 +                              HANDLE_EXCEPTION();
 +                      }
 +                      CACHE_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op1)), ce);
                }
 -              SEPARATE_ZVAL_TO_MAKE_IS_REF(expr_ptr_ptr);
 -              expr_ptr = *expr_ptr_ptr;
 -              Z_ADDREF_P(expr_ptr);
        } else {
 -              expr_ptr=_get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -              if (1) { /* temporary variable */
 -                      zval *new_expr;
 -
 -                      ALLOC_ZVAL(new_expr);
 -                      INIT_PZVAL_COPY(new_expr, expr_ptr);
 -                      expr_ptr = new_expr;
 -              } else if (IS_TMP_VAR == IS_CONST || PZVAL_IS_REF(expr_ptr)) {
 -                      zval *new_expr;
 -
 -                      ALLOC_ZVAL(new_expr);
 -                      INIT_PZVAL_COPY(new_expr, expr_ptr);
 -                      expr_ptr = new_expr;
 -                      zendi_zval_copy_ctor(*expr_ptr);
 -
 -              } else if (IS_TMP_VAR == IS_CV) {
 -                      Z_ADDREF_P(expr_ptr);
 -              }
 +              ce = Z_CE_P(EX_VAR(opline->op1.var));
        }
  
 -      if (IS_CONST != IS_UNUSED) {
 +      if (IS_CONST == IS_CONST &&
 +          (IS_TMP_VAR|IS_VAR) == IS_CONST &&
 +          EXPECTED((fbc = CACHED_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op2)))) != NULL)) {
 +              /* nothing to do */
 +      } else if (IS_CONST != IS_CONST &&
 +                 (IS_TMP_VAR|IS_VAR) == IS_CONST &&
 +                 (fbc = CACHED_POLYMORPHIC_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op2)), ce))) {
 +              /* do nothing */
 +      } else if ((IS_TMP_VAR|IS_VAR) != IS_UNUSED) {
 +              zend_free_op free_op2;
  
 -              zval *offset = opline->op2.zv;
 -              ulong hval;
 +              function_name = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
 +              if ((IS_TMP_VAR|IS_VAR) != IS_CONST) {
 +                      if (UNEXPECTED(Z_TYPE_P(function_name) != IS_STRING)) {
 +                              do {
 +                                      if ((IS_TMP_VAR|IS_VAR) & (IS_VAR|IS_CV) && Z_ISREF_P(function_name)) {
 +                                              function_name = Z_REFVAL_P(function_name);
 +                                              if (EXPECTED(Z_TYPE_P(function_name) == IS_STRING)) {
 +                                                      break;
 +                                              }
 +                                      } else if ((IS_TMP_VAR|IS_VAR) == IS_CV && UNEXPECTED(Z_TYPE_P(function_name) == IS_UNDEF)) {
 +                                              GET_OP2_UNDEF_CV(function_name, BP_VAR_R);
 +                                              if (UNEXPECTED(EG(exception) != NULL)) {
 +                                                      HANDLE_EXCEPTION();
 +                                              }
 +                                      }
 +                                      zend_throw_error(NULL, "Function name must be a string");
 +                                      zval_ptr_dtor_nogc(free_op2);
 +                                      HANDLE_EXCEPTION();
 +                              } while (0);
 +                      }
 +              }
  
 -              switch (Z_TYPE_P(offset)) {
 -                      case IS_DOUBLE:
 -                              hval = zend_dval_to_lval(Z_DVAL_P(offset));
 -                              goto num_index;
 -                      case IS_LONG:
 -                      case IS_BOOL:
 -                              hval = Z_LVAL_P(offset);
 -num_index:
 -                              zend_hash_index_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_STRING:
 -                              if (IS_CONST == IS_CONST) {
 -                                      hval = Z_HASH_P(offset);
 -                              } else {
 -                                      ZEND_HANDLE_NUMERIC_EX(Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, goto num_index);
 -                                      hval = str_hash(Z_STRVAL_P(offset), Z_STRLEN_P(offset));
 -                              }
 -                              zend_hash_quick_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_NULL:
 -                              zend_hash_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), "", sizeof(""), &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      default:
 -                              zend_error(E_WARNING, "Illegal offset type");
 -                              zval_ptr_dtor(&expr_ptr);
 -                              /* do nothing */
 -                              break;
 +              if (ce->get_static_method) {
 +                      fbc = ce->get_static_method(ce, Z_STR_P(function_name));
 +              } else {
 +                      fbc = zend_std_get_static_method(ce, Z_STR_P(function_name), (((IS_TMP_VAR|IS_VAR) == IS_CONST) ? (EX_CONSTANT(opline->op2) + 1) : NULL));
 +              }
 +              if (UNEXPECTED(fbc == NULL)) {
 +                      if (EXPECTED(!EG(exception))) {
 +                              zend_throw_error(NULL, "Call to undefined method %s::%s()", ZSTR_VAL(ce->name), Z_STRVAL_P(function_name));
 +                      }
 +                      zval_ptr_dtor_nogc(free_op2);
 +                      HANDLE_EXCEPTION();
 +              }
 +              if ((IS_TMP_VAR|IS_VAR) == IS_CONST &&
 +                  EXPECTED(fbc->type <= ZEND_USER_FUNCTION) &&
 +                  EXPECTED(!(fbc->common.fn_flags & (ZEND_ACC_CALL_VIA_TRAMPOLINE|ZEND_ACC_NEVER_CACHE)))) {
 +                      if (IS_CONST == IS_CONST) {
 +                              CACHE_PTR(Z_CACHE_SLOT_P(function_name), fbc);
 +                      } else {
 +                              CACHE_POLYMORPHIC_PTR(Z_CACHE_SLOT_P(function_name), ce, fbc);
 +                      }
 +              }
 +              if ((IS_TMP_VAR|IS_VAR) != IS_CONST) {
 +                      zval_ptr_dtor_nogc(free_op2);
                }
 -
        } else {
 -              if (zend_hash_next_index_insert(Z_ARRVAL(EX_T(opline->result.var).tmp_var), &expr_ptr, sizeof(zval *), NULL) == FAILURE) {
 -                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
 -                      zval_ptr_dtor(&expr_ptr);
 +              if (UNEXPECTED(ce->constructor == NULL)) {
 +                      zend_throw_error(NULL, "Cannot call constructor");
 +                      HANDLE_EXCEPTION();
 +              }
 +              if (Z_OBJ(EX(This)) && Z_OBJ(EX(This))->ce != ce->constructor->common.scope && (ce->constructor->common.fn_flags & ZEND_ACC_PRIVATE)) {
 +                      zend_throw_error(NULL, "Cannot call private %s::__construct()", ZSTR_VAL(ce->name));
 +                      HANDLE_EXCEPTION();
                }
 +              fbc = ce->constructor;
        }
 -      if ((IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_CV) && opline->extended_value) {
  
 +      object = NULL;
 +      if (!(fbc->common.fn_flags & ZEND_ACC_STATIC)) {
 +              if (Z_OBJ(EX(This)) && instanceof_function(Z_OBJCE(EX(This)), ce)) {
 +                      object = Z_OBJ(EX(This));
 +                      ce = object->ce;
 +              } else {
 +                      if (fbc->common.fn_flags & ZEND_ACC_ALLOW_STATIC) {
 +                              /* Allowed for PHP 4 compatibility. */
 +                              zend_error(
 +                                      E_DEPRECATED,
 +                                      "Non-static method %s::%s() should not be called statically",
 +                                      ZSTR_VAL(fbc->common.scope->name), ZSTR_VAL(fbc->common.function_name));
 +                              if (UNEXPECTED(EG(exception) != NULL)) {
 +                                      HANDLE_EXCEPTION();
 +                              }
 +                      } else {
 +                              /* An internal function assumes $this is present and won't check that.
 +                               * So PHP would crash by allowing the call. */
 +                              zend_throw_error(
 +                                      zend_ce_error,
 +                                      "Non-static method %s::%s() cannot be called statically",
 +                                      ZSTR_VAL(fbc->common.scope->name), ZSTR_VAL(fbc->common.function_name));
 +                              HANDLE_EXCEPTION();
 +                      }
 +              }
        }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 -
 -static int ZEND_FASTCALL  ZEND_INIT_ARRAY_SPEC_TMP_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
  
 -      array_init(&EX_T(opline->result.var).tmp_var);
 -      if (IS_TMP_VAR == IS_UNUSED) {
 -              ZEND_VM_NEXT_OPCODE();
 -#if 0 || IS_TMP_VAR != IS_UNUSED
 -      } else {
 -              return ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -#endif
 +      if (IS_CONST != IS_CONST) {
 +              /* previous opcode is ZEND_FETCH_CLASS */
 +              if (((opline-1)->extended_value & ZEND_FETCH_CLASS_MASK) == ZEND_FETCH_CLASS_PARENT ||
 +                  ((opline-1)->extended_value & ZEND_FETCH_CLASS_MASK) == ZEND_FETCH_CLASS_SELF) {
 +                      ce = EX(called_scope);
 +              }
        }
 +
 +      call = zend_vm_stack_push_call_frame(ZEND_CALL_NESTED_FUNCTION,
 +              fbc, opline->extended_value, ce, object);
 +      call->prev_execute_data = EX(call);
 +      EX(call) = call;
 +
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_UNSET_VAR_SPEC_TMP_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_USER_CALL_SPEC_CONST_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zval tmp, *varname;
 -      HashTable *target_symbol_table;
 -      zend_free_op free_op1;
 -
 -      SAVE_OPLINE();
 -      if (IS_TMP_VAR == IS_CV &&
 -          IS_CONST == IS_UNUSED &&
 -          (opline->extended_value & ZEND_QUICK_SET)) {
 -              if (EG(active_symbol_table)) {
 -                      zend_compiled_variable *cv = &CV_DEF_OF(opline->op1.var);
 -
 -                      zend_delete_variable(EX(prev_execute_data), EG(active_symbol_table),  cv->name, cv->name_len+1, cv->hash_value TSRMLS_CC);
 -                      EX_CV(opline->op1.var) = NULL;
 -              } else if (EX_CV(opline->op1.var)) {
 -                      zval_ptr_dtor(EX_CV(opline->op1.var));
 -                      EX_CV(opline->op1.var) = NULL;
 +      zend_free_op free_op2;
 +      zval *function_name;
 +      zend_fcall_info_cache fcc;
 +      char *error = NULL;
 +      zend_function *func;
 +      zend_class_entry *called_scope;
 +      zend_object *object;
 +      zend_execute_data *call;
 +      uint32_t call_info = ZEND_CALL_NESTED_FUNCTION;
 +
 +      SAVE_OPLINE();
 +      function_name = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
 +      if (zend_is_callable_ex(function_name, NULL, 0, NULL, &fcc, &error)) {
 +              func = fcc.function_handler;
 +              if (func->common.fn_flags & ZEND_ACC_CLOSURE) {
 +                      /* Delay closure destruction until its invocation */
 +                      if ((IS_TMP_VAR|IS_VAR) & (IS_VAR|IS_CV)) {
 +                              ZVAL_DEREF(function_name);
 +                      }
 +                      ZEND_ASSERT(GC_TYPE((zend_object*)func->common.prototype) == IS_OBJECT);
 +                      GC_REFCOUNT((zend_object*)func->common.prototype)++;
 +                      call_info |= ZEND_CALL_CLOSURE;
 +              }
 +              called_scope = fcc.called_scope;
 +              object = fcc.object;
 +              if (object) {
 +                      call_info |= ZEND_CALL_RELEASE_THIS;
 +                      GC_REFCOUNT(object)++; /* For $this pointer */
 +              }
 +              if (error) {
 +                      efree(error);
 +                      /* This is the only soft error is_callable() can generate */
 +                      zend_error(E_DEPRECATED,
 +                              "Non-static method %s::%s() should not be called statically",
 +                              ZSTR_VAL(func->common.scope->name), ZSTR_VAL(func->common.function_name));
 +                      if (UNEXPECTED(EG(exception) != NULL)) {
 +                              HANDLE_EXCEPTION();
 +                      }
                }
 -              CHECK_EXCEPTION();
 -              ZEND_VM_NEXT_OPCODE();
 +      } else {
 +              zend_internal_type_error(EX_USES_STRICT_TYPES(), "%s() expects parameter 1 to be a valid callback, %s", Z_STRVAL_P(EX_CONSTANT(opline->op1)), error);
 +              efree(error);
 +              func = (zend_function*)&zend_pass_function;
 +              called_scope = NULL;
 +              object = NULL;
        }
  
 -      varname = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 +      call = zend_vm_stack_push_call_frame(call_info,
 +              func, opline->extended_value, called_scope, object);
 +      call->prev_execute_data = EX(call);
 +      EX(call) = call;
  
 -      if (IS_TMP_VAR != IS_CONST && Z_TYPE_P(varname) != IS_STRING) {
 -              ZVAL_COPY_VALUE(&tmp, varname);
 -              zval_copy_ctor(&tmp);
 -              convert_to_string(&tmp);
 -              varname = &tmp;
 -      } else if (IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_CV) {
 -              Z_ADDREF_P(varname);
 -      }
 +      zval_ptr_dtor_nogc(free_op2);
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +}
  
 -      if (IS_CONST != IS_UNUSED) {
 -              zend_class_entry *ce;
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_CASE_SPEC_CONST_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      USE_OPLINE
 +      zend_free_op free_op2;
 +      zval *op1, *op2, *result;
  
 -              if (IS_CONST == IS_CONST) {
 -                      if (CACHED_PTR(opline->op2.literal->cache_slot)) {
 -                              ce = CACHED_PTR(opline->op2.literal->cache_slot);
 +      op1 = EX_CONSTANT(opline->op1);
 +      op2 = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
 +      do {
 +              int result;
 +
 +              if (EXPECTED(Z_TYPE_P(op1) == IS_LONG)) {
 +                      if (EXPECTED(Z_TYPE_P(op2) == IS_LONG)) {
 +                              result = (Z_LVAL_P(op1) == Z_LVAL_P(op2));
 +                      } else if (EXPECTED(Z_TYPE_P(op2) == IS_DOUBLE)) {
 +                              result = ((double)Z_LVAL_P(op1) == Z_DVAL_P(op2));
                        } else {
 -                              ce = zend_fetch_class_by_name(Z_STRVAL_P(opline->op2.zv), Z_STRLEN_P(opline->op2.zv), opline->op2.literal + 1, 0 TSRMLS_CC);
 -                              if (UNEXPECTED(EG(exception) != NULL)) {
 -                                      if (IS_TMP_VAR != IS_CONST && varname == &tmp) {
 -                                              zval_dtor(&tmp);
 -                                      } else if (IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_CV) {
 -                                              zval_ptr_dtor(&varname);
 +                              break;
 +                      }
 +              } else if (EXPECTED(Z_TYPE_P(op1) == IS_DOUBLE)) {
 +                      if (EXPECTED(Z_TYPE_P(op2) == IS_DOUBLE)) {
 +                              result = (Z_DVAL_P(op1) == Z_DVAL_P(op2));
 +                      } else if (EXPECTED(Z_TYPE_P(op2) == IS_LONG)) {
 +                              result = (Z_DVAL_P(op1) == ((double)Z_LVAL_P(op2)));
 +                      } else {
 +                              break;
 +                      }
 +              } else if (EXPECTED(Z_TYPE_P(op1) == IS_STRING)) {
 +                      if (EXPECTED(Z_TYPE_P(op2) == IS_STRING)) {
 +                              if (Z_STR_P(op1) == Z_STR_P(op2)) {
 +                                      result = 1;
 +                              } else if (Z_STRVAL_P(op1)[0] > '9' || Z_STRVAL_P(op2)[0] > '9') {
 +                                      if (Z_STRLEN_P(op1) != Z_STRLEN_P(op2)) {
 +                                              result = 0;
 +                                      } else {
 +                                              result = (memcmp(Z_STRVAL_P(op1), Z_STRVAL_P(op2), Z_STRLEN_P(op1)) == 0);
                                        }
 -                                      zval_dtor(free_op1.var);
 -                                      HANDLE_EXCEPTION();
 -                              }
 -                              if (UNEXPECTED(ce == NULL)) {
 -                                      zend_error_noreturn(E_ERROR, "Class '%s' not found", Z_STRVAL_P(opline->op2.zv));
 +                              } else {
 +                                      result = (zendi_smart_strcmp(Z_STR_P(op1), Z_STR_P(op2)) == 0);
                                }
 -                              CACHE_PTR(opline->op2.literal->cache_slot, ce);
 +                              zval_ptr_dtor_nogc(free_op2);
 +                      } else {
 +                              break;
                        }
                } else {
 -                      ce = EX_T(opline->op2.var).class_entry;
 +                      break;
                }
 -              zend_std_unset_static_property(ce, Z_STRVAL_P(varname), Z_STRLEN_P(varname), ((IS_TMP_VAR == IS_CONST) ? opline->op1.literal : NULL) TSRMLS_CC);
 -      } else {
 -              ulong hash_value = zend_inline_hash_func(varname->value.str.val, varname->value.str.len+1);
 +              ZEND_VM_SMART_BRANCH(result, 0);
 +              ZVAL_BOOL(EX_VAR(opline->result.var), result);
 +              ZEND_VM_NEXT_OPCODE();
 +      } while (0);
  
 -              target_symbol_table = zend_get_target_symbol_table(opline->extended_value & ZEND_FETCH_TYPE_MASK TSRMLS_CC);
 -              zend_delete_variable(execute_data, target_symbol_table, varname->value.str.val, varname->value.str.len+1, hash_value TSRMLS_CC);
 +      SAVE_OPLINE();
 +      if (IS_CONST == IS_CV && UNEXPECTED(Z_TYPE_P(op1) == IS_UNDEF)) {
 +              op1 = GET_OP1_UNDEF_CV(op1, BP_VAR_R);
 +      } else if ((IS_CONST & IS_VAR) && UNEXPECTED(Z_ISREF_P(op1))) {
 +              /* Don't keep lock on reference, lock the value instead */
 +              if (UNEXPECTED(Z_REFCOUNT_P(op1) == 1)) {
 +                      ZVAL_UNREF(op1);
 +              } else {
 +                      Z_DELREF_P(op1);
 +                      ZVAL_COPY(op1, Z_REFVAL_P(op1));
 +              }
        }
 -
 -      if (IS_TMP_VAR != IS_CONST && varname == &tmp) {
 -              zval_dtor(&tmp);
 -      } else if (IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_CV) {
 -              zval_ptr_dtor(&varname);
 +      if ((IS_TMP_VAR|IS_VAR) == IS_CV && UNEXPECTED(Z_TYPE_P(op2) == IS_UNDEF)) {
 +              op2 = GET_OP2_UNDEF_CV(op2, BP_VAR_R);
        }
 -      zval_dtor(free_op1.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      result = EX_VAR(opline->result.var);
 +      compare_function(result, op1, op2);
 +      ZVAL_BOOL(result, Z_LVAL_P(result) == 0);
 +      zval_ptr_dtor_nogc(free_op2);
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_ISSET_ISEMPTY_VAR_SPEC_TMP_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zval **value;
 -      zend_bool isset = 1;
 -
 -      SAVE_OPLINE();
 -      if (IS_TMP_VAR == IS_CV &&
 -          IS_CONST == IS_UNUSED &&
 -          (opline->extended_value & ZEND_QUICK_SET)) {
 -              if (EX_CV(opline->op1.var)) {
 -                      value = EX_CV(opline->op1.var);
 -              } else if (EG(active_symbol_table)) {
 -                      zend_compiled_variable *cv = &CV_DEF_OF(opline->op1.var);
  
 -                      if (zend_hash_quick_find(EG(active_symbol_table), cv->name, cv->name_len+1, cv->hash_value, (void **) &value) == FAILURE) {
 -                              isset = 0;
 -                      }
 -              } else {
 -                      isset = 0;
 -              }
 -      } else {
 -              HashTable *target_symbol_table;
 -              zend_free_op free_op1;
 -              zval tmp, *varname = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 +      zval *expr_ptr, new_expr;
  
 -              if (IS_TMP_VAR != IS_CONST && Z_TYPE_P(varname) != IS_STRING) {
 -                      ZVAL_COPY_VALUE(&tmp, varname);
 -                      zval_copy_ctor(&tmp);
 -                      convert_to_string(&tmp);
 -                      varname = &tmp;
 +      SAVE_OPLINE();
 +      if ((IS_CONST == IS_VAR || IS_CONST == IS_CV) &&
 +          UNEXPECTED(opline->extended_value & ZEND_ARRAY_ELEMENT_REF)) {
 +              expr_ptr = NULL;
 +              if (IS_CONST == IS_VAR && UNEXPECTED(expr_ptr == NULL)) {
 +                      zend_throw_error(NULL, "Cannot create references to/from string offsets");
 +                      zend_array_destroy(Z_ARRVAL_P(EX_VAR(opline->result.var)));
 +                      HANDLE_EXCEPTION();
                }
 +              ZVAL_MAKE_REF(expr_ptr);
 +              Z_ADDREF_P(expr_ptr);
  
 -              if (IS_CONST != IS_UNUSED) {
 -                      zend_class_entry *ce;
 -
 -                      if (IS_CONST == IS_CONST) {
 -                              if (CACHED_PTR(opline->op2.literal->cache_slot)) {
 -                                      ce = CACHED_PTR(opline->op2.literal->cache_slot);
 -                              } else {
 -                                      ce = zend_fetch_class_by_name(Z_STRVAL_P(opline->op2.zv), Z_STRLEN_P(opline->op2.zv), opline->op2.literal + 1, 0 TSRMLS_CC);
 -                                      if (UNEXPECTED(ce == NULL)) {
 -                                              CHECK_EXCEPTION();
 -                                              ZEND_VM_NEXT_OPCODE();
 -                                      }
 -                                      CACHE_PTR(opline->op2.literal->cache_slot, ce);
 -                              }
 -                      } else {
 -                              ce = EX_T(opline->op2.var).class_entry;
 -                      }
 -                      value = zend_std_get_static_property(ce, Z_STRVAL_P(varname), Z_STRLEN_P(varname), 1, ((IS_TMP_VAR == IS_CONST) ? opline->op1.literal : NULL) TSRMLS_CC);
 -                      if (!value) {
 -                              isset = 0;
 +      } else {
 +              expr_ptr = EX_CONSTANT(opline->op1);
 +              if (IS_CONST == IS_TMP_VAR) {
 +                      /* pass */
 +              } else if (IS_CONST == IS_CONST) {
 +                      if (UNEXPECTED(Z_OPT_COPYABLE_P(expr_ptr))) {
 +                              ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                              zval_copy_ctor_func(&new_expr);
 +                              expr_ptr = &new_expr;
                        }
 -              } else {
 -                      target_symbol_table = zend_get_target_symbol_table(opline->extended_value & ZEND_FETCH_TYPE_MASK TSRMLS_CC);
 -                      if (zend_hash_find(target_symbol_table, varname->value.str.val, varname->value.str.len+1, (void **) &value) == FAILURE) {
 -                              isset = 0;
 +              } else if (IS_CONST == IS_CV) {
 +                      ZVAL_DEREF(expr_ptr);
 +                      if (Z_REFCOUNTED_P(expr_ptr)) {
 +                              Z_ADDREF_P(expr_ptr);
                        }
 -              }
 +              } else /* if (IS_CONST == IS_VAR) */ {
 +                      if (UNEXPECTED(Z_ISREF_P(expr_ptr))) {
 +                              zend_refcounted *ref = Z_COUNTED_P(expr_ptr);
  
 -              if (IS_TMP_VAR != IS_CONST && varname == &tmp) {
 -                      zval_dtor(&tmp);
 +                              expr_ptr = Z_REFVAL_P(expr_ptr);
 +                              if (UNEXPECTED(--GC_REFCOUNT(ref) == 0)) {
 +                                      ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                                      expr_ptr = &new_expr;
 +                                      efree_size(ref, sizeof(zend_reference));
 +                              } else if (Z_OPT_REFCOUNTED_P(expr_ptr)) {
 +                                      Z_ADDREF_P(expr_ptr);
 +                              }
 +                      }
                }
 -              zval_dtor(free_op1.var);
        }
  
 -      if (opline->extended_value & ZEND_ISSET) {
 -              if (isset && Z_TYPE_PP(value) != IS_NULL) {
 -                      ZVAL_BOOL(&EX_T(opline->result.var).tmp_var, 1);
 -              } else {
 -                      ZVAL_BOOL(&EX_T(opline->result.var).tmp_var, 0);
 -              }
 -      } else /* if (opline->extended_value & ZEND_ISEMPTY) */ {
 -              if (!isset || !i_zend_is_true(*value)) {
 -                      ZVAL_BOOL(&EX_T(opline->result.var).tmp_var, 1);
 -              } else {
 -                      ZVAL_BOOL(&EX_T(opline->result.var).tmp_var, 0);
 +      if ((IS_TMP_VAR|IS_VAR) != IS_UNUSED) {
 +              zend_free_op free_op2;
 +              zval *offset = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
 +              zend_string *str;
 +              zend_ulong hval;
 +
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if ((IS_TMP_VAR|IS_VAR) != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
 +                              }
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if (((IS_TMP_VAR|IS_VAR) & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if ((IS_TMP_VAR|IS_VAR) == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +              zval_ptr_dtor_nogc(free_op2);
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
++                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
++                      zval_ptr_dtor(expr_ptr);
+               }
        }
 -
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_YIELD_SPEC_TMP_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_CONST_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
  
 -      /* The generator object is stored in return_value_ptr_ptr */
 -      zend_generator *generator = (zend_generator *) EG(return_value_ptr_ptr);
 -
 -      if (generator->flags & ZEND_GENERATOR_FORCED_CLOSE) {
 -              zend_error_noreturn(E_ERROR, "Cannot yield from finally in a force-closed generator");
 +      array = EX_VAR(opline->result.var);
 +      if (IS_CONST != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
        }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
  
 -      /* Destroy the previously yielded value */
 -      if (generator->value) {
 -              zval_ptr_dtor(&generator->value);
 +      if (IS_CONST != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
 +              }
        }
  
 -      /* Destroy the previously yielded key */
 -      if (generator->key) {
 -              zval_ptr_dtor(&generator->key);
 +      if (IS_CONST == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_CONST != IS_UNUSED)
 +      } else {
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
 +#endif
        }
 +}
  
 -      /* Set the new yielded value */
 -      if (IS_TMP_VAR != IS_UNUSED) {
 -              zend_free_op free_op1;
 -
 -              if (EX(op_array)->fn_flags & ZEND_ACC_RETURN_REFERENCE) {
 -                      /* Constants and temporary variables aren't yieldable by reference,
 -                       * but we still allow them with a notice. */
 -                      if (IS_TMP_VAR == IS_CONST || IS_TMP_VAR == IS_TMP_VAR) {
 -                              zval *value, *copy;
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ISSET_ISEMPTY_DIM_OBJ_SPEC_CONST_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      USE_OPLINE
 +      zend_free_op free_op2;
 +      zval *container;
 +      int result;
 +      zend_ulong hval;
 +      zval *offset;
  
 -                              zend_error(E_NOTICE, "Only variable references should be yielded by reference");
 +      SAVE_OPLINE();
 +      container = EX_CONSTANT(opline->op1);
  
 -                              value = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -                              ALLOC_ZVAL(copy);
 -                              INIT_PZVAL_COPY(copy, value);
 +      if (IS_CONST == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
 +      }
  
 -                              /* Temporary variables don't need ctor copying */
 -                              if (!1) {
 -                                      zval_copy_ctor(copy);
 -                              }
 +      offset = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
  
 -                              generator->value = copy;
 -                      } else {
 -                              zval **value_ptr = NULL;
 +      if (IS_CONST != IS_UNUSED && EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +              HashTable *ht;
 +              zval *value;
 +              zend_string *str;
  
 -                              if (IS_TMP_VAR == IS_VAR && UNEXPECTED(value_ptr == NULL)) {
 -                                      zend_error_noreturn(E_ERROR, "Cannot yield string offsets by reference");
 -                              }
 +isset_dim_obj_array:
 +              ht = Z_ARRVAL_P(container);
 +isset_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if ((IS_TMP_VAR|IS_VAR) != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index_prop;
 +                              }
 +                      }
 +str_index_prop:
 +                      value = zend_hash_find_ind(ht, str);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index_prop:
 +                      value = zend_hash_index_find(ht, hval);
 +              } else if (((IS_TMP_VAR|IS_VAR) & (IS_VAR|IS_CV)) && EXPECTED(Z_ISREF_P(offset))) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto isset_again;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_RESOURCE) {
 +                      hval = Z_RES_HANDLE_P(offset);
 +                      goto num_index_prop;
 +              } else if ((IS_TMP_VAR|IS_VAR) == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index_prop;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type in isset or empty");
 +                      goto isset_not_found;
 +              }
  
 -                              /* If a function call result is yielded and the function did
 -                               * not return by reference we throw a notice. */
 -                              if (IS_TMP_VAR == IS_VAR && !Z_ISREF_PP(value_ptr)
 -                                  && !(opline->extended_value == ZEND_RETURNS_FUNCTION
 -                                       && EX_T(opline->op1.var).var.fcall_returned_reference)
 -                                  && EX_T(opline->op1.var).var.ptr_ptr == &EX_T(opline->op1.var).var.ptr) {
 -                                      zend_error(E_NOTICE, "Only variable references should be yielded by reference");
 +              if (opline->extended_value & ZEND_ISSET) {
 +                      /* > IS_NULL means not IS_UNDEF and not IS_NULL */
 +                      result = value != NULL && Z_TYPE_P(value) > IS_NULL &&
 +                          (!Z_ISREF_P(value) || Z_TYPE_P(Z_REFVAL_P(value)) != IS_NULL);
 +              } else /* if (opline->extended_value & ZEND_ISEMPTY) */ {
 +                      result = (value == NULL || !i_zend_is_true(value));
 +              }
 +              goto isset_dim_obj_exit;
 +      } else if ((IS_CONST & (IS_VAR|IS_CV)) && Z_ISREF_P(container)) {
 +              container = Z_REFVAL_P(container);
 +              if (EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +                      goto isset_dim_obj_array;
 +              }
 +      }
  
 -                                      Z_ADDREF_PP(value_ptr);
 -                                      generator->value = *value_ptr;
 -                              } else {
 -                                      SEPARATE_ZVAL_TO_MAKE_IS_REF(value_ptr);
 -                                      Z_ADDREF_PP(value_ptr);
 -                                      generator->value = *value_ptr;
 -                              }
 +      if ((IS_TMP_VAR|IS_VAR) == IS_CV && UNEXPECTED(Z_TYPE_P(offset) == IS_UNDEF)) {
 +              offset = GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +      }
  
 -                      }
 +      if (IS_CONST == IS_UNUSED ||
 +          (IS_CONST != IS_CONST && EXPECTED(Z_TYPE_P(container) == IS_OBJECT))) {
 +              if (EXPECTED(Z_OBJ_HT_P(container)->has_dimension)) {
 +                      result =
 +                              ((opline->extended_value & ZEND_ISSET) == 0) ^
 +                              Z_OBJ_HT_P(container)->has_dimension(container, offset, (opline->extended_value & ZEND_ISSET) == 0);
                } else {
 -                      zval *value = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -                      /* Consts, temporary variables and references need copying */
 -                      if (IS_TMP_VAR == IS_CONST || IS_TMP_VAR == IS_TMP_VAR
 -                              || PZVAL_IS_REF(value)
 -                      ) {
 -                              zval *copy;
 -
 -                              ALLOC_ZVAL(copy);
 -                              INIT_PZVAL_COPY(copy, value);
 +                      zend_error(E_NOTICE, "Trying to check element of non-array");
 +                      goto isset_not_found;
 +              }
 +      } else if (EXPECTED(Z_TYPE_P(container) == IS_STRING)) { /* string offsets */
 +              zend_long lval;
  
 -                              /* Temporary variables don't need ctor copying */
 -                              if (!1) {
 -                                      zval_copy_ctor(copy);
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      lval = Z_LVAL_P(offset);
 +isset_str_offset:
 +                      if (EXPECTED(lval >= 0) && (size_t)lval < Z_STRLEN_P(container)) {
 +                              if (opline->extended_value & ZEND_ISSET) {
 +                                      result = 1;
 +                              } else {
 +                                      result = (Z_STRVAL_P(container)[lval] == '0');
                                }
 -
 -                              generator->value = copy;
 -
                        } else {
 -                              if (IS_TMP_VAR == IS_CV) {
 -                                      Z_ADDREF_P(value);
 -                              }
 -                              generator->value = value;
 +                              goto isset_not_found;
 +                      }
 +              } else {
 +                      if ((IS_TMP_VAR|IS_VAR) & (IS_CV|IS_VAR)) {
 +                              ZVAL_DEREF(offset);
                        }
 +                      if (Z_TYPE_P(offset) < IS_STRING /* simple scalar types */
 +                                      || (Z_TYPE_P(offset) == IS_STRING /* or numeric string */
 +                                              && IS_LONG == is_numeric_string(Z_STRVAL_P(offset), Z_STRLEN_P(offset), NULL, NULL, 0))) {
 +                              lval = zval_get_long(offset);
 +                              goto isset_str_offset;
 +                      }
 +                      goto isset_not_found;
                }
        } else {
 -              /* If no value was specified yield null */
 -              Z_ADDREF(EG(uninitialized_zval));
 -              generator->value = &EG(uninitialized_zval);
 +isset_not_found:
 +              result = ((opline->extended_value & ZEND_ISSET) == 0);
        }
  
