Fix var_export(array pointer) string-concat mis-bind (#13829) - #13894

Summary

• Fix compiler lowering for var_export(key($a), true) (and siblings) inside string concatenation: php-cfg hoists array-pointer builtins as siblings with distinct dead arg temps; the VM was sending true (ConstFetch) as var_export arg #0 instead of the hoisted FuncCall return.
• Changes in lib/Compiler.php: relax slotForVarExportNestedInlineCallArg feed check, run it before ConstFetch arg wiring, skip ConstFetch mis-bind on var_export arg #0, and teach cfgCallImmediatelyFeedsAdjacentConsumer about ConstFetch gaps before var_export.
• Also fixes Regression: prev() string-concat nested operand — returns true not element (ext/standard/array.c) #13811 (prev()), Regression: current() string-concat nested operand — returns true not element (ext/standard/array.c) #13828 (current()), Regression: next() string-concat nested operand — returns true not element (ext/standard/array.c) #13830 (next()), Regression: end() second call in string-concat — returns true not last element (ext/standard/array.c) #13831 (end()) — same root cause.

php-src reference

• Symptom manifests via ext/standard/array.c pointer builtins; fix is compile-time arg wiring (lib/Compiler.php, Zend/zend_compile.c SEND/inline-call pattern).

Verification

./script/docker-exec.sh -- bash -lc 'vendor/bin/phpunit test/unit/InlineCallArgProducerSlotTest.php --filter testVarExportNestedArrayPointerBuiltinUsesFuncCallProducerSlot'
# OK (1 test)

./script/docker-exec.sh -- bash -lc 'php bin/vm.php test/repro/maintainer_gap_key_concat_operand.php'
# ok

./script/docker-exec.sh -- bash -lc 'php bin/vm.php test/compliance/cases/stdlib/array_pointer_var_export_concat.phpt'
# key=1 / current=2 / end=3

./script/docker-exec.sh -- bash -lc 'php bin/vm.php -r "\$a=[1,2,3]; next(\$a); echo \"key=\".var_export(key(\$a),true).\"\\n\";"'
# key=1 (was key=true)

Closes #13829

Made with Cursor