Fix var_dump(property_exists(), isset()) mixed sibling arg wiring (#15646)

[PurHur]

Summary

• Regression: var_dump(property_exists(), isset()) on uninitialized typed property fatals (Zend/zend_builtin_functions.c) #15646: findHoistedIssetOrEmptyProducerForCallArg() fell through to hoisted[$argIndex] when producers already aligned 1:1 with call args but arg #0 was a hoisted FuncCall (e.g. property_exists) and arg Php stdlib specs implementation #1 was isset(). That mapped arg #0 to the Isset_ slot, so var_dump(property_exists($o,'x'), isset($o->x)) printed bool(false)\nbool(false) instead of Zend's bool(true)\nbool(false).
• Test hygiene: PropertyExistsJitHelper::existsArgv() returns int 0/1 for JIT ABI (AOT: invalid IR — module verification fails for pow, base_convert, property_exists, function-static string write #31966); unit test now uses assertSame(0, …) instead of strict assertFalse.

php-src

Zend/zend_compile.c — sibling call-arg temps; observable behavior matches property_exists() + isset() on uninitialized typed properties (Zend/zend_builtin_functions.c, zend_object_handlers.c).

Verification

./script/aot-smoke.sh
# aot-smoke: 8 passed, 0 failed

./script/phpunit.sh --filter 'InlineCallArgProducerSlotTest::testVarDumpPropertyExistsIssetUninitTypedProperty|PropertyExistsIncompleteClassTest'
# OK (2 tests, 12 assertions)

php bin/vm.php -r 'class C { public int $x; } $o=new C(); var_dump(property_exists($o,"x"), isset($o->x));'
# bool(true)
# bool(false)

Closes #15646

Made with Cursor