 -      /* Set the new yielded key */
 -      if (IS_CONST != IS_UNUSED) {
 +isset_dim_obj_exit:
 +      zval_ptr_dtor_nogc(free_op2);
  
 -              zval *key = opline->op2.zv;
 +      ZEND_VM_SMART_BRANCH(result, 1);
 +      ZVAL_BOOL(EX_VAR(opline->result.var), result);
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +}
  
 -              /* Consts, temporary variables and references need copying */
 -              if (IS_CONST == IS_CONST || IS_CONST == IS_TMP_VAR
 -                      || (PZVAL_IS_REF(key) && Z_REFCOUNT_P(key) > 0)
 -              ) {
 -                      zval *copy;
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_CONST_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      USE_OPLINE
 +      zend_free_op free_op2;
 +      zval *container;
 +      int result;
 +      zval *offset;
  
 -                      ALLOC_ZVAL(copy);
 -                      INIT_PZVAL_COPY(copy, key);
 +      SAVE_OPLINE();
 +      container = EX_CONSTANT(opline->op1);
  
 -                      /* Temporary variables don't need ctor copying */
 -                      if (!0) {
 -                              zval_copy_ctor(copy);
 -                      }
 +      if (IS_CONST == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
 +      }
  
 -                      generator->key = copy;
 -              } else {
 -                      Z_ADDREF_P(key);
 -                      generator->key = key;
 -              }
 +      offset = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
  
 -              if (Z_TYPE_P(generator->key) == IS_LONG
 -                  && Z_LVAL_P(generator->key) > generator->largest_used_integer_key
 -              ) {
 -                      generator->largest_used_integer_key = Z_LVAL_P(generator->key);
 +      if (IS_CONST == IS_CONST ||
 +          (IS_CONST != IS_UNUSED && UNEXPECTED(Z_TYPE_P(container) != IS_OBJECT))) {
 +              if ((IS_CONST & (IS_VAR|IS_CV)) && Z_ISREF_P(container)) {
 +                      container = Z_REFVAL_P(container);
 +                      if (UNEXPECTED(Z_TYPE_P(container) != IS_OBJECT)) {
 +                              goto isset_no_object;
 +                      }
 +              } else {
 +                      goto isset_no_object;
                }
 -
 -      } else {
 -              /* If no key was specified we use auto-increment keys */
 -              generator->largest_used_integer_key++;
 -
 -              ALLOC_INIT_ZVAL(generator->key);
 -              ZVAL_LONG(generator->key, generator->largest_used_integer_key);
        }
 -
 -      if (RETURN_VALUE_USED(opline)) {
 -              /* If the return value of yield is used set the send
 -               * target and initialize it to NULL */
 -              generator->send_target = &EX_T(opline->result.var).var.ptr;
 -              Z_ADDREF(EG(uninitialized_zval));
 -              EX_T(opline->result.var).var.ptr = &EG(uninitialized_zval);
 +      if (UNEXPECTED(!Z_OBJ_HT_P(container)->has_property)) {
 +              zend_error(E_NOTICE, "Trying to check property of non-object");
 +isset_no_object:
 +              result = ((opline->extended_value & ZEND_ISSET) == 0);
        } else {
 -              generator->send_target = NULL;
 +              result =
 +                      ((opline->extended_value & ZEND_ISSET) == 0) ^
 +                      Z_OBJ_HT_P(container)->has_property(container, offset, (opline->extended_value & ZEND_ISSET) == 0, (((IS_TMP_VAR|IS_VAR) == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(offset)) : NULL));
        }
  
 -      /* We increment to the next op, so we are at the correct position when the
 -       * generator is resumed. */
 -      ZEND_VM_INC_OPCODE();
 -
 -      /* The GOTO VM uses a local opline variable. We need to set the opline
 -       * variable in execute_data so we don't resume at an old position. */
 -      SAVE_OPLINE();
 +      zval_ptr_dtor_nogc(free_op2);
  
 -      ZEND_VM_RETURN();
 +      ZEND_VM_SMART_BRANCH(result, 1);
 +      ZVAL_BOOL(EX_VAR(opline->result.var), result);
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_POW_SPEC_TMP_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_RETURN_SPEC_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 +      zval *retval_ptr;
        zend_free_op free_op1;
  
 -      SAVE_OPLINE();
 -      pow_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              opline->op2.zv TSRMLS_CC);
 -      zval_dtor(free_op1.var);
 +      retval_ptr = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1);
 +      if (IS_TMP_VAR == IS_CV && UNEXPECTED(Z_TYPE_INFO_P(retval_ptr) == IS_UNDEF)) {
 +              SAVE_OPLINE();
 +              retval_ptr = GET_OP1_UNDEF_CV(retval_ptr, BP_VAR_R);
 +              if (EX(return_value)) {
 +                      ZVAL_NULL(EX(return_value));
 +              }
 +      } else if (!EX(return_value)) {
 +              if (IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_TMP_VAR ) {
 +                      if (Z_REFCOUNTED_P(free_op1) && !Z_DELREF_P(free_op1)) {
 +                              SAVE_OPLINE();
 +                              zval_dtor_func_for_ptr(Z_COUNTED_P(free_op1));
 +                      }
 +              }
 +      } else {
 +              if (IS_TMP_VAR == IS_CONST || IS_TMP_VAR == IS_TMP_VAR) {
 +                      ZVAL_COPY_VALUE(EX(return_value), retval_ptr);
 +                      if (IS_TMP_VAR == IS_CONST) {
 +                              if (UNEXPECTED(Z_OPT_COPYABLE_P(EX(return_value)))) {
 +                                      zval_copy_ctor_func(EX(return_value));
 +                              }
 +                      }
 +              } else if (IS_TMP_VAR == IS_CV) {
 +                      ZVAL_DEREF(retval_ptr);
 +                      ZVAL_COPY(EX(return_value), retval_ptr);
 +              } else /* if (IS_TMP_VAR == IS_VAR) */ {
 +                      if (UNEXPECTED(Z_ISREF_P(retval_ptr))) {
 +                              zend_refcounted *ref = Z_COUNTED_P(retval_ptr);
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +                              retval_ptr = Z_REFVAL_P(retval_ptr);
 +                              ZVAL_COPY_VALUE(EX(return_value), retval_ptr);
 +                              if (UNEXPECTED(--GC_REFCOUNT(ref) == 0)) {
 +                                      efree_size(ref, sizeof(zend_reference));
 +                              } else if (Z_OPT_REFCOUNTED_P(retval_ptr)) {
 +                                      Z_ADDREF_P(retval_ptr);
 +                              }
 +                      } else {
 +                              ZVAL_COPY_VALUE(EX(return_value), retval_ptr);
 +                      }
 +              }
 +      }
 +      ZEND_VM_TAIL_CALL(zend_leave_helper_SPEC(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
  }
  
 -static int ZEND_FASTCALL  ZEND_ADD_SPEC_TMP_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_RETURN_BY_REF_SPEC_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 +      zval *retval_ptr;
 +      zend_free_op free_op1;
  
        SAVE_OPLINE();
 -      fast_add_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 -      zval_dtor(free_op1.var);
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
  
 -static int ZEND_FASTCALL  ZEND_SUB_SPEC_TMP_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 -
 -      SAVE_OPLINE();
 -      fast_sub_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 -      zval_dtor(free_op1.var);
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      do {
 +              if (IS_TMP_VAR == IS_CONST || IS_TMP_VAR == IS_TMP_VAR ||
 +                  (IS_TMP_VAR == IS_VAR && opline->extended_value == ZEND_RETURNS_VALUE)) {
 +                      /* Not supposed to happen, but we'll allow it */
 +                      zend_error(E_NOTICE, "Only variable references should be returned by reference");
  
 -static int ZEND_FASTCALL  ZEND_MUL_SPEC_TMP_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 +                      retval_ptr = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1);
 +                      if (!EX(return_value)) {
 +                              if (IS_TMP_VAR == IS_TMP_VAR) {
 +                                      zval_ptr_dtor_nogc(free_op1);
 +                              }
 +                      } else {
 +                              ZVAL_COPY_VALUE(EX(return_value), retval_ptr);
 +                              Z_VAR_FLAGS_P(EX(return_value)) = IS_VAR_RET_REF;
 +                              if (IS_TMP_VAR != IS_TMP_VAR) {
 +                                      zval_opt_copy_ctor_no_imm(EX(return_value));
 +                              }
 +                      }
 +                      break;
 +              }
  
 -      SAVE_OPLINE();
 -      fast_mul_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 -      zval_dtor(free_op1.var);
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +              retval_ptr = NULL;
  
 -static int ZEND_FASTCALL  ZEND_DIV_SPEC_TMP_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 +              if (IS_TMP_VAR == IS_VAR && UNEXPECTED(retval_ptr == NULL)) {
 +                      zend_throw_error(NULL, "Cannot return string offsets by reference");
 +                      HANDLE_EXCEPTION();
 +              }
  
 -      SAVE_OPLINE();
 -      fast_div_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 -      zval_dtor(free_op1.var);
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +              if (IS_TMP_VAR == IS_VAR) {
 +                      if (retval_ptr == &EG(uninitialized_zval) ||
 +                          (opline->extended_value == ZEND_RETURNS_FUNCTION &&
 +                           !(Z_VAR_FLAGS_P(retval_ptr) & IS_VAR_RET_REF))) {
 +                              zend_error(E_NOTICE, "Only variable references should be returned by reference");
 +                              if (EX(return_value)) {
 +                                      ZVAL_NEW_REF(EX(return_value), retval_ptr);
 +                                      Z_VAR_FLAGS_P(EX(return_value)) = IS_VAR_RET_REF;
 +                                      if (Z_REFCOUNTED_P(retval_ptr)) Z_ADDREF_P(retval_ptr);
 +                              }
 +                              break;
 +                      }
 +              }
  
 -static int ZEND_FASTCALL  ZEND_MOD_SPEC_TMP_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 +              if (EX(return_value)) {
 +                      ZVAL_MAKE_REF(retval_ptr);
 +                      Z_ADDREF_P(retval_ptr);
 +                      ZVAL_REF(EX(return_value), Z_REF_P(retval_ptr));
 +                      Z_VAR_FLAGS_P(EX(return_value)) = IS_VAR_RET_REF;
 +              }
 +      } while (0);
  
 -      SAVE_OPLINE();
 -      fast_mod_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 -      zval_dtor(free_op1.var);
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_TAIL_CALL(zend_leave_helper_SPEC(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
  }
  
 -static int ZEND_FASTCALL  ZEND_SL_SPEC_TMP_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_GENERATOR_RETURN_SPEC_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 +      zval *retval;
 +      zend_free_op free_op1;
 +
 +      zend_generator *generator = zend_get_running_generator(execute_data);
  
        SAVE_OPLINE();
 -      shift_left_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 -      zval_dtor(free_op1.var);
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      retval = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1);
  
 -static int ZEND_FASTCALL  ZEND_SR_SPEC_TMP_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 +      /* Copy return value into generator->retval */
 +      if (IS_TMP_VAR == IS_CONST || IS_TMP_VAR == IS_TMP_VAR) {
 +              ZVAL_COPY_VALUE(&generator->retval, retval);
 +              if (IS_TMP_VAR == IS_CONST) {
 +                      if (UNEXPECTED(Z_OPT_COPYABLE(generator->retval))) {
 +                              zval_copy_ctor_func(&generator->retval);
 +                      }
 +              }
 +      } else if (IS_TMP_VAR == IS_CV) {
 +              ZVAL_DEREF(retval);
 +              ZVAL_COPY(&generator->retval, retval);
 +      } else /* if (IS_TMP_VAR == IS_VAR) */ {
 +              if (UNEXPECTED(Z_ISREF_P(retval))) {
 +                      zend_refcounted *ref = Z_COUNTED_P(retval);
  
 -      SAVE_OPLINE();
 -      shift_right_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 -      zval_dtor(free_op1.var);
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +                      retval = Z_REFVAL_P(retval);
 +                      ZVAL_COPY_VALUE(&generator->retval, retval);
 +                      if (UNEXPECTED(--GC_REFCOUNT(ref) == 0)) {
 +                              efree_size(ref, sizeof(zend_reference));
 +                      } else if (Z_OPT_REFCOUNTED_P(retval)) {
 +                              Z_ADDREF_P(retval);
 +                      }
 +              } else {
 +                      ZVAL_COPY_VALUE(&generator->retval, retval);
 +              }
 +      }
  
 -static int ZEND_FASTCALL  ZEND_CONCAT_SPEC_TMP_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 +      /* Close the generator to free up resources */
 +      zend_generator_close(generator, 1);
  
 -      SAVE_OPLINE();
 -      concat_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 -      zval_dtor(free_op1.var);
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      /* Pass execution back to handling code */
 +      ZEND_VM_RETURN();
  }
  
 -static int ZEND_FASTCALL  ZEND_IS_IDENTICAL_SPEC_TMP_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_THROW_SPEC_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 +      zval *value;
 +      zend_free_op free_op1;
  
        SAVE_OPLINE();
 -      is_identical_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 -      zval_dtor(free_op1.var);
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      value = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1);
  
 -static int ZEND_FASTCALL  ZEND_IS_NOT_IDENTICAL_SPEC_TMP_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 -      zval *result = &EX_T(opline->result.var).tmp_var;
 +      do {
 +              if (IS_TMP_VAR == IS_CONST || UNEXPECTED(Z_TYPE_P(value) != IS_OBJECT)) {
 +                      if ((IS_TMP_VAR & (IS_VAR|IS_CV)) && Z_ISREF_P(value)) {
 +                              value = Z_REFVAL_P(value);
 +                              if (EXPECTED(Z_TYPE_P(value) == IS_OBJECT)) {
 +                                      break;
 +                              }
 +                      }
 +                      if (IS_TMP_VAR == IS_CV && UNEXPECTED(Z_TYPE_P(value) == IS_UNDEF)) {
 +                              GET_OP1_UNDEF_CV(value, BP_VAR_R);
 +                              if (UNEXPECTED(EG(exception) != NULL)) {
 +                                      HANDLE_EXCEPTION();
 +                              }
 +                      }
 +                      zend_throw_error(NULL, "Can only throw objects");
 +                      zval_ptr_dtor_nogc(free_op1);
 +                      HANDLE_EXCEPTION();
 +              }
 +      } while (0);
  
 -      SAVE_OPLINE();
 -      is_identical_function(result,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 -      Z_LVAL_P(result) = !Z_LVAL_P(result);
 -      zval_dtor(free_op1.var);
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      zend_exception_save();
 +      if (IS_TMP_VAR != IS_TMP_VAR) {
 +              if (Z_REFCOUNTED_P(value)) Z_ADDREF_P(value);
 +      }
  
 -static int ZEND_FASTCALL  ZEND_IS_EQUAL_SPEC_TMP_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 -      zval *result = &EX_T(opline->result.var).tmp_var;
 +      zend_throw_exception_object(value);
 +      zend_exception_restore();
  
 -      SAVE_OPLINE();
 -      ZVAL_BOOL(result, fast_equal_function(result,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC));
 -      zval_dtor(free_op1.var);
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      HANDLE_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_IS_NOT_EQUAL_SPEC_TMP_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_SEND_VAL_SPEC_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 -      zval *result = &EX_T(opline->result.var).tmp_var;
 +      zval *value, *arg;
 +      zend_free_op free_op1;
  
 -      SAVE_OPLINE();
 -      ZVAL_BOOL(result, fast_not_equal_function(result,
 -              _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC));
 -      zval_dtor(free_op1.var);
 -      zval_dtor(free_op2.var);
 -      CHECK_EXCEPTION();
 +      value = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1);
 +      arg = ZEND_CALL_VAR(EX(call), opline->result.var);
 +      ZVAL_COPY_VALUE(arg, value);
 +      if (IS_TMP_VAR == IS_CONST) {
 +              if (UNEXPECTED(Z_OPT_COPYABLE_P(arg))) {
 +                      zval_copy_ctor_func(arg);
 +              }
 +      }
        ZEND_VM_NEXT_OPCODE();
  }
  
@@@ -12920,216 -10925,161 +12932,219 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
        ZEND_VM_NEXT_OPCODE();
  }
  
 -static int ZEND_FASTCALL  ZEND_FETCH_R_SPEC_TMP_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_fetch_var_address_helper_SPEC_TMP_VAR(BP_VAR_R, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 -
 -static int ZEND_FASTCALL  ZEND_FETCH_W_SPEC_TMP_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_fetch_var_address_helper_SPEC_TMP_VAR(BP_VAR_W, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 -
 -static int ZEND_FASTCALL  ZEND_FETCH_RW_SPEC_TMP_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_fetch_var_address_helper_SPEC_TMP_VAR(BP_VAR_RW, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 -
 -static int ZEND_FASTCALL  ZEND_FETCH_FUNC_ARG_SPEC_TMP_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 +      zend_free_op free_op1;
 +      zval *expr_ptr, new_expr;
  
 -      return zend_fetch_var_address_helper_SPEC_TMP_VAR(zend_is_by_ref_func_arg_fetch(opline, EX(call) TSRMLS_CC) ? BP_VAR_W : BP_VAR_R, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      SAVE_OPLINE();
 +      if ((IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_CV) &&
 +          UNEXPECTED(opline->extended_value & ZEND_ARRAY_ELEMENT_REF)) {
 +              expr_ptr = NULL;
 +              if (IS_TMP_VAR == IS_VAR && UNEXPECTED(expr_ptr == NULL)) {
 +                      zend_throw_error(NULL, "Cannot create references to/from string offsets");
 +                      zend_array_destroy(Z_ARRVAL_P(EX_VAR(opline->result.var)));
 +                      HANDLE_EXCEPTION();
 +              }
 +              ZVAL_MAKE_REF(expr_ptr);
 +              Z_ADDREF_P(expr_ptr);
  
 -static int ZEND_FASTCALL  ZEND_FETCH_UNSET_SPEC_TMP_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_fetch_var_address_helper_SPEC_TMP_VAR(BP_VAR_UNSET, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      } else {
 +              expr_ptr = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1);
 +              if (IS_TMP_VAR == IS_TMP_VAR) {
 +                      /* pass */
 +              } else if (IS_TMP_VAR == IS_CONST) {
 +                      if (UNEXPECTED(Z_OPT_COPYABLE_P(expr_ptr))) {
 +                              ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                              zval_copy_ctor_func(&new_expr);
 +                              expr_ptr = &new_expr;
 +                      }
 +              } else if (IS_TMP_VAR == IS_CV) {
 +                      ZVAL_DEREF(expr_ptr);
 +                      if (Z_REFCOUNTED_P(expr_ptr)) {
 +                              Z_ADDREF_P(expr_ptr);
 +                      }
 +              } else /* if (IS_TMP_VAR == IS_VAR) */ {
 +                      if (UNEXPECTED(Z_ISREF_P(expr_ptr))) {
 +                              zend_refcounted *ref = Z_COUNTED_P(expr_ptr);
  
 -static int ZEND_FASTCALL  ZEND_FETCH_IS_SPEC_TMP_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_fetch_var_address_helper_SPEC_TMP_VAR(BP_VAR_IS, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +                              expr_ptr = Z_REFVAL_P(expr_ptr);
 +                              if (UNEXPECTED(--GC_REFCOUNT(ref) == 0)) {
 +                                      ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                                      expr_ptr = &new_expr;
 +                                      efree_size(ref, sizeof(zend_reference));
 +                              } else if (Z_OPT_REFCOUNTED_P(expr_ptr)) {
 +                                      Z_ADDREF_P(expr_ptr);
 +                              }
 +                      }
 +              }
 +      }
  
 -static int ZEND_FASTCALL  ZEND_FETCH_DIM_R_SPEC_TMP_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 -      zval *container;
 +      if (IS_CONST != IS_UNUSED) {
  
 -      SAVE_OPLINE();
 -      container = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -      zend_fetch_dimension_address_read(&EX_T(opline->result.var), container, _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2 TSRMLS_CC), IS_VAR, BP_VAR_R TSRMLS_CC);
 -      zval_ptr_dtor_nogc(&free_op2.var);
 -      if (IS_TMP_VAR != IS_VAR || !(opline->extended_value & ZEND_FETCH_ADD_LOCK)) {
 -              zval_dtor(free_op1.var);
 +              zval *offset = EX_CONSTANT(opline->op2);
 +              zend_string *str;
 +              zend_ulong hval;
 +
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_CONST != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
 +                              }
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if ((IS_CONST & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if (IS_CONST == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
++                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
++                      zval_ptr_dtor(expr_ptr);
++              }
        }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_ADD_VAR_SPEC_TMP_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_TMP_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
 -      zend_free_op free_op2;
 -      zval *str = &EX_T(opline->result.var).tmp_var;
 -      zval *var;
 -      zval var_copy;
 -      int use_copy = 0;
 -
 -      SAVE_OPLINE();
 -      var = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2 TSRMLS_CC);
  
 -      if (IS_TMP_VAR == IS_UNUSED) {
 -              /* Initialize for erealloc in add_string_to_string */
 -              Z_STRVAL_P(str) = NULL;
 -              Z_STRLEN_P(str) = 0;
 -              Z_TYPE_P(str) = IS_STRING;
 -
 -              INIT_PZVAL(str);
 +      array = EX_VAR(opline->result.var);
 +      if (IS_TMP_VAR != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
        }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
  
 -      if (Z_TYPE_P(var) != IS_STRING) {
 -              zend_make_printable_zval(var, &var_copy, &use_copy);
 -
 -              if (use_copy) {
 -                      var = &var_copy;
 +      if (IS_TMP_VAR != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
                }
        }
 -      add_string_to_string(str, str, var);
  
 -      if (use_copy) {
 -              zval_dtor(var);
 +      if (IS_TMP_VAR == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_TMP_VAR != IS_UNUSED)
 +      } else {
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
 +#endif
        }
 -      /* original comment, possibly problematic:
 -       * FREE_OP is missing intentionally here - we're always working on the same temporary variable
 -       * (Zeev):  I don't think it's problematic, we only use variables
 -       * which aren't affected by FREE_OP(Ts, )'s anyway, unless they're
 -       * string offsets or overloaded objects
 -       */
 -      zval_ptr_dtor_nogc(&free_op2.var);
 -
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
  }
  
 -static int ZEND_FASTCALL  ZEND_INIT_METHOD_CALL_SPEC_TMP_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_YIELD_SPEC_TMP_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zval *function_name;
 -      char *function_name_strval;
 -      int function_name_strlen;
 -      zend_free_op free_op1, free_op2;
 -      call_slot *call = EX(call_slots) + opline->result.num;
  
 -      SAVE_OPLINE();
 +      zend_generator *generator = zend_get_running_generator(execute_data);
  
 -      function_name = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2 TSRMLS_CC);
 +      SAVE_OPLINE();
 +      if (UNEXPECTED(generator->flags & ZEND_GENERATOR_FORCED_CLOSE)) {
 +              zend_throw_error(NULL, "Cannot yield from finally in a force-closed generator");
  
 -      if (IS_VAR != IS_CONST &&
 -          UNEXPECTED(Z_TYPE_P(function_name) != IS_STRING)) {
 -              if (UNEXPECTED(EG(exception) != NULL)) {
 -                      HANDLE_EXCEPTION();
 -              }
 -              zend_error_noreturn(E_ERROR, "Method name must be a string");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op1.var));
 +              HANDLE_EXCEPTION();
        }
  
 -      function_name_strval = Z_STRVAL_P(function_name);
 -      function_name_strlen = Z_STRLEN_P(function_name);
 +      /* Destroy the previously yielded value */
 +      zval_ptr_dtor(&generator->value);
  
 -      call->object = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 +      /* Destroy the previously yielded key */
 +      zval_ptr_dtor(&generator->key);
  
 -      if (EXPECTED(call->object != NULL) &&
 -          EXPECTED(Z_TYPE_P(call->object) == IS_OBJECT)) {
 -              call->called_scope = Z_OBJCE_P(call->object);
 +      /* Set the new yielded value */
 +      if (IS_TMP_VAR != IS_UNUSED) {
 +              zend_free_op free_op1;
  
 -              if (IS_VAR != IS_CONST ||
 -                  (call->fbc = CACHED_POLYMORPHIC_PTR(opline->op2.literal->cache_slot, call->called_scope)) == NULL) {
 -                  zval *object = call->object;
 +              if (UNEXPECTED(EX(func)->op_array.fn_flags & ZEND_ACC_RETURN_REFERENCE)) {
 +                      /* Constants and temporary variables aren't yieldable by reference,
 +                       * but we still allow them with a notice. */
 +                      if (IS_TMP_VAR == IS_CONST || IS_TMP_VAR == IS_TMP_VAR) {
 +                              zval *value;
  
 -                      if (UNEXPECTED(Z_OBJ_HT_P(call->object)->get_method == NULL)) {
 -                              zend_error_noreturn(E_ERROR, "Object does not support method calls");
 -                      }
 +                              zend_error(E_NOTICE, "Only variable references should be yielded by reference");
 +
 +                              value = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1);
 +                              ZVAL_COPY_VALUE(&generator->value, value);
 +                              if (IS_TMP_VAR == IS_CONST) {
 +                                      if (UNEXPECTED(Z_OPT_COPYABLE(generator->value))) {
 +                                              zval_copy_ctor_func(&generator->value);
 +                                      }
 +                              }
 +                      } else {
 +                              zval *value_ptr = NULL;
 +
 +                              if (IS_TMP_VAR == IS_VAR && UNEXPECTED(value_ptr == NULL)) {
 +                                      zend_throw_error(NULL, "Cannot yield string offsets by reference");
 +
 +                                      HANDLE_EXCEPTION();
 +                              }
 +
 +                              /* If a function call result is yielded and the function did
 +                               * not return by reference we throw a notice. */
 +                              if (IS_TMP_VAR == IS_VAR &&
 +                                  (value_ptr == &EG(uninitialized_zval) ||
 +                                   (opline->extended_value == ZEND_RETURNS_FUNCTION &&
 +                                    !(Z_VAR_FLAGS_P(value_ptr) & IS_VAR_RET_REF)))) {
 +                                      zend_error(E_NOTICE, "Only variable references should be yielded by reference");
 +                              } else {
 +                                      ZVAL_MAKE_REF(value_ptr);
 +                              }
 +                              ZVAL_COPY(&generator->value, value_ptr);
  
 -                      /* First, locate the function. */
 -                      call->fbc = Z_OBJ_HT_P(call->object)->get_method(&call->object, function_name_strval, function_name_strlen, ((IS_VAR == IS_CONST) ? (opline->op2.literal + 1) : NULL) TSRMLS_CC);
 -                      if (UNEXPECTED(call->fbc == NULL)) {
 -                              zend_error_noreturn(E_ERROR, "Call to undefined method %s::%s()", Z_OBJ_CLASS_NAME_P(call->object), function_name_strval);
                        }
 -                      if (IS_VAR == IS_CONST &&
 -                          EXPECTED(call->fbc->type <= ZEND_USER_FUNCTION) &&
 -                          EXPECTED((call->fbc->common.fn_flags & (ZEND_ACC_CALL_VIA_HANDLER|ZEND_ACC_NEVER_CACHE)) == 0) &&
 -                          EXPECTED(call->object == object)) {
 -                              CACHE_POLYMORPHIC_PTR(opline->op2.literal->cache_slot, call->called_scope, call->fbc);
 +              } else {
 +                      zval *value = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1);
 +
 +                      /* Consts, temporary variables and references need copying */
 +                      if (IS_TMP_VAR == IS_CONST) {
 +                              ZVAL_COPY_VALUE(&generator->value, value);
 +                              if (UNEXPECTED(Z_OPT_COPYABLE(generator->value))) {
 +                                      zval_copy_ctor_func(&generator->value);
 +                              }
 +                      } else if (IS_TMP_VAR == IS_TMP_VAR) {
 +                              ZVAL_COPY_VALUE(&generator->value, value);
 +            } else if ((IS_TMP_VAR & (IS_VAR|IS_CV)) && Z_ISREF_P(value)) {
 +                              ZVAL_COPY(&generator->value, Z_REFVAL_P(value));
 +
 +                      } else {
 +                              ZVAL_COPY_VALUE(&generator->value, value);
 +                              if (IS_TMP_VAR == IS_CV) {
 +                                      if (Z_OPT_REFCOUNTED_P(value)) Z_ADDREF_P(value);
 +                              }
                        }
                }
        } else {
@@@ -13696,96 -11767,236 +13711,99 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
        if (IS_UNUSED != IS_UNUSED) {
  
                zval *offset = NULL;
 -              ulong hval;
 +              zend_string *str;
 +              zend_ulong hval;
  
 -              switch (Z_TYPE_P(offset)) {
 -                      case IS_DOUBLE:
 -                              hval = zend_dval_to_lval(Z_DVAL_P(offset));
 -                              goto num_index;
 -                      case IS_LONG:
 -                      case IS_BOOL:
 -                              hval = Z_LVAL_P(offset);
 -num_index:
 -                              zend_hash_index_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_STRING:
 -                              if (IS_UNUSED == IS_CONST) {
 -                                      hval = Z_HASH_P(offset);
 -                              } else {
 -                                      ZEND_HANDLE_NUMERIC_EX(Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, goto num_index);
 -                                      hval = str_hash(Z_STRVAL_P(offset), Z_STRLEN_P(offset));
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_UNUSED != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
                                }
 -                              zend_hash_quick_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_NULL:
 -                              zend_hash_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), "", sizeof(""), &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      default:
 -                              zend_error(E_WARNING, "Illegal offset type");
 -                              zval_ptr_dtor(&expr_ptr);
 -                              /* do nothing */
 -                              break;
 -              }
 -
 -      } else {
 -              if (zend_hash_next_index_insert(Z_ARRVAL(EX_T(opline->result.var).tmp_var), &expr_ptr, sizeof(zval *), NULL) == FAILURE) {
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if ((IS_UNUSED & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if (IS_UNUSED == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
+                       zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
 -                      zval_ptr_dtor(&expr_ptr);
++                      zval_ptr_dtor(expr_ptr);
+               }
        }
 -      if ((IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_CV) && opline->extended_value) {
 -
 -      }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_INIT_ARRAY_SPEC_TMP_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_TMP_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
  
 -      array_init(&EX_T(opline->result.var).tmp_var);
 -      if (IS_TMP_VAR == IS_UNUSED) {
 -              ZEND_VM_NEXT_OPCODE();
 -#if 0 || IS_TMP_VAR != IS_UNUSED
 +      array = EX_VAR(opline->result.var);
 +      if (IS_TMP_VAR != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
        } else {
 -              return ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -#endif
 +              size = 0;
        }
 -}
 -
 -static int ZEND_FASTCALL  ZEND_UNSET_VAR_SPEC_TMP_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zval tmp, *varname;
 -      HashTable *target_symbol_table;
 -      zend_free_op free_op1;
 -
 -      SAVE_OPLINE();
 -      if (IS_TMP_VAR == IS_CV &&
 -          IS_UNUSED == IS_UNUSED &&
 -          (opline->extended_value & ZEND_QUICK_SET)) {
 -              if (EG(active_symbol_table)) {
 -                      zend_compiled_variable *cv = &CV_DEF_OF(opline->op1.var);
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
  
 -                      zend_delete_variable(EX(prev_execute_data), EG(active_symbol_table),  cv->name, cv->name_len+1, cv->hash_value TSRMLS_CC);
 -                      EX_CV(opline->op1.var) = NULL;
 -              } else if (EX_CV(opline->op1.var)) {
 -                      zval_ptr_dtor(EX_CV(opline->op1.var));
 -                      EX_CV(opline->op1.var) = NULL;
 +      if (IS_TMP_VAR != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
                }
 -              CHECK_EXCEPTION();
 -              ZEND_VM_NEXT_OPCODE();
        }
  
 -      varname = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -      if (IS_TMP_VAR != IS_CONST && Z_TYPE_P(varname) != IS_STRING) {
 -              ZVAL_COPY_VALUE(&tmp, varname);
 -              zval_copy_ctor(&tmp);
 -              convert_to_string(&tmp);
 -              varname = &tmp;
 -      } else if (IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_CV) {
 -              Z_ADDREF_P(varname);
 -      }
 -
 -      if (IS_UNUSED != IS_UNUSED) {
 -              zend_class_entry *ce;
 -
 -              if (IS_UNUSED == IS_CONST) {
 -                      if (CACHED_PTR(opline->op2.literal->cache_slot)) {
 -                              ce = CACHED_PTR(opline->op2.literal->cache_slot);
 -                      } else {
 -                              ce = zend_fetch_class_by_name(Z_STRVAL_P(opline->op2.zv), Z_STRLEN_P(opline->op2.zv), opline->op2.literal + 1, 0 TSRMLS_CC);
 -                              if (UNEXPECTED(EG(exception) != NULL)) {
 -                                      if (IS_TMP_VAR != IS_CONST && varname == &tmp) {
 -                                              zval_dtor(&tmp);
 -                                      } else if (IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_CV) {
 -                                              zval_ptr_dtor(&varname);
 -                                      }
 -                                      zval_dtor(free_op1.var);
 -                                      HANDLE_EXCEPTION();
 -                              }
 -                              if (UNEXPECTED(ce == NULL)) {
 -                                      zend_error_noreturn(E_ERROR, "Class '%s' not found", Z_STRVAL_P(opline->op2.zv));
 -                              }
 -                              CACHE_PTR(opline->op2.literal->cache_slot, ce);
 -                      }
 -              } else {
 -                      ce = EX_T(opline->op2.var).class_entry;
 -              }
 -              zend_std_unset_static_property(ce, Z_STRVAL_P(varname), Z_STRLEN_P(varname), ((IS_TMP_VAR == IS_CONST) ? opline->op1.literal : NULL) TSRMLS_CC);
 +      if (IS_TMP_VAR == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_TMP_VAR != IS_UNUSED)
        } else {
 -              ulong hash_value = zend_inline_hash_func(varname->value.str.val, varname->value.str.len+1);
 -
 -              target_symbol_table = zend_get_target_symbol_table(opline->extended_value & ZEND_FETCH_TYPE_MASK TSRMLS_CC);
 -              zend_delete_variable(execute_data, target_symbol_table, varname->value.str.val, varname->value.str.len+1, hash_value TSRMLS_CC);
 -      }
 -
 -      if (IS_TMP_VAR != IS_CONST && varname == &tmp) {
 -              zval_dtor(&tmp);
 -      } else if (IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_CV) {
 -              zval_ptr_dtor(&varname);
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
 +#endif
        }
 -      zval_dtor(free_op1.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
  }
  
