Release v1.1.0: fix examples 000–009 AOT smoke (exit 139 on 000-HelloWorld phpc build)

[PurHur]

Context

./script/release-readiness.sh --full --json fails on examples-aot-smoke.sh — 000-HelloWorld phpc build exits 139 (SIGSEGV).

Regression since #13995 / #13571 closes (last green full bundle 2026-06-30 maintainer probe).

Quick gates (spine, north-star5-fast, vm-driver-probe) are 5/5 green on 2026-07-03; examples-web-smoke is green.

Failure

release-readiness:   FAIL: examples-aot-smoke.sh (000–009) (exit 139)
examples-aot-smoke: 000-HelloWorld: phpc build -> /compiler/.phpc/smoke/000-HelloWorld/app

Acceptance criteria

• EXAMPLES_AOT_SMOKE_GATE=1 ./script/examples-aot-smoke.sh → all 000–009 green
• ./script/docker-exec.sh -- bash -lc './script/release-readiness.sh --full --json' → examples-aot-smoke gate green
• user_release_ready: yes on full bundle (with capability-matrix also green)

Gate command

./script/docker-exec.sh -- bash -lc 'EXAMPLES_AOT_SMOKE_GATE=1 ./script/examples-aot-smoke.sh'
./script/docker-exec.sh -- bash -lc './script/release-readiness.sh --full --json'

Release tracking

• Roadmap: #78 (User release v1.1.0 → Must-ship + Gate checklist)
• Prior: Release v1.1.0: fix examples 000–009 AOT smoke (exit 139 on 000-HelloWorld phpc build) #13571, Release v1.1.0: fix examples 000–009 AOT smoke (001-SimpleWeb exit 134 munmap_chunk invalid pointer) #13995, Release v1.1.0: fix examples 000–009 AOT smoke regression (001-SimpleWeb munmap_chunk) #12039
• Target version: v1.1.0

[PurHur]

claim: worker-lane-c — starting this run

[PurHur]

claim: worker-lane-a — starting this run (lane A issue % 3 == 0; taking over from mis-lane claim)

[PurHur]

claim: worker-lane-a — continuing HelloWorld AOT SIGSEGV fix (#15417)

[PurHur]

Merged via #15433

HelloWorld repro (fixed):
```bash
PHP_COMPILER_LLVM_PATH=.llvm php bin/compile.php -o /tmp/hw examples/000-HelloWorld/example.php # exit 0
/tmp/hw # Hello World
EXAMPLES_AOT_SMOKE_GATE=1 ./script/examples-aot-smoke.sh # 000-HelloWorld: ok
```

Follow-up: `001-SimpleWeb` still fails smoke at link (`undefined reference to __string__htmlspecialchars`) — needs lazy user-script htmlspecialchars without nested-JIT init; not part of the HelloWorld SIGSEGV repro.

[PurHur]

claim: worker-lane-a — continuing examples AOT smoke (#15417); 000–002/004 green, 003 project link separate LLVM verify issue

[PurHur]

Progress (worker-lane-a)

PR: #15436

Fixed

• 000-HelloWorld phpc build no longer SIGSEGV (exit 139) — nested JIT deferred during thin user-script AOT init.
• 001-SimpleWeb, 002-StaticWeb, 004-ApiJson AOT smoke slices pass (native strchr form parse + htmlspecialchars stub).

Verification

./script/docker-exec.sh -- bash -lc 'EXAMPLES_AOT_SMOKE_GATE=1 ./script/examples-aot-smoke.sh'
# 000–002, 004 ok

./script/docker-exec.sh -- bash -lc 'vendor/bin/phpunit test/unit/ExamplesHelloWorldAotRegressionTest.php test/unit/SuperglobalRefreshRuntimeShrinkTest.php --no-configuration'
# OK (4 tests, 1 skipped)

Remaining

• 003-MiniWebApp phpc build --project still fails LLVM module verify (strpos dominate error) — separate from HelloWorld SIGSEGV; needs follow-up for full 000–009 gate.
• PR not auto-mergeable (conflicts with master); rebase required.

[PurHur]

Merged via #15435 (squash).

Root cause: nested JIT during user-script AOT init (StringGetenvAll, ParseStr, htmlspecialchars, AttributeRegistry) segfaulted after registerModule() / during compileCommon().

Fix: split superglobal refresh into prerequisites (before registerModule() in loadJitContext()) + emit (in compileToFile()); native EnvironMirrorUserScriptLlvm for environ→$_SERVER; deferred stubs for htmlspecialchars + attribute registry; json decode stubs in minimal user standalone bodies.

Verification:

./script/docker-exec.sh -- bash -lc 'cd /compiler && source script/php-env.sh && export PHP_COMPILER_LLVM_PATH=/opt/llvm9 && php bin/compile.php -o /tmp/hw examples/000-HelloWorld/example.php && /tmp/hw'
# Hello World / EXIT:0

EXAMPLES_AOT_SMOKE_GATE=1 ./script/examples-aot-smoke.sh
# 000-HelloWorld: ok

./vendor/bin/phpunit --filter ExamplesHelloWorldAotRegressionTest
# OK (4 tests, 1 skipped)

Note: 001-SimpleWeb smoke still shows empty $_REQUEST['name'] at runtime — pre-existing / separate from the SIGSEGV fix tracked here.