NEWS

PHP NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
?? ??? ????, PHP 8.4.8

- Date:
 . Fixed bug GH-18076 (Since PHP 8, the date_sun_info() function returns
 inaccurate sunrise and sunset times, but other calculated times are
 correct) (JiriJozif).

- Intl:
 . datefmt_parse/datefmt_localtime references type system fixes. (nielsdos)
 . Fix IntlDateFormatter::parseToCalendar() reference type system breaks.
 (nielsdos)

- Opcache:
 . Fixed bug GH-18417 (Windows SHM reattachment fails when increasing
 memory_consumption or jit_buffer_size). (nielsdos)
 . Fixed bug GH-18297 (Exception not handled when jit guard is triggered).
 (Arnaud)

- SPL:
 . Fixed bug GH-18421 (Integer overflow with large numbers in LimitIterator).
 (nielsdos)

- Standard:
 . Fixed bug GH-17403 (Potential deadlock when putenv fails). (nielsdos)
 . Fixed bug GH-18400 (http_build_query type error is inaccurate). (nielsdos)

- Zip:
 . Fixed bug GH-18431 (Registering ZIP progress callback twice doesn't work).
 (nielsdos)
 . Fixed bug GH-18438 (Handling of empty data and errors in
 ZipArchive::addPattern). (nielsdos)

24 Apr 2025, PHP 8.4.7

- Core:
 . Fixed bug GH-17711 and GH-18022 (Infinite recursion on deprecated attribute
 evaluation). (ilutov)
 . Fixed bug GH-18038 (Lazy proxy calls magic methods twice). (Arnaud)
 . Fixed bug GH-18209 (Use-after-free in extract() with EXTR_REFS). (ilutov)
 . Fixed bug GH-18268 (Segfault in array_walk() on object with added property
 hooks). (ilutov)
 . Fixed bug GH-18304 (Changing the properties of a DateInterval through
 dynamic properties triggers a SegFault). (nielsdos)
 . Fix some leaks in php_scandir. (nielsdos)

- DBA:
 . FIxed bug GH-18247 dba_popen() memory leak on invalid path. (David Carlier)

- Filter:
 . Fixed bug GH-18309 (ipv6 filter integer overflow). (nielsdos)

- GD:
 . Fixed imagecrop() overflow with rect argument with x/width y/heigh usage
 in gdImageCrop(). (David Carlier)
 . Fixed GH-18243 imagettftext() overflow/underflow on font size value.
 (David Carlier)

- Intl:
 . Fix reference support for intltz_get_offset(). (nielsdos)

- LDAP:
 . Fixed bug GH-17776 (LDAP_OPT_X_TLS_* options can't be overridden). (Remi)
 . Fix NULL deref on high modification key. (nielsdos)

- libxml:
 . Fixed custom external entity loader returning an invalid resource leading
 to a confusing TypeError message. (Girgias)

- Opcache:
 . Fixed bug GH-18294 (assertion failure zend_jit_ir.c). (nielsdos)
 . Fixed bug GH-18289 (Fix segfault in JIT). (Florian Engelhardt)
 . Fixed bug GH-18136 (tracing JIT floating point register clobbering on
 Windows and ARM64). (nielsdos)

- OpenSSL:
 . Fix memory leak in openssl_sign() when passing invalid algorithm.
 (nielsdos)
 . Fix potential leaks when writing to BIO fails. (nielsdos)

- PDO Firebird:
 . Fixed bug GH-18276 (persistent connection - "zend_mm_heap corrupted"
 with setAttribute()) (SakiTakamachi).
 . Fixed bug GH-17383 (PDOException has wrong code and message since PHP 8.4)
 (SakiTakamachi).

- PDO Sqlite:
 . Fix memory leak on error return of collation callback. (nielsdos)

- PgSql:
 . Fix uouv in pg_put_copy_end(). (nielsdos)

- SPL:
 . Fixed bug GH-18322 (SplObjectStorage debug handler mismanages memory).
 (nielsdos)

- Standard:
 . Fixed bug GH-18145 (php8ts crashes in php_clear_stat_cache()).
 (Jakub Zelenka)
 . Fix resource leak in iptcembed() on error. (nielsdos)

- Tests:
 . Address deprecated PHP 8.4 session options to prevent test failures.
 (willvar)

- Zip:
 . Fix uouv when handling empty options in ZipArchive::addGlob(). (nielsdos)
 . Fix memory leak when handling a too long path in ZipArchive::addGlob().
 (nielsdos)

10 Apr 2025, PHP 8.4.6

- BCMath:
 . Fixed pointer subtraction for scale. (SakiTakamachi)

- Core:
 . Fixed property hook backing value access in multi-level inheritance.
 (ilutov)
 . Fixed accidentally inherited default value in overridden virtual properties.
 (ilutov)
 . Fixed bug GH-17376 (Broken JIT polymorphism for property hooks added to
 child class). (ilutov)
 . Fixed bug GH-17913 (ReflectionFunction::isDeprecated() returns incorrect
 results for closures created from magic __call()). (timwolla)
 . Fixed bug GH-17941 (Stack-use-after-return with lazy objects and hooks).
 (nielsdos)
 . Fixed bug GH-17988 (Incorrect handling of hooked props without get hook in
 get_object_vars()). (ilutov)
 . Fixed bug GH-17998 (Skipped lazy object initialization on primed
 SIMPLE_WRITE cache). (ilutov)
 . Fixed bug GH-17998 (Assignment to backing value in set hook of lazy proxy
 calls hook again). (ilutov)
 . Fixed bug GH-17961 (use-after-free during dl()'ed module class destruction).
 (Arnaud)
 . Fixed bug GH-15367 (dl() of module with aliased class crashes in shutdown).
 (Arnaud)
 . Fixed OSS-Fuzz #403308724. (nielsdos)
 . Fixed bug GH-13193 again (Significant performance degradation in 'foreach').
 (nielsdos)

- DBA:
 . Fixed assertion violation when opening the same file with dba_open
 multiple times. (chschneider)