 -static int ZEND_FASTCALL  ZEND_ISSET_ISEMPTY_VAR_SPEC_TMP_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_YIELD_SPEC_TMP_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zval **value;
 -      zend_bool isset = 1;
 -
 -      SAVE_OPLINE();
 -      if (IS_TMP_VAR == IS_CV &&
 -          IS_UNUSED == IS_UNUSED &&
 -          (opline->extended_value & ZEND_QUICK_SET)) {
 -              if (EX_CV(opline->op1.var)) {
 -                      value = EX_CV(opline->op1.var);
 -              } else if (EG(active_symbol_table)) {
 -                      zend_compiled_variable *cv = &CV_DEF_OF(opline->op1.var);
 -
 -                      if (zend_hash_quick_find(EG(active_symbol_table), cv->name, cv->name_len+1, cv->hash_value, (void **) &value) == FAILURE) {
 -                              isset = 0;
 -                      }
 -              } else {
 -                      isset = 0;
 -              }
 -      } else {
 -              HashTable *target_symbol_table;
 -              zend_free_op free_op1;
 -              zval tmp, *varname = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -              if (IS_TMP_VAR != IS_CONST && Z_TYPE_P(varname) != IS_STRING) {
 -                      ZVAL_COPY_VALUE(&tmp, varname);
 -                      zval_copy_ctor(&tmp);
 -                      convert_to_string(&tmp);
 -                      varname = &tmp;
 -              }
 -
 -              if (IS_UNUSED != IS_UNUSED) {
 -                      zend_class_entry *ce;
 -
 -                      if (IS_UNUSED == IS_CONST) {
 -                              if (CACHED_PTR(opline->op2.literal->cache_slot)) {
 -                                      ce = CACHED_PTR(opline->op2.literal->cache_slot);
 -                              } else {
 -                                      ce = zend_fetch_class_by_name(Z_STRVAL_P(opline->op2.zv), Z_STRLEN_P(opline->op2.zv), opline->op2.literal + 1, 0 TSRMLS_CC);
 -                                      if (UNEXPECTED(ce == NULL)) {
 -                                              CHECK_EXCEPTION();
 -                                              ZEND_VM_NEXT_OPCODE();
 -                                      }
 -                                      CACHE_PTR(opline->op2.literal->cache_slot, ce);
 -                              }
 -                      } else {
 -                              ce = EX_T(opline->op2.var).class_entry;
 -                      }
 -                      value = zend_std_get_static_property(ce, Z_STRVAL_P(varname), Z_STRLEN_P(varname), 1, ((IS_TMP_VAR == IS_CONST) ? opline->op1.literal : NULL) TSRMLS_CC);
 -                      if (!value) {
 -                              isset = 0;
 -                      }
 -              } else {
 -                      target_symbol_table = zend_get_target_symbol_table(opline->extended_value & ZEND_FETCH_TYPE_MASK TSRMLS_CC);
 -                      if (zend_hash_find(target_symbol_table, varname->value.str.val, varname->value.str.len+1, (void **) &value) == FAILURE) {
 -                              isset = 0;
 -                      }
 -              }
 -
 -              if (IS_TMP_VAR != IS_CONST && varname == &tmp) {
 -                      zval_dtor(&tmp);
 -              }
 -              zval_dtor(free_op1.var);
 -      }
 -
 -      if (opline->extended_value & ZEND_ISSET) {
 -              if (isset && Z_TYPE_PP(value) != IS_NULL) {
 -                      ZVAL_BOOL(&EX_T(opline->result.var).tmp_var, 1);
 -              } else {
 -                      ZVAL_BOOL(&EX_T(opline->result.var).tmp_var, 0);
 -              }
 -      } else /* if (opline->extended_value & ZEND_ISEMPTY) */ {
 -              if (!isset || !i_zend_is_true(*value)) {
 -                      ZVAL_BOOL(&EX_T(opline->result.var).tmp_var, 1);
 -              } else {
 -                      ZVAL_BOOL(&EX_T(opline->result.var).tmp_var, 0);
 -              }
 -      }
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 -
 -static int ZEND_FASTCALL  ZEND_YIELD_SPEC_TMP_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 +      zend_generator *generator = zend_get_running_generator(execute_data);
  
 -      /* The generator object is stored in return_value_ptr_ptr */
 -      zend_generator *generator = (zend_generator *) EG(return_value_ptr_ptr);
 +      SAVE_OPLINE();
 +      if (UNEXPECTED(generator->flags & ZEND_GENERATOR_FORCED_CLOSE)) {
 +              zend_throw_error(NULL, "Cannot yield from finally in a force-closed generator");
  
 -      if (generator->flags & ZEND_GENERATOR_FORCED_CLOSE) {
 -              zend_error_noreturn(E_ERROR, "Cannot yield from finally in a force-closed generator");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op1.var));
 +              HANDLE_EXCEPTION();
        }
  
        /* Destroy the previously yielded value */
@@@ -14244,81 -12618,61 +14262,84 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
  
        if (IS_CV != IS_UNUSED) {
  
 -              zval *offset = _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var TSRMLS_CC);
 -              ulong hval;
 +              zval *offset = _get_zval_ptr_cv_undef(execute_data, opline->op2.var);
 +              zend_string *str;
 +              zend_ulong hval;
  
 -              switch (Z_TYPE_P(offset)) {
 -                      case IS_DOUBLE:
 -                              hval = zend_dval_to_lval(Z_DVAL_P(offset));
 -                              goto num_index;
 -                      case IS_LONG:
 -                      case IS_BOOL:
 -                              hval = Z_LVAL_P(offset);
 -num_index:
 -                              zend_hash_index_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_STRING:
 -                              if (IS_CV == IS_CONST) {
 -                                      hval = Z_HASH_P(offset);
 -                              } else {
 -                                      ZEND_HANDLE_NUMERIC_EX(Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, goto num_index);
 -                                      hval = str_hash(Z_STRVAL_P(offset), Z_STRLEN_P(offset));
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_CV != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
                                }
 -                              zend_hash_quick_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_NULL:
 -                              zend_hash_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), "", sizeof(""), &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      default:
 -                              zend_error(E_WARNING, "Illegal offset type");
 -                              zval_ptr_dtor(&expr_ptr);
 -                              /* do nothing */
 -                              break;
 -              }
 -
 -      } else {
 -              if (zend_hash_next_index_insert(Z_ARRVAL(EX_T(opline->result.var).tmp_var), &expr_ptr, sizeof(zval *), NULL) == FAILURE) {
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if ((IS_CV & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if (IS_CV == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
+                       zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
 -                      zval_ptr_dtor(&expr_ptr);
++                      zval_ptr_dtor(expr_ptr);
+               }
        }
 -      if ((IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_CV) && opline->extended_value) {
 -
 -      }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_INIT_ARRAY_SPEC_TMP_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_TMP_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
  
 -      array_init(&EX_T(opline->result.var).tmp_var);
 +      array = EX_VAR(opline->result.var);
 +      if (IS_TMP_VAR != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
 +      }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
 +
 +      if (IS_TMP_VAR != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
 +              }
 +      }
 +
        if (IS_TMP_VAR == IS_UNUSED) {
                ZEND_VM_NEXT_OPCODE();
 -#if 0 || IS_TMP_VAR != IS_UNUSED
 +#if 0 || (IS_TMP_VAR != IS_UNUSED)
        } else {
 -              return ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
  #endif
        }
  }
@@@ -14711,133 -13061,60 +14732,136 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
  {
        USE_OPLINE
        zend_free_op free_op1;
 -      zval *z;
 +      zval *expr_ptr, new_expr;
  
        SAVE_OPLINE();
 -      z = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -      if (IS_VAR == IS_TMP_VAR && Z_TYPE_P(z) == IS_OBJECT) {
 -              INIT_PZVAL(z);
 -      }
 -      zend_print_variable(z);
 +      if ((IS_TMP_VAR == IS_VAR || IS_TMP_VAR == IS_CV) &&
 +          UNEXPECTED(opline->extended_value & ZEND_ARRAY_ELEMENT_REF)) {
 +              expr_ptr = NULL;
 +              if (IS_TMP_VAR == IS_VAR && UNEXPECTED(expr_ptr == NULL)) {
 +                      zend_throw_error(NULL, "Cannot create references to/from string offsets");
 +                      zend_array_destroy(Z_ARRVAL_P(EX_VAR(opline->result.var)));
 +                      HANDLE_EXCEPTION();
 +              }
 +              ZVAL_MAKE_REF(expr_ptr);
 +              Z_ADDREF_P(expr_ptr);
  
 -      zval_ptr_dtor_nogc(&free_op1.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      } else {
 +              expr_ptr = _get_zval_ptr_tmp(opline->op1.var, execute_data, &free_op1);
 +              if (IS_TMP_VAR == IS_TMP_VAR) {
 +                      /* pass */
 +              } else if (IS_TMP_VAR == IS_CONST) {
 +                      if (UNEXPECTED(Z_OPT_COPYABLE_P(expr_ptr))) {
 +                              ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                              zval_copy_ctor_func(&new_expr);
 +                              expr_ptr = &new_expr;
 +                      }
 +              } else if (IS_TMP_VAR == IS_CV) {
 +                      ZVAL_DEREF(expr_ptr);
 +                      if (Z_REFCOUNTED_P(expr_ptr)) {
 +                              Z_ADDREF_P(expr_ptr);
 +                      }
 +              } else /* if (IS_TMP_VAR == IS_VAR) */ {
 +                      if (UNEXPECTED(Z_ISREF_P(expr_ptr))) {
 +                              zend_refcounted *ref = Z_COUNTED_P(expr_ptr);
  
 -static int ZEND_FASTCALL  ZEND_PRINT_SPEC_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 +                              expr_ptr = Z_REFVAL_P(expr_ptr);
 +                              if (UNEXPECTED(--GC_REFCOUNT(ref) == 0)) {
 +                                      ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                                      expr_ptr = &new_expr;
 +                                      efree_size(ref, sizeof(zend_reference));
 +                              } else if (Z_OPT_REFCOUNTED_P(expr_ptr)) {
 +                                      Z_ADDREF_P(expr_ptr);
 +                              }
 +                      }
 +              }
 +      }
  
 -      ZVAL_LONG(&EX_T(opline->result.var).tmp_var, 1);
 -      return ZEND_ECHO_SPEC_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +      if ((IS_TMP_VAR|IS_VAR) != IS_UNUSED) {
 +              zend_free_op free_op2;
 +              zval *offset = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
 +              zend_string *str;
 +              zend_ulong hval;
 +
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if ((IS_TMP_VAR|IS_VAR) != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
 +                              }
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if (((IS_TMP_VAR|IS_VAR) & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if ((IS_TMP_VAR|IS_VAR) == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +              zval_ptr_dtor_nogc(free_op2);
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
++                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
++                      zval_ptr_dtor(expr_ptr);
++              }
 +      }
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_JMPZ_SPEC_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_TMP_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
 -      zend_free_op free_op1;
 -      zval *val;
 -      int ret;
 -
 -      SAVE_OPLINE();
 -      val = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
  
 -      if (IS_VAR == IS_TMP_VAR && EXPECTED(Z_TYPE_P(val) == IS_BOOL)) {
 -              ret = Z_LVAL_P(val);
 +      array = EX_VAR(opline->result.var);
 +      if (IS_TMP_VAR != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
        } else {
 -              ret = i_zend_is_true(val);
 -              zval_ptr_dtor_nogc(&free_op1.var);
 -              if (UNEXPECTED(EG(exception) != NULL)) {
 -                      HANDLE_EXCEPTION();
 +              size = 0;
 +      }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
 +
 +      if (IS_TMP_VAR != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
                }
        }
 -      if (!ret) {
 -#if DEBUG_ZEND>=2
 -              printf("Conditional jmp to %d\n", opline->op2.opline_num);
 +
 +      if (IS_TMP_VAR == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_TMP_VAR != IS_UNUSED)
 +      } else {
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
  #endif
 -              ZEND_VM_SET_OPCODE(opline->op2.jmp_addr);
 -              ZEND_VM_CONTINUE();
        }
 -
 -      ZEND_VM_NEXT_OPCODE();
  }
  
 -static int ZEND_FASTCALL  ZEND_JMPNZ_SPEC_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_PRE_INC_SPEC_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
        zend_free_op free_op1;
@@@ -17863,86 -16104,144 +17887,89 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
  
        if (IS_CONST != IS_UNUSED) {
  
 -              zval *offset = opline->op2.zv;
 -              ulong hval;
 +              zval *offset = EX_CONSTANT(opline->op2);
 +              zend_string *str;
 +              zend_ulong hval;
  
 -              switch (Z_TYPE_P(offset)) {
 -                      case IS_DOUBLE:
 -                              hval = zend_dval_to_lval(Z_DVAL_P(offset));
 -                              goto num_index;
 -                      case IS_LONG:
 -                      case IS_BOOL:
 -                              hval = Z_LVAL_P(offset);
 -num_index:
 -                              zend_hash_index_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_STRING:
 -                              if (IS_CONST == IS_CONST) {
 -                                      hval = Z_HASH_P(offset);
 -                              } else {
 -                                      ZEND_HANDLE_NUMERIC_EX(Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, goto num_index);
 -                                      hval = str_hash(Z_STRVAL_P(offset), Z_STRLEN_P(offset));
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_CONST != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
                                }
 -                              zend_hash_quick_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_NULL:
 -                              zend_hash_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), "", sizeof(""), &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      default:
 -                              zend_error(E_WARNING, "Illegal offset type");
 -                              zval_ptr_dtor(&expr_ptr);
 -                              /* do nothing */
 -                              break;
 -              }
 -
 -      } else {
 -              if (zend_hash_next_index_insert(Z_ARRVAL(EX_T(opline->result.var).tmp_var), &expr_ptr, sizeof(zval *), NULL) == FAILURE) {
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if ((IS_CONST & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if (IS_CONST == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
+                       zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
 -                      zval_ptr_dtor(&expr_ptr);
++                      zval_ptr_dtor(expr_ptr);
+               }
        }
 -      if ((IS_VAR == IS_VAR || IS_VAR == IS_CV) && opline->extended_value) {
 -              if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 -      }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_INIT_ARRAY_SPEC_VAR_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_VAR_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
  
 -      array_init(&EX_T(opline->result.var).tmp_var);
 -      if (IS_VAR == IS_UNUSED) {
 -              ZEND_VM_NEXT_OPCODE();
 -#if 0 || IS_VAR != IS_UNUSED
 +      array = EX_VAR(opline->result.var);
 +      if (IS_VAR != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
        } else {
 -              return ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -#endif
 +              size = 0;
        }
 -}
 -
 -static int ZEND_FASTCALL  ZEND_UNSET_VAR_SPEC_VAR_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zval tmp, *varname;
 -      HashTable *target_symbol_table;
 -      zend_free_op free_op1;
 -
 -      SAVE_OPLINE();
 -      if (IS_VAR == IS_CV &&
 -          IS_CONST == IS_UNUSED &&
 -          (opline->extended_value & ZEND_QUICK_SET)) {
 -              if (EG(active_symbol_table)) {
 -                      zend_compiled_variable *cv = &CV_DEF_OF(opline->op1.var);
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
  
 -                      zend_delete_variable(EX(prev_execute_data), EG(active_symbol_table),  cv->name, cv->name_len+1, cv->hash_value TSRMLS_CC);
 -                      EX_CV(opline->op1.var) = NULL;
 -              } else if (EX_CV(opline->op1.var)) {
 -                      zval_ptr_dtor(EX_CV(opline->op1.var));
 -                      EX_CV(opline->op1.var) = NULL;
 +      if (IS_VAR != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
                }
 -              CHECK_EXCEPTION();
 -              ZEND_VM_NEXT_OPCODE();
 -      }
 -
 -      varname = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -      if (IS_VAR != IS_CONST && Z_TYPE_P(varname) != IS_STRING) {
 -              ZVAL_COPY_VALUE(&tmp, varname);
 -              zval_copy_ctor(&tmp);
 -              convert_to_string(&tmp);
 -              varname = &tmp;
 -      } else if (IS_VAR == IS_VAR || IS_VAR == IS_CV) {
 -              Z_ADDREF_P(varname);
        }
  
 -      if (IS_CONST != IS_UNUSED) {
 -              zend_class_entry *ce;
 -
 -              if (IS_CONST == IS_CONST) {
 -                      if (CACHED_PTR(opline->op2.literal->cache_slot)) {
 -                              ce = CACHED_PTR(opline->op2.literal->cache_slot);
 -                      } else {
 -                              ce = zend_fetch_class_by_name(Z_STRVAL_P(opline->op2.zv), Z_STRLEN_P(opline->op2.zv), opline->op2.literal + 1, 0 TSRMLS_CC);
 -                              if (UNEXPECTED(EG(exception) != NULL)) {
 -                                      if (IS_VAR != IS_CONST && varname == &tmp) {
 -                                              zval_dtor(&tmp);
 -                                      } else if (IS_VAR == IS_VAR || IS_VAR == IS_CV) {
 -                                              zval_ptr_dtor(&varname);
 -                                      }
 -                                      zval_ptr_dtor_nogc(&free_op1.var);
 -                                      HANDLE_EXCEPTION();
 -                              }
 -                              if (UNEXPECTED(ce == NULL)) {
 -                                      zend_error_noreturn(E_ERROR, "Class '%s' not found", Z_STRVAL_P(opline->op2.zv));
 -                              }
 -                              CACHE_PTR(opline->op2.literal->cache_slot, ce);
 -                      }
 -              } else {
 -                      ce = EX_T(opline->op2.var).class_entry;
 -              }
 -              zend_std_unset_static_property(ce, Z_STRVAL_P(varname), Z_STRLEN_P(varname), ((IS_VAR == IS_CONST) ? opline->op1.literal : NULL) TSRMLS_CC);
 +      if (IS_VAR == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_VAR != IS_UNUSED)
        } else {
 -              ulong hash_value = zend_inline_hash_func(varname->value.str.val, varname->value.str.len+1);
 -
 -              target_symbol_table = zend_get_target_symbol_table(opline->extended_value & ZEND_FETCH_TYPE_MASK TSRMLS_CC);
 -              zend_delete_variable(execute_data, target_symbol_table, varname->value.str.val, varname->value.str.len+1, hash_value TSRMLS_CC);
 -      }
 -
 -      if (IS_VAR != IS_CONST && varname == &tmp) {
 -              zval_dtor(&tmp);
 -      } else if (IS_VAR == IS_VAR || IS_VAR == IS_CV) {
 -              zval_ptr_dtor(&varname);
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
 +#endif
        }
 -      zval_ptr_dtor_nogc(&free_op1.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
  }
  
 -static int ZEND_FASTCALL  ZEND_UNSET_DIM_SPEC_VAR_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_UNSET_DIM_SPEC_VAR_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
        zend_free_op free_op1;
@@@ -19447,102 -18115,96 +19474,105 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
                }
        }
  
 -      if (IS_VAR == IS_VAR && (free_op1.var != NULL)) {
 -              zval_ptr_dtor_nogc(&value);
 -      }
 +      if (IS_UNUSED != IS_UNUSED) {
  
 -      /* zend_assign_to_variable() always takes care of op2, never free it! */
 +              zval *offset = NULL;
 +              zend_string *str;
 +              zend_ulong hval;
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_UNUSED != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
 +                              }
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if ((IS_UNUSED & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if (IS_UNUSED == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
++                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
++                      zval_ptr_dtor(expr_ptr);
++              }
 +      }
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_INIT_METHOD_CALL_SPEC_VAR_TMP_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
 -      zval *function_name;
 -      char *function_name_strval;
 -      int function_name_strlen;
 -      zend_free_op free_op1, free_op2;
 -      call_slot *call = EX(call_slots) + opline->result.num;
 -
 -      SAVE_OPLINE();
 -
 -      function_name = _get_zval_ptr_tmp(opline->op2.var, execute_data, &free_op2 TSRMLS_CC);
  
 -      if (IS_TMP_VAR != IS_CONST &&
 -          UNEXPECTED(Z_TYPE_P(function_name) != IS_STRING)) {
 -              if (UNEXPECTED(EG(exception) != NULL)) {
 -                      HANDLE_EXCEPTION();
 -              }
 -              zend_error_noreturn(E_ERROR, "Method name must be a string");
 +      array = EX_VAR(opline->result.var);
 +      if (IS_VAR != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
        }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
  
 -      function_name_strval = Z_STRVAL_P(function_name);
 -      function_name_strlen = Z_STRLEN_P(function_name);
 -
 -      call->object = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -      if (EXPECTED(call->object != NULL) &&
 -          EXPECTED(Z_TYPE_P(call->object) == IS_OBJECT)) {
 -              call->called_scope = Z_OBJCE_P(call->object);
 -
 -              if (IS_TMP_VAR != IS_CONST ||
 -                  (call->fbc = CACHED_POLYMORPHIC_PTR(opline->op2.literal->cache_slot, call->called_scope)) == NULL) {
 -                  zval *object = call->object;
 -
 -                      if (UNEXPECTED(Z_OBJ_HT_P(call->object)->get_method == NULL)) {
 -                              zend_error_noreturn(E_ERROR, "Object does not support method calls");
 -                      }
 -
 -                      /* First, locate the function. */
 -                      call->fbc = Z_OBJ_HT_P(call->object)->get_method(&call->object, function_name_strval, function_name_strlen, ((IS_TMP_VAR == IS_CONST) ? (opline->op2.literal + 1) : NULL) TSRMLS_CC);
 -                      if (UNEXPECTED(call->fbc == NULL)) {
 -                              zend_error_noreturn(E_ERROR, "Call to undefined method %s::%s()", Z_OBJ_CLASS_NAME_P(call->object), function_name_strval);
 -                      }
 -                      if (IS_TMP_VAR == IS_CONST &&
 -                          EXPECTED(call->fbc->type <= ZEND_USER_FUNCTION) &&
 -                          EXPECTED((call->fbc->common.fn_flags & (ZEND_ACC_CALL_VIA_HANDLER|ZEND_ACC_NEVER_CACHE)) == 0) &&
 -                          EXPECTED(call->object == object)) {
 -                              CACHE_POLYMORPHIC_PTR(opline->op2.literal->cache_slot, call->called_scope, call->fbc);
 -                      }
 -              }
 -      } else {
 -              if (UNEXPECTED(EG(exception) != NULL)) {
 -                      zval_dtor(free_op2.var);
 -                      HANDLE_EXCEPTION();
 +      if (IS_VAR != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
                }
 -              zend_error_noreturn(E_ERROR, "Call to a member function %s() on %s", function_name_strval, zend_get_type_by_const(Z_TYPE_P(call->object)));
        }
  
 -      if ((call->fbc->common.fn_flags & ZEND_ACC_STATIC) != 0) {
 -              call->object = NULL;
 +      if (IS_VAR == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_VAR != IS_UNUSED)
        } else {
 -              if (!PZVAL_IS_REF(call->object)) {
 -                      Z_ADDREF_P(call->object); /* For $this pointer */
 -              } else {
 -                      zval *this_ptr;
 -                      ALLOC_ZVAL(this_ptr);
 -                      INIT_PZVAL_COPY(this_ptr, call->object);
 -                      zval_copy_ctor(this_ptr);
 -                      call->object = this_ptr;
 -              }
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
 +#endif
        }
 +}
  
 -      call->num_additional_args = 0;
 -      call->is_ctor_call = 0;
 -      EX(call) = call;
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_SEPARATE_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      USE_OPLINE
 +      zval *var_ptr;
  
 -      zval_dtor(free_op2.var);
 -      zval_ptr_dtor_nogc(&free_op1.var);
 +      var_ptr = EX_VAR(opline->op1.var);
 +      if (UNEXPECTED(Z_ISREF_P(var_ptr))) {
 +              if (UNEXPECTED(Z_REFCOUNT_P(var_ptr) == 1)) {
 +                      ZVAL_UNREF(var_ptr);
 +              } else if (!(Z_VAR_FLAGS_P(var_ptr) & IS_VAR_RET_REF)) {
 +                      Z_DELREF_P(var_ptr);
 +                      ZVAL_COPY(var_ptr, Z_REFVAL_P(var_ptr));
 +              }
 +      }
  
 -      CHECK_EXCEPTION();
        ZEND_VM_NEXT_OPCODE();
  }
  
@@@ -20967,153 -20032,92 +20997,156 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
                }
        }
  
 -      zval_ptr_dtor_nogc(&free_op1.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      if (IS_VAR != IS_CONST) {
 +              /* previous opcode is ZEND_FETCH_CLASS */
 +              if (((opline-1)->extended_value & ZEND_FETCH_CLASS_MASK) == ZEND_FETCH_CLASS_PARENT ||
 +                  ((opline-1)->extended_value & ZEND_FETCH_CLASS_MASK) == ZEND_FETCH_CLASS_SELF) {
 +                      ce = EX(called_scope);
 +              }
 +      }
  
 -static int ZEND_FASTCALL  ZEND_FETCH_OBJ_R_SPEC_VAR_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_fetch_property_address_read_helper_SPEC_VAR_VAR(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +      call = zend_vm_stack_push_call_frame(ZEND_CALL_NESTED_FUNCTION,
 +              fbc, opline->extended_value, ce, object);
 +      call->prev_execute_data = EX(call);
 +      EX(call) = call;
 +
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_FETCH_OBJ_W_SPEC_VAR_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 -      zval *property;
 -      zval **container;
 +      zend_free_op free_op1;
 +      zval *expr_ptr, new_expr;
  
        SAVE_OPLINE();
 -      property = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2 TSRMLS_CC);
 +      if ((IS_VAR == IS_VAR || IS_VAR == IS_CV) &&
 +          UNEXPECTED(opline->extended_value & ZEND_ARRAY_ELEMENT_REF)) {
 +              expr_ptr = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1);
 +              if (IS_VAR == IS_VAR && UNEXPECTED(expr_ptr == NULL)) {
 +                      zend_throw_error(NULL, "Cannot create references to/from string offsets");
 +                      zend_array_destroy(Z_ARRVAL_P(EX_VAR(opline->result.var)));
 +                      HANDLE_EXCEPTION();
 +              }
 +              ZVAL_MAKE_REF(expr_ptr);
 +              Z_ADDREF_P(expr_ptr);
 +              if (UNEXPECTED(free_op1)) {zval_ptr_dtor_nogc(free_op1);};
 +      } else {
 +              expr_ptr = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1);
 +              if (IS_VAR == IS_TMP_VAR) {
 +                      /* pass */
 +              } else if (IS_VAR == IS_CONST) {
 +                      if (UNEXPECTED(Z_OPT_COPYABLE_P(expr_ptr))) {
 +                              ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                              zval_copy_ctor_func(&new_expr);
 +                              expr_ptr = &new_expr;
 +                      }
 +              } else if (IS_VAR == IS_CV) {
 +                      ZVAL_DEREF(expr_ptr);
 +                      if (Z_REFCOUNTED_P(expr_ptr)) {
 +                              Z_ADDREF_P(expr_ptr);
 +                      }
 +              } else /* if (IS_VAR == IS_VAR) */ {
 +                      if (UNEXPECTED(Z_ISREF_P(expr_ptr))) {
 +                              zend_refcounted *ref = Z_COUNTED_P(expr_ptr);
  
 -      if (0) {
 -              MAKE_REAL_ZVAL_PTR(property);
 -      }
 -      container = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -      if (IS_VAR == IS_VAR && UNEXPECTED(container == NULL)) {
 -              zend_error_noreturn(E_ERROR, "Cannot use string offset as an object");
 +                              expr_ptr = Z_REFVAL_P(expr_ptr);
 +                              if (UNEXPECTED(--GC_REFCOUNT(ref) == 0)) {
 +                                      ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                                      expr_ptr = &new_expr;
 +                                      efree_size(ref, sizeof(zend_reference));
 +                              } else if (Z_OPT_REFCOUNTED_P(expr_ptr)) {
 +                                      Z_ADDREF_P(expr_ptr);
 +                              }
 +                      }
 +              }
        }
  
 -      zend_fetch_property_address(&EX_T(opline->result.var), container, property, ((IS_VAR == IS_CONST) ? opline->op2.literal : NULL), BP_VAR_W TSRMLS_CC);
 -      if (0) {
 -              zval_ptr_dtor(&property);
 -      } else {
 -              zval_ptr_dtor_nogc(&free_op2.var);
 -      }
 -      if (IS_VAR == IS_VAR && (free_op1.var != NULL) && READY_TO_DESTROY(free_op1.var)) {
 -              EXTRACT_ZVAL_PTR(&EX_T(opline->result.var));
 -      }
 -      if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 +      if (IS_CV != IS_UNUSED) {
  
 -      /* We are going to assign the result by reference */
 -      if (opline->extended_value & ZEND_FETCH_MAKE_REF) {
 -              zval **retval_ptr = EX_T(opline->result.var).var.ptr_ptr;
 +              zval *offset = _get_zval_ptr_cv_undef(execute_data, opline->op2.var);
 +              zend_string *str;
 +              zend_ulong hval;
  
 -              Z_DELREF_PP(retval_ptr);
 -              SEPARATE_ZVAL_TO_MAKE_IS_REF(retval_ptr);
 -              Z_ADDREF_PP(retval_ptr);
 -              EX_T(opline->result.var).var.ptr = *EX_T(opline->result.var).var.ptr_ptr;
 -              EX_T(opline->result.var).var.ptr_ptr = &EX_T(opline->result.var).var.ptr;
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_CV != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
 +                              }
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if ((IS_CV & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if (IS_CV == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
++                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
++                      zval_ptr_dtor(expr_ptr);
++              }
        }
 -
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_FETCH_OBJ_RW_SPEC_VAR_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_VAR_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
 -      zend_free_op free_op1, free_op2;
 -      zval *property;
 -      zval **container;
  
 -      SAVE_OPLINE();
 -      property = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2 TSRMLS_CC);
 -      container = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -      if (0) {
 -              MAKE_REAL_ZVAL_PTR(property);
 +      array = EX_VAR(opline->result.var);
 +      if (IS_VAR != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
        }
 -      if (IS_VAR == IS_VAR && UNEXPECTED(container == NULL)) {
 -              zend_error_noreturn(E_ERROR, "Cannot use string offset as an object");
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
 +
 +      if (IS_VAR != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
 +              }
        }
 -      zend_fetch_property_address(&EX_T(opline->result.var), container, property, ((IS_VAR == IS_CONST) ? opline->op2.literal : NULL), BP_VAR_RW TSRMLS_CC);
 -      if (0) {
 -              zval_ptr_dtor(&property);
 +
 +      if (IS_VAR == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_VAR != IS_UNUSED)
        } else {
 -              zval_ptr_dtor_nogc(&free_op2.var);
 -      }
 -      if (IS_VAR == IS_VAR && (free_op1.var != NULL) && READY_TO_DESTROY(free_op1.var)) {
 -              EXTRACT_ZVAL_PTR(&EX_T(opline->result.var));
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
 +#endif
        }
 -      if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
  }
  
 -static int ZEND_FASTCALL  ZEND_FETCH_OBJ_IS_SPEC_VAR_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_UNSET_DIM_SPEC_VAR_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
        zend_free_op free_op1;
@@@ -22299,1278 -21399,1277 +22332,1281 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
  {
        USE_OPLINE
        zend_free_op free_op1, free_op2;
 +      zval *object;
 +      zval *property_name;
  
        SAVE_OPLINE();
 -      pow_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2 TSRMLS_CC) TSRMLS_CC);
 -      zval_ptr_dtor_nogc(&free_op1.var);
 -      zval_ptr_dtor_nogc(&free_op2.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      object = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1);
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_POW_SPEC_VAR_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_VAR_VAR(pow_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +      if (IS_VAR == IS_UNUSED && UNEXPECTED(Z_OBJ_P(object) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
 +      }
 +
 +      property_name = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
 +
 +      if (IS_VAR == IS_VAR && UNEXPECTED(object == NULL)) {
 +              zend_throw_error(NULL, "Cannot use string offset as an array");
 +              zval_ptr_dtor_nogc(free_op2);
 +              HANDLE_EXCEPTION();
 +      }
 +      zend_assign_to_object(UNEXPECTED(RETURN_VALUE_USED(opline)) ? EX_VAR(opline->result.var) : NULL, object, IS_VAR, property_name, (IS_TMP_VAR|IS_VAR), (opline+1)->op1_type, (opline+1)->op1, execute_data, (((IS_TMP_VAR|IS_VAR) == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(property_name)) : NULL));
 +      zval_ptr_dtor_nogc(free_op2);
 +      if (UNEXPECTED(free_op1)) {zval_ptr_dtor_nogc(free_op1);};
 +      /* assign_obj has two opcodes! */
 +      ZEND_VM_NEXT_OPCODE_EX(1, 2);
  }
  
