AOT: hash_pbkdf2() rejects invalid iterations/length with ValueError (#12230)

[PurHur]

Summary

• Stdlib: hash_pbkdf2() iterations ≤0 / length <0 — returns empty string not ValueError (ext/hash/hash_pbkdf2.c) #12230 leftover: VM hash_pbkdf2() already threw ValueError for $iterations ≤ 0 and $length < 0, but AOT compiled through hash_pbkdf2::call() → __compiler_hash_pbkdf2 without checks.
• Add JitHashPbkdf2 runtime IR guards in the builtin JIT lowering (peer of JitOpensslRandomPseudoBytes / fread).
• Mirror the same bounds in HashCryptoJitHelper::hashPbkdf2() so thin-standalone helper bridges cannot silently accept bad args.
• php-src: ext/hash/hash_pbkdf2.c — php_hash_pbkdf2().

Closes #12230

Test plan

./script/aot-smoke.sh
# aot-smoke: 8 passed, 0 failed

./script/phpunit.sh --filter HashPbkdf2Iterations12230AotTest
# OK (2 tests, 8 assertions)

./script/phpunit.sh --filter HashPbkdf2Reflection25469AotTest
# OK (1 test, 5 assertions)

./script/docker-exec.sh -- bash -lc 'php test/repro/maintainer_gap_hash_pbkdf2_iterations_valueerror.php'
./script/docker-exec.sh -- bash -lc 'tmp=/tmp/hk; php bin/compile.php -o "$tmp" test/repro/maintainer_gap_hash_pbkdf2_iterations_valueerror.php && "$tmp"'
# both print ok / exit 0

Not run: full compliance suite, differential sweep (no lowering shape change beyond guard blocks).

Made with Cursor