- DOM:
 . Fixed bug GH-17991 (Assertion failure dom_attr_value_write). (nielsdos)
 . Fix weird unpack behaviour in DOM. (nielsdos)
 . Fixed bug GH-18090 (DOM: Svg attributes and tag names are being lowercased).
 (nielsdos)
 . Fix xinclude destruction of live attributes. (nielsdos)

- Fuzzer:
 . Fixed bug GH-18081 (Memory leaks in error paths of fuzzer SAPI).
 (Lung-Alexandra)

- GD:
 . Fixed bug GH-17984 (calls with arguments as array with references).
 (David Carlier)

- LDAP:
 . Fixed bug GH-18015 (Error messages for ldap_mod_replace are confusing).
 (nielsdos)

- Mbstring:
 . Fixed bug GH-17989 (mb_output_handler crash with unset
 http_output_conv_mimetypes). (nielsdos)

- Opcache:
 . Fixed bug GH-15834 (Segfault with hook "simple get" cache slot and minimal
 JIT). (nielsdos)
 . Fixed bug GH-17966 (Symfony JIT 1205 assertion failure). (nielsdos)
 . Fixed bug GH-18037 (SEGV Zend/zend_execute.c). (nielsdos)
 . Fixed bug GH-18050 (IN_ARRAY optimization in DFA pass is broken). (ilutov)
 . Fixed bug GH-18113 (stack-buffer-overflow ext/opcache/jit/ir/ir_sccp.c).
 (nielsdos)
 . Fixed bug GH-18112 (NULL access with preloading and INI option). (nielsdos)
 . Fixed bug GH-18107 (Opcache CFG jmp optimization with try-finally breaks
 the exception table). (nielsdos)

- PDO:
 . Fix memory leak when destroying PDORow. (nielsdos)

- PGSQL:
 . Fixed bug GH-18148 (pg_copy_from() regression with explicit \n terminator
 due to wrong offset check). (David Carlier)

- Standard:
 . Fix memory leaks in array_any() / array_all(). (nielsdos)

- SOAP:
 . Fixed bug #66049 (Typemap can break parsing in parse_packet_soap leading to
 a segfault) . (Remi)

- SPL:
 . Fixed bug GH-18018 (RC1 data returned from offsetGet causes UAF in
 ArrayObject). (nielsdos)

- Treewide:
 . Fixed bug GH-17736 (Assertion failure zend_reference_destroy()). (nielsdos)

- Windows:
 . Fixed bug GH-17836 (zend_vm_gen.php shouldn't break on Windows line
 endings). (DanielEScherzer)

27 Feb 2025, PHP 8.4.5

- BCMath:
 . Fixed bug GH-17398 (bcmul memory leak). (SakiTakamachi)

- Core:
 . Fixed bug GH-17623 (Broken stack overflow detection for variable
 compilation). (ilutov)
 . Fixed bug GH-17618 (UnhandledMatchError does not take
 zend.exception_ignore_args=1 into account). (timwolla)
 . Fix fallback paths in fast_long_{add,sub}_function. (nielsdos)
 . Fixed bug OSS-Fuzz #391975641 (Crash when accessing property backing value
 by reference). (ilutov)
 . Fixed bug GH-17718 (Calling static methods on an interface that has
 `__callStatic` is allowed). (timwolla)
 . Fixed bug GH-17713 (ReflectionProperty::getRawValue() and related methods
 may call hooks of overridden properties). (Arnaud)
 . Fixed bug GH-17916 (Final abstract properties should error).
 (DanielEScherzer)
 . Fixed bug GH-17866 (zend_mm_heap corrupted error after upgrading from
 8.4.3 to 8.4.4). (nielsdos)
 . Fixed GHSA-rwp7-7vc6-8477 (Reference counting in php_request_shutdown
 causes Use-After-Free). (CVE-2024-11235) (ilutov)

- DOM:
 . Fixed bug GH-17609 (Typo in error message: Dom\NO_DEFAULT_NS instead of
 Dom\HTML_NO_DEFAULT_NS). (nielsdos)
 . Fixed bug GH-17802 (\Dom\HTMLDocument querySelector attribute name is case
 sensitive in HTML). (nielsdos)
 . Fixed bug GH-17847 (xinclude destroys live node). (nielsdos)
 . Fix using Dom\Node with Dom\XPath callbacks. (nielsdos)

- FFI:
 . Fix FFI Parsing of Pointer Declaration Lists. (davnotdev)

- FPM:
 . Fixed bug GH-17643 (FPM with httpd ProxyPass encoded PATH_INFO env).
 (Jakub Zelenka)

- GD:
 . Fixed bug GH-17703 (imagescale with both width and height negative values
 triggers only an Exception on width). (David Carlier)
 . Fixed bug GH-17772 (imagepalettetotruecolor crash with memory_limit=2M).
 (David Carlier)

- LDAP:
 . Fixed bug GH-17704 (ldap_search fails when $attributes contains a
 non-packed array with numerical keys). (nielsdos, 7u83)

- LibXML:
 . Fixed GHSA-wg4p-4hqh-c3g9 (Reocurrence of #72714). (nielsdos)
 . Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header
 when requesting a redirected resource). (CVE-2025-1219) (timwolla)

- MBString:
 . Fixed bug GH-17503 (Undefined float conversion in mb_convert_variables).
 (cmb)

- Opcache:
 . Fixed bug GH-17654 (Multiple classes using same trait causes function
 JIT crash). (nielsdos)
 . Fixed bug GH-17577 (JIT packed type guard crash). (nielsdos, Dmitry)
 . Fixed bug GH-17747 (Exception on reading property in register-based
 FETCH_OBJ_R breaks JIT). (Dmitry, nielsdos)
 . Fixed bug GH-17715 (Null pointer deref in observer API when calling
 cases() method on preloaded enum). (Bob)
 . Fixed bug GH-17868 (Cannot allocate memory with tracing JIT on 8.4.4).
 (nielsdos)

- PDO_SQLite:
 . Fixed GH-17837 ()::getColumnMeta() on unexecuted statement segfaults).
 (cmb)
 . Fix cycle leak in sqlite3 setAuthorizer(). (nielsdos)
 . Fix memory leaks in pdo_sqlite callback registration. (nielsdos)

- Phar:
 . Fixed bug GH-17808: PharFileInfo refcount bug. (nielsdos)

- PHPDBG:
 . Partially fixed bug GH-17387 (Trivial crash in phpdbg lexer). (nielsdos)
 . Fix memory leak in phpdbg calling registered function. (nielsdos)

- Reflection:
 . Fixed bug GH-15902 (Core dumped in ext/reflection/php_reflection.c).
 (DanielEScherzer)
 . Fixed missing final and abstract flags when dumping properties.
 (DanielEScherzer)

- Standard:
 . Fixed bug #72666 (stat cache clearing inconsistent between file:// paths
 and plain paths). (Jakub Zelenka)

- Streams:
 . Fixed bug GH-17650 (realloc with size 0 in user_filters.c). (nielsdos)
 . Fix memory leak on overflow in _php_stream_scandir(). (nielsdos)
 . Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit
 basic auth header). (CVE-2025-1736) (Jakub Zelenka)
 . Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location
 to 1024 bytes). (CVE-2025-1861) (Jakub Zelenka)
 . Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers
 without colon). (CVE-2025-1734) (Jakub Zelenka)
 . Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not
 handle folded headers). (CVE-2025-1217) (Jakub Zelenka)

- Windows:
 . Fixed phpize for Windows 11 (24H2). (bwoebi)
 . Fixed GH-17855 (CURL_STATICLIB flag set even if linked with shared lib).
 (cmb)

- Zlib:
 . Fixed bug GH-17745 (zlib extension incorrectly handles object arguments).
 (nielsdos)
 . Fix memory leak when encoding check fails. (nielsdos)
 . Fix zlib support for large files. (nielsdos)

13 Feb 2025, PHP 8.4.4

- Core:
 . Fixed bug GH-17234 (Numeric parent hook call fails with assertion).
 (nielsdos)
 . Fixed bug GH-16892 (ini_parse_quantity() fails to parse inputs starting
 with 0x0b). (nielsdos)
 . Fixed bug GH-16886 (ini_parse_quantity() fails to emit warning for 0x+0).
 (nielsdos)
 . Fixed bug GH-17222 (__PROPERTY__ magic constant does not work in all
 constant expression contexts). (ilutov)
 . Fixed bug GH-17214 (Relax final+private warning for trait methods with
 inherited final). (ilutov)
 . Fixed NULL arithmetic during system program execution on Windows. (cmb,
 nielsdos)
 . Fixed potential OOB when checking for trailing spaces on Windows. (cmb)
 . Fixed bug GH-17408 (Assertion failure Zend/zend_exceptions.c).
 (nielsdos, ilutov)
 . Fix may_have_extra_named_args flag for ZEND_AST_UNPACK. (nielsdos)
 . Fix NULL arithmetic in System V shared memory emulation for Windows. (cmb)
 . Fixed bug GH-17597 (#[\Deprecated] does not work for __call() and
 __callStatic()). (timwolla)

- DOM:
 . Fixed bug GH-17397 (Assertion failure ext/dom/php_dom.c). (nielsdos)
 . Fixed bug GH-17486 (Incorrect error line numbers reported in
 Dom\HTMLDocument::createFromString). (nielsdos)
 . Fixed bug GH-17481 (UTF-8 corruption in \Dom\HTMLDocument). (nielsdos)
 . Fixed bug GH-17500 (Segfault with requesting nodeName on nameless doctype).
 (nielsdos)
 . Fixed bug GH-17485 (upstream fix, Self-closing tag on void elements
 shouldn't be a parse error/warning in \Dom\HTMLDocument). (lexborisov)
 . Fixed bug GH-17572 (getElementsByTagName returns collections with
 tagName-based indexing). (nielsdos)

- Enchant:
 . Fix crashes in enchant when passing null bytes. (nielsdos)

- FTP:
 . Fixed bug GH-16800 (ftp functions can abort with EINTR). (nielsdos)

- GD:
 . Fixed bug GH-17349 (Tiled truecolor filling looses single color
 transparency). (cmb)
 . Fixed bug GH-17373 (imagefttext() ignores clipping rect for palette
 images). (cmb)
 . Ported fix for libgd 223 (gdImageRotateGeneric() does not properly
 interpolate). (cmb)
 . Added support for reading GIFs without colormap to bundled libgd. (Andrew
 Burley, cmb)

- Gettext:
 . Fixed bug GH-17400 (bindtextdomain SEGV on invalid domain).
 (David Carlier)

- Intl:
 . Fixed bug GH-11874 (intl causing segfault in docker images). (nielsdos)

- Opcache:
 . Fixed bug GH-15981 (Segfault with frameless jumps and minimal JIT).
 (nielsdos)
 . Fixed bug GH-17307 (Internal closure causes JIT failure). (nielsdos)
 . Fixed bug GH-17428 (Assertion failure ext/opcache/jit/zend_jit_ir.c:8940).
 (nielsdos)
 . Fixed bug GH-17564 (Potential UB when reading from / writing to struct
 padding). (ilutov)

- PCNTL:
 . Fixed pcntl_setcpuaffinity exception type from ValueError to TypeError for
 the cpu mask argument with entries type different than int/string.
 (David Carlier)

- PCRE:
 . Fixed bug GH-17122 (memory leak in regex). (nielsdos)

- PDO:
 . Fixed a memory leak when the GC is used to free a PDOStatment. (Girgias)
 . Fixed a crash in the PDO Firebird Statement destructor. (nielsdos)
 . Fixed UAFs when changing default fetch class ctor args. (Girgias, nielsdos)

- PgSql:
 . Fixed build failure when the constant PGRES_TUPLES_CHUNK is not present
 in the system. (chschneider)

- Phar:
 . Fixed bug GH-17518 (offset overflow phar extractTo()). (nielsdos)

- PHPDBG:
 . Fix crashes in function registration + test. (nielsdos, Girgias)

- Session:
 . Fix type confusion with session SID constant. (nielsdos)
 . Fixed bug GH-17541 (ext/session NULL pointer dereferencement during
 ID reset). (Girgias)

- SimpleXML:
 . Fixed bug GH-17409 (Assertion failure Zend/zend_hash.c:1730). (nielsdos)

- SNMP:
 . Fixed bug GH-17330 (SNMP::setSecurity segfault on closed session).
 (David Carlier)

- SPL:
 . Fixed bug GH-15833 (Segmentation fault (access null pointer) in
 ext/spl/spl_array.c). (nielsdos)
 . Fixed bug GH-17516 (SplFileTempObject::getPathInfo() Undefined behavior
 on invalid class). (David Carlier)

- Standard:
 . Fixed bug GH-17447 (Assertion failure when array popping a self addressing
 variable). (nielsdos)

- Windows:
 . Fixed clang compiler detection. (cmb)

- Zip:
 . Fixed bug GH-17139 (Fix zip_entry_name() crash on invalid entry).
 (nielsdos)

16 Jan 2025, PHP 8.4.3

- BcMath:
 . Fixed bug GH-17049 (Correctly compare 0 and -0). (Saki Takamachi)
 . Fixed bug GH-17061 (Now Number::round() does not remove trailing zeros).
 (Saki Takamachi)
 . Fixed bug GH-17064 (Correctly round rounding mode with zero edge case).
 (Saki Takamachi)
 . Fixed bug GH-17275 (Fixed the calculation logic of dividend scale).
 (Saki Takamachi)

- Core:
 . Fixed bug OSS-Fuzz #382922236 (Duplicate dynamic properties in hooked object
 iterator properties table). (ilutov)
 . Fixed unstable get_iterator pointer for hooked classes in shm on Windows.
 (ilutov)
 . Fixed bug GH-17106 (ZEND_MATCH_ERROR misoptimization). (ilutov)
 . Fixed bug GH-17162 (zend_array_try_init() with dtor can cause engine UAF).
 (nielsdos)
 . Fixed bug GH-17101 (AST->string does not reproduce constructor property
 promotion correctly). (nielsdos)
 . Fixed bug GH-17200 (Incorrect dynamic prop offset in hooked prop iterator).
 (ilutov)
 . Fixed bug GH-17216 (Trampoline crash on error). (nielsdos)

- DBA:
 . Skip test if inifile is disabled. (orlitzky)

- DOM:
 . Fixed bug GH-17145 (DOM memory leak). (nielsdos)
 . Fixed bug GH-17201 (Dom\TokenList issues with interned string replace).
 (nielsdos)
 . Fixed bug GH-17224 (UAF in importNode). (nielsdos)

- Embed:
 . Make build command for program using embed portable. (dunglas)

- FFI:
 . Fixed bug #79075 (FFI header parser chokes on comments). (nielsdos)
 . Fix memory leak on ZEND_FFI_TYPE_CHAR conversion failure. (nielsdos)
 . Fixed bug GH-16013 and bug #80857 (Big endian issues). (Dmitry, nielsdos)

- Fileinfo:
 . Fixed bug GH-17039 (PHP 8.4: Incorrect MIME content type). (nielsdos)

- FPM:
 . Fixed bug GH-13437 (FPM: ERROR: scoreboard: failed to lock (already
 locked)). (Jakub Zelenka)
 . Fixed bug GH-17112 (Macro redefinitions). (cmb, nielsdos)
 . Fixed bug GH-17208 (bug64539-status-json-encoding.phpt fail on 32-bits).
 (nielsdos)

- GD:
 . Fixed bug GH-16255 (Unexpected nan value in ext/gd/libgd/gd_filter.c).
 (nielsdos, cmb)
 . Ported fix for libgd bug 276 (Sometimes pixels are missing when storing
 images as BMPs). (cmb)

- Gettext:
 . Fixed bug GH-17202 (Segmentation fault ext/gettext/gettext.c
 bindtextdomain()). (Michael Orlitzky)

- Iconv:
 . Fixed bug GH-17047 (UAF on iconv filter failure). (nielsdos)

- LDAP:
 . Fixed bug GH-17280 (ldap_search() fails when $attributes array has holes).
 (nielsdos)

- LibXML:
 . Fixed bug GH-17223 (Memory leak in libxml encoding handling). (nielsdos)

- MBString:
 . Fixed bug GH-17112 (Macro redefinitions). (nielsdos, cmb)

- Opcache:
 . opcache_get_configuration() properly reports jit_prof_threshold. (cmb)
 . Fixed bug GH-17140 (Assertion failure in JIT trace exit with
 ZEND_FETCH_DIM_FUNC_ARG). (nielsdos, Dmitry)
 . Fixed bug GH-17151 (Incorrect RC inference of op1 of FETCH_OBJ and
 INIT_METHOD_CALL). (Dmitry, ilutov)
 . Fixed bug GH-17246 (GC during SCCP causes segfault). (Dmitry)
 . Fixed bug GH-17257 (UBSAN warning in ext/opcache/jit/zend_jit_vm_helpers.c).
 (nielsdos, Dmitry)

- PCNTL:
 . Fix memory leak in cleanup code of pcntl_exec() when a non stringable
 value is encountered past the first entry. (Girgias)

- PgSql:
 . Fixed bug GH-17158 (pg_fetch_result Shows Incorrect ArgumentCountError
 Message when Called With 1 Argument). (nielsdos)
 . Fixed further ArgumentCountError for calls with flexible
 number of arguments. (David Carlier)

- Phar:
 . Fixed bug GH-17137 (Segmentation fault ext/phar/phar.c). (nielsdos)

- SimpleXML:
 . Fixed bug GH-17040 (SimpleXML's unset can break DOM objects). (nielsdos)
 . Fixed bug GH-17153 (SimpleXML crash when using autovivification on
 document). (nielsdos)

- Sockets:
 . Fixed bug GH-16276 (socket_strerror overflow handling with INT_MIN).
 (David Carlier / cmb)
 . Fixed overflow on SO_LINGER values setting, strengthening values check
 on SO_SNDTIMEO/SO_RCVTIMEO for socket_set_option().
 (David Carlier)

- SPL:
 . Fixed bug GH-17198 (SplFixedArray assertion failure with get_object_vars).
 (nielsdos)
 . Fixed bug GH-17225 (NULL deref in spl_directory.c). (nielsdos)

- Streams:
 . Fixed bug GH-17037 (UAF in user filter when adding existing filter name due
 to incorrect error handling). (nielsdos)
 . Fixed bug GH-16810 (overflow on fopen HTTP wrapper timeout value).
 (David Carlier)
 . Fixed bug GH-17067 (glob:// wrapper doesn't cater to CWD for ZTS builds).
 (cmb)

- Windows:
 . Hardened proc_open() against cmd.exe hijacking. (cmb)

- XML:
 . Fixed bug GH-1718 (unreachable program point in zend_hash). (nielsdos)

19 Dec 2024, PHP 8.4.2

- BcMath:
 . Fixed bug GH-16978 (Avoid unnecessary padding with leading zeros).
 (Saki Takamachi)

- COM:
 . Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults).
 (cmb)

- Core:
 . Fixed bug GH-16344 (setRawValueWithoutLazyInitialization() and
 skipLazyInitialization() may change initialized proxy). (Arnaud)
 . Fix is_zend_ptr() huge block comparison. (nielsdos)
 . Fixed potential OOB read in zend_dirname() on Windows. (cmb)
 . Fixed bug GH-15964 (printf() can strip sign of -INF). (divinity76, cmb)

- Curl:
 . Fix various memory leaks in curl mime handling. (nielsdos)

- DBA:
 . Fixed bug GH-16990 (dba_list() is now zero-indexed instead of using
 resource ids) (kocsismate)

- DOM:
 . Fixed bug GH-16906 (Reloading document can cause UAF in iterator).
 (nielsdos)

- FPM:
 . Fixed bug GH-16932 (wrong FPM status output). (Jakub Zelenka, James Lucas)

- GMP:
 . Fixed bug GH-16890 (array_sum() with GMP can loose precision (LLP64)).
 (cmb)

- Opcache:
 . Fixed bug GH-16851 (JIT_G(enabled) not set correctly on other threads).
 (dktapps)
 . Fixed bug GH-16902 (Set of opcache tests fail zts+aarch64). (nielsdos)
 . Fixed bug GH-16879 (JIT dead code skipping does not update call_level).
 (nielsdos)

- SAPI:
 . Fixed bug GH-16998 (UBSAN warning in rfc1867). (nielsdos)

- PHPDBG:
 . Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()).
 (nielsdos)

- Standard:
 . Fixed bug GH-16905 (Internal iterator functions can't handle UNDEF
 properties). (nielsdos)
 . Fixed bug GH-16957 (Assertion failure in array_shift with
 self-referencing array). (nielsdos)

- Streams:
 . Fixed network connect poll interuption handling. (Jakub Zelenka)

- Windows:
 . Fixed bug GH-16849 (Error dialog causes process to hang). (cmb)
 . Windows Server 2025 is now properly reported. (cmb)

21 Nov 2024, PHP 8.4.1

- BcMath:
 . [RFC] Add bcfloor, bcceil and bcround to BCMath. (Saki Takamachi)
 . Improve performance. (Saki Takamachi, nielsdos)
 . Adjust bcround()'s $mode parameter to only accept the RoundingMode
 enum. (timwolla, saki)
 . Fixed LONG_MAX in BCMath ext. (Saki Takamachi)
 . Fixed bcdiv() div by one. (Saki Takamachi)
 . [RFC] Support object types in BCMath. (Saki Takamachi)
 . bcpow() performance improvement. (Jorg Sowa)
 . ext/bcmath: Check for scale overflow. (SakiTakamachi)
 . [RFC] ext/bcmath: Added bcdivmod. (SakiTakamachi)
 . Fix GH-15968 (Avoid converting objects to strings in operator calculations).
 (SakiTakamachi)
 . Fixed bug GH-16265 (Added early return case when result is 0)
 (Saki Takamachi).
 . Fixed bug GH-16262 (Fixed a bug where size_t underflows) (Saki Takamachi).
 . Fixed GH-16236 (Fixed a bug in BcMath\Number::pow() and bcpow() when
 raising negative powers of 0) (Saki Takamachi).