 -static int ZEND_FASTCALL zend_binary_assign_op_obj_helper_SPEC_VAR_UNUSED(int (*binary_op)(zval *result, zval *op1, zval *op2 TSRMLS_DC), ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_DIM_SPEC_VAR_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op1, free_op_data1;
 -      zval **object_ptr = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -      zval *object;
 -      zval *property = NULL;
 -      zval *value = get_zval_ptr((opline+1)->op1_type, &(opline+1)->op1, execute_data, &free_op_data1, BP_VAR_R);
 -      int have_get_ptr = 0;
 +      zend_free_op free_op1;
 +      zval *object_ptr;
 +      zend_free_op free_op2, free_op_data1;
 +      zval *value;
 +      zval *variable_ptr;
 +      zval *dim;
 +
 +      SAVE_OPLINE();
 +      object_ptr = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1);
  
        if (IS_VAR == IS_VAR && UNEXPECTED(object_ptr == NULL)) {
 -              zend_error_noreturn(E_ERROR, "Cannot use string offset as an object");
 +              zend_throw_error(NULL, "Cannot use string offset as an array");
 +              FREE_UNFETCHED_OP((opline+1)->op1_type, (opline+1)->op1.var);
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
        }
  
 -      make_real_object(object_ptr TSRMLS_CC);
 -      object = *object_ptr;
 -
 -      if (UNEXPECTED(Z_TYPE_P(object) != IS_OBJECT)) {
 -              zend_error(E_WARNING, "Attempt to assign property of non-object");
 -
 -              FREE_OP(free_op_data1);
 -
 -              if (RETURN_VALUE_USED(opline)) {
 -                      PZVAL_LOCK(&EG(uninitialized_zval));
 -                      EX_T(opline->result.var).var.ptr = &EG(uninitialized_zval);
 +      if (EXPECTED(Z_TYPE_P(object_ptr) == IS_ARRAY)) {
 +try_assign_dim_array:
 +              if ((IS_TMP_VAR|IS_VAR) == IS_UNUSED) {
 +                      SEPARATE_ARRAY(object_ptr);
 +                      variable_ptr = zend_hash_next_index_insert(Z_ARRVAL_P(object_ptr), &EG(uninitialized_zval));
 +                      if (UNEXPECTED(variable_ptr == NULL)) {
 +                              zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
 +                              variable_ptr = &EG(error_zval);
 +                      }
 +              } else {
 +                      dim = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
 +                      SEPARATE_ARRAY(object_ptr);
 +                      variable_ptr = zend_fetch_dimension_address_inner(Z_ARRVAL_P(object_ptr), dim, (IS_TMP_VAR|IS_VAR), BP_VAR_W);
 +                      zval_ptr_dtor_nogc(free_op2);
 +              }
 +              value = get_zval_ptr_r((opline+1)->op1_type, (opline+1)->op1, execute_data, &free_op_data1);
 +              if (UNEXPECTED(variable_ptr == &EG(error_zval))) {
 +                      FREE_OP(free_op_data1);
 +                      if (UNEXPECTED(RETURN_VALUE_USED(opline))) {
 +                              ZVAL_NULL(EX_VAR(opline->result.var));
 +                      }
 +              } else {
 +                      value = zend_assign_to_variable(variable_ptr, value, (opline+1)->op1_type);
 +                      if (UNEXPECTED(RETURN_VALUE_USED(opline))) {
 +                              ZVAL_COPY(EX_VAR(opline->result.var), value);
 +                      }
                }
        } else {
 -              /* here we are sure we are dealing with an object */
 -              if (0) {
 -                      MAKE_REAL_ZVAL_PTR(property);
 +              if (EXPECTED(Z_ISREF_P(object_ptr))) {
 +                      object_ptr = Z_REFVAL_P(object_ptr);
 +                      if (EXPECTED(Z_TYPE_P(object_ptr) == IS_ARRAY)) {
 +                              goto try_assign_dim_array;
 +                      }
                }
 +              if (EXPECTED(Z_TYPE_P(object_ptr) == IS_OBJECT)) {
 +                      zend_free_op free_op2;
 +                      zval *property_name = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
  
 -              /* here property is a string */
 -              if (opline->extended_value == ZEND_ASSIGN_OBJ
 -                      && Z_OBJ_HT_P(object)->get_property_ptr_ptr) {
 -                      zval **zptr = Z_OBJ_HT_P(object)->get_property_ptr_ptr(object, property, BP_VAR_RW, ((IS_UNUSED == IS_CONST) ? opline->op2.literal : NULL) TSRMLS_CC);
 -                      if (zptr != NULL) {                     /* NULL means no success in getting PTR */
 -                              have_get_ptr = 1;
 -                              if (UNEXPECTED(*zptr == &EG(error_zval))) {
 -                                      if (RETURN_VALUE_USED(opline)) {
 -                                              PZVAL_LOCK(&EG(uninitialized_zval));
 -                                              EX_T(opline->result.var).var.ptr = &EG(uninitialized_zval);
 -                                      }
 +                      zend_assign_to_object_dim(UNEXPECTED(RETURN_VALUE_USED(opline)) ? EX_VAR(opline->result.var) : NULL, object_ptr, property_name, (opline+1)->op1_type, (opline+1)->op1, execute_data);
 +                      zval_ptr_dtor_nogc(free_op2);
 +              } else if (EXPECTED(Z_TYPE_P(object_ptr) == IS_STRING)) {
 +                      if (EXPECTED(Z_STRLEN_P(object_ptr) != 0)) {
 +                              if ((IS_TMP_VAR|IS_VAR) == IS_UNUSED) {
 +                                      zend_throw_error(NULL, "[] operator not supported for strings");
 +                                      FREE_UNFETCHED_OP((opline+1)->op1_type, (opline+1)->op1.var);
 +                                      if (UNEXPECTED(free_op1)) {zval_ptr_dtor_nogc(free_op1);};
 +                                      HANDLE_EXCEPTION();
                                } else {
 -                                      SEPARATE_ZVAL_IF_NOT_REF(zptr);
 -
 -                                      binary_op(*zptr, *zptr, value TSRMLS_CC);
 -                                      if (RETURN_VALUE_USED(opline)) {
 -                                              PZVAL_LOCK(*zptr);
 -                                              EX_T(opline->result.var).var.ptr = *zptr;
 -                                      }
 -                              }
 -                      }
 -              }
 +                                      zend_long offset;
  
 -              if (!have_get_ptr) {
 -                      zval *z = NULL;
 -
 -                      Z_ADDREF_P(object);
 -                      if (opline->extended_value == ZEND_ASSIGN_OBJ) {
 -                              if (Z_OBJ_HT_P(object)->read_property) {
 -                                      z = Z_OBJ_HT_P(object)->read_property(object, property, BP_VAR_R, ((IS_UNUSED == IS_CONST) ? opline->op2.literal : NULL) TSRMLS_CC);
 -                              }
 -                      } else /* if (opline->extended_value == ZEND_ASSIGN_DIM) */ {
 -                              if (Z_OBJ_HT_P(object)->read_dimension) {
 -                                      z = Z_OBJ_HT_P(object)->read_dimension(object, property, BP_VAR_R TSRMLS_CC);
 -                              }
 -                      }
 -                      if (z) {
 -                              if (Z_TYPE_P(z) == IS_OBJECT && Z_OBJ_HT_P(z)->get) {
 -                                      zval *value = Z_OBJ_HT_P(z)->get(z TSRMLS_CC);
 -
 -                                      if (Z_REFCOUNT_P(z) == 0) {
 -                                              GC_REMOVE_ZVAL_FROM_BUFFER(z);
 -                                              zval_dtor(z);
 -                                              FREE_ZVAL(z);
 -                                      }
 -                                      z = value;
 -                              }
 -                              Z_ADDREF_P(z);
 -                              SEPARATE_ZVAL_IF_NOT_REF(&z);
 -                              binary_op(z, z, value TSRMLS_CC);
 -                              if (opline->extended_value == ZEND_ASSIGN_OBJ) {
 -                                      Z_OBJ_HT_P(object)->write_property(object, property, z, ((IS_UNUSED == IS_CONST) ? opline->op2.literal : NULL) TSRMLS_CC);
 -                              } else /* if (opline->extended_value == ZEND_ASSIGN_DIM) */ {
 -                                      Z_OBJ_HT_P(object)->write_dimension(object, property, z TSRMLS_CC);
 -                              }
 -                              if (RETURN_VALUE_USED(opline)) {
 -                                      PZVAL_LOCK(z);
 -                                      EX_T(opline->result.var).var.ptr = z;
 +                                      dim = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
 +                                      offset = zend_fetch_string_offset(object_ptr, dim, BP_VAR_W);
 +                                      zval_ptr_dtor_nogc(free_op2);
 +                                      value = get_zval_ptr_r_deref((opline+1)->op1_type, (opline+1)->op1, execute_data, &free_op_data1);
 +                                      zend_assign_to_string_offset(object_ptr, offset, value, (UNEXPECTED(RETURN_VALUE_USED(opline)) ? EX_VAR(opline->result.var) : NULL));
 +                                      FREE_OP(free_op_data1);
                                }
 -                              zval_ptr_dtor(&z);
                        } else {
 -                              zend_error(E_WARNING, "Attempt to assign property of non-object");
 -                              if (RETURN_VALUE_USED(opline)) {
 -                                      PZVAL_LOCK(&EG(uninitialized_zval));
 -                                      EX_T(opline->result.var).var.ptr = &EG(uninitialized_zval);
 -                              }
 +                              zval_ptr_dtor_nogc(object_ptr);
 +assign_dim_convert_to_array:
 +                              ZVAL_NEW_ARR(object_ptr);
 +                              zend_hash_init(Z_ARRVAL_P(object_ptr), 8, NULL, ZVAL_PTR_DTOR, 0);
 +                              goto try_assign_dim_array;
                        }
 -                      zval_ptr_dtor(&object);
 -              }
 -
 -              if (0) {
 -                      zval_ptr_dtor(&property);
 +              } else if (EXPECTED(Z_TYPE_P(object_ptr) <= IS_FALSE)) {
 +                      if (IS_VAR == IS_VAR && UNEXPECTED(object_ptr == &EG(error_zval))) {
 +                              goto assign_dim_clean;
 +                      }
 +                      goto assign_dim_convert_to_array;
                } else {
 -
 +                      zend_error(E_WARNING, "Cannot use a scalar value as an array");
 +assign_dim_clean:
 +                      dim = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
 +                      zval_ptr_dtor_nogc(free_op2);
 +                      value = get_zval_ptr_r((opline+1)->op1_type, (opline+1)->op1, execute_data, &free_op_data1);
 +                      FREE_OP(free_op_data1);
 +                      if (UNEXPECTED(RETURN_VALUE_USED(opline))) {
 +                              ZVAL_NULL(EX_VAR(opline->result.var));
 +                      }
                }
 -              FREE_OP(free_op_data1);
        }
 -
 -      if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 -      /* assign_obj has two opcodes! */
 -      CHECK_EXCEPTION();
 -      ZEND_VM_INC_OPCODE();
 -      ZEND_VM_NEXT_OPCODE();
 +      if (UNEXPECTED(free_op1)) {zval_ptr_dtor_nogc(free_op1);};
 +      /* assign_dim has two opcodes! */
 +      ZEND_VM_NEXT_OPCODE_EX(1, 2);
  }
  
 -static int ZEND_FASTCALL zend_binary_assign_op_helper_SPEC_VAR_UNUSED(int (*binary_op)(zval *result, zval *op1, zval *op2 TSRMLS_DC), ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op1, free_op_data2, free_op_data1;
 -      zval **var_ptr;
 -      zval *value;
 +      zval *function_name;
 +      zend_class_entry *ce;
 +      zend_object *object;
 +      zend_function *fbc;
 +      zend_execute_data *call;
  
        SAVE_OPLINE();
 -      switch (opline->extended_value) {
 -              case ZEND_ASSIGN_OBJ:
 -                      return zend_binary_assign_op_obj_helper_SPEC_VAR_UNUSED(binary_op, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -                      break;
 -              case ZEND_ASSIGN_DIM: {
 -                              zval **container = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -                              if (IS_VAR == IS_VAR && UNEXPECTED(container == NULL)) {
 -                                      zend_error_noreturn(E_ERROR, "Cannot use string offset as an array");
 -                              } else if (UNEXPECTED(Z_TYPE_PP(container) == IS_OBJECT)) {
 -                                      if (IS_VAR == IS_VAR && !(free_op1.var != NULL)) {
 -                                              Z_ADDREF_PP(container);  /* undo the effect of get_obj_zval_ptr_ptr() */
 -                                      }
 -                                      return zend_binary_assign_op_obj_helper_SPEC_VAR_UNUSED(binary_op, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -                              } else {
 -                                      zval *dim = NULL;
  
 -                                      zend_fetch_dimension_address(&EX_T((opline+1)->op2.var), container, dim, IS_UNUSED, BP_VAR_RW TSRMLS_CC);
 -                                      value = get_zval_ptr((opline+1)->op1_type, &(opline+1)->op1, execute_data, &free_op_data1, BP_VAR_R);
 -                                      var_ptr = _get_zval_ptr_ptr_var((opline+1)->op2.var, execute_data, &free_op_data2 TSRMLS_CC);
 +      if (IS_VAR == IS_CONST) {
 +              /* no function found. try a static method in class */
 +              ce = CACHED_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op1)));
 +              if (UNEXPECTED(ce == NULL)) {
 +                      ce = zend_fetch_class_by_name(Z_STR_P(EX_CONSTANT(opline->op1)), EX_CONSTANT(opline->op1) + 1, ZEND_FETCH_CLASS_DEFAULT |  ZEND_FETCH_CLASS_EXCEPTION);
 +                      if (UNEXPECTED(ce == NULL)) {
 +                              if (UNEXPECTED(EG(exception) != NULL)) {
 +                                      HANDLE_EXCEPTION();
                                }
 +                              zend_throw_error(NULL, "Class '%s' not found", Z_STRVAL_P(EX_CONSTANT(opline->op1)));
 +                              HANDLE_EXCEPTION();
                        }
 -                      break;
 -              default:
 -                      value = NULL;
 -                      var_ptr = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -                      /* do nothing */
 -                      break;
 +                      CACHE_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op1)), ce);
 +              }
 +      } else {
 +              ce = Z_CE_P(EX_VAR(opline->op1.var));
        }
  
 -      if (UNEXPECTED(var_ptr == NULL)) {
 -              zend_error_noreturn(E_ERROR, "Cannot use assign-op operators with overloaded objects nor string offsets");
 -      }
 +      if (IS_VAR == IS_CONST &&
 +          (IS_TMP_VAR|IS_VAR) == IS_CONST &&
 +          EXPECTED((fbc = CACHED_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op2)))) != NULL)) {
 +              /* nothing to do */
 +      } else if (IS_VAR != IS_CONST &&
 +                 (IS_TMP_VAR|IS_VAR) == IS_CONST &&
 +                 (fbc = CACHED_POLYMORPHIC_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op2)), ce))) {
 +              /* do nothing */
 +      } else if ((IS_TMP_VAR|IS_VAR) != IS_UNUSED) {
 +              zend_free_op free_op2;
  
 -      if (UNEXPECTED(*var_ptr == &EG(error_zval))) {
 -              if (RETURN_VALUE_USED(opline)) {
 -                      PZVAL_LOCK(&EG(uninitialized_zval));
 -                      EX_T(opline->result.var).var.ptr = &EG(uninitialized_zval);
 +              function_name = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
 +              if ((IS_TMP_VAR|IS_VAR) != IS_CONST) {
 +                      if (UNEXPECTED(Z_TYPE_P(function_name) != IS_STRING)) {
 +                              do {
 +                                      if ((IS_TMP_VAR|IS_VAR) & (IS_VAR|IS_CV) && Z_ISREF_P(function_name)) {
 +                                              function_name = Z_REFVAL_P(function_name);
 +                                              if (EXPECTED(Z_TYPE_P(function_name) == IS_STRING)) {
 +                                                      break;
 +                                              }
 +                                      } else if ((IS_TMP_VAR|IS_VAR) == IS_CV && UNEXPECTED(Z_TYPE_P(function_name) == IS_UNDEF)) {
 +                                              GET_OP2_UNDEF_CV(function_name, BP_VAR_R);
 +                                              if (UNEXPECTED(EG(exception) != NULL)) {
 +                                                      HANDLE_EXCEPTION();
 +                                              }
 +                                      }
 +                                      zend_throw_error(NULL, "Function name must be a string");
 +                                      zval_ptr_dtor_nogc(free_op2);
 +                                      HANDLE_EXCEPTION();
 +                              } while (0);
 +                      }
                }
  
 -              if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 -              CHECK_EXCEPTION();
 -              if (opline->extended_value == ZEND_ASSIGN_DIM) {
 -                      ZEND_VM_INC_OPCODE();
 +              if (ce->get_static_method) {
 +                      fbc = ce->get_static_method(ce, Z_STR_P(function_name));
 +              } else {
 +                      fbc = zend_std_get_static_method(ce, Z_STR_P(function_name), (((IS_TMP_VAR|IS_VAR) == IS_CONST) ? (EX_CONSTANT(opline->op2) + 1) : NULL));
 +              }
 +              if (UNEXPECTED(fbc == NULL)) {
 +                      if (EXPECTED(!EG(exception))) {
 +                              zend_throw_error(NULL, "Call to undefined method %s::%s()", ZSTR_VAL(ce->name), Z_STRVAL_P(function_name));
 +                      }
 +                      zval_ptr_dtor_nogc(free_op2);
 +                      HANDLE_EXCEPTION();
 +              }
 +              if ((IS_TMP_VAR|IS_VAR) == IS_CONST &&
 +                  EXPECTED(fbc->type <= ZEND_USER_FUNCTION) &&
 +                  EXPECTED(!(fbc->common.fn_flags & (ZEND_ACC_CALL_VIA_TRAMPOLINE|ZEND_ACC_NEVER_CACHE)))) {
 +                      if (IS_VAR == IS_CONST) {
 +                              CACHE_PTR(Z_CACHE_SLOT_P(function_name), fbc);
 +                      } else {
 +                              CACHE_POLYMORPHIC_PTR(Z_CACHE_SLOT_P(function_name), ce, fbc);
 +                      }
 +              }
 +              if ((IS_TMP_VAR|IS_VAR) != IS_CONST) {
 +                      zval_ptr_dtor_nogc(free_op2);
                }
 -              ZEND_VM_NEXT_OPCODE();
 -      }
 -
 -      SEPARATE_ZVAL_IF_NOT_REF(var_ptr);
 -
 -      if (UNEXPECTED(Z_TYPE_PP(var_ptr) == IS_OBJECT)
 -         && Z_OBJ_HANDLER_PP(var_ptr, get)
 -         && Z_OBJ_HANDLER_PP(var_ptr, set)) {
 -              /* proxy object */
 -              zval *objval = Z_OBJ_HANDLER_PP(var_ptr, get)(*var_ptr TSRMLS_CC);
 -              Z_ADDREF_P(objval);
 -              binary_op(objval, objval, value TSRMLS_CC);
 -              Z_OBJ_HANDLER_PP(var_ptr, set)(var_ptr, objval TSRMLS_CC);
 -              zval_ptr_dtor(&objval);
        } else {
 -              binary_op(*var_ptr, *var_ptr, value TSRMLS_CC);
 +              if (UNEXPECTED(ce->constructor == NULL)) {
 +                      zend_throw_error(NULL, "Cannot call constructor");
 +                      HANDLE_EXCEPTION();
 +              }
 +              if (Z_OBJ(EX(This)) && Z_OBJ(EX(This))->ce != ce->constructor->common.scope && (ce->constructor->common.fn_flags & ZEND_ACC_PRIVATE)) {
 +                      zend_throw_error(NULL, "Cannot call private %s::__construct()", ZSTR_VAL(ce->name));
 +                      HANDLE_EXCEPTION();
 +              }
 +              fbc = ce->constructor;
        }
  
 -      if (RETURN_VALUE_USED(opline)) {
 -              PZVAL_LOCK(*var_ptr);
 -              EX_T(opline->result.var).var.ptr = *var_ptr;
 +      object = NULL;
 +      if (!(fbc->common.fn_flags & ZEND_ACC_STATIC)) {
 +              if (Z_OBJ(EX(This)) && instanceof_function(Z_OBJCE(EX(This)), ce)) {
 +                      object = Z_OBJ(EX(This));
 +                      ce = object->ce;
 +              } else {
 +                      if (fbc->common.fn_flags & ZEND_ACC_ALLOW_STATIC) {
 +                              /* Allowed for PHP 4 compatibility. */
 +                              zend_error(
 +                                      E_DEPRECATED,
 +                                      "Non-static method %s::%s() should not be called statically",
 +                                      ZSTR_VAL(fbc->common.scope->name), ZSTR_VAL(fbc->common.function_name));
 +                              if (UNEXPECTED(EG(exception) != NULL)) {
 +                                      HANDLE_EXCEPTION();
 +                              }
 +                      } else {
 +                              /* An internal function assumes $this is present and won't check that.
 +                               * So PHP would crash by allowing the call. */
 +                              zend_throw_error(
 +                                      zend_ce_error,
 +                                      "Non-static method %s::%s() cannot be called statically",
 +                                      ZSTR_VAL(fbc->common.scope->name), ZSTR_VAL(fbc->common.function_name));
 +                              HANDLE_EXCEPTION();
 +                      }
 +              }
        }
  
 -      if (opline->extended_value == ZEND_ASSIGN_DIM) {
 -              FREE_OP(free_op_data1);
 -              FREE_OP_VAR_PTR(free_op_data2);
 -              if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 -              CHECK_EXCEPTION();
 -              ZEND_VM_INC_OPCODE();
 -      } else {
 -              if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 -              CHECK_EXCEPTION();
 +      if (IS_VAR != IS_CONST) {
 +              /* previous opcode is ZEND_FETCH_CLASS */
 +              if (((opline-1)->extended_value & ZEND_FETCH_CLASS_MASK) == ZEND_FETCH_CLASS_PARENT ||
 +                  ((opline-1)->extended_value & ZEND_FETCH_CLASS_MASK) == ZEND_FETCH_CLASS_SELF) {
 +                      ce = EX(called_scope);
 +              }
        }
 -      ZEND_VM_NEXT_OPCODE();
 -}
 -
 -static int ZEND_FASTCALL  ZEND_ASSIGN_ADD_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_VAR_UNUSED(add_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_SUB_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_VAR_UNUSED(sub_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      call = zend_vm_stack_push_call_frame(ZEND_CALL_NESTED_FUNCTION,
 +              fbc, opline->extended_value, ce, object);
 +      call->prev_execute_data = EX(call);
 +      EX(call) = call;
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_MUL_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_VAR_UNUSED(mul_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_DIV_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 -      return zend_binary_assign_op_helper_SPEC_VAR_UNUSED(div_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      USE_OPLINE
 +      zend_free_op free_op1;
 +      zval *expr_ptr, new_expr;
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_MOD_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_VAR_UNUSED(mod_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      SAVE_OPLINE();
 +      if ((IS_VAR == IS_VAR || IS_VAR == IS_CV) &&
 +          UNEXPECTED(opline->extended_value & ZEND_ARRAY_ELEMENT_REF)) {
 +              expr_ptr = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1);
 +              if (IS_VAR == IS_VAR && UNEXPECTED(expr_ptr == NULL)) {
 +                      zend_throw_error(NULL, "Cannot create references to/from string offsets");
 +                      zend_array_destroy(Z_ARRVAL_P(EX_VAR(opline->result.var)));
 +                      HANDLE_EXCEPTION();
 +              }
 +              ZVAL_MAKE_REF(expr_ptr);
 +              Z_ADDREF_P(expr_ptr);
 +              if (UNEXPECTED(free_op1)) {zval_ptr_dtor_nogc(free_op1);};
 +      } else {
 +              expr_ptr = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1);
 +              if (IS_VAR == IS_TMP_VAR) {
 +                      /* pass */
 +              } else if (IS_VAR == IS_CONST) {
 +                      if (UNEXPECTED(Z_OPT_COPYABLE_P(expr_ptr))) {
 +                              ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                              zval_copy_ctor_func(&new_expr);
 +                              expr_ptr = &new_expr;
 +                      }
 +              } else if (IS_VAR == IS_CV) {
 +                      ZVAL_DEREF(expr_ptr);
 +                      if (Z_REFCOUNTED_P(expr_ptr)) {
 +                              Z_ADDREF_P(expr_ptr);
 +                      }
 +              } else /* if (IS_VAR == IS_VAR) */ {
 +                      if (UNEXPECTED(Z_ISREF_P(expr_ptr))) {
 +                              zend_refcounted *ref = Z_COUNTED_P(expr_ptr);
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_SL_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_VAR_UNUSED(shift_left_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +                              expr_ptr = Z_REFVAL_P(expr_ptr);
 +                              if (UNEXPECTED(--GC_REFCOUNT(ref) == 0)) {
 +                                      ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                                      expr_ptr = &new_expr;
 +                                      efree_size(ref, sizeof(zend_reference));
 +                              } else if (Z_OPT_REFCOUNTED_P(expr_ptr)) {
 +                                      Z_ADDREF_P(expr_ptr);
 +                              }
 +                      }
 +              }
 +      }
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_SR_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_VAR_UNUSED(shift_right_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +      if ((IS_TMP_VAR|IS_VAR) != IS_UNUSED) {
 +              zend_free_op free_op2;
 +              zval *offset = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
 +              zend_string *str;
 +              zend_ulong hval;
 +
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if ((IS_TMP_VAR|IS_VAR) != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
 +                              }
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if (((IS_TMP_VAR|IS_VAR) & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if ((IS_TMP_VAR|IS_VAR) == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +              zval_ptr_dtor_nogc(free_op2);
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
++                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
++                      zval_ptr_dtor(expr_ptr);
++              }
 +      }
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_CONCAT_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_VAR_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 -      return zend_binary_assign_op_helper_SPEC_VAR_UNUSED(concat_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      zval *array;
 +      uint32_t size;
 +      USE_OPLINE
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_BW_OR_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_VAR_UNUSED(bitwise_or_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      array = EX_VAR(opline->result.var);
 +      if (IS_VAR != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
 +      }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_BW_AND_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_VAR_UNUSED(bitwise_and_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      if (IS_VAR != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
 +              }
 +      }
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_BW_XOR_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_VAR_UNUSED(bitwise_xor_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +      if (IS_VAR == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_VAR != IS_UNUSED)
 +      } else {
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
 +#endif
 +      }
  }
  
 -static int ZEND_FASTCALL zend_fetch_var_address_helper_SPEC_VAR_UNUSED(int type, ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_UNSET_DIM_SPEC_VAR_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op1;
 -      zval *varname;
 -      zval **retval;
 -      zval tmp_varname;
 -      HashTable *target_symbol_table;
 -      ulong hash_value;
 +      zend_free_op free_op1, free_op2;
 +      zval *container;
 +      zval *offset;
 +      zend_ulong hval;
 +      zend_string *key;
  
        SAVE_OPLINE();
 -      varname = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -      if (IS_VAR != IS_CONST && UNEXPECTED(Z_TYPE_P(varname) != IS_STRING)) {
 -              ZVAL_COPY_VALUE(&tmp_varname, varname);
 -              zval_copy_ctor(&tmp_varname);
 -              Z_SET_REFCOUNT(tmp_varname, 1);
 -              Z_UNSET_ISREF(tmp_varname);
 -              convert_to_string(&tmp_varname);
 -              varname = &tmp_varname;
 +      container = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1);
 +      if (IS_VAR == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
        }
 +      if (IS_VAR == IS_VAR && UNEXPECTED(container == NULL)) {
 +              zend_throw_error(NULL, "Cannot unset string offsets");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
 +      }
 +      offset = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
  
 -      if (IS_UNUSED != IS_UNUSED) {
 -              zend_class_entry *ce;
 +      do {
 +              if (IS_VAR != IS_UNUSED && EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +                      HashTable *ht;
  
 -              if (IS_UNUSED == IS_CONST) {
 -                      if (CACHED_PTR(opline->op2.literal->cache_slot)) {
 -                              ce = CACHED_PTR(opline->op2.literal->cache_slot);
 -                      } else {
 -                              ce = zend_fetch_class_by_name(Z_STRVAL_P(opline->op2.zv), Z_STRLEN_P(opline->op2.zv), opline->op2.literal + 1, 0 TSRMLS_CC);
 -                              if (UNEXPECTED(ce == NULL)) {
 -                                      if (IS_VAR != IS_CONST && varname == &tmp_varname) {
 -                                              zval_dtor(&tmp_varname);
 +unset_dim_array:
 +                      SEPARATE_ARRAY(container);
 +                      ht = Z_ARRVAL_P(container);
 +offset_again:
 +                      if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                              key = Z_STR_P(offset);
 +                              if ((IS_TMP_VAR|IS_VAR) != IS_CONST) {
 +                                      if (ZEND_HANDLE_NUMERIC(key, hval)) {
 +                                              goto num_index_dim;
                                        }
 -                                      zval_ptr_dtor_nogc(&free_op1.var);
 -                                      CHECK_EXCEPTION();
 -                                      ZEND_VM_NEXT_OPCODE();
                                }
 -                              CACHE_PTR(opline->op2.literal->cache_slot, ce);
 +str_index_dim:
 +                              if (ht == &EG(symbol_table)) {
 +                                      zend_delete_global_variable(key);
 +                              } else {
 +                                      zend_hash_del(ht, key);
 +                              }
 +                      } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                              hval = Z_LVAL_P(offset);
 +num_index_dim:
 +                              zend_hash_index_del(ht, hval);
 +                      } else if (((IS_TMP_VAR|IS_VAR) & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                              offset = Z_REFVAL_P(offset);
 +                              goto offset_again;
 +                      } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                              hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                              goto num_index_dim;
 +                      } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                              key = ZSTR_EMPTY_ALLOC();
 +                              goto str_index_dim;
 +                      } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                              hval = 0;
 +                              goto num_index_dim;
 +                      } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                              hval = 1;
 +                              goto num_index_dim;
 +                      } else if (Z_TYPE_P(offset) == IS_RESOURCE) {
 +                              hval = Z_RES_HANDLE_P(offset);
 +                              goto num_index_dim;
 +                      } else if ((IS_TMP_VAR|IS_VAR) == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                              GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                              key = ZSTR_EMPTY_ALLOC();
 +                              goto str_index_dim;
 +                      } else {
 +                              zend_error(E_WARNING, "Illegal offset type in unset");
                        }
 -              } else {
 -                      ce = EX_T(opline->op2.var).class_entry;
 -              }
 -              retval = zend_std_get_static_property(ce, Z_STRVAL_P(varname), Z_STRLEN_P(varname), 0, ((IS_VAR == IS_CONST) ? opline->op1.literal : NULL) TSRMLS_CC);
 -              zval_ptr_dtor_nogc(&free_op1.var);
 -      } else {
 -              target_symbol_table = zend_get_target_symbol_table(opline->extended_value & ZEND_FETCH_TYPE_MASK TSRMLS_CC);
 -/*
 -              if (!target_symbol_table) {
 -                      CHECK_EXCEPTION();
 -                      ZEND_VM_NEXT_OPCODE();
 -              }
 -*/
 -              if (IS_VAR == IS_CONST) {
 -                      hash_value = Z_HASH_P(varname);
 -              } else {
 -                      hash_value = str_hash(Z_STRVAL_P(varname), Z_STRLEN_P(varname));
 -              }
 -
 -              if (zend_hash_quick_find(target_symbol_table, Z_STRVAL_P(varname), Z_STRLEN_P(varname)+1, hash_value, (void **) &retval) == FAILURE) {
 -                      switch (type) {
 -                              case BP_VAR_R:
 -                              case BP_VAR_UNSET:
 -                                      zend_error(E_NOTICE,"Undefined variable: %s", Z_STRVAL_P(varname));
 -                                      /* break missing intentionally */
 -                              case BP_VAR_IS:
 -                                      retval = &EG(uninitialized_zval_ptr);
 -                                      break;
 -                              case BP_VAR_RW:
 -                                      zend_error(E_NOTICE,"Undefined variable: %s", Z_STRVAL_P(varname));
 -                                      /* break missing intentionally */
 -                              case BP_VAR_W:
 -                                      Z_ADDREF_P(&EG(uninitialized_zval));
 -                                      zend_hash_quick_update(target_symbol_table, Z_STRVAL_P(varname), Z_STRLEN_P(varname)+1, hash_value, &EG(uninitialized_zval_ptr), sizeof(zval *), (void **) &retval);
 -                                      break;
 -                              EMPTY_SWITCH_DEFAULT_CASE()
 +                      break;
 +              } else if (IS_VAR != IS_UNUSED && Z_ISREF_P(container)) {
 +                      container = Z_REFVAL_P(container);
 +                      if (EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +                              goto unset_dim_array;
                        }
                }
 -              switch (opline->extended_value & ZEND_FETCH_TYPE_MASK) {
 -                      case ZEND_FETCH_GLOBAL:
 -                              if (IS_VAR != IS_TMP_VAR) {
 -                                      zval_ptr_dtor_nogc(&free_op1.var);
 -                              }
 -                              break;
 -                      case ZEND_FETCH_LOCAL:
 -                              zval_ptr_dtor_nogc(&free_op1.var);
 -                              break;
 -                      case ZEND_FETCH_STATIC:
 -                              zval_update_constant(retval, 1 TSRMLS_CC);
 -                              break;
 -                      case ZEND_FETCH_GLOBAL_LOCK:
 -                              if (IS_VAR == IS_VAR && !free_op1.var) {
 -                                      PZVAL_LOCK(*EX_T(opline->op1.var).var.ptr_ptr);
 -                              }
 -                              break;
 +              if ((IS_TMP_VAR|IS_VAR) == IS_CV && UNEXPECTED(Z_TYPE_P(offset) == IS_UNDEF)) {
 +                      offset = GET_OP2_UNDEF_CV(offset, BP_VAR_R);
                }
 -      }
 -
 -
 -      if (IS_VAR != IS_CONST && varname == &tmp_varname) {
 -              zval_dtor(&tmp_varname);
 -      }
 -      if (opline->extended_value & ZEND_FETCH_MAKE_REF) {
 -              SEPARATE_ZVAL_TO_MAKE_IS_REF(retval);
 -      }
 -      PZVAL_LOCK(*retval);
 -      switch (type) {
 -              case BP_VAR_R:
 -              case BP_VAR_IS:
 -                      EX_T(opline->result.var).var.ptr = *retval;
 -                      break;
 -              case BP_VAR_UNSET: {
 -                      zend_free_op free_res;
 -
 -                      PZVAL_UNLOCK(*retval, &free_res);
 -                      if (retval != &EG(uninitialized_zval_ptr)) {
 -                              SEPARATE_ZVAL_IF_NOT_REF(retval);
 +              if (IS_VAR == IS_UNUSED || EXPECTED(Z_TYPE_P(container) == IS_OBJECT)) {
 +                      if (UNEXPECTED(Z_OBJ_HT_P(container)->unset_dimension == NULL)) {
 +                              zend_throw_error(NULL, "Cannot use object as array");
 +                      } else {
 +                              Z_OBJ_HT_P(container)->unset_dimension(container, offset);
                        }
 -                      PZVAL_LOCK(*retval);
 -                      FREE_OP_VAR_PTR(free_res);
 +              } else if (IS_VAR != IS_UNUSED && UNEXPECTED(Z_TYPE_P(container) == IS_STRING)) {
 +                      zend_throw_error(NULL, "Cannot unset string offsets");
                }
 -              /* break missing intentionally */
 -              default:
 -                      EX_T(opline->result.var).var.ptr_ptr = retval;
 -                      break;
 -      }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 -
 -static int ZEND_FASTCALL  ZEND_FETCH_R_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_fetch_var_address_helper_SPEC_VAR_UNUSED(BP_VAR_R, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 -
 -static int ZEND_FASTCALL  ZEND_FETCH_W_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_fetch_var_address_helper_SPEC_VAR_UNUSED(BP_VAR_W, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 -
 -static int ZEND_FASTCALL  ZEND_FETCH_RW_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_fetch_var_address_helper_SPEC_VAR_UNUSED(BP_VAR_RW, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 -
 -static int ZEND_FASTCALL  ZEND_FETCH_FUNC_ARG_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -
 -      return zend_fetch_var_address_helper_SPEC_VAR_UNUSED(zend_is_by_ref_func_arg_fetch(opline, EX(call) TSRMLS_CC) ? BP_VAR_W : BP_VAR_R, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 -
 -static int ZEND_FASTCALL  ZEND_FETCH_UNSET_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_fetch_var_address_helper_SPEC_VAR_UNUSED(BP_VAR_UNSET, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      } while (0);
  
