Stdlib: str_replace/str_ireplace non-string array subject throws LogicException — Zend coerces (ext/standard/string.c)

Problem

str_replace / str_ireplace accept array|string $subject. When $subject is an array of mixed scalars, Zend string-casts each element and replaces. VM/JIT throw LogicException: str_replace() array subject values must be strings in this compiler build (same for str_ireplace).

Verified 2026-08-03 at e0e5e10c9 (Docker Zend 8.2.32):

Repro	Zend 8.2.32	VM / JIT
`str_replace('1', 'X', [12, '13'])`	`['X2', 'X3']`	`LogicException: str_replace() array subject values must be strings…`
`str_ireplace('a', 'X', ['a', 12, 'A'])`	`['X', '12', 'X']`	`LogicException: str_ireplace() array subject values must be strings…`

Peer of the preg_* non-string array-subject gap (same “must be strings in this compiler build” pattern).

php-src reference

php/php-src ext/standard/string.c — php_str_replace_common / array subject walk
php/php-src ext/standard/basic_functions.stub.php — str_replace / str_ireplace signatures

PHP implementation target

ext/standard/ string replace helpers + VM/JIT lowering — coerce array subject values to string like Zend; delete LogicException guard
PHP-in-PHP; no new runtime/*.c

Repro

./script/docker-exec.sh -- bash -lc 'cat > /tmp/str_replace_mixed.php << "PHP"
<?php
var_export(str_replace("1", "X", [12, "13"]));
echo "\n";
var_export(str_ireplace("a", "X", ["a", 12, "A"]));
echo "\n";
PHP
php /tmp/str_replace_mixed.php
php bin/vm.php /tmp/str_replace_mixed.php
php bin/jit.php /tmp/str_replace_mixed.php'

Done when

VM + JIT match Zend for both calls
No LogicException for int array subject values
Compliance / test/repro/ guard; php-src-strict

Sibling filings (same maintainer run @ e0e5e10c9): #27163 (JIT Closure $this builtins), #27164 (preg_* non-string array subject — same LogicException pattern).

claim: PHP Compiler STD Lib Advanced — batch (issues #27165, #27716, #27827)

Sequential PRs under ext/standard string/highlight:

Stdlib: str_replace/str_ireplace non-string array subject throws LogicException — Zend coerces (ext/standard/string.c) #27165 str_replace/str_ireplace array-subject coercion (this PR)
Regression: strcspn("",) with NUL in haystack returns full length on PROFILE=8.2 — Zend stops at NUL (ext/standard/string.c) #27716 strcspn NUL/empty-mask PROFILE=8.2 vs 8.4
Regression: highlight_string/highlight_file HTML wire — Zend <code><span> +   (re-#25419, ext/standard/basic_functions.c) #27827 highlight_string/file HTML wire (<code> +  )

PHP-in-PHP; php-src-strict; VM+JIT.

Stdlib: coerce str_replace/str_ireplace array subject values (#27165) (…

Merged #28951

Verification (Docker php-compiler:22.04-dev):

Zend / bin/vm.php / bin/jit.php on test/repro/issue_27165_str_replace_array_value_coerce.php — identical var_export (X2/X3, X/12/X)
Existing string-only array subject repro still green VM+JIT
StrReplaceRuntimeShrinkTest OK (3)

Next in batch: #27716 (strcspn PROFILE=8.2 NUL / empty characters).

Batch status: #27165/#27716 merged; #27827 closed already-fixed; replacement #28202/#28230 merged via #28959.

Chore: drop stale agent repros for closed #27165–#29096 issues (#29107)

Navigation Menu

Repository navigation

Stdlib: str_replace/str_ireplace non-string array subject throws LogicException — Zend coerces (ext/standard/string.c) #27165

Category

Problem

php-src reference

PHP implementation target

Repro

Done when

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Stdlib: str_replace/str_ireplace non-string array subject throws LogicException — Zend coerces (ext/standard/string.c) #27165

Description

Category

Problem

php-src reference

PHP implementation target

Repro

Done when

Activity

PurHur commented on Aug 3, 2026

PurHur commented on Aug 8, 2026

PurHur commented on Aug 8, 2026

PurHur commented on Aug 8, 2026

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions