Description:
------------
Get the lastest version of PHP:
git clone https://github.com/php/php-src

Configure PHP:
./configure
PCRE is the default extension in PHP, even if use "./configure --disable-all",
you can still trigger the following bugs.

The test script is very easy:
<?php
$fuzz=file_get_contents($argv[1]);
preg_match($fuzz,$fuzz);

The input file you can download here:
http://47.104.189.187/input.zip
Unzip this file and use the "input_file.txt" as input file

Then
./php-src/sapi/cli/php ./test.php ./input_file.txt
you will see "Segmentation fault (core dumped)"

Use gdb to see the details:
Program received signal SIGSEGV, Segmentation fault.
0x0000555555710367 in do_extuni_no_utf (args=0x7fffffffa110, 
    cc=0x7ffff3a58868 "\377\066\250\250\250\066\066\066zzzz=*\377/\n")
    at /home/daige/Desktop/test/php-src/ext/pcre/pcre2lib/pcre2_jit_compile.c:8546
8546	lgb = UCD_GRAPHBREAK(c);

I analyse this crash,it is caused by array cross-border reading, then I use AFL to fuzz PHP,it reports some global variable coverage,you can see the crash cases in "input.zip".

Test script:
---------------
The test script is very easy:
<?php
$fuzz=file_get_contents($argv[1]);
preg_match($fuzz,$fuzz);

The input file you can download here:
http://47.104.189.187/input.zip
Unzip this file and use the "input_file.txt" as input file

Then
./php-src/sapi/cli/php ./test.php ./input_file.txt
you will see "Segmentation fault (core dumped)"

Actual result:
--------------
Program received signal SIGSEGV, Segmentation fault.
0x0000555555710367 in do_extuni_no_utf (args=0x7fffffffa110, 
    cc=0x7ffff3a58868 "\377\066\250\250\250\066\066\066zzzz=*\377/\n")
    at /home/daige/Desktop/test/php-src/ext/pcre/pcre2lib/pcre2_jit_compile.c:8546
8546	lgb = UCD_GRAPHBREAK(c);