 -static int ZEND_FASTCALL  ZEND_FETCH_IS_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_fetch_var_address_helper_SPEC_VAR_UNUSED(BP_VAR_IS, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +      zval_ptr_dtor_nogc(free_op2);
 +      if (UNEXPECTED(free_op1)) {zval_ptr_dtor_nogc(free_op1);};
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_FETCH_DIM_W_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_UNSET_OBJ_SPEC_VAR_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op1;
 -      zval **container;
 +      zend_free_op free_op1, free_op2;
 +      zval *container;
 +      zval *offset;
  
        SAVE_OPLINE();
 -      container = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -      if (IS_VAR == IS_VAR && UNEXPECTED(container == NULL)) {
 -              zend_error_noreturn(E_ERROR, "Cannot use string offset as an array");
 +      container = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1);
 +      if (IS_VAR == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
        }
 -      zend_fetch_dimension_address(&EX_T(opline->result.var), container, NULL, IS_UNUSED, BP_VAR_W TSRMLS_CC);
 -
 -      if (IS_VAR == IS_VAR && (free_op1.var != NULL) && READY_TO_DESTROY(free_op1.var)) {
 -              EXTRACT_ZVAL_PTR(&EX_T(opline->result.var));
 +      if (IS_VAR == IS_VAR && UNEXPECTED(container == NULL)) {
 +              zend_throw_error(NULL, "Cannot unset string offsets");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
        }
 -      if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 -
 -      /* We are going to assign the result by reference */
 -      if (UNEXPECTED(opline->extended_value != 0)) {
 -              zval **retval_ptr = EX_T(opline->result.var).var.ptr_ptr;
 +      offset = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
  
 -              if (retval_ptr) {
 -                      Z_DELREF_PP(retval_ptr);
 -                      SEPARATE_ZVAL_TO_MAKE_IS_REF(retval_ptr);
 -                      Z_ADDREF_PP(retval_ptr);
 +      do {
 +              if (IS_VAR != IS_UNUSED && UNEXPECTED(Z_TYPE_P(container) != IS_OBJECT)) {
 +                      if (Z_ISREF_P(container)) {
 +                              container = Z_REFVAL_P(container);
 +                              if (Z_TYPE_P(container) != IS_OBJECT) {
 +                                      break;
 +                              }
 +                      } else {
 +                              break;
 +                      }
                }
 -      }
 +              if (Z_OBJ_HT_P(container)->unset_property) {
 +                      Z_OBJ_HT_P(container)->unset_property(container, offset, (((IS_TMP_VAR|IS_VAR) == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(offset)) : NULL));
 +              } else {
 +                      zend_error(E_NOTICE, "Trying to unset property of non-object");
 +              }
 +      } while (0);
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      zval_ptr_dtor_nogc(free_op2);
 +      if (UNEXPECTED(free_op1)) {zval_ptr_dtor_nogc(free_op1);};
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_FETCH_DIM_RW_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_CLONE_SPEC_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op1;
 -      zval **container;
  
 -      SAVE_OPLINE();
 -      container = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -      if (IS_VAR == IS_VAR && UNEXPECTED(container == NULL)) {
 -              zend_error_noreturn(E_ERROR, "Cannot use string offset as an array");
 -      }
 -      zend_fetch_dimension_address(&EX_T(opline->result.var), container, NULL, IS_UNUSED, BP_VAR_RW TSRMLS_CC);
 +      zval *obj;
 +      zend_class_entry *ce;
 +      zend_function *clone;
 +      zend_object_clone_obj_t clone_call;
  
 -      if (IS_VAR == IS_VAR && (free_op1.var != NULL) && READY_TO_DESTROY(free_op1.var)) {
 -              EXTRACT_ZVAL_PTR(&EX_T(opline->result.var));
 -      }
 -      if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      SAVE_OPLINE();
 +      obj = _get_obj_zval_ptr_unused(execute_data);
  
 -static int ZEND_FASTCALL  ZEND_FETCH_DIM_FUNC_ARG_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1;
 +      if (IS_UNUSED == IS_UNUSED && UNEXPECTED(Z_OBJ_P(obj) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
 +              HANDLE_EXCEPTION();
 +      }
  
 -      SAVE_OPLINE();
 +      do {
 +              if (IS_UNUSED == IS_CONST ||
 +                  (IS_UNUSED != IS_UNUSED && UNEXPECTED(Z_TYPE_P(obj) != IS_OBJECT))) {
 +                  if ((IS_UNUSED & (IS_VAR|IS_CV)) && Z_ISREF_P(obj)) {
 +                      obj = Z_REFVAL_P(obj);
 +                      if (EXPECTED(Z_TYPE_P(obj) == IS_OBJECT)) {
 +                              break;
 +                              }
 +                      }
 +                      if (IS_UNUSED == IS_CV && UNEXPECTED(Z_TYPE_P(obj) == IS_UNDEF)) {
 +                              GET_OP1_UNDEF_CV(obj, BP_VAR_R);
 +                              if (UNEXPECTED(EG(exception) != NULL)) {
 +                                      HANDLE_EXCEPTION();
 +                              }
 +                      }
 +                      zend_throw_error(NULL, "__clone method called on non-object");
  
 -      if (zend_is_by_ref_func_arg_fetch(opline, EX(call) TSRMLS_CC)) {
 -              zval **container = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -              if (IS_VAR == IS_VAR && UNEXPECTED(container == NULL)) {
 -                      zend_error_noreturn(E_ERROR, "Cannot use string offset as an array");
 -              }
 -              zend_fetch_dimension_address(&EX_T(opline->result.var), container, NULL, IS_UNUSED, BP_VAR_W TSRMLS_CC);
 -              if (IS_VAR == IS_VAR && (free_op1.var != NULL) && READY_TO_DESTROY(free_op1.var)) {
 -                      EXTRACT_ZVAL_PTR(&EX_T(opline->result.var));
 +                      HANDLE_EXCEPTION();
                }
 +      } while (0);
  
 -              if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 -      } else {
 -              zval *container;
 -
 -              if (IS_UNUSED == IS_UNUSED) {
 -                      zend_error_noreturn(E_ERROR, "Cannot use [] for reading");
 +      ce = Z_OBJCE_P(obj);
 +      clone = ce ? ce->clone : NULL;
 +      clone_call =  Z_OBJ_HT_P(obj)->clone_obj;
 +      if (UNEXPECTED(clone_call == NULL)) {
 +              if (ce) {
 +                      zend_throw_error(NULL, "Trying to clone an uncloneable object of class %s", ZSTR_VAL(ce->name));
 +              } else {
 +                      zend_throw_error(NULL, "Trying to clone an uncloneable object");
                }
 -              container = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -              zend_fetch_dimension_address_read(&EX_T(opline->result.var), container, NULL, IS_UNUSED, BP_VAR_R TSRMLS_CC);
  
 -              zval_ptr_dtor_nogc(&free_op1.var);
 +              HANDLE_EXCEPTION();
        }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1;
 -      zval **object_ptr;
 +      if (ce && clone) {
 +              if (clone->op_array.fn_flags & ZEND_ACC_PRIVATE) {
 +                      /* Ensure that if we're calling a private function, we're allowed to do so.
 +                       */
 +                      if (UNEXPECTED(ce != EG(scope))) {
 +                              zend_throw_error(NULL, "Call to private %s::__clone() from context '%s'", ZSTR_VAL(ce->name), EG(scope) ? ZSTR_VAL(EG(scope)->name) : "");
  
 -      SAVE_OPLINE();
 -      object_ptr = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 +                              HANDLE_EXCEPTION();
 +                      }
 +              } else if ((clone->common.fn_flags & ZEND_ACC_PROTECTED)) {
 +                      /* Ensure that if we're calling a protected function, we're allowed to do so.
 +                       */
 +                      if (UNEXPECTED(!zend_check_protected(zend_get_function_root_class(clone), EG(scope)))) {
 +                              zend_throw_error(NULL, "Call to protected %s::__clone() from context '%s'", ZSTR_VAL(ce->name), EG(scope) ? ZSTR_VAL(EG(scope)->name) : "");
  
 -      if (IS_VAR == IS_VAR && UNEXPECTED(object_ptr == NULL)) {
 -              zend_error_noreturn(E_ERROR, "Cannot use string offset as an array");
 +                              HANDLE_EXCEPTION();
 +                      }
 +              }
        }
 -      if (Z_TYPE_PP(object_ptr) == IS_OBJECT) {
  
 -              zval *property_name = NULL;
 -
 -              if (0) {
 -                      MAKE_REAL_ZVAL_PTR(property_name);
 +      if (EXPECTED(EG(exception) == NULL)) {
 +              ZVAL_OBJ(EX_VAR(opline->result.var), clone_call(obj));
 +              if (UNEXPECTED(!RETURN_VALUE_USED(opline)) || UNEXPECTED(EG(exception) != NULL)) {
 +                      OBJ_RELEASE(Z_OBJ_P(EX_VAR(opline->result.var)));
                }
 -              zend_assign_to_object(RETURN_VALUE_USED(opline)?&EX_T(opline->result.var).var.ptr:NULL, object_ptr, property_name, (opline+1)->op1_type, &(opline+1)->op1, execute_data, ZEND_ASSIGN_DIM, ((IS_UNUSED == IS_CONST) ? opline->op2.literal : NULL) TSRMLS_CC);
 -              if (0) {
 -                      zval_ptr_dtor(&property_name);
 -              } else {
 +      }
  
 -              }
 -      } else {
 -              zend_free_op free_op_data1, free_op_data2;
 -              zval *value;
 -              zval *dim = NULL;
 -              zval **variable_ptr_ptr;
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +}
  
 -              zend_fetch_dimension_address(&EX_T((opline+1)->op2.var), object_ptr, dim, IS_UNUSED, BP_VAR_W TSRMLS_CC);
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_EXIT_SPEC_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      USE_OPLINE
  
 -              value = get_zval_ptr((opline+1)->op1_type, &(opline+1)->op1, execute_data, &free_op_data1, BP_VAR_R);
 -              variable_ptr_ptr = _get_zval_ptr_ptr_var((opline+1)->op2.var, execute_data, &free_op_data2 TSRMLS_CC);
 -              if (UNEXPECTED(variable_ptr_ptr == NULL)) {
 -                      if (zend_assign_to_string_offset(&EX_T((opline+1)->op2.var), value, (opline+1)->op1_type TSRMLS_CC)) {
 -                              if (RETURN_VALUE_USED(opline)) {
 -                                      zval *retval;
 +      SAVE_OPLINE();
 +      if (IS_UNUSED != IS_UNUSED) {
  
 -                                      ALLOC_ZVAL(retval);
 -                                      ZVAL_STRINGL(retval, Z_STRVAL_P(EX_T((opline+1)->op2.var).str_offset.str)+EX_T((opline+1)->op2.var).str_offset.offset, 1, 1);
 -                                      INIT_PZVAL(retval);
 -                                      EX_T(opline->result.var).var.ptr = retval;
 -                              }
 -                      } else if (RETURN_VALUE_USED(opline)) {
 -                              PZVAL_LOCK(&EG(uninitialized_zval));
 -                              EX_T(opline->result.var).var.ptr = &EG(uninitialized_zval);
 -                      }
 -              } else if (UNEXPECTED(*variable_ptr_ptr == &EG(error_zval))) {
 -                      if (IS_TMP_FREE(free_op_data1)) {
 -                              zval_dtor(value);
 -                      }
 -                      if (RETURN_VALUE_USED(opline)) {
 -                              PZVAL_LOCK(&EG(uninitialized_zval));
 -                              EX_T(opline->result.var).var.ptr = &EG(uninitialized_zval);
 -                      }
 -              } else {
 -                      if ((opline+1)->op1_type == IS_TMP_VAR) {
 -                              value = zend_assign_tmp_to_variable(variable_ptr_ptr, value TSRMLS_CC);
 -                      } else if ((opline+1)->op1_type == IS_CONST) {
 -                              value = zend_assign_const_to_variable(variable_ptr_ptr, value TSRMLS_CC);
 +              zval *ptr = NULL;
 +
 +              do {
 +                      if (Z_TYPE_P(ptr) == IS_LONG) {
 +                              EG(exit_status) = Z_LVAL_P(ptr);
                        } else {
 -                              value = zend_assign_to_variable(variable_ptr_ptr, value TSRMLS_CC);
 -                      }
 -                      if (RETURN_VALUE_USED(opline)) {
 -                              PZVAL_LOCK(value);
 -                              EX_T(opline->result.var).var.ptr = value;
 +                              if ((IS_UNUSED & (IS_VAR|IS_CV)) && Z_ISREF_P(ptr)) {
 +                                      ptr = Z_REFVAL_P(ptr);
 +                                      if (Z_TYPE_P(ptr) == IS_LONG) {
 +                                              EG(exit_status) = Z_LVAL_P(ptr);
 +                                              break;
 +                                      }
 +                              }
 +                              zend_print_variable(ptr);
                        }
 -              }
 -              FREE_OP_VAR_PTR(free_op_data2);
 -              FREE_OP_IF_VAR(free_op_data1);
 +              } while (0);
 +
        }
 -      if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 -      /* assign_dim has two opcodes! */
 -      CHECK_EXCEPTION();
 -      ZEND_VM_INC_OPCODE();
 -      ZEND_VM_NEXT_OPCODE();
 +      zend_bailout();
 +      ZEND_VM_NEXT_OPCODE(); /* Never reached */
  }
  
 -static int ZEND_FASTCALL  ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(binary_op_type binary_op ZEND_OPCODE_HANDLER_ARGS_DC)
  {
        USE_OPLINE
 -      zval *function_name;
 -      zend_class_entry *ce;
 -      call_slot *call = EX(call_slots) + opline->result.num;
 +      zend_free_op free_op_data1;
 +      zval *object;
 +      zval *property;
 +      zval *value;
 +      zval *zptr;
  
        SAVE_OPLINE();
 +      object = _get_obj_zval_ptr_unused(execute_data);
  
 -      if (IS_VAR == IS_CONST) {
 -              /* no function found. try a static method in class */
 -              if (CACHED_PTR(opline->op1.literal->cache_slot)) {
 -                      ce = CACHED_PTR(opline->op1.literal->cache_slot);
 -              } else {
 -                      ce = zend_fetch_class_by_name(Z_STRVAL_P(opline->op1.zv), Z_STRLEN_P(opline->op1.zv), opline->op1.literal + 1, opline->extended_value TSRMLS_CC);
 -                      if (UNEXPECTED(EG(exception) != NULL)) {
 -                              HANDLE_EXCEPTION();
 -                      }
 -                      if (UNEXPECTED(ce == NULL)) {
 -                              zend_error_noreturn(E_ERROR, "Class '%s' not found", Z_STRVAL_P(opline->op1.zv));
 -                      }
 -                      CACHE_PTR(opline->op1.literal->cache_slot, ce);
 -              }
 -              call->called_scope = ce;
 -      } else {
 -              ce = EX_T(opline->op1.var).class_entry;
 +      if (IS_UNUSED == IS_UNUSED && UNEXPECTED(Z_OBJ_P(object) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
 +              FREE_UNFETCHED_OP((opline+1)->op1_type, (opline+1)->op1.var);
  
 -              if (opline->extended_value == ZEND_FETCH_CLASS_PARENT || opline->extended_value == ZEND_FETCH_CLASS_SELF) {
 -                      call->called_scope = EG(called_scope);
 -              } else {
 -                      call->called_scope = ce;
 -              }
 +              HANDLE_EXCEPTION();
        }
  
 -      if (IS_VAR == IS_CONST &&
 -          IS_UNUSED == IS_CONST &&
 -          CACHED_PTR(opline->op2.literal->cache_slot)) {
 -              call->fbc = CACHED_PTR(opline->op2.literal->cache_slot);
 -      } else if (IS_VAR != IS_CONST &&
 -                 IS_UNUSED == IS_CONST &&
 -                 (call->fbc = CACHED_POLYMORPHIC_PTR(opline->op2.literal->cache_slot, ce))) {
 -              /* do nothing */
 -      } else if (IS_UNUSED != IS_UNUSED) {
 -              char *function_name_strval = NULL;
 -              int function_name_strlen = 0;
 +      property = EX_CONSTANT(opline->op2);
  
 +      if (IS_UNUSED == IS_VAR && UNEXPECTED(object == NULL)) {
 +              zend_throw_error(NULL, "Cannot use string offset as an object");
 +              FREE_UNFETCHED_OP((opline+1)->op1_type, (opline+1)->op1.var);
  
 -              if (IS_UNUSED == IS_CONST) {
 -                      function_name_strval = Z_STRVAL_P(opline->op2.zv);
 -                      function_name_strlen = Z_STRLEN_P(opline->op2.zv);
 -              } else {
 -                      function_name = NULL;
 +              HANDLE_EXCEPTION();
 +      }
  
 -                      if (UNEXPECTED(Z_TYPE_P(function_name) != IS_STRING)) {
 -                              if (UNEXPECTED(EG(exception) != NULL)) {
 -                                      HANDLE_EXCEPTION();
 -                              }
 -                              zend_error_noreturn(E_ERROR, "Function name must be a string");
 -                      } else {
 -                              function_name_strval = Z_STRVAL_P(function_name);
 -                              function_name_strlen = Z_STRLEN_P(function_name);
 -                      }
 -              }
 +      do {
 +              value = get_zval_ptr_r((opline+1)->op1_type, (opline+1)->op1, execute_data, &free_op_data1);
  
 -              if (function_name_strval) {
 -                      if (ce->get_static_method) {
 -                              call->fbc = ce->get_static_method(ce, function_name_strval, function_name_strlen TSRMLS_CC);
 -                      } else {
 -                              call->fbc = zend_std_get_static_method(ce, function_name_strval, function_name_strlen, ((IS_UNUSED == IS_CONST) ? (opline->op2.literal + 1) : NULL) TSRMLS_CC);
 -                      }
 -                      if (UNEXPECTED(call->fbc == NULL)) {
 -                              zend_error_noreturn(E_ERROR, "Call to undefined method %s::%s()", ce->name, function_name_strval);
 -                      }
 -                      if (IS_UNUSED == IS_CONST &&
 -                          EXPECTED(call->fbc->type <= ZEND_USER_FUNCTION) &&
 -                          EXPECTED((call->fbc->common.fn_flags & (ZEND_ACC_CALL_VIA_HANDLER|ZEND_ACC_NEVER_CACHE)) == 0)) {
 -                              if (IS_VAR == IS_CONST) {
 -                                      CACHE_PTR(opline->op2.literal->cache_slot, call->fbc);
 -                              } else {
 -                                      CACHE_POLYMORPHIC_PTR(opline->op2.literal->cache_slot, ce, call->fbc);
 +              if (IS_UNUSED != IS_UNUSED && UNEXPECTED(Z_TYPE_P(object) != IS_OBJECT)) {
 +                      ZVAL_DEREF(object);
 +                      if (UNEXPECTED(!make_real_object(object))) {
 +                              zend_error(E_WARNING, "Attempt to assign property of non-object");
 +                              if (UNEXPECTED(RETURN_VALUE_USED(opline))) {
 +                                      ZVAL_NULL(EX_VAR(opline->result.var));
                                }
 +                              break;
                        }
                }
 -              if (IS_UNUSED != IS_CONST) {
 -
 -              }
 -      } else {
 -              if (UNEXPECTED(ce->constructor == NULL)) {
 -                      zend_error_noreturn(E_ERROR, "Cannot call constructor");
 -              }
 -              if (EG(This) && Z_OBJCE_P(EG(This)) != ce->constructor->common.scope && (ce->constructor->common.fn_flags & ZEND_ACC_PRIVATE)) {
 -                      zend_error_noreturn(E_ERROR, "Cannot call private %s::__construct()", ce->name);
 -              }
 -              call->fbc = ce->constructor;
 -      }
  
 -      if (call->fbc->common.fn_flags & ZEND_ACC_STATIC) {
 -              call->object = NULL;
 -      } else {
 -              if (EG(This) &&
 -                  Z_OBJ_HT_P(EG(This))->get_class_entry &&
 -                  !instanceof_function(Z_OBJCE_P(EG(This)), ce TSRMLS_CC)) {
 -                  /* We are calling method of the other (incompatible) class,
 -                     but passing $this. This is done for compatibility with php-4. */
 -                      if (call->fbc->common.fn_flags & ZEND_ACC_ALLOW_STATIC) {
 -                              zend_error(E_DEPRECATED, "Non-static method %s::%s() should not be called statically, assuming $this from incompatible context", call->fbc->common.scope->name, call->fbc->common.function_name);
 +              /* here we are sure we are dealing with an object */
 +              if (EXPECTED(Z_OBJ_HT_P(object)->get_property_ptr_ptr)
 +                      && EXPECTED((zptr = Z_OBJ_HT_P(object)->get_property_ptr_ptr(object, property, BP_VAR_RW, ((IS_CONST == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(property)) : NULL))) != NULL)) {
 +                      if (UNEXPECTED(zptr == &EG(error_zval))) {
 +                              if (UNEXPECTED(RETURN_VALUE_USED(opline))) {
 +                                      ZVAL_NULL(EX_VAR(opline->result.var));
 +                              }
                        } else {
 -                              /* An internal function assumes $this is present and won't check that. So PHP would crash by allowing the call. */
 -                              zend_error_noreturn(E_ERROR, "Non-static method %s::%s() cannot be called statically, assuming $this from incompatible context", call->fbc->common.scope->name, call->fbc->common.function_name);
 +                              ZVAL_DEREF(zptr);
 +                              SEPARATE_ZVAL_NOREF(zptr);
 +
 +                              binary_op(zptr, zptr, value);
 +                              if (UNEXPECTED(RETURN_VALUE_USED(opline))) {
 +                                      ZVAL_COPY(EX_VAR(opline->result.var), zptr);
 +                              }
                        }
 +              } else {
 +                      zend_assign_op_overloaded_property(object, property, ((IS_CONST == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(property)) : NULL), value, binary_op, (UNEXPECTED(RETURN_VALUE_USED(opline)) ? EX_VAR(opline->result.var) : NULL));
                }
 -              if ((call->object = EG(This))) {
 -                      Z_ADDREF_P(call->object);
 -                      call->called_scope = Z_OBJCE_P(call->object);
 -              }
 -      }
 +      } while (0);
  
 -      call->num_additional_args = 0;
 -      call->is_ctor_call = 0;
 -      EX(call) = call;
 +      FREE_OP(free_op_data1);
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +
 +      /* assign_obj has two opcodes! */
 +      ZEND_VM_NEXT_OPCODE_EX(1, 2);
  }
  
 -static int ZEND_FASTCALL  ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(binary_op_type binary_op ZEND_OPCODE_HANDLER_ARGS_DC)
  {
        USE_OPLINE
 -      zend_free_op free_op1;
 -      zval *expr_ptr;
 +      zend_free_op free_op_data1;
 +      zval *var_ptr, rv;
 +      zval *value, *container, *dim;
  
        SAVE_OPLINE();
 -      if ((IS_VAR == IS_VAR || IS_VAR == IS_CV) && opline->extended_value) {
 -              zval **expr_ptr_ptr = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 +      container = _get_obj_zval_ptr_unused(execute_data);
 +      if (IS_UNUSED == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
 +              FREE_UNFETCHED_OP((opline+1)->op1_type, (opline+1)->op1.var);
  
 -              if (IS_VAR == IS_VAR && UNEXPECTED(expr_ptr_ptr == NULL)) {
 -                      zend_error_noreturn(E_ERROR, "Cannot create references to/from string offsets");
 -              }
 -              SEPARATE_ZVAL_TO_MAKE_IS_REF(expr_ptr_ptr);
 -              expr_ptr = *expr_ptr_ptr;
 -              Z_ADDREF_P(expr_ptr);
 -      } else {
 -              expr_ptr=_get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -              if (0) { /* temporary variable */
 -                      zval *new_expr;
 -
 -                      ALLOC_ZVAL(new_expr);
 -                      INIT_PZVAL_COPY(new_expr, expr_ptr);
 -                      expr_ptr = new_expr;
 -              } else if (IS_VAR == IS_CONST || PZVAL_IS_REF(expr_ptr)) {
 -                      zval *new_expr;
 -
 -                      ALLOC_ZVAL(new_expr);
 -                      INIT_PZVAL_COPY(new_expr, expr_ptr);
 -                      expr_ptr = new_expr;
 -                      zendi_zval_copy_ctor(*expr_ptr);
 -                      zval_ptr_dtor_nogc(&free_op1.var);
 -              } else if (IS_VAR == IS_CV) {
 -                      Z_ADDREF_P(expr_ptr);
 -              }
 +              HANDLE_EXCEPTION();
        }
 +      if (IS_UNUSED == IS_VAR && UNEXPECTED(container == NULL)) {
 +              zend_throw_error(NULL, "Cannot use string offset as an array");
 +              FREE_UNFETCHED_OP((opline+1)->op1_type, (opline+1)->op1.var);
  
 -      if (IS_UNUSED != IS_UNUSED) {
 +              HANDLE_EXCEPTION();
 +      }
  
 -              zval *offset = NULL;
 -              ulong hval;
 +      dim = EX_CONSTANT(opline->op2);
  
 -              switch (Z_TYPE_P(offset)) {
 -                      case IS_DOUBLE:
 -                              hval = zend_dval_to_lval(Z_DVAL_P(offset));
 -                              goto num_index;
 -                      case IS_LONG:
 -                      case IS_BOOL:
 -                              hval = Z_LVAL_P(offset);
 -num_index:
 -                              zend_hash_index_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_STRING:
 -                              if (IS_UNUSED == IS_CONST) {
 -                                      hval = Z_HASH_P(offset);
 -                              } else {
 -                                      ZEND_HANDLE_NUMERIC_EX(Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, goto num_index);
 -                                      hval = str_hash(Z_STRVAL_P(offset), Z_STRLEN_P(offset));
 -                              }
 -                              zend_hash_quick_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_NULL:
 -                              zend_hash_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), "", sizeof(""), &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      default:
 -                              zend_error(E_WARNING, "Illegal offset type");
 -                              zval_ptr_dtor(&expr_ptr);
 -                              /* do nothing */
 +      do {
 +              if (IS_UNUSED == IS_UNUSED || UNEXPECTED(Z_TYPE_P(container) != IS_ARRAY)) {
 +                      if (IS_UNUSED != IS_UNUSED) {
 +                              ZVAL_DEREF(container);
 +                      }
 +                      if (IS_UNUSED == IS_UNUSED || EXPECTED(Z_TYPE_P(container) == IS_OBJECT)) {
 +                              value = get_zval_ptr_r((opline+1)->op1_type, (opline+1)->op1, execute_data, &free_op_data1);
 +                              zend_binary_assign_op_obj_dim(container, dim, value, UNEXPECTED(RETURN_VALUE_USED(opline)) ? EX_VAR(opline->result.var) : NULL, binary_op);
                                break;
 +                      }
                }
  
 -      } else {
 -              if (zend_hash_next_index_insert(Z_ARRVAL(EX_T(opline->result.var).tmp_var), &expr_ptr, sizeof(zval *), NULL) == FAILURE) {
 -                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
 -                      zval_ptr_dtor(&expr_ptr);
 +              zend_fetch_dimension_address_RW(&rv, container, dim, IS_CONST);
 +              value = get_zval_ptr_r((opline+1)->op1_type, (opline+1)->op1, execute_data, &free_op_data1);
 +              ZEND_ASSERT(Z_TYPE(rv) == IS_INDIRECT);
 +              var_ptr = Z_INDIRECT(rv);
 +
 +              if (UNEXPECTED(var_ptr == NULL)) {
 +                      zend_throw_error(NULL, "Cannot use assign-op operators with overloaded objects nor string offsets");
 +
 +                      FREE_OP(free_op_data1);
 +
 +                      HANDLE_EXCEPTION();
 +              }
 +
 +              if (UNEXPECTED(var_ptr == &EG(error_zval))) {
 +                      if (UNEXPECTED(RETURN_VALUE_USED(opline))) {
 +                              ZVAL_NULL(EX_VAR(opline->result.var));
 +                      }
 +              } else {
 +                      ZVAL_DEREF(var_ptr);
 +                      SEPARATE_ZVAL_NOREF(var_ptr);
 +
 +                      binary_op(var_ptr, var_ptr, value);
 +
 +                      if (UNEXPECTED(RETURN_VALUE_USED(opline))) {
 +                              ZVAL_COPY(EX_VAR(opline->result.var), var_ptr);
 +                      }
                }
 +      } while (0);
 +
 +      FREE_OP(free_op_data1);
 +
 +      ZEND_VM_NEXT_OPCODE_EX(1, 2);
 +}
 +
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_ADD_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +#if 0 || (IS_CONST != IS_UNUSED)
 +      USE_OPLINE
 +
 +# if 0 || (IS_UNUSED != IS_UNUSED)
 +      if (EXPECTED(opline->extended_value == 0)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_helper_SPEC_UNUSED_CONST(add_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 -      if ((IS_VAR == IS_VAR || IS_VAR == IS_CV) && opline->extended_value) {
 -              if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 +# endif
 +      if (EXPECTED(opline->extended_value == ZEND_ASSIGN_DIM)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(add_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      } else /* if (EXPECTED(opline->extended_value == ZEND_ASSIGN_OBJ)) */ {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(add_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +#else
 +      ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(add_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +#endif
  }
  
 -static int ZEND_FASTCALL  ZEND_INIT_ARRAY_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_SUB_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +#if 0 || (IS_CONST != IS_UNUSED)
        USE_OPLINE
  
