Merge branch 'PHP-8.1'

* PHP-8.1:
  Fix memory leak

Author: dstogov

Zend/Optimizer/dfa_pass.c

@@ -353,7 +353,9 @@ static bool opline_supports_assign_contraction(
 		return opline->op1_type != IS_CV || opline->op1.var != cv_var;
 	}
 
-	if (opline->opcode == ZEND_ASSIGN_OP
+	if ((opline->opcode == ZEND_ASSIGN_OP
+	  || opline->opcode == ZEND_ASSIGN_OBJ
+	  || opline->opcode == ZEND_ASSIGN_DIM)
 	 && opline->op1_type == IS_CV
 	 && opline->op1.var == cv_var
 	 && zend_may_throw(opline, &ssa->ops[ssa->vars[src_var].definition], op_array, ssa)) {

ext/opcache/tests/opt/assign_obj_001.phpt

@@ -0,0 +1,24 @@
+--TEST--
+ASSIGN_OP 001: Incrrect optimization of ASSIGN_OBJ may lead to memory leak
+--INI--
+opcache.enable=1
+opcache.enable_cli=1
+opcache.optimization_level=-1
+--FILE--
+<?php
+function test() {
+    $a .= $a += $y;
+    $a = $a->y = '';
+}
+test();
+?>
+--EXPECTF--
+Warning: Undefined variable $y in %sassign_obj_001.php on line 3
+
+Warning: Undefined variable $a in %sassign_obj_001.php on line 3
+
+Fatal error: Uncaught Error: Attempt to assign property "y" on string in %sassign_obj_001.php:4
+Stack trace:
+#0 %sassign_obj_001.php(6): test()
+#1 {main}
+  thrown in %sassign_obj_001.php on line 4