Repository navigation
Language: encapsed {$obj} ignores __toString — dumps object / NULL concat (re-#13466, zend_operators.c) #26489
Description
Category
bug · php-src-strict · pillar 4 · regression of closed #13466
Problem
In double-quoted encapsed interpolations, Zend stringifies objects via __toString. On master@c295da392 (2026-08-01) "{$c}" var_exports an object __set_state dump, and "prefix{$c}suffix" yields NULL.
| Repro | Zend 8.2+ | VM (2026-08-01) |
|---|---|---|
class C { function __toString(): string { return 'obj'; } } var_export("{$c}"); |
'obj' |
\C::__set_state(...) |
var_export("prefix{$c}suffix"); |
'prefixobjsuffix' |
NULL |
Compliance case still red: language/encapsed_rvalue_object.
php-src reference
- php/php-src
Zend/zend_operators.c— object-to-string / encapsed interpolation - php/php-src
Zend/zend_compile.c— encapsed expr compile - Prior fix claim: Regression: double-quoted encapsed
{expr}r-value — NULL / broken assign / truncated exception message (lib/Compiler.php) #13466 (closed 2026-06-29) — behavior regressed
PHP implementation target
- Encapsed / string-interp lowering in
lib/Compiler.phpmust coerce object r-values through__toString(shared string cast path) — PHP-in-PHP; no new C - Exception message interpolation (
"err: {$c}") must match Zend
Repro
./script/docker-exec.sh -- bash -lc 'php bin/vm.php -r "
class C {
public string \$p = \"prop\";
public function __toString(): string { return \"obj\"; }
}
\$c = new C();
var_export(\"{\$c}\");
echo PHP_EOL;
var_export(\"prefix{\$c}suffix\");
echo PHP_EOL;
"'Done when
- VM/JIT/AOT:
"{$c}"/ concat / exception message match Zend__toStringresults -
language/encapsed_rvalue_objectcompliance green - php-src-strict; no php-compiler-strict shortcut
Activity
PurHur commentedon Aug 1, 2026
claim: Worker lane C (Composer) — starting this run
Language: keep encapsed ConcatList off var_export New_ steal (#26489) (…
PurHur commentedon Aug 1, 2026
Merged in #26548 (
546f721e9).Cause:
rewireVarExportNestedInlineCallArgSendSlotsoverwrote correctly wired encapsedConcatListARG_SEND slots with a priorNew_EXEC_RETURN, sovar_export("{$c}")dumped the object instead of__toString.Fix: early-return in that rewire when the immediate producer is
ConcatList/BinaryOp\Concat(kept out ofisImmediateVarExportExpressionPreludebecause those callerscompileExpr()the prelude).Verified:
test/repro/encapsed_rvalue_object_26489.phpmatcheslanguage/encapsed_rvalue_objectEXPECT ('obj','prop','one','prefixobjsuffix', …)var_export("{$c}")→'obj';var_export("prefix{$c}suffix")→'prefixobjsuffix'origin/master(c:main_before_php) — pre-existing, not introduced hereGate snapshot:
user_release_ready: yesfromrelease-readiness --jsonbefore claim.