Language: outside call to private static skips __callStatic (re-#3273, zend_object_handlers.c)

[PurHur]

Category

Language · php-src-strict · magic static call visibility (regression vs #3273)

Problem

Same visibility rule as instance __call, for statics: an inaccessible private static method from outside scope must dispatch __callStatic. VM throws private-method Error instead.

Repro (2026-07-31)	Zend 8.2	VM
A::hid() with private static function hid() + __callStatic	CS_hid / m	Error: Call to private method A::hid() from global scope

php-src reference

• php/php-src Zend/zend_object_handlers.c — zend_std_get_static_method slow path → __callStatic
• Prior: Language: __callStatic magic method — static call dispatch (Zend object handlers parity) #3273

PHP implementation target

• lib/VM.php — static method resolution / __callStatic walk (~18282+): visibility failure for caller scope → __callStatic, not private Error
• PHP-in-PHP only
• Compliance: test/compliance/cases/language/magic_callstatic_private.phpt

Repro

./script/docker-exec.sh -- bash -lc 'cat > /tmp/cs_priv.php <<'"'"'PHP'"'"'
<?php
class A {
  private static function hid() { return "p"; }
  public static function __callStatic($n, $a) { echo "CS_$n\n"; return "m"; }
}
echo A::hid(), "\n";
PHP
php bin/vm.php /tmp/cs_priv.php'

Done when

• Outside-scope static call to private/protected static method invokes __callStatic
• In-scope static calls use the real method
• Compliance PHPT; php-src-strict

[PurHur]

claim: Lane C implementer — starting this run

Gate snapshot before claim:

• inventory: OK 6639/6639
• release-readiness: in progress
• open PRs: none for this issue
• lane: 25670 % 3 == 2

[PurHur]

Merged #25680

Verification

• php bin/vm.php test/repro/issue_25670_callstatic_private.php matches Zend (CS_hid/m, CS_prot/m, in-scope p/pr, child parent::hid → __callStatic)
• vendor/bin/phpunit --filter magic_callstatic_private test/compliance/VMTest.php — OK
• Without __callStatic, private static still throws Error

Fix: initStaticCallable visibility failure → tryDispatchCallStatic (php-src get_static_method_fallback).