- Core:
 . Added zend_call_stack_get implementation for NetBSD, DragonFlyBSD,
 Solaris and Haiku. (David Carlier)
 . Enabled ifunc checks on FreeBSD from the 12.x releases. (Freaky)
 . Changed the type of PHP_DEBUG and PHP_ZTS constants to bool. (haszi)
 . Fixed bug GH-13142 (Undefined variable name is shortened when contains \0).
 (nielsdos)
 . Fixed bug GH-13178 (Iterator positions incorrect when converting packed
 array to hashed). (ilutov)
 . Fixed zend fiber build for solaris default mode (32 bits). (David Carlier)
 . Fixed zend call stack size for macOs/arm64. (David Carlier)
 . Added support for Zend Max Execution Timers on FreeBSD. (Kévin Dunglas)
 . Ensure fiber stack is not backed by THP. (crrodriguez)
 . Implement GH-13609 (Dump wrapped object in WeakReference class). (nielsdos)
 . Added sparc64 arch assembly support for zend fiber. (Claudio Jeker)
 . Fixed GH-13581 no space available for TLS on NetBSD. (Paul Ripke)
 . Added fiber Sys-V loongarch64 support. (qiangxuhui)
 . Adjusted closure names to include the parent function's name. (timwolla)
 . Improve randomness of uploaded file names and files created by tempnam().
 (Arnaud)
 . Added gc and shutdown callbacks to zend_mm custom handlers.
 (Florian Engelhardt)
 . Fixed bug GH-14650 (Compute the size of pages before allocating memory).
 (Julien Voisin)
 . Fixed bug GH-11928 (The --enable-re2c-cgoto doesn't add the -g flag).
 (Peter Kokot)
 . Added the #[\Deprecated] attribute. (beberlei, timwolla)
 . Fixed GH-11389 (Allow suspending fibers in destructors). (Arnaud, trowski)
 . Fixed bug GH-14801 (Fix build for armv7). (andypost)
 . Implemented property hooks RFC. (ilutov)
 . Fix GH-14978 (The xmlreader extension phpize build). (Peter Kokot)
 . Throw Error exception when encountering recursion during comparison, rather
 than fatal error. (ilutov)
 . Added missing cstddef include for C++ builds. (cmb)
 . Updated build system scripts config.guess to 2024-07-27 and config.sub to
 2024-05-27. (Peter Kokot)
 . Fixed bug GH-15240 (Infinite recursion in trait hook). (ilutov)
 . Fixed bug GH-15140 (Missing variance check for abstract set with asymmetric
 type). (ilutov)
 . Fixed bug GH-15181 (Disabled output handler is flushed again). (cmb)
 . Passing E_USER_ERROR to trigger_error() is now deprecated. (Girgias)
 . Fixed bug GH-15292 (Dynamic AVX detection is broken for MSVC). (nielsdos)
 . Using "_" as a class name is now deprecated. (Girgias)
 . Exiting a namespace now clears seen symbols. (ilutov)
 . The exit (and die) language constructs now behave more like a function.
 They can be passed liked callables, are affected by the strict_types
 declare statement, and now perform the usual type coercions instead of
 casting any non-integer value to a string.
 As such, passing invalid types to exit/die may now result in a TypeError
 being thrown. (Girgias)
 . Fixed bug GH-15438 (Hooks on constructor promoted properties without
 visibility are ignored). (ilutov)
 . Fixed bug GH-15419 (Missing readonly+hook incompatibility check for readonly
 classes). (ilutov)
 . Fixed bug GH-15187 (Various hooked object iterator issues). (ilutov)
 . Fixed bug GH-15456 (Crash in get_class_vars() on virtual properties).
 (ilutov)
 . Fixed bug GH-15501 (Windows HAVE_<header>_H macros defined to 1 or
 undefined). (Peter Kokot)
 . Implemented asymmetric visibility for properties. (ilutov)
 . Fixed bug GH-15644 (Asymmetric visibility doesn't work with hooks). (ilutov)
 . Implemented lazy objects RFC. (Arnaud)
 . Fixed bug GH-15686 (Building shared iconv with external iconv library).
 (Peter Kokot, zeriyoshi)
 . Fixed missing error when adding asymmetric visibility to unilateral virtual
 property. (ilutov)
 . Fixed bug GH-15693 (Unnecessary include in main.c bloats binary).
 (nielsdos)
 . Fixed bug GH-15731 (AllowDynamicProperties validation should error on
 enums). (DanielEScherzer)
 . Fixed bug GH-16040 (Use-after-free of object released in hook). (ilutov)
 . Fixed bug GH-16026 (Reuse of dtor fiber during shutdown). (Arnaud)
 . Fixed bug GH-15999 (zend_std_write_property() assertion failure with lazy
 objects). (Arnaud)
 . Fixed bug GH-15960 (Foreach edge cases with lazy objects). (Arnaud)
 . Fixed bug GH-16185 (Various hooked object iterator issues). (ilutov)
 . Fixed bug OSS-Fuzz #371445205 (Heap-use-after-free in attr_free).
 (nielsdos)
 . Fixed missing error when adding asymmetric visibility to static properties.
 (ilutov)
 . Fixed bug OSS-Fuzz #71407 (Null-dereference WRITE in
 zend_lazy_object_clone). (Arnaud)
 . Fixed bug GH-16574 (Incorrect error "undefined method" messages).
 (nielsdos)
 . Fixed bug GH-16577 (EG(strtod_state).freelist leaks with opcache.preload).
 (nielsdos)
 . Fixed bug GH-16615 (Assertion failure in zend_std_read_property). (Arnaud)
 . Fixed bug GH-16342 (Added ReflectionProperty::isLazy()). (Arnaud)
 . Fixed bug GH-16725 (Incorrect access check for non-hooked props in hooked
 object iterator). (ilutov)

- Curl:
 . Deprecated the CURLOPT_BINARYTRANSFER constant. (divinity76)
 . Bumped required libcurl version to 7.61.0. (Ayesh)
 . Added feature_list key to the curl_version() return value. (Ayesh)
 . Added constants CURL_HTTP_VERSION_3 (libcurl 7.66) and CURL_HTTP_VERSION_3ONLY
 (libcurl 7.88) as options for CURLOPT_HTTP_VERSION (Ayesh Karunaratne)
 . Added CURLOPT_TCP_KEEPCNT to set the number of probes to send before
 dropping the connection. (David Carlier)
 . Added CURLOPT_PREREQFUNCTION Curl option to set a custom callback
 after the connection is established, but before the request is
 performed. (Ayesh Karunaratne)
 . Added CURLOPT_SERVER_RESPONSE_TIMEOUT, which was formerly known as
 CURLOPT_FTP_RESPONSE_TIMEOUT. (Ayesh Karunaratne)
 . The CURLOPT_DNS_USE_GLOBAL_CACHE option is now silently ignored. (Ayesh Karunaratne)
 . Added CURLOPT_DEBUGFUNCTION as a Curl option. (Ayesh Karunaratne)
 . Fixed bug GH-16359 (crash with curl_setopt* CURLOPT_WRITEFUNCTION
 without null callback). (David Carlier)
 . Fixed bug GH-16723 (CURLMOPT_PUSHFUNCTION issues). (cmb)