 -      array_init(&EX_T(opline->result.var).tmp_var);
 -      if (IS_VAR == IS_UNUSED) {
 -              ZEND_VM_NEXT_OPCODE();
 -#if 0 || IS_VAR != IS_UNUSED
 -      } else {
 -              return ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -#endif
 +# if 0 || (IS_UNUSED != IS_UNUSED)
 +      if (EXPECTED(opline->extended_value == 0)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_helper_SPEC_UNUSED_CONST(sub_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 +# endif
 +      if (EXPECTED(opline->extended_value == ZEND_ASSIGN_DIM)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(sub_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      } else /* if (EXPECTED(opline->extended_value == ZEND_ASSIGN_OBJ)) */ {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(sub_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      }
 +#else
 +      ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(sub_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +#endif
  }
  
 -static int ZEND_FASTCALL  ZEND_UNSET_VAR_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_MUL_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +#if 0 || (IS_CONST != IS_UNUSED)
        USE_OPLINE
 -      zval tmp, *varname;
 -      HashTable *target_symbol_table;
 -      zend_free_op free_op1;
  
 -      SAVE_OPLINE();
 -      if (IS_VAR == IS_CV &&
 -          IS_UNUSED == IS_UNUSED &&
 -          (opline->extended_value & ZEND_QUICK_SET)) {
 -              if (EG(active_symbol_table)) {
 -                      zend_compiled_variable *cv = &CV_DEF_OF(opline->op1.var);
 -
 -                      zend_delete_variable(EX(prev_execute_data), EG(active_symbol_table),  cv->name, cv->name_len+1, cv->hash_value TSRMLS_CC);
 -                      EX_CV(opline->op1.var) = NULL;
 -              } else if (EX_CV(opline->op1.var)) {
 -                      zval_ptr_dtor(EX_CV(opline->op1.var));
 -                      EX_CV(opline->op1.var) = NULL;
 -              }
 -              CHECK_EXCEPTION();
 -              ZEND_VM_NEXT_OPCODE();
 +# if 0 || (IS_UNUSED != IS_UNUSED)
 +      if (EXPECTED(opline->extended_value == 0)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_helper_SPEC_UNUSED_CONST(mul_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 +# endif
 +      if (EXPECTED(opline->extended_value == ZEND_ASSIGN_DIM)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(mul_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      } else /* if (EXPECTED(opline->extended_value == ZEND_ASSIGN_OBJ)) */ {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(mul_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      }
 +#else
 +      ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(mul_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +#endif
 +}
  
 -      varname = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_DIV_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +#if 0 || (IS_CONST != IS_UNUSED)
 +      USE_OPLINE
  
 -      if (IS_VAR != IS_CONST && Z_TYPE_P(varname) != IS_STRING) {
 -              ZVAL_COPY_VALUE(&tmp, varname);
 -              zval_copy_ctor(&tmp);
 -              convert_to_string(&tmp);
 -              varname = &tmp;
 -      } else if (IS_VAR == IS_VAR || IS_VAR == IS_CV) {
 -              Z_ADDREF_P(varname);
 +# if 0 || (IS_UNUSED != IS_UNUSED)
 +      if (EXPECTED(opline->extended_value == 0)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_helper_SPEC_UNUSED_CONST(div_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 +# endif
 +      if (EXPECTED(opline->extended_value == ZEND_ASSIGN_DIM)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(div_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      } else /* if (EXPECTED(opline->extended_value == ZEND_ASSIGN_OBJ)) */ {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(div_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      }
 +#else
 +      ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(div_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +#endif
 +}
  
 -      if (IS_UNUSED != IS_UNUSED) {
 -              zend_class_entry *ce;
 -
 -              if (IS_UNUSED == IS_CONST) {
 -                      if (CACHED_PTR(opline->op2.literal->cache_slot)) {
 -                              ce = CACHED_PTR(opline->op2.literal->cache_slot);
 -                      } else {
 -                              ce = zend_fetch_class_by_name(Z_STRVAL_P(opline->op2.zv), Z_STRLEN_P(opline->op2.zv), opline->op2.literal + 1, 0 TSRMLS_CC);
 -                              if (UNEXPECTED(EG(exception) != NULL)) {
 -                                      if (IS_VAR != IS_CONST && varname == &tmp) {
 -                                              zval_dtor(&tmp);
 -                                      } else if (IS_VAR == IS_VAR || IS_VAR == IS_CV) {
 -                                              zval_ptr_dtor(&varname);
 -                                      }
 -                                      zval_ptr_dtor_nogc(&free_op1.var);
 -                                      HANDLE_EXCEPTION();
 -                              }
 -                              if (UNEXPECTED(ce == NULL)) {
 -                                      zend_error_noreturn(E_ERROR, "Class '%s' not found", Z_STRVAL_P(opline->op2.zv));
 -                              }
 -                              CACHE_PTR(opline->op2.literal->cache_slot, ce);
 -                      }
 -              } else {
 -                      ce = EX_T(opline->op2.var).class_entry;
 -              }
 -              zend_std_unset_static_property(ce, Z_STRVAL_P(varname), Z_STRLEN_P(varname), ((IS_VAR == IS_CONST) ? opline->op1.literal : NULL) TSRMLS_CC);
 -      } else {
 -              ulong hash_value = zend_inline_hash_func(varname->value.str.val, varname->value.str.len+1);
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_MOD_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +#if 0 || (IS_CONST != IS_UNUSED)
 +      USE_OPLINE
  
 -              target_symbol_table = zend_get_target_symbol_table(opline->extended_value & ZEND_FETCH_TYPE_MASK TSRMLS_CC);
 -              zend_delete_variable(execute_data, target_symbol_table, varname->value.str.val, varname->value.str.len+1, hash_value TSRMLS_CC);
 +# if 0 || (IS_UNUSED != IS_UNUSED)
 +      if (EXPECTED(opline->extended_value == 0)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_helper_SPEC_UNUSED_CONST(mod_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 -
 -      if (IS_VAR != IS_CONST && varname == &tmp) {
 -              zval_dtor(&tmp);
 -      } else if (IS_VAR == IS_VAR || IS_VAR == IS_CV) {
 -              zval_ptr_dtor(&varname);
 +# endif
 +      if (EXPECTED(opline->extended_value == ZEND_ASSIGN_DIM)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(mod_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      } else /* if (EXPECTED(opline->extended_value == ZEND_ASSIGN_OBJ)) */ {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(mod_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 -      zval_ptr_dtor_nogc(&free_op1.var);
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +#else
 +      ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(mod_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +#endif
  }
  
 -static int ZEND_FASTCALL  ZEND_ISSET_ISEMPTY_VAR_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_SL_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +#if 0 || (IS_CONST != IS_UNUSED)
        USE_OPLINE
 -      zval **value;
 -      zend_bool isset = 1;
  
 -      SAVE_OPLINE();
 -      if (IS_VAR == IS_CV &&
 -          IS_UNUSED == IS_UNUSED &&
 -          (opline->extended_value & ZEND_QUICK_SET)) {
 -              if (EX_CV(opline->op1.var)) {
 -                      value = EX_CV(opline->op1.var);
 -              } else if (EG(active_symbol_table)) {
 -                      zend_compiled_variable *cv = &CV_DEF_OF(opline->op1.var);
 -
 -                      if (zend_hash_quick_find(EG(active_symbol_table), cv->name, cv->name_len+1, cv->hash_value, (void **) &value) == FAILURE) {
 -                              isset = 0;
 -                      }
 -              } else {
 -                      isset = 0;
 -              }
 -      } else {
 -              HashTable *target_symbol_table;
 -              zend_free_op free_op1;
 -              zval tmp, *varname = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 +# if 0 || (IS_UNUSED != IS_UNUSED)
 +      if (EXPECTED(opline->extended_value == 0)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_helper_SPEC_UNUSED_CONST(shift_left_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      }
 +# endif
 +      if (EXPECTED(opline->extended_value == ZEND_ASSIGN_DIM)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(shift_left_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      } else /* if (EXPECTED(opline->extended_value == ZEND_ASSIGN_OBJ)) */ {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(shift_left_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      }
 +#else
 +      ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(shift_left_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +#endif
 +}
  
 -              if (IS_VAR != IS_CONST && Z_TYPE_P(varname) != IS_STRING) {
 -                      ZVAL_COPY_VALUE(&tmp, varname);
 -                      zval_copy_ctor(&tmp);
 -                      convert_to_string(&tmp);
 -                      varname = &tmp;
 -              }
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_SR_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +#if 0 || (IS_CONST != IS_UNUSED)
 +      USE_OPLINE
  
 -              if (IS_UNUSED != IS_UNUSED) {
 -                      zend_class_entry *ce;
 +# if 0 || (IS_UNUSED != IS_UNUSED)
 +      if (EXPECTED(opline->extended_value == 0)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_helper_SPEC_UNUSED_CONST(shift_right_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      }
 +# endif
 +      if (EXPECTED(opline->extended_value == ZEND_ASSIGN_DIM)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(shift_right_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      } else /* if (EXPECTED(opline->extended_value == ZEND_ASSIGN_OBJ)) */ {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(shift_right_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      }
 +#else
 +      ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(shift_right_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +#endif
 +}
  
 -                      if (IS_UNUSED == IS_CONST) {
 -                              if (CACHED_PTR(opline->op2.literal->cache_slot)) {
 -                                      ce = CACHED_PTR(opline->op2.literal->cache_slot);
 -                              } else {
 -                                      ce = zend_fetch_class_by_name(Z_STRVAL_P(opline->op2.zv), Z_STRLEN_P(opline->op2.zv), opline->op2.literal + 1, 0 TSRMLS_CC);
 -                                      if (UNEXPECTED(ce == NULL)) {
 -                                              CHECK_EXCEPTION();
 -                                              ZEND_VM_NEXT_OPCODE();
 -                                      }
 -                                      CACHE_PTR(opline->op2.literal->cache_slot, ce);
 -                              }
 -                      } else {
 -                              ce = EX_T(opline->op2.var).class_entry;
 -                      }
 -                      value = zend_std_get_static_property(ce, Z_STRVAL_P(varname), Z_STRLEN_P(varname), 1, ((IS_VAR == IS_CONST) ? opline->op1.literal : NULL) TSRMLS_CC);
 -                      if (!value) {
 -                              isset = 0;
 -                      }
 -              } else {
 -                      target_symbol_table = zend_get_target_symbol_table(opline->extended_value & ZEND_FETCH_TYPE_MASK TSRMLS_CC);
 -                      if (zend_hash_find(target_symbol_table, varname->value.str.val, varname->value.str.len+1, (void **) &value) == FAILURE) {
 -                              isset = 0;
 -                      }
 -              }
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_CONCAT_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +#if 0 || (IS_CONST != IS_UNUSED)
 +      USE_OPLINE
  
 -              if (IS_VAR != IS_CONST && varname == &tmp) {
 -                      zval_dtor(&tmp);
 -              }
 -              zval_ptr_dtor_nogc(&free_op1.var);
 +# if 0 || (IS_UNUSED != IS_UNUSED)
 +      if (EXPECTED(opline->extended_value == 0)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_helper_SPEC_UNUSED_CONST(concat_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 -
 -      if (opline->extended_value & ZEND_ISSET) {
 -              if (isset && Z_TYPE_PP(value) != IS_NULL) {
 -                      ZVAL_BOOL(&EX_T(opline->result.var).tmp_var, 1);
 -              } else {
 -                      ZVAL_BOOL(&EX_T(opline->result.var).tmp_var, 0);
 -              }
 -      } else /* if (opline->extended_value & ZEND_ISEMPTY) */ {
 -              if (!isset || !i_zend_is_true(*value)) {
 -                      ZVAL_BOOL(&EX_T(opline->result.var).tmp_var, 1);
 -              } else {
 -                      ZVAL_BOOL(&EX_T(opline->result.var).tmp_var, 0);
 -              }
 +# endif
 +      if (EXPECTED(opline->extended_value == ZEND_ASSIGN_DIM)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(concat_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      } else /* if (EXPECTED(opline->extended_value == ZEND_ASSIGN_OBJ)) */ {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(concat_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 -
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +#else
 +      ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(concat_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +#endif
  }
  
 -static int ZEND_FASTCALL  ZEND_SEPARATE_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_BW_OR_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +#if 0 || (IS_CONST != IS_UNUSED)
        USE_OPLINE
 -      zval *var_ptr, *new_zv;
 -
 -      SAVE_OPLINE();
 -      var_ptr = EX_T(opline->op1.var).var.ptr;
 -      if (Z_TYPE_P(var_ptr) != IS_OBJECT &&
 -                      !PZVAL_IS_REF(var_ptr) &&
 -                      Z_REFCOUNT_P(var_ptr) > 1) {
  
 -              Z_DELREF_P(var_ptr);
 -              ALLOC_ZVAL(new_zv);
 -              INIT_PZVAL_COPY(new_zv, var_ptr);
 -              var_ptr = new_zv;
 -              zval_copy_ctor(var_ptr);
 -              EX_T(opline->op1.var).var.ptr = var_ptr;
 +# if 0 || (IS_UNUSED != IS_UNUSED)
 +      if (EXPECTED(opline->extended_value == 0)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_helper_SPEC_UNUSED_CONST(bitwise_or_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 -      ZEND_VM_NEXT_OPCODE();
 +# endif
 +      if (EXPECTED(opline->extended_value == ZEND_ASSIGN_DIM)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(bitwise_or_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      } else /* if (EXPECTED(opline->extended_value == ZEND_ASSIGN_OBJ)) */ {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(bitwise_or_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      }
 +#else
 +      ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(bitwise_or_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +#endif
  }
  
 -static int ZEND_FASTCALL  ZEND_YIELD_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_BW_AND_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +#if 0 || (IS_CONST != IS_UNUSED)
        USE_OPLINE
  
 -      /* The generator object is stored in return_value_ptr_ptr */
 -      zend_generator *generator = (zend_generator *) EG(return_value_ptr_ptr);
 -
 -      if (generator->flags & ZEND_GENERATOR_FORCED_CLOSE) {
 -              zend_error_noreturn(E_ERROR, "Cannot yield from finally in a force-closed generator");
 +# if 0 || (IS_UNUSED != IS_UNUSED)
 +      if (EXPECTED(opline->extended_value == 0)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_helper_SPEC_UNUSED_CONST(bitwise_and_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 +# endif
 +      if (EXPECTED(opline->extended_value == ZEND_ASSIGN_DIM)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(bitwise_and_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      } else /* if (EXPECTED(opline->extended_value == ZEND_ASSIGN_OBJ)) */ {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(bitwise_and_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      }
 +#else
 +      ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(bitwise_and_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +#endif
 +}
  
 -      /* Destroy the previously yielded value */
 -      if (generator->value) {
 -              zval_ptr_dtor(&generator->value);
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_BW_XOR_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +#if 0 || (IS_CONST != IS_UNUSED)
 +      USE_OPLINE
 +
 +# if 0 || (IS_UNUSED != IS_UNUSED)
 +      if (EXPECTED(opline->extended_value == 0)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_helper_SPEC_UNUSED_CONST(bitwise_xor_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 +# endif
 +      if (EXPECTED(opline->extended_value == ZEND_ASSIGN_DIM)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(bitwise_xor_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      } else /* if (EXPECTED(opline->extended_value == ZEND_ASSIGN_OBJ)) */ {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(bitwise_xor_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      }
 +#else
 +      ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(bitwise_xor_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +#endif
 +}
  
 -      /* Destroy the previously yielded key */
 -      if (generator->key) {
 -              zval_ptr_dtor(&generator->key);
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ASSIGN_POW_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +#if 0 || (IS_CONST != IS_UNUSED)
 +      USE_OPLINE
 +
 +# if 0 || (IS_UNUSED != IS_UNUSED)
 +      if (EXPECTED(opline->extended_value == 0)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_helper_SPEC_UNUSED_CONST(pow_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
        }
 +# endif
 +      if (EXPECTED(opline->extended_value == ZEND_ASSIGN_DIM)) {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(pow_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      } else /* if (EXPECTED(opline->extended_value == ZEND_ASSIGN_OBJ)) */ {
 +              ZEND_VM_TAIL_CALL(zend_binary_assign_op_obj_helper_SPEC_UNUSED_CONST(pow_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +      }
 +#else
 +      ZEND_VM_TAIL_CALL(zend_binary_assign_op_dim_helper_SPEC_UNUSED_CONST(pow_function ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +#endif
 +}
  
 -      /* Set the new yielded value */
 -      if (IS_VAR != IS_UNUSED) {
 -              zend_free_op free_op1;
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL zend_pre_incdec_property_helper_SPEC_UNUSED_CONST(int inc ZEND_OPCODE_HANDLER_ARGS_DC)
 +{
 +      USE_OPLINE
  
 -              if (EX(op_array)->fn_flags & ZEND_ACC_RETURN_REFERENCE) {
 -                      /* Constants and temporary variables aren't yieldable by reference,
 -                       * but we still allow them with a notice. */
 -                      if (IS_VAR == IS_CONST || IS_VAR == IS_TMP_VAR) {
 -                              zval *value, *copy;
 +      zval *object;
 +      zval *property;
 +      zval *zptr;
  
 -                              zend_error(E_NOTICE, "Only variable references should be yielded by reference");
 +      SAVE_OPLINE();
 +      object = _get_obj_zval_ptr_unused(execute_data);
  
 -                              value = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -                              ALLOC_ZVAL(copy);
 -                              INIT_PZVAL_COPY(copy, value);
 +      if (IS_UNUSED == IS_UNUSED && UNEXPECTED(Z_OBJ_P(object) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
  
 -                              /* Temporary variables don't need ctor copying */
 -                              if (!0) {
 -                                      zval_copy_ctor(copy);
 -                              }
 +              HANDLE_EXCEPTION();
 +      }
  
 -                              generator->value = copy;
 -                      } else {
 -                              zval **value_ptr = _get_zval_ptr_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 +      property = EX_CONSTANT(opline->op2);
  
 -                              if (IS_VAR == IS_VAR && UNEXPECTED(value_ptr == NULL)) {
 -                                      zend_error_noreturn(E_ERROR, "Cannot yield string offsets by reference");
 -                              }
 +      if (IS_UNUSED == IS_VAR && UNEXPECTED(object == NULL)) {
 +              zend_throw_error(NULL, "Cannot increment/decrement overloaded objects nor string offsets");
  
 -                              /* If a function call result is yielded and the function did
 -                               * not return by reference we throw a notice. */
 -                              if (IS_VAR == IS_VAR && !Z_ISREF_PP(value_ptr)
 -                                  && !(opline->extended_value == ZEND_RETURNS_FUNCTION
 -                                       && EX_T(opline->op1.var).var.fcall_returned_reference)
 -                                  && EX_T(opline->op1.var).var.ptr_ptr == &EX_T(opline->op1.var).var.ptr) {
 -                                      zend_error(E_NOTICE, "Only variable references should be yielded by reference");
 +              HANDLE_EXCEPTION();
 +      }
  
 -                                      Z_ADDREF_PP(value_ptr);
 -                                      generator->value = *value_ptr;
 -                              } else {
 -                                      SEPARATE_ZVAL_TO_MAKE_IS_REF(value_ptr);
 -                                      Z_ADDREF_PP(value_ptr);
 -                                      generator->value = *value_ptr;
 +      do {
 +              if (IS_UNUSED != IS_UNUSED && UNEXPECTED(Z_TYPE_P(object) != IS_OBJECT)) {
 +                      ZVAL_DEREF(object);
 +                      if (UNEXPECTED(!make_real_object(object))) {
 +                              zend_error(E_WARNING, "Attempt to increment/decrement property of non-object");
 +                              if (UNEXPECTED(RETURN_VALUE_USED(opline))) {
 +                                      ZVAL_NULL(EX_VAR(opline->result.var));
                                }
 -
 -                              if (free_op1.var) {zval_ptr_dtor_nogc(&free_op1.var);};
 +                              break;
                        }
 -              } else {
 -                      zval *value = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC);
 -
 -                      /* Consts, temporary variables and references need copying */
 -                      if (IS_VAR == IS_CONST || IS_VAR == IS_TMP_VAR
 -                              || PZVAL_IS_REF(value)
 -                      ) {
 -                              zval *copy;
 -
 -                              ALLOC_ZVAL(copy);
 -                              INIT_PZVAL_COPY(copy, value);
 +              }
  
 -                              /* Temporary variables don't need ctor copying */
 -                              if (!0) {
 -                                      zval_copy_ctor(copy);
 +              /* here we are sure we are dealing with an object */
 +              if (EXPECTED(Z_OBJ_HT_P(object)->get_property_ptr_ptr)
 +                      && EXPECTED((zptr = Z_OBJ_HT_P(object)->get_property_ptr_ptr(object, property, BP_VAR_RW, ((IS_CONST == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(property)) : NULL))) != NULL)) {
 +                      if (UNEXPECTED(zptr == &EG(error_zval))) {
 +                              if (UNEXPECTED(RETURN_VALUE_USED(opline))) {
 +                                      ZVAL_NULL(EX_VAR(opline->result.var));
                                }
 -
 -                              generator->value = copy;
 -                              zval_ptr_dtor_nogc(&free_op1.var);
                        } else {
 -                              if (IS_VAR == IS_CV) {
 -                                      Z_ADDREF_P(value);
 +                              if (EXPECTED(Z_TYPE_P(zptr) == IS_LONG)) {
 +                                      if (inc) {
 +                                              fast_long_increment_function(zptr);
 +                                      } else {
 +                                              fast_long_decrement_function(zptr);
 +                                      }
 +                              } else {
 +                                      ZVAL_DEREF(zptr);
 +                                      SEPARATE_ZVAL_NOREF(zptr);
 +
 +                                      if (inc) {
 +                                              increment_function(zptr);
 +                                      } else {
 +                                              decrement_function(zptr);
 +                                      }
 +                              }
 +                              if (UNEXPECTED(RETURN_VALUE_USED(opline))) {
 +                                      ZVAL_COPY(EX_VAR(opline->result.var), zptr);
                                }
 -                              generator->value = value;
                        }
 +              } else {
 +                      zend_pre_incdec_overloaded_property(object, property, ((IS_CONST == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(property)) : NULL), inc, (UNEXPECTED(RETURN_VALUE_USED(opline)) ? EX_VAR(opline->result.var) : NULL));
                }
 -      } else {
 -              /* If no value was specified yield null */
 -              Z_ADDREF(EG(uninitialized_zval));
 -              generator->value = &EG(uninitialized_zval);
 -      }
 +      } while (0);
  
 -      /* Set the new yielded key */
 -      if (IS_UNUSED != IS_UNUSED) {
  
 -              zval *key = NULL;
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +}
  
 -              /* Consts, temporary variables and references need copying */
 -              if (IS_UNUSED == IS_CONST || IS_UNUSED == IS_TMP_VAR
 -                      || (PZVAL_IS_REF(key) && Z_REFCOUNT_P(key) > 0)
 -              ) {
 -                      zval *copy;
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_PRE_INC_OBJ_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      ZEND_VM_TAIL_CALL(zend_pre_incdec_property_helper_SPEC_UNUSED_CONST(1 ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +}
  
 -                      ALLOC_ZVAL(copy);
 -                      INIT_PZVAL_COPY(copy, key);
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_PRE_DEC_OBJ_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      ZEND_VM_TAIL_CALL(zend_pre_incdec_property_helper_SPEC_UNUSED_CONST(0 ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
 +}
  
 -                      /* Temporary variables don't need ctor copying */
 -                      if (!0) {
 -                              zval_copy_ctor(copy);
 -                      }
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL zend_post_incdec_property_helper_SPEC_UNUSED_CONST(int inc ZEND_OPCODE_HANDLER_ARGS_DC)
 +{
 +      USE_OPLINE
  
 -                      generator->key = copy;
 -              } else {
 -                      Z_ADDREF_P(key);
 -                      generator->key = key;
 -              }
 +      zval *object;
 +      zval *property;
 +      zval *zptr;
  
 -              if (Z_TYPE_P(generator->key) == IS_LONG
 -                  && Z_LVAL_P(generator->key) > generator->largest_used_integer_key
 -              ) {
 -                      generator->largest_used_integer_key = Z_LVAL_P(generator->key);
 -              }
 +      SAVE_OPLINE();
 +      object = _get_obj_zval_ptr_unused(execute_data);
  
 -      } else {
 -              /* If no key was specified we use auto-increment keys */
 -              generator->largest_used_integer_key++;
 +      if (IS_UNUSED == IS_UNUSED && UNEXPECTED(Z_OBJ_P(object) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
  
 -              ALLOC_INIT_ZVAL(generator->key);
 -              ZVAL_LONG(generator->key, generator->largest_used_integer_key);
 +              HANDLE_EXCEPTION();
        }
  
 -      if (RETURN_VALUE_USED(opline)) {
 -              /* If the return value of yield is used set the send
 -               * target and initialize it to NULL */
 -              generator->send_target = &EX_T(opline->result.var).var.ptr;
 -              Z_ADDREF(EG(uninitialized_zval));
 -              EX_T(opline->result.var).var.ptr = &EG(uninitialized_zval);
 -      } else {
 -              generator->send_target = NULL;
 +      property = EX_CONSTANT(opline->op2);
 +
 +      if (IS_UNUSED == IS_VAR && UNEXPECTED(object == NULL)) {
 +              zend_throw_error(NULL, "Cannot increment/decrement overloaded objects nor string offsets");
 +
 +              HANDLE_EXCEPTION();
        }
  
 -      /* We increment to the next op, so we are at the correct position when the
 -       * generator is resumed. */
 -      ZEND_VM_INC_OPCODE();
 +      do {
 +              if (IS_UNUSED != IS_UNUSED && UNEXPECTED(Z_TYPE_P(object) != IS_OBJECT)) {
 +                      ZVAL_DEREF(object);
 +                      if (UNEXPECTED(!make_real_object(object))) {
 +                              zend_error(E_WARNING, "Attempt to increment/decrement property of non-object");
 +                              ZVAL_NULL(EX_VAR(opline->result.var));
 +                              break;
 +                      }
 +              }
  
 -      /* The GOTO VM uses a local opline variable. We need to set the opline
 -       * variable in execute_data so we don't resume at an old position. */
 -      SAVE_OPLINE();
 +              /* here we are sure we are dealing with an object */
  
 -      ZEND_VM_RETURN();
 +              if (EXPECTED(Z_OBJ_HT_P(object)->get_property_ptr_ptr)
 +                      && EXPECTED((zptr = Z_OBJ_HT_P(object)->get_property_ptr_ptr(object, property, BP_VAR_RW, ((IS_CONST == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(property)) : NULL))) != NULL)) {
 +                      if (UNEXPECTED(zptr == &EG(error_zval))) {
 +                              ZVAL_NULL(EX_VAR(opline->result.var));
 +                      } else {
 +                              if (EXPECTED(Z_TYPE_P(zptr) == IS_LONG)) {
 +                                      ZVAL_COPY_VALUE(EX_VAR(opline->result.var), zptr);
 +                                      if (inc) {
 +                                              fast_long_increment_function(zptr);
 +                                      } else {
 +                                              fast_long_decrement_function(zptr);
 +                                      }
 +                              } else {
 +                                      ZVAL_DEREF(zptr);
 +                                      ZVAL_COPY_VALUE(EX_VAR(opline->result.var), zptr);
 +                                      zval_opt_copy_ctor(zptr);
 +                                      if (inc) {
 +                                              increment_function(zptr);
 +                                      } else {
 +                                              decrement_function(zptr);
 +                                      }
 +                              }
 +                      }
 +              } else {
 +                      zend_post_incdec_overloaded_property(object, property, ((IS_CONST == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(property)) : NULL), inc, EX_VAR(opline->result.var));
 +              }
 +      } while (0);
 +
 +
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_POW_SPEC_VAR_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_POST_INC_OBJ_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 -      return zend_binary_assign_op_helper_SPEC_VAR_UNUSED(pow_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +      ZEND_VM_TAIL_CALL(zend_post_incdec_property_helper_SPEC_UNUSED_CONST(1 ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
  }
  
 -static int ZEND_FASTCALL  ZEND_ADD_SPEC_VAR_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_POST_DEC_OBJ_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 -      USE_OPLINE
 -      zend_free_op free_op1;
 -
 -      SAVE_OPLINE();
 -      fast_add_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var TSRMLS_CC) TSRMLS_CC);
 -      zval_ptr_dtor_nogc(&free_op1.var);
 -
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_TAIL_CALL(zend_post_incdec_property_helper_SPEC_UNUSED_CONST(0 ZEND_OPCODE_HANDLER_ARGS_PASSTHRU_CC));
  }
  
 -static int ZEND_FASTCALL  ZEND_SUB_SPEC_VAR_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_FETCH_OBJ_R_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op1;
  
 -      SAVE_OPLINE();
 -      fast_sub_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var TSRMLS_CC) TSRMLS_CC);
 -      zval_ptr_dtor_nogc(&free_op1.var);
 -
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      zval *container;
  
 -static int ZEND_FASTCALL  ZEND_MUL_SPEC_VAR_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1;
 +      zval *offset;
  
        SAVE_OPLINE();
 -      fast_mul_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var TSRMLS_CC) TSRMLS_CC);
 -      zval_ptr_dtor_nogc(&free_op1.var);
 +      container = _get_obj_zval_ptr_unused(execute_data);
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      if (IS_UNUSED == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
  
 -static int ZEND_FASTCALL  ZEND_DIV_SPEC_VAR_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1;
 +              HANDLE_EXCEPTION();
 +      }
  
 -      SAVE_OPLINE();
 -      fast_div_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var TSRMLS_CC) TSRMLS_CC);
 -      zval_ptr_dtor_nogc(&free_op1.var);
 +      offset = EX_CONSTANT(opline->op2);
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      if (IS_UNUSED == IS_CONST ||
 +          (IS_UNUSED != IS_UNUSED && UNEXPECTED(Z_TYPE_P(container) != IS_OBJECT))) {
 +              if ((IS_UNUSED & (IS_VAR|IS_CV)) && Z_ISREF_P(container)) {
 +                      container = Z_REFVAL_P(container);
 +                      if (UNEXPECTED(Z_TYPE_P(container) != IS_OBJECT)) {
 +                              goto fetch_obj_r_no_object;
 +                      }
 +              } else {
 +                      goto fetch_obj_r_no_object;
 +              }
 +      }
  
 -static int ZEND_FASTCALL  ZEND_MOD_SPEC_VAR_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1;
 +      /* here we are sure we are dealing with an object */
 +      do {
 +              zend_object *zobj = Z_OBJ_P(container);
 +              zval *retval;
  
 -      SAVE_OPLINE();
 -      fast_mod_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var TSRMLS_CC) TSRMLS_CC);
 -      zval_ptr_dtor_nogc(&free_op1.var);
 +              if (IS_CONST == IS_CONST &&
 +                      EXPECTED(zobj->ce == CACHED_PTR(Z_CACHE_SLOT_P(offset)))) {
 +                      uint32_t prop_offset = (uint32_t)(intptr_t)CACHED_PTR(Z_CACHE_SLOT_P(offset) + sizeof(void*));
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +                      if (EXPECTED(prop_offset != (uint32_t)ZEND_DYNAMIC_PROPERTY_OFFSET)) {
 +                              retval = OBJ_PROP(zobj, prop_offset);
 +                              if (EXPECTED(Z_TYPE_P(retval) != IS_UNDEF)) {
 +                                      ZVAL_COPY(EX_VAR(opline->result.var), retval);
 +                                      break;
 +                              }
 +                      } else if (EXPECTED(zobj->properties != NULL)) {
 +                              retval = zend_hash_find(zobj->properties, Z_STR_P(offset));
 +                              if (EXPECTED(retval)) {
 +                                      ZVAL_COPY(EX_VAR(opline->result.var), retval);
 +                                      break;
 +                              }
 +                      }
 +              }
  
 -static int ZEND_FASTCALL  ZEND_SL_SPEC_VAR_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 -      zend_free_op free_op1;
 +              if (UNEXPECTED(zobj->handlers->read_property == NULL)) {
 +fetch_obj_r_no_object:
 +                      zend_error(E_NOTICE, "Trying to get property of non-object");
 +                      ZVAL_NULL(EX_VAR(opline->result.var));
 +              } else {
 +                      retval = zobj->handlers->read_property(container, offset, BP_VAR_R, ((IS_CONST == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(offset)) : NULL), EX_VAR(opline->result.var));
  
 -      SAVE_OPLINE();
 -      shift_left_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1 TSRMLS_CC),
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var TSRMLS_CC) TSRMLS_CC);
 -      zval_ptr_dtor_nogc(&free_op1.var);
 +                      if (retval != EX_VAR(opline->result.var)) {
 +                              ZVAL_COPY(EX_VAR(opline->result.var), retval);
 +                      }
 +              }
 +      } while (0);
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_SR_SPEC_VAR_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_FETCH_OBJ_W_SPEC_UNUSED_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
        zend_free_op free_op1;
@@@ -32177,288 -31658,246 +32213,291 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
  {
        USE_OPLINE
  
 -      zval *array_ptr, **array_ptr_ptr;
 -      HashTable *fe_ht;
 -      zend_object_iterator *iter = NULL;
 -      zend_class_entry *ce = NULL;
 -      zend_bool is_empty = 0;
 +      zval *op1, *op2, *result;
  
 -      SAVE_OPLINE();
 +      op1 = _get_zval_ptr_cv_undef(execute_data, opline->op1.var);
 +      op2 = EX_CONSTANT(opline->op2);
 +      do {
 +              int result;
  
