Release v1.1.0: fix examples 003-MiniWebApp AOT smoke (exit 134 free(): invalid pointer)

[PurHur]

Context

./script/release-readiness.sh --full --json fails examples-aot-smoke.sh on master (2026-07-16 release manager probe).

Quick gates are 5/5 green (user_release_ready: yes quick). Examples web smoke passes. AOT smoke fails on 003-MiniWebApp only (000–002, 004 pass; #18832 / 001-SimpleWeb fixed via #19142/#19144).

Failure

examples-aot-smoke: 003-MiniWebApp: phpc build --project -> /compiler/examples/003-MiniWebApp/.phpc/bin/app
examples-aot-smoke: 003-MiniWebApp: binary exited 134
free(): invalid pointer

Smoke executes with QUERY_STRING=route=home REQUEST_METHOD=GET (see script/examples-aot-smoke.sh MiniWebApp slice).

Likely area

• Multi-file project AOT runtime / nested JIT defer (similar class to AOT: restore ObOutputExecCaptureLlvm defer — fix user-script segfault (#18832 follow-up) #19144 ObOutputExecCapture defer)
• Heap lifetime in project build path (phpc build --project) vs single-file examples
• Recent php-in-php kernel moves (ObOutput, Multipart, RequestParseBody, DOM) since 2026-07-15

Acceptance criteria

• ./script/docker-exec.sh -- bash -lc './script/examples-aot-smoke.sh' → all 000–009 green
• ./script/docker-exec.sh -- bash -lc './script/release-readiness.sh --full --json' → examples-aot-smoke gate ok and user_release_ready: yes
• VM/serve path unchanged: phpc run --project examples/003-MiniWebApp --cgi-env QUERY_STRING=route=home

Gate command

./script/docker-exec.sh -- bash -lc './script/examples-aot-smoke.sh'
./script/docker-exec.sh -- bash -lc './script/release-readiness.sh --full --json'

Release tracking

• Roadmap: 🗺️ ROADMAP: Self-host + web-capable PHP subset (living) #78 (User release v1.1.0 → Must-ship + Gate checklist)
• Prior closed cycles: Release v1.1.0: fix examples 000–009 AOT smoke regression (001-SimpleWeb munmap_chunk) #12039, Release v1.1.0: fix examples 000–009 AOT smoke (001-SimpleWeb exit 134 munmap_chunk invalid pointer) #13995, Release v1.1.0: fix examples 001-SimpleWeb AOT smoke (QUERY_STRING name=Smoke not parsed) #18832 (001-SimpleWeb QUERY_STRING — fixed)
• Target: v1.1.0 user release tag

[PurHur]

claim: compile-link-worker — starting this run

Pre-flight: inventory OK 5082/5082; spine coverage was red (posix_initgroups missing) — syncing as Pillar 1 prerequisite; then targeting this release-blocker (003-MiniWebApp AOT exit 134).

[PurHur]

claim: compile-link-worker — continuing this run

Pre-flight (this run): inventory OK 5102/5102; release-readiness quick user_release_ready: yes (north-star5-fast ok). Pillar 1 green — continuing #19504 MiniWebApp AOT exit 134 (free(): invalid pointer).

[PurHur]

Merged: #19537 (squash)

Cause

Include-scope binding refresh + slot-backed fromLiteral temps: CFG string Literals ("\n") were loaded from slots that inherited $title/$appName, producing <html>MiniWebApp<head>Home and intermittent free(): invalid pointer (exit 134).

Fix

• lib/JIT.php: echo CFG Operand\Literal strings via ValueEchoHelper::echoLiteral (skip slot load / include refresh for pure literals).
• lib/JIT/IncludeBindingEmitHelper.php: name-scan only re-stores aliases already marked includeBinding.
• Fixture: test/fixtures/aot/cases/include_echo_newline_literals.phpt

Verification

EXAMPLES_AOT_SMOKE_ONLY=003 ./script/examples-aot-smoke.sh
# → examples-aot-smoke: 003-MiniWebApp: ok

# AOT bytes: b'<html>\n<head>\n    <meta c'  (corrupt=False)
vendor/bin/phpunit --group llvm --filter include_echo_newline_literals test/aot/AotTest.php
# → OK (1 test, 6 assertions)

[PurHur]

Merged via #19537 (8a2d71eb4).

Verification (this run, Docker):

vendor/bin/phpunit --group llvm --filter include_echo_newline_literals
# OK (1 test, 6 assertions)

EXAMPLES_AOT_SMOKE_ONLY=003 ./script/examples-aot-smoke.sh
# examples-aot-smoke: 003-MiniWebApp: ok
# stdout: <!DOCTYPE html>\n<html>\n<head>\n… MiniWebApp … (EXIT 0)

Root cause: include-binding refresh aliased $title/$appName onto CFG string Literals ("\n"), corrupting layout echo and intermittently free(): invalid pointer.

Note: full examples-aot-smoke still hits 006-FileUploadWeb: missing upload needle (multipart POST unrelated to #19504).