- Date:
 . Added DateTime[Immutable]::createFromTimestamp. (Marc Bennewitz)
 . Added DateTime[Immutable]::[get|set]Microsecond. (Marc Bennewitz)
 . Constants SUNFUNCS_RET_TIMESTAMP, SUNFUNCS_RET_STRING, and SUNFUNCS_RET_DOUBLE
 are now deprecated. (Jorg Sowa)
 . Fixed bug GH-13773 (DatePeriod not taking into account microseconds for end
 date). (Mark Bennewitz, Derick)

- DBA:
 . Passing null or false to dba_key_split() is deprecated. (Grigias)

- Debugging:
 . Fixed bug GH-15923 (GDB: Python Exception <class 'TypeError'>:
 exceptions must derive from BaseException). (nielsdos)

- DOM:
 . Added DOMNode::compareDocumentPosition(). (nielsdos)
 . Implement #53655 (Improve speed of DOMNode::C14N() on large XML documents).
 (nielsdos)
 . Fix cloning attribute with namespace disappearing namespace. (nielsdos)
 . Implement DOM HTML5 parsing and serialization RFC. (nielsdos)
 . Fix DOMElement->prefix with empty string creates bogus prefix. (nielsdos)
 . Handle OOM more consistently. (nielsdos)
 . Implemented "Improve callbacks in ext/dom and ext/xsl" RFC. (nielsdos)
 . Added DOMXPath::quote() static method. (divinity76)
 . Implemented opt-in ext/dom spec compliance RFC. (nielsdos)
 . Fixed bug #79701 (getElementById does not correctly work with duplicate
 definitions). (nielsdos)
 . Implemented "New ext-dom features in PHP 8.4" RFC. (nielsdos)
 . Fixed GH-14698 (segfault on DOM node dereference). (David Carlier)
 . Improve support for template elements. (nielsdos)
 . Fix trampoline leak in xpath callables. (nielsdos)
 . Throw instead of silently failing when creating a too long text node in
 (DOM)ParentNode and (DOM)ChildNode. (nielsdos)
 . Fixed bug GH-15192 (Segmentation fault in dom extension
 (html5_serializer)). (nielsdos)
 . Deprecated DOM_PHP_ERR constant. (nielsdos)
 . Removed DOMImplementation::getFeature(). (nielsdos)
 . Fixed bug GH-15331 (Element::$substitutedNodeValue test failed). (nielsdos)
 . Fixed bug GH-15570 (Segmentation fault (access null pointer) in
 ext/dom/html5_serializer.c). (nielsdos)
 . Fixed bug GH-13988 (Storing DOMElement consume 4 times more memory in
 PHP 8.1 than in PHP 8.0). (nielsdos)
 . Fix XML serializer errata: xmlns="" serialization should be allowed.
 (nielsdos)
 . Fixed bug GH-15910 (Assertion failure in ext/dom/element.c). (nielsdos)
 . Fix unsetting DOM properties. (nielsdos)
 . Fixed bug GH-16190 (Using reflection to call Dom\Node::__construct
 causes assertion failure). (nielsdos)
 . Fix edge-case in DOM parsing decoding. (nielsdos)
 . Fixed bug GH-16465 (Heap buffer overflow in DOMNode->getElementByTagName).
 (nielsdos)
 . Fixed bug GH-16594 (Assertion failure in DOM -> before). (nielsdos)

- Fileinfo:
 . Update to libmagic 5.45. (nielsdos)
 . Fixed bug #65106 (PHP fails to compile ext/fileinfo). (Guillaume Outters)

- FPM:
 . Implement GH-12385 (flush headers without body when calling flush()).
 (nielsdos)
 . Added DragonFlyBSD system to the list which set FPM_BACKLOG_DEFAULT
 to SOMAXCONN. (David Carlier)
 . /dev/poll events.mechanism for Solaris/Illumos setting had been retired.
 (David Carlier)
 . Added memory peak to the scoreboard / status page. (Flávio Heleno)

- FTP:
 . Removed the deprecated inet_ntoa call support. (David Carlier)
 . Fixed bug #63937 (Upload speed 10 times slower with PHP). (nielsdos)

- GD:
 . Fix parameter numbers and missing alpha check for imagecolorset().
 (Giovanni Giacobbi)
 . imagepng/imagejpeg/imagewep/imageavif now throw an exception on
 invalid quality parameter. (David Carlier)
 . Check overflow/underflow for imagescale/imagefilter. (David Carlier)
 . Added gdImageClone to bundled libgd. (David Carlier)

- Gettext:
 . bind_textdomain_codeset, textdomain and d(*)gettext functions
 now throw an exception on empty domain. (David Carlier)

- GMP:
 . The GMP class is now final and cannot be extended anymore. (Girgias)
 . RFC: Change GMP bool cast behavior. (Saki Takamachi)

- Hash:
 . Changed return type of hash_update() to true. (nielsdos)
 . Added HashContext::__debugInfo(). (timwolla)
 . Deprecated passing incorrect data types for options to ext/hash functions.
 (nielsdos)
 . Added SSE2 and SHA-NI implementation of SHA-256. (timwolla, Colin Percival,
 Graham Percival)
 . Fix GH-15384 (Build fails on Alpine / Musl for amd64). (timwolla)
 . Fixed bug GH-15742 (php_hash_sha.h incompatible with C++). (cmb)

- IMAP:
 . Moved to PECL. (Derick Rethans)