 -      if ((IS_CV == IS_CV || IS_CV == IS_VAR) &&
 -          (opline->extended_value & ZEND_FE_RESET_VARIABLE)) {
 -              array_ptr_ptr = _get_zval_ptr_ptr_cv_BP_VAR_R(execute_data, opline->op1.var TSRMLS_CC);
 -              if (array_ptr_ptr == NULL || array_ptr_ptr == &EG(uninitialized_zval_ptr)) {
 -                      MAKE_STD_ZVAL(array_ptr);
 -                      ZVAL_NULL(array_ptr);
 -              } else if (Z_TYPE_PP(array_ptr_ptr) == IS_OBJECT) {
 -                      if(Z_OBJ_HT_PP(array_ptr_ptr)->get_class_entry == NULL) {
 -                              zend_error(E_WARNING, "foreach() cannot iterate over objects without PHP class");
 -                              ZEND_VM_JMP(EX(op_array)->opcodes+opline->op2.opline_num);
 +              if (EXPECTED(Z_TYPE_P(op1) == IS_LONG)) {
 +                      if (EXPECTED(Z_TYPE_P(op2) == IS_LONG)) {
 +                              result = (Z_LVAL_P(op1) == Z_LVAL_P(op2));
 +                      } else if (EXPECTED(Z_TYPE_P(op2) == IS_DOUBLE)) {
 +                              result = ((double)Z_LVAL_P(op1) == Z_DVAL_P(op2));
 +                      } else {
 +                              break;
                        }
 -
 -                      ce = Z_OBJCE_PP(array_ptr_ptr);
 -                      if (!ce || ce->get_iterator == NULL) {
 -                              SEPARATE_ZVAL_IF_NOT_REF(array_ptr_ptr);
 -                              Z_ADDREF_PP(array_ptr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(op1) == IS_DOUBLE)) {
 +                      if (EXPECTED(Z_TYPE_P(op2) == IS_DOUBLE)) {
 +                              result = (Z_DVAL_P(op1) == Z_DVAL_P(op2));
 +                      } else if (EXPECTED(Z_TYPE_P(op2) == IS_LONG)) {
 +                              result = (Z_DVAL_P(op1) == ((double)Z_LVAL_P(op2)));
 +                      } else {
 +                              break;
                        }
 -                      array_ptr = *array_ptr_ptr;
 -              } else {
 -                      if (Z_TYPE_PP(array_ptr_ptr) == IS_ARRAY) {
 -                              SEPARATE_ZVAL_IF_NOT_REF(array_ptr_ptr);
 -                              if (opline->extended_value & ZEND_FE_FETCH_BYREF) {
 -                                      Z_SET_ISREF_PP(array_ptr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(op1) == IS_STRING)) {
 +                      if (EXPECTED(Z_TYPE_P(op2) == IS_STRING)) {
 +                              if (Z_STR_P(op1) == Z_STR_P(op2)) {
 +                                      result = 1;
 +                              } else if (Z_STRVAL_P(op1)[0] > '9' || Z_STRVAL_P(op2)[0] > '9') {
 +                                      if (Z_STRLEN_P(op1) != Z_STRLEN_P(op2)) {
 +                                              result = 0;
 +                                      } else {
 +                                              result = (memcmp(Z_STRVAL_P(op1), Z_STRVAL_P(op2), Z_STRLEN_P(op1)) == 0);
 +                                      }
 +                              } else {
 +                                      result = (zendi_smart_strcmp(Z_STR_P(op1), Z_STR_P(op2)) == 0);
                                }
 -                      }
 -                      array_ptr = *array_ptr_ptr;
 -                      Z_ADDREF_P(array_ptr);
 -              }
 -      } else {
 -              array_ptr = _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op1.var TSRMLS_CC);
 -              if (0) { /* IS_TMP_VAR */
 -                      zval *tmp;
  
 -                      ALLOC_ZVAL(tmp);
 -                      INIT_PZVAL_COPY(tmp, array_ptr);
 -                      array_ptr = tmp;
 -                      if (Z_TYPE_P(array_ptr) == IS_OBJECT) {
 -                              ce = Z_OBJCE_P(array_ptr);
 -                              if (ce && ce->get_iterator) {
 -                                      Z_DELREF_P(array_ptr);
 -                              }
 -                      }
 -              } else if (Z_TYPE_P(array_ptr) == IS_OBJECT) {
 -                      ce = Z_OBJCE_P(array_ptr);
 -                      if (!ce || !ce->get_iterator) {
 -                              if (IS_CV == IS_CV) {
 -                                      Z_ADDREF_P(array_ptr);
 -                              }
 +                      } else {
 +                              break;
                        }
 -              } else if (IS_CV == IS_CONST ||
 -                         (IS_CV == IS_CV &&
 -                          !Z_ISREF_P(array_ptr) &&
 -                          Z_REFCOUNT_P(array_ptr) > 1) ||
 -                         (IS_CV == IS_VAR &&
 -                          !Z_ISREF_P(array_ptr) &&
 -                          Z_REFCOUNT_P(array_ptr) > 2)) {
 -                      zval *tmp;
 +              } else {
 +                      break;
 +              }
 +              ZEND_VM_SMART_BRANCH(result, 0);
 +              ZVAL_BOOL(EX_VAR(opline->result.var), result);
 +              ZEND_VM_NEXT_OPCODE();
 +      } while (0);
  
 -                      if (IS_CV == IS_VAR) {
 -                              Z_DELREF_P(array_ptr);
 -                      }
 -                      ALLOC_ZVAL(tmp);
 -                      INIT_PZVAL_COPY(tmp, array_ptr);
 -                      zval_copy_ctor(tmp);
 -                      array_ptr = tmp;
 -              } else if (IS_CV == IS_CV) {
 -                      Z_ADDREF_P(array_ptr);
 +      SAVE_OPLINE();
 +      if (IS_CV == IS_CV && UNEXPECTED(Z_TYPE_P(op1) == IS_UNDEF)) {
 +              op1 = GET_OP1_UNDEF_CV(op1, BP_VAR_R);
 +      } else if ((IS_CV & IS_VAR) && UNEXPECTED(Z_ISREF_P(op1))) {
 +              /* Don't keep lock on reference, lock the value instead */
 +              if (UNEXPECTED(Z_REFCOUNT_P(op1) == 1)) {
 +                      ZVAL_UNREF(op1);
 +              } else {
 +                      Z_DELREF_P(op1);
 +                      ZVAL_COPY(op1, Z_REFVAL_P(op1));
                }
        }
 +      if (IS_CONST == IS_CV && UNEXPECTED(Z_TYPE_P(op2) == IS_UNDEF)) {
 +              op2 = GET_OP2_UNDEF_CV(op2, BP_VAR_R);
 +      }
 +      result = EX_VAR(opline->result.var);
 +      compare_function(result, op1, op2);
 +      ZVAL_BOOL(result, Z_LVAL_P(result) == 0);
  
 -      if (ce && ce->get_iterator) {
 -              iter = ce->get_iterator(ce, array_ptr, opline->extended_value & ZEND_FE_RESET_REFERENCE TSRMLS_CC);
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +}
  
 -              if (IS_CV == IS_VAR && !(opline->extended_value & ZEND_FE_RESET_VARIABLE)) {
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      USE_OPLINE
  
 -              }
 -              if (iter && EXPECTED(EG(exception) == NULL)) {
 -                      array_ptr = zend_iterator_wrap(iter TSRMLS_CC);
 -              } else {
 -                      if (IS_CV == IS_VAR && opline->extended_value & ZEND_FE_RESET_VARIABLE) {
 +      zval *expr_ptr, new_expr;
  
 -                      }
 -                      if (!EG(exception)) {
 -                              zend_throw_exception_ex(NULL, 0 TSRMLS_CC, "Object of type %s did not create an Iterator", ce->name);
 -                      }
 -                      zend_throw_exception_internal(NULL TSRMLS_CC);
 +      SAVE_OPLINE();
 +      if ((IS_CV == IS_VAR || IS_CV == IS_CV) &&
 +          UNEXPECTED(opline->extended_value & ZEND_ARRAY_ELEMENT_REF)) {
 +              expr_ptr = _get_zval_ptr_cv_BP_VAR_W(execute_data, opline->op1.var);
 +              if (IS_CV == IS_VAR && UNEXPECTED(expr_ptr == NULL)) {
 +                      zend_throw_error(NULL, "Cannot create references to/from string offsets");
 +                      zend_array_destroy(Z_ARRVAL_P(EX_VAR(opline->result.var)));
                        HANDLE_EXCEPTION();
                }
 -      }
 -
 -      EX_T(opline->result.var).fe.ptr = array_ptr;
 -
 -      if (iter) {
 -              iter->index = 0;
 -              if (iter->funcs->rewind) {
 -                      iter->funcs->rewind(iter TSRMLS_CC);
 -                      if (UNEXPECTED(EG(exception) != NULL)) {
 -                              zval_ptr_dtor(&array_ptr);
 -                              if (IS_CV == IS_VAR && opline->extended_value & ZEND_FE_RESET_VARIABLE) {
 +              ZVAL_MAKE_REF(expr_ptr);
 +              Z_ADDREF_P(expr_ptr);
  
 -                              }
 -                              HANDLE_EXCEPTION();
 +      } else {
 +              expr_ptr = _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op1.var);
 +              if (IS_CV == IS_TMP_VAR) {
 +                      /* pass */
 +              } else if (IS_CV == IS_CONST) {
 +                      if (UNEXPECTED(Z_OPT_COPYABLE_P(expr_ptr))) {
 +                              ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                              zval_copy_ctor_func(&new_expr);
 +                              expr_ptr = &new_expr;
                        }
 -              }
 -              is_empty = iter->funcs->valid(iter TSRMLS_CC) != SUCCESS;
 -              if (UNEXPECTED(EG(exception) != NULL)) {
 -                      zval_ptr_dtor(&array_ptr);
 -                      if (IS_CV == IS_VAR && opline->extended_value & ZEND_FE_RESET_VARIABLE) {
 -
 +              } else if (IS_CV == IS_CV) {
 +                      ZVAL_DEREF(expr_ptr);
 +                      if (Z_REFCOUNTED_P(expr_ptr)) {
 +                              Z_ADDREF_P(expr_ptr);
                        }
 -                      HANDLE_EXCEPTION();
 -              }
 -              iter->index = -1; /* will be set to 0 before using next handler */
 -      } else if ((fe_ht = HASH_OF(array_ptr)) != NULL) {
 -              zend_hash_internal_pointer_reset(fe_ht);
 -              if (ce) {
 -                      zend_object *zobj = zend_objects_get_address(array_ptr TSRMLS_CC);
 -                      while (zend_hash_has_more_elements(fe_ht) == SUCCESS) {
 -                              char *str_key;
 -                              uint str_key_len;
 -                              ulong int_key;
 -                              zend_uchar key_type;
 -
 -                              key_type = zend_hash_get_current_key_ex(fe_ht, &str_key, &str_key_len, &int_key, 0, NULL);
 -                              if (key_type != HASH_KEY_NON_EXISTENT &&
 -                                      (key_type == HASH_KEY_IS_LONG ||
 -                                   zend_check_property_access(zobj, str_key, str_key_len-1 TSRMLS_CC) == SUCCESS)) {
 -                                      break;
 +              } else /* if (IS_CV == IS_VAR) */ {
 +                      if (UNEXPECTED(Z_ISREF_P(expr_ptr))) {
 +                              zend_refcounted *ref = Z_COUNTED_P(expr_ptr);
 +
 +                              expr_ptr = Z_REFVAL_P(expr_ptr);
 +                              if (UNEXPECTED(--GC_REFCOUNT(ref) == 0)) {
 +                                      ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                                      expr_ptr = &new_expr;
 +                                      efree_size(ref, sizeof(zend_reference));
 +                              } else if (Z_OPT_REFCOUNTED_P(expr_ptr)) {
 +                                      Z_ADDREF_P(expr_ptr);
                                }
 -                              zend_hash_move_forward(fe_ht);
                        }
                }
 -              is_empty = zend_hash_has_more_elements(fe_ht) != SUCCESS;
 -              zend_hash_get_pointer(fe_ht, &EX_T(opline->result.var).fe.fe_pos);
 -      } else {
 -              zend_error(E_WARNING, "Invalid argument supplied for foreach()");
 -              is_empty = 1;
        }
  
 -      if (IS_CV == IS_VAR && opline->extended_value & ZEND_FE_RESET_VARIABLE) {
 +      if (IS_CONST != IS_UNUSED) {
  
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
 +              zval *offset = EX_CONSTANT(opline->op2);
 +              zend_string *str;
 +              zend_ulong hval;
 +
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_CONST != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
 +                              }
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if ((IS_CONST & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if (IS_CONST == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +
 +      } else {
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
++                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
++                      zval_ptr_dtor(expr_ptr);
++              }
        }
 -      if (is_empty) {
 -              ZEND_VM_JMP(EX(op_array)->opcodes+opline->op2.opline_num);
 -      } else {
 -              CHECK_EXCEPTION();
 -              ZEND_VM_NEXT_OPCODE();
 -      }
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_EXIT_SPEC_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_CV_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 -#if 0 || (IS_CV != IS_UNUSED)
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
  
 -      SAVE_OPLINE();
 +      array = EX_VAR(opline->result.var);
        if (IS_CV != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
 +      }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
  
 -              zval *ptr = _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op1.var TSRMLS_CC);
 -
 -              if (Z_TYPE_P(ptr) == IS_LONG) {
 -                      EG(exit_status) = Z_LVAL_P(ptr);
 -              } else {
 -                      zend_print_variable(ptr);
 +      if (IS_CV != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
                }
 -
        }
 +
 +      if (IS_CV == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_CV != IS_UNUSED)
 +      } else {
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
  #endif
 -      zend_bailout();
 -      ZEND_VM_NEXT_OPCODE(); /* Never reached */
 +      }
  }
  
 -static int ZEND_FASTCALL  ZEND_JMP_SET_SPEC_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_UNSET_VAR_SPEC_CV_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 +      zval tmp, *varname;
 +      HashTable *target_symbol_table;
  
 -      zval *value;
  
        SAVE_OPLINE();
 -      value = _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op1.var TSRMLS_CC);
 +      if (IS_CV == IS_CV &&
 +          IS_CONST == IS_UNUSED &&
 +          (opline->extended_value & ZEND_QUICK_SET)) {
 +              zval *var = EX_VAR(opline->op1.var);
  
 -      if (i_zend_is_true(value)) {
 -              ZVAL_COPY_VALUE(&EX_T(opline->result.var).tmp_var, value);
 -              if (!0) {
 -                      zendi_zval_copy_ctor(EX_T(opline->result.var).tmp_var);
 -              }
 +              if (Z_REFCOUNTED_P(var)) {
 +                      zend_refcounted *garbage = Z_COUNTED_P(var);
  
 -#if DEBUG_ZEND>=2
 -              printf("Conditional jmp to %d\n", opline->op2.opline_num);
 -#endif
 -              ZEND_VM_JMP(opline->op2.jmp_addr);
 +                      if (!--GC_REFCOUNT(garbage)) {
 +                              ZVAL_UNDEF(var);
 +                              zval_dtor_func_for_ptr(garbage);
 +                      } else {
 +                              zval *z = var;
 +                              ZVAL_DEREF(z);
 +                              if (Z_COLLECTABLE_P(z) && UNEXPECTED(!Z_GC_INFO_P(z))) {
 +                                      ZVAL_UNDEF(var);
 +                                      gc_possible_root(Z_COUNTED_P(z));
 +                              } else {
 +                                      ZVAL_UNDEF(var);
 +                              }
 +                      }
 +              } else {
 +                      ZVAL_UNDEF(var);
 +              }
 +              ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
        }
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      varname = _get_zval_ptr_cv_undef(execute_data, opline->op1.var);
  
 -static int ZEND_FASTCALL  ZEND_JMP_SET_VAR_SPEC_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 +      ZVAL_UNDEF(&tmp);
 +      if (IS_CV != IS_CONST && Z_TYPE_P(varname) != IS_STRING) {
 +              if (IS_CV == IS_CV && UNEXPECTED(Z_TYPE_P(varname) == IS_UNDEF)) {
 +                      varname = GET_OP1_UNDEF_CV(varname, BP_VAR_R);
 +              }
 +              ZVAL_STR(&tmp, zval_get_string(varname));
 +              varname = &tmp;
 +      }
  
 -      zval *value, *ret;
 +      if (IS_CONST != IS_UNUSED) {
 +              zend_class_entry *ce;
  
 -      SAVE_OPLINE();
 -      value = _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op1.var TSRMLS_CC);
 +              if (IS_CONST == IS_CONST) {
 +                      ce = CACHED_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op2)));
 +                      if (UNEXPECTED(ce == NULL)) {
 +                              ce = zend_fetch_class_by_name(Z_STR_P(EX_CONSTANT(opline->op2)), EX_CONSTANT(opline->op2) + 1, ZEND_FETCH_CLASS_DEFAULT | ZEND_FETCH_CLASS_EXCEPTION);
 +                              if (UNEXPECTED(ce == NULL)) {
 +                                      if (EXPECTED(!EG(exception))) {
 +                                              zend_throw_error(NULL, "Class '%s' not found", Z_STRVAL_P(EX_CONSTANT(opline->op2)));
 +                                      }
 +                                      if (IS_CV != IS_CONST && Z_TYPE(tmp) != IS_UNDEF) {
 +                                              zend_string_release(Z_STR(tmp));
 +                                      }
  
 -      if (i_zend_is_true(value)) {
 -              if (IS_CV == IS_VAR || IS_CV == IS_CV) {
 -                      Z_ADDREF_P(value);
 -                      EX_T(opline->result.var).var.ptr = value;
 -                      EX_T(opline->result.var).var.ptr_ptr = &EX_T(opline->result.var).var.ptr;
 -              } else {
 -                      ALLOC_ZVAL(ret);
 -                      INIT_PZVAL_COPY(ret, value);
 -                      EX_T(opline->result.var).var.ptr = ret;
 -                      EX_T(opline->result.var).var.ptr_ptr = &EX_T(opline->result.var).var.ptr;
 -                      if (!0) {
 -                              zval_copy_ctor(EX_T(opline->result.var).var.ptr);
 +                                      HANDLE_EXCEPTION();
 +                              }
 +                              CACHE_PTR(Z_CACHE_SLOT_P(EX_CONSTANT(opline->op2)), ce);
                        }
 +              } else {
 +                      ce = Z_CE_P(EX_VAR(opline->op2.var));
                }
 +              zend_std_unset_static_property(ce, Z_STR_P(varname));
 +      } else {
 +              target_symbol_table = zend_get_target_symbol_table(execute_data, opline->extended_value & ZEND_FETCH_TYPE_MASK);
 +              zend_hash_del_ind(target_symbol_table, Z_STR_P(varname));
 +      }
  
 -#if DEBUG_ZEND>=2
 -              printf("Conditional jmp to %d\n", opline->op2.opline_num);
 -#endif
 -              ZEND_VM_JMP(opline->op2.jmp_addr);
 +      if (IS_CV != IS_CONST && Z_TYPE(tmp) != IS_UNDEF) {
 +              zend_string_release(Z_STR(tmp));
        }
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_QM_ASSIGN_SPEC_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_UNSET_DIM_SPEC_CV_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
  
@@@ -34829,83 -33584,63 +34868,86 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
                }
        }
  
 -      if (IS_CONST != IS_UNUSED) {
 +      if (IS_UNUSED != IS_UNUSED) {
  
 -              zval *offset = opline->op2.zv;
 -              ulong hval;
 +              zval *offset = NULL;
 +              zend_string *str;
 +              zend_ulong hval;
  
 -              switch (Z_TYPE_P(offset)) {
 -                      case IS_DOUBLE:
 -                              hval = zend_dval_to_lval(Z_DVAL_P(offset));
 -                              goto num_index;
 -                      case IS_LONG:
 -                      case IS_BOOL:
 -                              hval = Z_LVAL_P(offset);
 -num_index:
 -                              zend_hash_index_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_STRING:
 -                              if (IS_CONST == IS_CONST) {
 -                                      hval = Z_HASH_P(offset);
 -                              } else {
 -                                      ZEND_HANDLE_NUMERIC_EX(Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, goto num_index);
 -                                      hval = str_hash(Z_STRVAL_P(offset), Z_STRLEN_P(offset));
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_UNUSED != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
                                }
 -                              zend_hash_quick_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), Z_STRVAL_P(offset), Z_STRLEN_P(offset)+1, hval, &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      case IS_NULL:
 -                              zend_hash_update(Z_ARRVAL(EX_T(opline->result.var).tmp_var), "", sizeof(""), &expr_ptr, sizeof(zval *), NULL);
 -                              break;
 -                      default:
 -                              zend_error(E_WARNING, "Illegal offset type");
 -                              zval_ptr_dtor(&expr_ptr);
 -                              /* do nothing */
 -                              break;
 -              }
 -
 -      } else {
 -              if (zend_hash_next_index_insert(Z_ARRVAL(EX_T(opline->result.var).tmp_var), &expr_ptr, sizeof(zval *), NULL) == FAILURE) {
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if ((IS_UNUSED & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if (IS_UNUSED == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
+                       zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
 -                      zval_ptr_dtor(&expr_ptr);
++                      zval_ptr_dtor(expr_ptr);
+               }
        }
 -      if ((IS_CV == IS_VAR || IS_CV == IS_CV) && opline->extended_value) {
 -
 -      }
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_INIT_ARRAY_SPEC_CV_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_CV_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
  
 -      array_init(&EX_T(opline->result.var).tmp_var);
 +      array = EX_VAR(opline->result.var);
 +      if (IS_CV != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
 +      }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
 +
 +      if (IS_CV != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
 +              }
 +      }
 +
        if (IS_CV == IS_UNUSED) {
                ZEND_VM_NEXT_OPCODE();
 -#if 0 || IS_CV != IS_UNUSED
 +#if 0 || (IS_CV != IS_UNUSED)
        } else {
 -              return ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_CONST_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
  #endif
        }
  }
@@@ -37392,310 -36580,271 +37434,313 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
                                }
                        }
                }
 +      }
  
 -              if (!have_get_ptr) {
 -                      zval *z = NULL;
 +      if (IS_CV != IS_UNUSED) {
  
 -                      Z_ADDREF_P(object);
 -                      if (opline->extended_value == ZEND_ASSIGN_OBJ) {
 -                              if (Z_OBJ_HT_P(object)->read_property) {
 -                                      z = Z_OBJ_HT_P(object)->read_property(object, property, BP_VAR_R, ((IS_VAR == IS_CONST) ? opline->op2.literal : NULL) TSRMLS_CC);
 -                              }
 -                      } else /* if (opline->extended_value == ZEND_ASSIGN_DIM) */ {
 -                              if (Z_OBJ_HT_P(object)->read_dimension) {
 -                                      z = Z_OBJ_HT_P(object)->read_dimension(object, property, BP_VAR_R TSRMLS_CC);
 -                              }
 -                      }
 -                      if (z) {
 -                              if (Z_TYPE_P(z) == IS_OBJECT && Z_OBJ_HT_P(z)->get) {
 -                                      zval *value = Z_OBJ_HT_P(z)->get(z TSRMLS_CC);
 +              zval *offset = _get_zval_ptr_cv_undef(execute_data, opline->op2.var);
 +              zend_string *str;
 +              zend_ulong hval;
  
 -                                      if (Z_REFCOUNT_P(z) == 0) {
 -                                              GC_REMOVE_ZVAL_FROM_BUFFER(z);
 -                                              zval_dtor(z);
 -                                              FREE_ZVAL(z);
 -                                      }
 -                                      z = value;
 -                              }
 -                              Z_ADDREF_P(z);
 -                              SEPARATE_ZVAL_IF_NOT_REF(&z);
 -                              binary_op(z, z, value TSRMLS_CC);
 -                              if (opline->extended_value == ZEND_ASSIGN_OBJ) {
 -                                      Z_OBJ_HT_P(object)->write_property(object, property, z, ((IS_VAR == IS_CONST) ? opline->op2.literal : NULL) TSRMLS_CC);
 -                              } else /* if (opline->extended_value == ZEND_ASSIGN_DIM) */ {
 -                                      Z_OBJ_HT_P(object)->write_dimension(object, property, z TSRMLS_CC);
 -                              }
 -                              if (RETURN_VALUE_USED(opline)) {
 -                                      PZVAL_LOCK(z);
 -                                      EX_T(opline->result.var).var.ptr = z;
 -                              }
 -                              zval_ptr_dtor(&z);
 -                      } else {
 -                              zend_error(E_WARNING, "Attempt to assign property of non-object");
 -                              if (RETURN_VALUE_USED(opline)) {
 -                                      PZVAL_LOCK(&EG(uninitialized_zval));
 -                                      EX_T(opline->result.var).var.ptr = &EG(uninitialized_zval);
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_CV != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
                                }
                        }
 -                      zval_ptr_dtor(&object);
 -              }
 -
 -              if (0) {
 -                      zval_ptr_dtor(&property);
 -              } else {
 -                      zval_ptr_dtor_nogc(&free_op2.var);
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if ((IS_CV & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if (IS_CV == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
++                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
++                      zval_ptr_dtor(expr_ptr);
+               }
 -              FREE_OP(free_op_data1);
        }
 -
 -      /* assign_obj has two opcodes! */
 -      CHECK_EXCEPTION();
 -      ZEND_VM_INC_OPCODE();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL zend_binary_assign_op_helper_SPEC_CV_VAR(int (*binary_op)(zval *result, zval *op1, zval *op2 TSRMLS_DC), ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_CV_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 +      zval *array;
 +      uint32_t size;
        USE_OPLINE
 -      zend_free_op free_op2, free_op_data2, free_op_data1;
 -      zval **var_ptr;
 -      zval *value;
 -
 -      SAVE_OPLINE();
 -      switch (opline->extended_value) {
 -              case ZEND_ASSIGN_OBJ:
 -                      return zend_binary_assign_op_obj_helper_SPEC_CV_VAR(binary_op, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -                      break;
 -              case ZEND_ASSIGN_DIM: {
 -                              zval **container = _get_zval_ptr_ptr_cv_BP_VAR_RW(execute_data, opline->op1.var TSRMLS_CC);
 -
 -                              if (IS_CV == IS_VAR && UNEXPECTED(container == NULL)) {
 -                                      zend_error_noreturn(E_ERROR, "Cannot use string offset as an array");
 -                              } else if (UNEXPECTED(Z_TYPE_PP(container) == IS_OBJECT)) {
 -                                      if (IS_CV == IS_VAR && !0) {
 -                                              Z_ADDREF_PP(container);  /* undo the effect of get_obj_zval_ptr_ptr() */
 -                                      }
 -                                      return zend_binary_assign_op_obj_helper_SPEC_CV_VAR(binary_op, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -                              } else {
 -                                      zval *dim = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2 TSRMLS_CC);
 -
 -                                      zend_fetch_dimension_address(&EX_T((opline+1)->op2.var), container, dim, IS_VAR, BP_VAR_RW TSRMLS_CC);
 -                                      value = get_zval_ptr((opline+1)->op1_type, &(opline+1)->op1, execute_data, &free_op_data1, BP_VAR_R);
 -                                      var_ptr = _get_zval_ptr_ptr_var((opline+1)->op2.var, execute_data, &free_op_data2 TSRMLS_CC);
 -                              }
 -                      }
 -                      break;
 -              default:
 -                      value = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2 TSRMLS_CC);
 -                      var_ptr = _get_zval_ptr_ptr_cv_BP_VAR_RW(execute_data, opline->op1.var TSRMLS_CC);
 -                      /* do nothing */
 -                      break;
 -      }
  
 -      if (UNEXPECTED(var_ptr == NULL)) {
 -              zend_error_noreturn(E_ERROR, "Cannot use assign-op operators with overloaded objects nor string offsets");
 +      array = EX_VAR(opline->result.var);
 +      if (IS_CV != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
        }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
  
 -      if (UNEXPECTED(*var_ptr == &EG(error_zval))) {
 -              if (RETURN_VALUE_USED(opline)) {
 -                      PZVAL_LOCK(&EG(uninitialized_zval));
 -                      EX_T(opline->result.var).var.ptr = &EG(uninitialized_zval);
 -              }
 -              zval_ptr_dtor_nogc(&free_op2.var);
 -
 -              CHECK_EXCEPTION();
 -              if (opline->extended_value == ZEND_ASSIGN_DIM) {
 -                      ZEND_VM_INC_OPCODE();
 +      if (IS_CV != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
                }
 -              ZEND_VM_NEXT_OPCODE();
        }
  
 -      SEPARATE_ZVAL_IF_NOT_REF(var_ptr);
 -
 -      if (UNEXPECTED(Z_TYPE_PP(var_ptr) == IS_OBJECT)
 -         && Z_OBJ_HANDLER_PP(var_ptr, get)
 -         && Z_OBJ_HANDLER_PP(var_ptr, set)) {
 -              /* proxy object */
 -              zval *objval = Z_OBJ_HANDLER_PP(var_ptr, get)(*var_ptr TSRMLS_CC);
 -              Z_ADDREF_P(objval);
 -              binary_op(objval, objval, value TSRMLS_CC);
 -              Z_OBJ_HANDLER_PP(var_ptr, set)(var_ptr, objval TSRMLS_CC);
 -              zval_ptr_dtor(&objval);
 +      if (IS_CV == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_CV != IS_UNUSED)
        } else {
 -              binary_op(*var_ptr, *var_ptr, value TSRMLS_CC);
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
 +#endif
        }
 +}
  
 -      if (RETURN_VALUE_USED(opline)) {
 -              PZVAL_LOCK(*var_ptr);
 -              EX_T(opline->result.var).var.ptr = *var_ptr;
 -      }
 -      zval_ptr_dtor_nogc(&free_op2.var);
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_UNSET_DIM_SPEC_CV_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      USE_OPLINE
  
 -      if (opline->extended_value == ZEND_ASSIGN_DIM) {
 -              FREE_OP(free_op_data1);
 -              FREE_OP_VAR_PTR(free_op_data2);
 +      zval *container;
 +      zval *offset;
 +      zend_ulong hval;
 +      zend_string *key;
  
 -              CHECK_EXCEPTION();
 -              ZEND_VM_INC_OPCODE();
 -      } else {
 +      SAVE_OPLINE();
 +      container = _get_zval_ptr_cv_BP_VAR_UNSET(execute_data, opline->op1.var);
 +      if (IS_CV == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
  
 -              CHECK_EXCEPTION();
 +              HANDLE_EXCEPTION();
        }
 -      ZEND_VM_NEXT_OPCODE();
 -}
 +      if (IS_CV == IS_VAR && UNEXPECTED(container == NULL)) {
 +              zend_throw_error(NULL, "Cannot unset string offsets");
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_ADD_SPEC_CV_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_CV_VAR(add_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +              HANDLE_EXCEPTION();
 +      }
 +      offset = _get_zval_ptr_cv_undef(execute_data, opline->op2.var);
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_SUB_SPEC_CV_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_CV_VAR(sub_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      do {
 +              if (IS_CV != IS_UNUSED && EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +                      HashTable *ht;
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_MUL_SPEC_CV_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_CV_VAR(mul_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +unset_dim_array:
 +                      SEPARATE_ARRAY(container);
 +                      ht = Z_ARRVAL_P(container);
 +offset_again:
 +                      if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                              key = Z_STR_P(offset);
 +                              if (IS_CV != IS_CONST) {
 +                                      if (ZEND_HANDLE_NUMERIC(key, hval)) {
 +                                              goto num_index_dim;
 +                                      }
 +                              }
 +str_index_dim:
 +                              if (ht == &EG(symbol_table)) {
 +                                      zend_delete_global_variable(key);
 +                              } else {
 +                                      zend_hash_del(ht, key);
 +                              }
 +                      } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                              hval = Z_LVAL_P(offset);
 +num_index_dim:
 +                              zend_hash_index_del(ht, hval);
 +                      } else if ((IS_CV & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                              offset = Z_REFVAL_P(offset);
 +                              goto offset_again;
 +                      } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                              hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                              goto num_index_dim;
 +                      } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                              key = ZSTR_EMPTY_ALLOC();
 +                              goto str_index_dim;
 +                      } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                              hval = 0;
 +                              goto num_index_dim;
 +                      } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                              hval = 1;
 +                              goto num_index_dim;
 +                      } else if (Z_TYPE_P(offset) == IS_RESOURCE) {
 +                              hval = Z_RES_HANDLE_P(offset);
 +                              goto num_index_dim;
 +                      } else if (IS_CV == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                              GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                              key = ZSTR_EMPTY_ALLOC();
 +                              goto str_index_dim;
 +                      } else {
 +                              zend_error(E_WARNING, "Illegal offset type in unset");
 +                      }
 +                      break;
 +              } else if (IS_CV != IS_UNUSED && Z_ISREF_P(container)) {
 +                      container = Z_REFVAL_P(container);
 +                      if (EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +                              goto unset_dim_array;
 +                      }
 +              }
 +              if (IS_CV == IS_CV && UNEXPECTED(Z_TYPE_P(offset) == IS_UNDEF)) {
 +                      offset = GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +              }
 +              if (IS_CV == IS_UNUSED || EXPECTED(Z_TYPE_P(container) == IS_OBJECT)) {
 +                      if (UNEXPECTED(Z_OBJ_HT_P(container)->unset_dimension == NULL)) {
 +                              zend_throw_error(NULL, "Cannot use object as array");
 +                      } else {
 +                              Z_OBJ_HT_P(container)->unset_dimension(container, offset);
 +                      }
 +              } else if (IS_CV != IS_UNUSED && UNEXPECTED(Z_TYPE_P(container) == IS_STRING)) {
 +                      zend_throw_error(NULL, "Cannot unset string offsets");
 +              }
 +      } while (0);
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_DIV_SPEC_CV_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_CV_VAR(div_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_MOD_SPEC_CV_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_CV_VAR(mod_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_SL_SPEC_CV_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_UNSET_OBJ_SPEC_CV_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
 -      return zend_binary_assign_op_helper_SPEC_CV_VAR(shift_left_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      USE_OPLINE
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_SR_SPEC_CV_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_CV_VAR(shift_right_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      zval *container;
 +      zval *offset;
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_CONCAT_SPEC_CV_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_CV_VAR(concat_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +      SAVE_OPLINE();
 +      container = _get_zval_ptr_cv_BP_VAR_UNSET(execute_data, opline->op1.var);
 +      if (IS_CV == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_BW_OR_SPEC_CV_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_CV_VAR(bitwise_or_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +              HANDLE_EXCEPTION();
 +      }
 +      if (IS_CV == IS_VAR && UNEXPECTED(container == NULL)) {
 +              zend_throw_error(NULL, "Cannot unset string offsets");
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_BW_AND_SPEC_CV_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_CV_VAR(bitwise_and_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 -}
 +              HANDLE_EXCEPTION();
 +      }
 +      offset = _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var);
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_BW_XOR_SPEC_CV_VAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_CV_VAR(bitwise_xor_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +      do {
 +              if (IS_CV != IS_UNUSED && UNEXPECTED(Z_TYPE_P(container) != IS_OBJECT)) {
 +                      if (Z_ISREF_P(container)) {
 +                              container = Z_REFVAL_P(container);
 +                              if (Z_TYPE_P(container) != IS_OBJECT) {
 +                                      break;
 +                              }
 +                      } else {
 +                              break;
 +                      }
 +              }
 +              if (Z_OBJ_HT_P(container)->unset_property) {
 +                      Z_OBJ_HT_P(container)->unset_property(container, offset, ((IS_CV == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(offset)) : NULL));
 +              } else {
 +                      zend_error(E_NOTICE, "Trying to unset property of non-object");
 +              }
 +      } while (0);
 +
 +
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL zend_pre_incdec_property_helper_SPEC_CV_VAR(incdec_t incdec_op, ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ISSET_ISEMPTY_DIM_OBJ_SPEC_CV_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -      zend_free_op free_op2;
 -      zval **object_ptr;
 -      zval *object;
 -      zval *property;
 -      zval **retval;
 -      int have_get_ptr = 0;
 -
 -      SAVE_OPLINE();
 -      object_ptr = _get_zval_ptr_ptr_cv_BP_VAR_RW(execute_data, opline->op1.var TSRMLS_CC);
 -      property = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2 TSRMLS_CC);
 -      retval = &EX_T(opline->result.var).var.ptr;
  
