Stdlib: htmlspecialchars()/htmlentities() ENT_* named flag constants rejected — LogicException not escaped output (ext/standard/html.c)

[PurHur]

Category

stdlib · php-src-strict

Problem

htmlspecialchars() / htmlentities() second argument cannot accept ENT_* named constants at runtime—the VM throws:

LogicException: htmlspecialchars() flags must be an integer in this compiler build

Call	Zend	VM today
htmlspecialchars("<a&'>", ENT_QUOTES)	'&lt;a&amp;&#039;&gt;'	LogicException
htmlentities("<a&'>", ENT_COMPAT)	'&lt;a&amp;\'&gt;'	LogicException

Same class of bug as #9564 (PHP_ROUND_HALF_*), #9565 (PATHINFO_*), #9278 (SORT_*)—builtin arg lowering does not resolve core PHP constants to integers.

php-src reference

• php/php-src ext/standard/html.c — php_htmlspecialchars, ENT_* flag handling
• php/php-src ext/standard/basic_functions.stub.php — signatures

Repro

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && php bin/vm.php test/repro/maintainer_gap_htmlspecialchars_ent_flags.php'
php bin/vm.php test/repro/maintainer_gap_htmlspecialchars_ent_flags.php

Implementation hints (PHP-in-PHP)

• ext/standard/htmlspecialchars.php, ext/standard/htmlentities.php — resolve ENT_* via StdlibConstants / shared builtin int-arg helper (same path as sort/round flags)
• ext/standard/VmString.php — semantics already correct once $flags is an int
• JIT: JitHtmlspecialchars / compile-time constant folding in htmlspecialchars::compileTimeLong

Done when

• Repro script matches Zend under VM (php bin/vm.php)
• ENT_QUOTES, ENT_COMPAT, ENT_HTML5 combinations work
• Compliance guard added under test/compliance/cases/stdlib/
• JIT/AOT agree when flags lowering is in scope

Related

• Stdlib: round() PHP_ROUND_HALF_* named constant mode rejected — TypeError null given (ext/standard/math.c) #9564, Stdlib: pathinfo() PATHINFO_* named flag constants rejected — LogicException not basename/filename (ext/standard/basic_functions.c) #9565, Stdlib: ksort()/asort() inline SORT_* flag expressions rejected at runtime (ext/standard/array.c) #9278 — int constant binding pattern
• Stdlib: htmlspecialchars()/htmlentities() — scalar-to-string coercion for $string (ext/standard/html.c parity) #4310 — scalar-to-string coercion (separate)
• php-in-php: JIT StringHtmlspecialchars — route htmlspecialchars/htmlentities through VmString PHP not ~420-line LLVM (#1492) #9445 — php-in-php JIT migration
• North star Epic: Self-host critical path — compiler compiles itself (M3→M5) #1492

[PurHur]

claim: PHP Runtime → PHP — batch (issues #9586)

[PurHur]

Merged via #15270 — ENT_COMPAT now encodes double quotes only (htmlentities/htmlspecialchars) and htmlspecialchars_decode decodes " but not ' under ENT_COMPAT. Verification: htmlentities_ent_compat compliance + maintainer_gap_htmlspecialchars_ent_flags.php green on VM.