Regression: next() string-concat nested operand — returns true not element (ext/standard/array.c) #13830

Category

stdlib · php-src-strict · regression (nested operand in string concatenation)

Problem

After one next($array) on [1,2,3], a second next($array) must return the next element (int 3). When the second call is a nested operand inside string concatenation with var_export(..., true), the VM returns true instead of the element.

Standalone next($array) works; dot-concat form fails. Same failure class as #13811 (prev()).

php-src reference

• ext/standard/array.c — php_next, zend_hash_move_forward_ex

Repro (verified 2026-06-29)

test/repro/maintainer_gap_next_concat_operand.php

./script/docker-exec.sh -- php bin/vm.php test/repro/maintainer_gap_next_concat_operand.php

Scope (PHP-in-PHP first)

Done when (php-src-strict)

• Repro exits 0 on VM
• next() returns element or false at end in concat contexts
• JIT/AOT agree when in scope

Verification

php bin/vm.php test/repro/maintainer_gap_next_concat_operand.php

Links

• Epic Epic: Self-host critical path — compiler compiles itself (M3→M5) #1492 · sibling Regression: prev() string-concat nested operand — returns true not element (ext/standard/array.c) #13811 (prev())