 -      if (IS_CV == IS_VAR && UNEXPECTED(object_ptr == NULL)) {
 -              zend_error_noreturn(E_ERROR, "Cannot increment/decrement overloaded objects nor string offsets");
 -      }
 +      zval *container;
 +      int result;
 +      zend_ulong hval;
 +      zval *offset;
  
 -      make_real_object(object_ptr TSRMLS_CC); /* this should modify object only if it's empty */
 -      object = *object_ptr;
 +      SAVE_OPLINE();
 +      container = _get_zval_ptr_cv_BP_VAR_IS(execute_data, opline->op1.var);
  
 -      if (UNEXPECTED(Z_TYPE_P(object) != IS_OBJECT)) {
 -              zend_error(E_WARNING, "Attempt to increment/decrement property of non-object");
 -              zval_ptr_dtor_nogc(&free_op2.var);
 -              if (RETURN_VALUE_USED(opline)) {
 -                      PZVAL_LOCK(&EG(uninitialized_zval));
 -                      *retval = &EG(uninitialized_zval);
 -              }
 +      if (IS_CV == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
  
 -              CHECK_EXCEPTION();
 -              ZEND_VM_NEXT_OPCODE();
 +              HANDLE_EXCEPTION();
        }
  
 -      /* here we are sure we are dealing with an object */
 +      offset = _get_zval_ptr_cv_undef(execute_data, opline->op2.var);
  
 -      if (0) {
 -              MAKE_REAL_ZVAL_PTR(property);
 -      }
 +      if (IS_CV != IS_UNUSED && EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +              HashTable *ht;
 +              zval *value;
 +              zend_string *str;
  
 -      if (Z_OBJ_HT_P(object)->get_property_ptr_ptr) {
 -              zval **zptr = Z_OBJ_HT_P(object)->get_property_ptr_ptr(object, property, BP_VAR_RW, ((IS_VAR == IS_CONST) ? opline->op2.literal : NULL) TSRMLS_CC);
 -              if (zptr != NULL) {                     /* NULL means no success in getting PTR */
 -                      have_get_ptr = 1;
 -                      if (UNEXPECTED(*zptr == &EG(error_zval))) {
 -                              if (RETURN_VALUE_USED(opline)) {
 -                                      PZVAL_LOCK(&EG(uninitialized_zval));
 -                                      *retval = &EG(uninitialized_zval);
 -                              }
 -                      } else {
 -                              SEPARATE_ZVAL_IF_NOT_REF(zptr);
 +isset_dim_obj_array:
 +              ht = Z_ARRVAL_P(container);
 +isset_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if (IS_CV != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index_prop;
 +                              }
 +                      }
 +str_index_prop:
 +                      value = zend_hash_find_ind(ht, str);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index_prop:
 +                      value = zend_hash_index_find(ht, hval);
 +              } else if ((IS_CV & (IS_VAR|IS_CV)) && EXPECTED(Z_ISREF_P(offset))) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto isset_again;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_RESOURCE) {
 +                      hval = Z_RES_HANDLE_P(offset);
 +                      goto num_index_prop;
 +              } else if (IS_CV == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index_prop;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type in isset or empty");
 +                      goto isset_not_found;
 +              }
  
 -                              incdec_op(*zptr);
 -                              if (RETURN_VALUE_USED(opline)) {
 -                                      *retval = *zptr;
 -                                      PZVAL_LOCK(*retval);
 -                              }
 -                      }
 +              if (opline->extended_value & ZEND_ISSET) {
 +                      /* > IS_NULL means not IS_UNDEF and not IS_NULL */
 +                      result = value != NULL && Z_TYPE_P(value) > IS_NULL &&
 +                          (!Z_ISREF_P(value) || Z_TYPE_P(Z_REFVAL_P(value)) != IS_NULL);
 +              } else /* if (opline->extended_value & ZEND_ISEMPTY) */ {
 +                      result = (value == NULL || !i_zend_is_true(value));
 +              }
 +              goto isset_dim_obj_exit;
 +      } else if ((IS_CV & (IS_VAR|IS_CV)) && Z_ISREF_P(container)) {
 +              container = Z_REFVAL_P(container);
 +              if (EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +                      goto isset_dim_obj_array;
                }
        }
  
@@@ -39942,493 -39472,223 +39987,496 @@@ static ZEND_OPCODE_HANDLER_RET ZEND_FAS
  {
        USE_OPLINE
  
 -      /* The generator object is stored in return_value_ptr_ptr */
 -      zend_generator *generator = (zend_generator *) EG(return_value_ptr_ptr);
 +      zval *expr_ptr, new_expr;
  
 -      if (generator->flags & ZEND_GENERATOR_FORCED_CLOSE) {
 -              zend_error_noreturn(E_ERROR, "Cannot yield from finally in a force-closed generator");
 -      }
 +      SAVE_OPLINE();
 +      if ((IS_CV == IS_VAR || IS_CV == IS_CV) &&
 +          UNEXPECTED(opline->extended_value & ZEND_ARRAY_ELEMENT_REF)) {
 +              expr_ptr = _get_zval_ptr_cv_BP_VAR_W(execute_data, opline->op1.var);
 +              if (IS_CV == IS_VAR && UNEXPECTED(expr_ptr == NULL)) {
 +                      zend_throw_error(NULL, "Cannot create references to/from string offsets");
 +                      zend_array_destroy(Z_ARRVAL_P(EX_VAR(opline->result.var)));
 +                      HANDLE_EXCEPTION();
 +              }
 +              ZVAL_MAKE_REF(expr_ptr);
 +              Z_ADDREF_P(expr_ptr);
  
 -      /* Destroy the previously yielded value */
 -      if (generator->value) {
 -              zval_ptr_dtor(&generator->value);
 +      } else {
 +              expr_ptr = _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op1.var);
 +              if (IS_CV == IS_TMP_VAR) {
 +                      /* pass */
 +              } else if (IS_CV == IS_CONST) {
 +                      if (UNEXPECTED(Z_OPT_COPYABLE_P(expr_ptr))) {
 +                              ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                              zval_copy_ctor_func(&new_expr);
 +                              expr_ptr = &new_expr;
 +                      }
 +              } else if (IS_CV == IS_CV) {
 +                      ZVAL_DEREF(expr_ptr);
 +                      if (Z_REFCOUNTED_P(expr_ptr)) {
 +                              Z_ADDREF_P(expr_ptr);
 +                      }
 +              } else /* if (IS_CV == IS_VAR) */ {
 +                      if (UNEXPECTED(Z_ISREF_P(expr_ptr))) {
 +                              zend_refcounted *ref = Z_COUNTED_P(expr_ptr);
 +
 +                              expr_ptr = Z_REFVAL_P(expr_ptr);
 +                              if (UNEXPECTED(--GC_REFCOUNT(ref) == 0)) {
 +                                      ZVAL_COPY_VALUE(&new_expr, expr_ptr);
 +                                      expr_ptr = &new_expr;
 +                                      efree_size(ref, sizeof(zend_reference));
 +                              } else if (Z_OPT_REFCOUNTED_P(expr_ptr)) {
 +                                      Z_ADDREF_P(expr_ptr);
 +                              }
 +                      }
 +              }
        }
  
 -      /* Destroy the previously yielded key */
 -      if (generator->key) {
 -              zval_ptr_dtor(&generator->key);
 +      if ((IS_TMP_VAR|IS_VAR) != IS_UNUSED) {
 +              zend_free_op free_op2;
 +              zval *offset = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
 +              zend_string *str;
 +              zend_ulong hval;
 +
 +add_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if ((IS_TMP_VAR|IS_VAR) != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index;
 +                              }
 +                      }
 +str_index:
 +                      zend_hash_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), str, expr_ptr);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index:
 +                      zend_hash_index_update(Z_ARRVAL_P(EX_VAR(opline->result.var)), hval, expr_ptr);
 +              } else if (((IS_TMP_VAR|IS_VAR) & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto add_again;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index;
 +              } else if ((IS_TMP_VAR|IS_VAR) == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type");
 +                      zval_ptr_dtor(expr_ptr);
 +              }
 +              zval_ptr_dtor_nogc(free_op2);
 +      } else {
-               zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr);
++              if (!zend_hash_next_index_insert(Z_ARRVAL_P(EX_VAR(opline->result.var)), expr_ptr)) {
++                      zend_error(E_WARNING, "Cannot add element to the array as the next element is already occupied");
++                      zval_ptr_dtor(expr_ptr);
++              }
        }
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +}
  
 -      /* Set the new yielded value */
 -      if (IS_CV != IS_UNUSED) {
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_INIT_ARRAY_SPEC_CV_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      zval *array;
 +      uint32_t size;
 +      USE_OPLINE
  
 +      array = EX_VAR(opline->result.var);
 +      if (IS_CV != IS_UNUSED) {
 +              size = opline->extended_value >> ZEND_ARRAY_SIZE_SHIFT;
 +      } else {
 +              size = 0;
 +      }
 +      ZVAL_NEW_ARR(array);
 +      zend_hash_init(Z_ARRVAL_P(array), size, NULL, ZVAL_PTR_DTOR, 0);
  
 -              if (EX(op_array)->fn_flags & ZEND_ACC_RETURN_REFERENCE) {
 -                      /* Constants and temporary variables aren't yieldable by reference,
 -                       * but we still allow them with a notice. */
 -                      if (IS_CV == IS_CONST || IS_CV == IS_TMP_VAR) {
 -                              zval *value, *copy;
 +      if (IS_CV != IS_UNUSED) {
 +              /* Explicitly initialize array as not-packed if flag is set */
 +              if (opline->extended_value & ZEND_ARRAY_NOT_PACKED) {
 +                      zend_hash_real_init(Z_ARRVAL_P(array), 0);
 +              }
 +      }
  
 -                              zend_error(E_NOTICE, "Only variable references should be yielded by reference");
 +      if (IS_CV == IS_UNUSED) {
 +              ZEND_VM_NEXT_OPCODE();
 +#if 0 || (IS_CV != IS_UNUSED)
 +      } else {
 +              ZEND_VM_TAIL_CALL(ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU));
 +#endif
 +      }
 +}
  
 -                              value = _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op1.var TSRMLS_CC);
 -                              ALLOC_ZVAL(copy);
 -                              INIT_PZVAL_COPY(copy, value);
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_UNSET_DIM_SPEC_CV_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      USE_OPLINE
 +      zend_free_op free_op2;
 +      zval *container;
 +      zval *offset;
 +      zend_ulong hval;
 +      zend_string *key;
  
 -                              /* Temporary variables don't need ctor copying */
 -                              if (!0) {
 -                                      zval_copy_ctor(copy);
 -                              }
 +      SAVE_OPLINE();
 +      container = _get_zval_ptr_cv_BP_VAR_UNSET(execute_data, opline->op1.var);
 +      if (IS_CV == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
 +      }
 +      if (IS_CV == IS_VAR && UNEXPECTED(container == NULL)) {
 +              zend_throw_error(NULL, "Cannot unset string offsets");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
 +      }
 +      offset = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
  
 -                              generator->value = copy;
 -                      } else {
 -                              zval **value_ptr = _get_zval_ptr_ptr_cv_BP_VAR_W(execute_data, opline->op1.var TSRMLS_CC);
 +      do {
 +              if (IS_CV != IS_UNUSED && EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +                      HashTable *ht;
  
 -                              if (IS_CV == IS_VAR && UNEXPECTED(value_ptr == NULL)) {
 -                                      zend_error_noreturn(E_ERROR, "Cannot yield string offsets by reference");
 +unset_dim_array:
 +                      SEPARATE_ARRAY(container);
 +                      ht = Z_ARRVAL_P(container);
 +offset_again:
 +                      if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                              key = Z_STR_P(offset);
 +                              if ((IS_TMP_VAR|IS_VAR) != IS_CONST) {
 +                                      if (ZEND_HANDLE_NUMERIC(key, hval)) {
 +                                              goto num_index_dim;
 +                                      }
                                }
 -
 -                              /* If a function call result is yielded and the function did
 -                               * not return by reference we throw a notice. */
 -                              if (IS_CV == IS_VAR && !Z_ISREF_PP(value_ptr)
 -                                  && !(opline->extended_value == ZEND_RETURNS_FUNCTION
 -                                       && EX_T(opline->op1.var).var.fcall_returned_reference)
 -                                  && EX_T(opline->op1.var).var.ptr_ptr == &EX_T(opline->op1.var).var.ptr) {
 -                                      zend_error(E_NOTICE, "Only variable references should be yielded by reference");
 -
 -                                      Z_ADDREF_PP(value_ptr);
 -                                      generator->value = *value_ptr;
 +str_index_dim:
 +                              if (ht == &EG(symbol_table)) {
 +                                      zend_delete_global_variable(key);
                                } else {
 -                                      SEPARATE_ZVAL_TO_MAKE_IS_REF(value_ptr);
 -                                      Z_ADDREF_PP(value_ptr);
 -                                      generator->value = *value_ptr;
 +                                      zend_hash_del(ht, key);
                                }
 -
 +                      } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                              hval = Z_LVAL_P(offset);
 +num_index_dim:
 +                              zend_hash_index_del(ht, hval);
 +                      } else if (((IS_TMP_VAR|IS_VAR) & (IS_VAR|IS_CV)) && EXPECTED(Z_TYPE_P(offset) == IS_REFERENCE)) {
 +                              offset = Z_REFVAL_P(offset);
 +                              goto offset_again;
 +                      } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                              hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                              goto num_index_dim;
 +                      } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                              key = ZSTR_EMPTY_ALLOC();
 +                              goto str_index_dim;
 +                      } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                              hval = 0;
 +                              goto num_index_dim;
 +                      } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                              hval = 1;
 +                              goto num_index_dim;
 +                      } else if (Z_TYPE_P(offset) == IS_RESOURCE) {
 +                              hval = Z_RES_HANDLE_P(offset);
 +                              goto num_index_dim;
 +                      } else if ((IS_TMP_VAR|IS_VAR) == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                              GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                              key = ZSTR_EMPTY_ALLOC();
 +                              goto str_index_dim;
 +                      } else {
 +                              zend_error(E_WARNING, "Illegal offset type in unset");
                        }
 -              } else {
 -                      zval *value = _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op1.var TSRMLS_CC);
 +                      break;
 +              } else if (IS_CV != IS_UNUSED && Z_ISREF_P(container)) {
 +                      container = Z_REFVAL_P(container);
 +                      if (EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +                              goto unset_dim_array;
 +                      }
 +              }
 +              if ((IS_TMP_VAR|IS_VAR) == IS_CV && UNEXPECTED(Z_TYPE_P(offset) == IS_UNDEF)) {
 +                      offset = GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +              }
 +              if (IS_CV == IS_UNUSED || EXPECTED(Z_TYPE_P(container) == IS_OBJECT)) {
 +                      if (UNEXPECTED(Z_OBJ_HT_P(container)->unset_dimension == NULL)) {
 +                              zend_throw_error(NULL, "Cannot use object as array");
 +                      } else {
 +                              Z_OBJ_HT_P(container)->unset_dimension(container, offset);
 +                      }
 +              } else if (IS_CV != IS_UNUSED && UNEXPECTED(Z_TYPE_P(container) == IS_STRING)) {
 +                      zend_throw_error(NULL, "Cannot unset string offsets");
 +              }
 +      } while (0);
  
 -                      /* Consts, temporary variables and references need copying */
 -                      if (IS_CV == IS_CONST || IS_CV == IS_TMP_VAR
 -                              || PZVAL_IS_REF(value)
 -                      ) {
 -                              zval *copy;
 +      zval_ptr_dtor_nogc(free_op2);
  
 -                              ALLOC_ZVAL(copy);
 -                              INIT_PZVAL_COPY(copy, value);
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +}
  
 -                              /* Temporary variables don't need ctor copying */
 -                              if (!0) {
 -                                      zval_copy_ctor(copy);
 -                              }
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_UNSET_OBJ_SPEC_CV_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      USE_OPLINE
 +      zend_free_op free_op2;
 +      zval *container;
 +      zval *offset;
  
 -                              generator->value = copy;
 +      SAVE_OPLINE();
 +      container = _get_zval_ptr_cv_BP_VAR_UNSET(execute_data, opline->op1.var);
 +      if (IS_CV == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
 +      }
 +      if (IS_CV == IS_VAR && UNEXPECTED(container == NULL)) {
 +              zend_throw_error(NULL, "Cannot unset string offsets");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
 +      }
 +      offset = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
  
 -                      } else {
 -                              if (IS_CV == IS_CV) {
 -                                      Z_ADDREF_P(value);
 +      do {
 +              if (IS_CV != IS_UNUSED && UNEXPECTED(Z_TYPE_P(container) != IS_OBJECT)) {
 +                      if (Z_ISREF_P(container)) {
 +                              container = Z_REFVAL_P(container);
 +                              if (Z_TYPE_P(container) != IS_OBJECT) {
 +                                      break;
                                }
 -                              generator->value = value;
 +                      } else {
 +                              break;
                        }
                }
 -      } else {
 -              /* If no value was specified yield null */
 -              Z_ADDREF(EG(uninitialized_zval));
 -              generator->value = &EG(uninitialized_zval);
 -      }
 +              if (Z_OBJ_HT_P(container)->unset_property) {
 +                      Z_OBJ_HT_P(container)->unset_property(container, offset, (((IS_TMP_VAR|IS_VAR) == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(offset)) : NULL));
 +              } else {
 +                      zend_error(E_NOTICE, "Trying to unset property of non-object");
 +              }
 +      } while (0);
  
 -      /* Set the new yielded key */
 -      if (IS_UNUSED != IS_UNUSED) {
 +      zval_ptr_dtor_nogc(free_op2);
  
 -              zval *key = NULL;
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +}
  
 -              /* Consts, temporary variables and references need copying */
 -              if (IS_UNUSED == IS_CONST || IS_UNUSED == IS_TMP_VAR
 -                      || (PZVAL_IS_REF(key) && Z_REFCOUNT_P(key) > 0)
 -              ) {
 -                      zval *copy;
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ISSET_ISEMPTY_DIM_OBJ_SPEC_CV_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +{
 +      USE_OPLINE
 +      zend_free_op free_op2;
 +      zval *container;
 +      int result;
 +      zend_ulong hval;
 +      zval *offset;
  
 -                      ALLOC_ZVAL(copy);
 -                      INIT_PZVAL_COPY(copy, key);
 +      SAVE_OPLINE();
 +      container = _get_zval_ptr_cv_BP_VAR_IS(execute_data, opline->op1.var);
  
 -                      /* Temporary variables don't need ctor copying */
 -                      if (!0) {
 -                              zval_copy_ctor(copy);
 -                      }
 +      if (IS_CV == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
 +      }
  
 -                      generator->key = copy;
 -              } else {
 -                      Z_ADDREF_P(key);
 -                      generator->key = key;
 -              }
 +      offset = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
  
 -              if (Z_TYPE_P(generator->key) == IS_LONG
 -                  && Z_LVAL_P(generator->key) > generator->largest_used_integer_key
 -              ) {
 -                      generator->largest_used_integer_key = Z_LVAL_P(generator->key);
 -              }
 +      if (IS_CV != IS_UNUSED && EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +              HashTable *ht;
 +              zval *value;
 +              zend_string *str;
  
 -      } else {
 -              /* If no key was specified we use auto-increment keys */
 -              generator->largest_used_integer_key++;
 +isset_dim_obj_array:
 +              ht = Z_ARRVAL_P(container);
 +isset_again:
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_STRING)) {
 +                      str = Z_STR_P(offset);
 +                      if ((IS_TMP_VAR|IS_VAR) != IS_CONST) {
 +                              if (ZEND_HANDLE_NUMERIC(str, hval)) {
 +                                      goto num_index_prop;
 +                              }
 +                      }
 +str_index_prop:
 +                      value = zend_hash_find_ind(ht, str);
 +              } else if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      hval = Z_LVAL_P(offset);
 +num_index_prop:
 +                      value = zend_hash_index_find(ht, hval);
 +              } else if (((IS_TMP_VAR|IS_VAR) & (IS_VAR|IS_CV)) && EXPECTED(Z_ISREF_P(offset))) {
 +                      offset = Z_REFVAL_P(offset);
 +                      goto isset_again;
 +              } else if (Z_TYPE_P(offset) == IS_DOUBLE) {
 +                      hval = zend_dval_to_lval(Z_DVAL_P(offset));
 +                      goto num_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_NULL) {
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_FALSE) {
 +                      hval = 0;
 +                      goto num_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_TRUE) {
 +                      hval = 1;
 +                      goto num_index_prop;
 +              } else if (Z_TYPE_P(offset) == IS_RESOURCE) {
 +                      hval = Z_RES_HANDLE_P(offset);
 +                      goto num_index_prop;
 +              } else if ((IS_TMP_VAR|IS_VAR) == IS_CV && Z_TYPE_P(offset) == IS_UNDEF) {
 +                      GET_OP2_UNDEF_CV(offset, BP_VAR_R);
 +                      str = ZSTR_EMPTY_ALLOC();
 +                      goto str_index_prop;
 +              } else {
 +                      zend_error(E_WARNING, "Illegal offset type in isset or empty");
 +                      goto isset_not_found;
 +              }
  
 -              ALLOC_INIT_ZVAL(generator->key);
 -              ZVAL_LONG(generator->key, generator->largest_used_integer_key);
 +              if (opline->extended_value & ZEND_ISSET) {
 +                      /* > IS_NULL means not IS_UNDEF and not IS_NULL */
 +                      result = value != NULL && Z_TYPE_P(value) > IS_NULL &&
 +                          (!Z_ISREF_P(value) || Z_TYPE_P(Z_REFVAL_P(value)) != IS_NULL);
 +              } else /* if (opline->extended_value & ZEND_ISEMPTY) */ {
 +                      result = (value == NULL || !i_zend_is_true(value));
 +              }
 +              goto isset_dim_obj_exit;
 +      } else if ((IS_CV & (IS_VAR|IS_CV)) && Z_ISREF_P(container)) {
 +              container = Z_REFVAL_P(container);
 +              if (EXPECTED(Z_TYPE_P(container) == IS_ARRAY)) {
 +                      goto isset_dim_obj_array;
 +              }
        }
  
 -      if (RETURN_VALUE_USED(opline)) {
 -              /* If the return value of yield is used set the send
 -               * target and initialize it to NULL */
 -              generator->send_target = &EX_T(opline->result.var).var.ptr;
 -              Z_ADDREF(EG(uninitialized_zval));
 -              EX_T(opline->result.var).var.ptr = &EG(uninitialized_zval);
 -      } else {
 -              generator->send_target = NULL;
 +      if ((IS_TMP_VAR|IS_VAR) == IS_CV && UNEXPECTED(Z_TYPE_P(offset) == IS_UNDEF)) {
 +              offset = GET_OP2_UNDEF_CV(offset, BP_VAR_R);
        }
  
 -      /* We increment to the next op, so we are at the correct position when the
 -       * generator is resumed. */
 -      ZEND_VM_INC_OPCODE();
 +      if (IS_CV == IS_UNUSED ||
 +          (IS_CV != IS_CONST && EXPECTED(Z_TYPE_P(container) == IS_OBJECT))) {
 +              if (EXPECTED(Z_OBJ_HT_P(container)->has_dimension)) {
 +                      result =
 +                              ((opline->extended_value & ZEND_ISSET) == 0) ^
 +                              Z_OBJ_HT_P(container)->has_dimension(container, offset, (opline->extended_value & ZEND_ISSET) == 0);
 +              } else {
 +                      zend_error(E_NOTICE, "Trying to check element of non-array");
 +                      goto isset_not_found;
 +              }
 +      } else if (EXPECTED(Z_TYPE_P(container) == IS_STRING)) { /* string offsets */
 +              zend_long lval;
  
 -      /* The GOTO VM uses a local opline variable. We need to set the opline
 -       * variable in execute_data so we don't resume at an old position. */
 -      SAVE_OPLINE();
 +              if (EXPECTED(Z_TYPE_P(offset) == IS_LONG)) {
 +                      lval = Z_LVAL_P(offset);
 +isset_str_offset:
 +                      if (EXPECTED(lval >= 0) && (size_t)lval < Z_STRLEN_P(container)) {
 +                              if (opline->extended_value & ZEND_ISSET) {
 +                                      result = 1;
 +                              } else {
 +                                      result = (Z_STRVAL_P(container)[lval] == '0');
 +                              }
 +                      } else {
 +                              goto isset_not_found;
 +                      }
 +              } else {
 +                      if ((IS_TMP_VAR|IS_VAR) & (IS_CV|IS_VAR)) {
 +                              ZVAL_DEREF(offset);
 +                      }
 +                      if (Z_TYPE_P(offset) < IS_STRING /* simple scalar types */
 +                                      || (Z_TYPE_P(offset) == IS_STRING /* or numeric string */
 +                                              && IS_LONG == is_numeric_string(Z_STRVAL_P(offset), Z_STRLEN_P(offset), NULL, NULL, 0))) {
 +                              lval = zval_get_long(offset);
 +                              goto isset_str_offset;
 +                      }
 +                      goto isset_not_found;
 +              }
 +      } else {
 +isset_not_found:
 +              result = ((opline->extended_value & ZEND_ISSET) == 0);
 +      }
  
 -      ZEND_VM_RETURN();
 -}
 +isset_dim_obj_exit:
 +      zval_ptr_dtor_nogc(free_op2);
  
 -static int ZEND_FASTCALL  ZEND_ASSIGN_POW_SPEC_CV_UNUSED_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      return zend_binary_assign_op_helper_SPEC_CV_UNUSED(pow_function, ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);
 +      ZEND_VM_SMART_BRANCH(result, 1);
 +      ZVAL_BOOL(EX_VAR(opline->result.var), result);
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_ADD_SPEC_CV_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_CV_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -
 +      zend_free_op free_op2;
 +      zval *container;
 +      int result;
 +      zval *offset;
  
        SAVE_OPLINE();
 -      fast_add_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op1.var TSRMLS_CC),
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var TSRMLS_CC) TSRMLS_CC);
 -
 +      container = _get_zval_ptr_cv_BP_VAR_IS(execute_data, opline->op1.var);
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 -}
 -
 -static int ZEND_FASTCALL  ZEND_SUB_SPEC_CV_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 -{
 -      USE_OPLINE
 +      if (IS_CV == IS_UNUSED && UNEXPECTED(Z_OBJ_P(container) == NULL)) {
 +              zend_throw_error(NULL, "Using $this when not in object context");
 +              zval_ptr_dtor_nogc(EX_VAR(opline->op2.var));
 +              HANDLE_EXCEPTION();
 +      }
  
 +      offset = _get_zval_ptr_var(opline->op2.var, execute_data, &free_op2);
  
 -      SAVE_OPLINE();
 -      fast_sub_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op1.var TSRMLS_CC),
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var TSRMLS_CC) TSRMLS_CC);
 +      if (IS_CV == IS_CONST ||
 +          (IS_CV != IS_UNUSED && UNEXPECTED(Z_TYPE_P(container) != IS_OBJECT))) {
 +              if ((IS_CV & (IS_VAR|IS_CV)) && Z_ISREF_P(container)) {
 +                      container = Z_REFVAL_P(container);
 +                      if (UNEXPECTED(Z_TYPE_P(container) != IS_OBJECT)) {
 +                              goto isset_no_object;
 +                      }
 +              } else {
 +                      goto isset_no_object;
 +              }
 +      }
 +      if (UNEXPECTED(!Z_OBJ_HT_P(container)->has_property)) {
 +              zend_error(E_NOTICE, "Trying to check property of non-object");
 +isset_no_object:
 +              result = ((opline->extended_value & ZEND_ISSET) == 0);
 +      } else {
 +              result =
 +                      ((opline->extended_value & ZEND_ISSET) == 0) ^
 +                      Z_OBJ_HT_P(container)->has_property(container, offset, (opline->extended_value & ZEND_ISSET) == 0, (((IS_TMP_VAR|IS_VAR) == IS_CONST) ? CACHE_ADDR(Z_CACHE_SLOT_P(offset)) : NULL));
 +      }
  
 +      zval_ptr_dtor_nogc(free_op2);
  
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      ZEND_VM_SMART_BRANCH(result, 1);
 +      ZVAL_BOOL(EX_VAR(opline->result.var), result);
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_MUL_SPEC_CV_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_BW_NOT_SPEC_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 -
 +      zend_free_op free_op1;
  
        SAVE_OPLINE();
 -      fast_mul_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op1.var TSRMLS_CC),
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var TSRMLS_CC) TSRMLS_CC);
 -
 -
 -      CHECK_EXCEPTION();
 -      ZEND_VM_NEXT_OPCODE();
 +      bitwise_not_function(EX_VAR(opline->result.var),
 +              _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1));
 +      zval_ptr_dtor_nogc(free_op1);
 +      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
  }
  
 -static int ZEND_FASTCALL  ZEND_DIV_SPEC_CV_CV_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
 +static ZEND_OPCODE_HANDLER_RET ZEND_FASTCALL ZEND_BOOL_NOT_SPEC_TMPVAR_HANDLER(ZEND_OPCODE_HANDLER_ARGS)
  {
        USE_OPLINE
 +      zval *val;
 +      zend_free_op free_op1;
  
 -
 -      SAVE_OPLINE();
 -      fast_div_function(&EX_T(opline->result.var).tmp_var,
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op1.var TSRMLS_CC),
 -              _get_zval_ptr_cv_BP_VAR_R(execute_data, opline->op2.var TSRMLS_CC) TSRMLS_CC);
 -
 -
 -      CHECK_EXCEPTION();
 +      val = _get_zval_ptr_var(opline->op1.var, execute_data, &free_op1);
 +      if (Z_TYPE_INFO_P(val) == IS_TRUE) {
 +              ZVAL_FALSE(EX_VAR(opline->result.var));
 +      } else if (EXPECTED(Z_TYPE_INFO_P(val) <= IS_TRUE)) {
 +              ZVAL_TRUE(EX_VAR(opline->result.var));
 +              if (UNEXPECTED(Z_TYPE_INFO_P(val) == IS_UNDEF)) {
 +                      SAVE_OPLINE();
 +                      GET_OP1_UNDEF_CV(val, BP_VAR_R);
 +                      ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +              }
 +      } else {
 +              SAVE_OPLINE();
 +              ZVAL_BOOL(EX_VAR(opline->result.var), !i_zend_is_true(val));
 +              zval_ptr_dtor_nogc(free_op1);
 +              ZEND_VM_NEXT_OPCODE_CHECK_EXCEPTION();
 +      }
        ZEND_VM_NEXT_OPCODE();
  }