[PurHur]

Summary

• Extend EnumCaseSupport::rejectIllegalArrayOffset() to reject plain objects and arrays (not only enum cases) with Zend-compatible TypeError: Illegal offset type.
• Fix array_key_exists()/key_exists() VM builtin and JIT lowered paths to raise TypeError instead of internal LogicException / silent false on object keys.
• Fix JIT isset() hashtable offset checks to emit TypeError for object indices (matching VM offsetIsSet message).
• Add compliance test test/compliance/cases/language/illegal_offset_object.phpt.

php-src reference: Zend/zend_hash.c illegal offset checks; ext/standard/array.c array_key_exists().

Verification

Issue repro:

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh
php bin/vm.php -r "
class K {} \$a=[];
try { var_export(array_key_exists(new K, \$a)); } catch (Throwable \$e) { echo get_class(\$e), \": \", \$e->getMessage(), \"\n\"; }
try { var_export(isset(\$a[new K])); } catch (Throwable \$e) { echo get_class(\$e), \": \", \$e->getMessage(), \"\n\"; }
try { var_export(key_exists(new K, \$a)); } catch (Throwable \$e) { echo get_class(\$e), \": \", \$e->getMessage(), \"\n\"; }
" 2>&1'

Output:

TypeError: Illegal offset type
TypeError: Illegal offset type in isset or empty
TypeError: Illegal offset type

Targeted compliance:

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && vendor/bin/phpunit --filter illegal_offset_object test/compliance/VMTest.php'

Result: OK (1 test, 1 assertion)

Regression (enum illegal offset):

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && vendor/bin/phpunit --filter enum_illegal_array_offset test/compliance/VMTest.php'

Result: OK (2 tests, 2 assertions)

Closes #6500

Made with Cursor