- Intl:
 . Added IntlDateFormatter::PATTERN constant. (David Carlier)
 . Fixed Numberformatter::__construct when the locale is invalid, now
 throws an exception. (David Carlier)
 . Added NumberFormatter::ROUND_TOWARD_ZERO and ::ROUND_AWAY_FROM_ZERO as
 aliases for ::ROUND_DOWN and ::ROUND_UP. (Jorg Sowa)
 . Added NumberFormatter::ROUND_HALFODD. (Ayesh Karunaratne)
 . Added PROPERTY_IDS_UNARY_OPERATOR, PROPERTY_ID_COMPAT_MATH_START and
 PROPERTY_ID_COMPAT_MATH_CONTINUE constants. (David Carlier)
 . Added IntlDateFormatter::getIanaID/intltz_get_iana_id method/function.
 (David Carlier)
 . Set to C++17 standard for icu 74 and onwards. (David Carlier)
 . resourcebundle_get(), ResourceBundle::get(), and accessing offsets on a
 ResourceBundle object now throw:
 - TypeError for invalid offset types
 - ValueError for an empty string
 - ValueError if the integer index does not fit in a signed 32 bit integer
 . ResourceBundle::get() now has a tentative return type of:
 ResourceBundle|array|string|int|null
 . Added the new Grapheme function grapheme_str_split. (youkidearitai)
 . Added IntlDateFormatter::parseToCalendar. (David Carlier)
 . Added SpoofChecker::setAllowedChars to set unicode chars ranges.
 (David Carlier)

- LDAP:
 . Added LDAP_OPT_X_TLS_PROTOCOL_MAX/LDAP_OPT_X_TLS_PROTOCOL_TLS1_3
 constants. (StephenWall)

- LibXML:
 . Added LIBXML_RECOVER constant. (nielsdos)
 . libxml_set_streams_context() now throws immediately on an invalid context
 instead of at the use-site. (nielsdos)
 . Added LIBXML_NO_XXE constant. (nielsdos)

- MBString:
 . Added mb_trim, mb_ltrim and mb_rtrim. (Yuya Hamada)
 . Added mb_ucfirst and mb_lcfirst. (Yuya Hamada)
 . Updated Unicode data tables to Unicode 15.1. (Ayesh Karunaratne)
 . Fixed bug GH-15824 (mb_detect_encoding(): Argument $encodings contains
 invalid encoding "UTF8"). (Yuya Hamada)
 . Updated Unicode data tables to Unicode 16.0. (Ayesh Karunaratne)

- Mysqli:
 . The mysqli_ping() function and mysqli::ping() method are now deprecated,
 as the reconnect feature was removed in PHP 8.2. (Kamil Tekiela)
 . The mysqli_kill() function and mysqli::kill() method are now deprecated.
 If this functionality is needed a SQL "KILL" command can be used instead.
 (Kamil Tekiela)
 . The mysqli_refresh() function and mysqli::refresh() method are now deprecated.
 If this functionality is needed a SQL "FLUSH" command can be used instead.
 (Kamil Tekiela)
 . Passing explicitly the $mode parameter to mysqli_store_result() has been
 deprecated. As the MYSQLI_STORE_RESULT_COPY_DATA constant was only used in
 conjunction with this function it has also been deprecated. (Girgias)

- MySQLnd:
 . Fixed bug GH-13440 (PDO quote bottleneck). (nielsdos)
 . Fixed bug GH-10599 (Apache crash on Windows when using a self-referencing
 anonymous function inside a class with an active mysqli connection).
 (nielsdos)

- Opcache:
 . Added large shared segments support for FreeBSD. (David Carlier)
 . If JIT is enabled, PHP will now exit with a fatal error on startup in case
 of JIT startup initialization issues. (danog)
 . Increased the maximum value of opcache.interned_strings_buffer to 32767 on
 64bit archs. (Arnaud)
 . Fixed bug GH-13834 (Applying non-zero offset 36 to null pointer in
 zend_jit.c). (nielsdos)
 . Fixed bug GH-14361 (Deep recursion in zend_cfg.c causes segfault).
 (nielsdos)
 . Fixed bug GH-14873 (PHP 8.4 min function fails on typed integer).
 (nielsdos)
 . Fixed bug GH-15490 (Building of callgraph modifies preloaded symbols).
 (ilutov)
 . Fixed bug GH-15178 (Assertion in tracing JIT on hooks). (ilutov)
 . Fixed bug GH-15657 (Segmentation fault in dasm_x86.h). (nielsdos)
 . Added opcache_jit_blacklist() function. (Bob)
 . Fixed bug GH-16009 (Segmentation fault with frameless functions and
 undefined CVs). (nielsdos)
 . Fixed bug GH-16186 (Assertion failure in Zend/zend_operators.c). (Arnaud)
 . Fixed bug GH-16572 (Incorrect result with reflection in low-trigger JIT).
 (nielsdos)
 . Fixed GH-16839 (Error on building Opcache JIT for Windows ARM64). (cmb)

- OpenSSL:
 . Fixed bug #80269 (OpenSSL sets Subject wrong with extraattribs parameter).
 (Jakub Zelenka)
 . Implement request #48520 (openssl_csr_new - allow multiple values in DN).
 (Jakub Zelenka)
 . Introduced new serial_hex parameter to openssl_csr_sign. (Jakub Zelenka,
 Florian Sowade)
 . Added X509_PURPOSE_OCSP_HELPER and X509_PURPOSE_TIMESTAMP_SIGN constants.
 (Vincent Jardin)
 . Bumped minimum required OpenSSL version to 1.1.1. (Ayesh Karunaratne)
 . Added compile-time option --with-openssl-legacy-provider to enable legacy
 provider. (Adam Saponara)
 . Added support for Curve25519 + Curve448 based keys. (Manuel Mausz)
 . Fixed bug GH-13343 (openssl_x509_parse should not allow omitted seconds in
 UTCTimes). (Jakub Zelenka)
 . Bumped minimum required OpenSSL version to 1.1.0. (cmb)
 . Implement GH-13514 PASSWORD_ARGON2 from OpenSSL 3.2. (Remi)

- Output:
 . Clear output handler status flags during handler initialization. (haszi)
 . Fixed bug with url_rewriter.hosts not used by output_add_rewrite_var().
 (haszi)

- PCNTL:
 . Added pcntl_setns for Linux. (David Carlier)
 . Added pcntl_getcpuaffinity/pcntl_setcpuaffinity. (David Carlier)
 . Updated pcntl_get_signal_handler signal id upper limit to be
 more in line with platforms limits. (David Carlier)
 . Added pcntl_getcpu for Linux/FreeBSD/Solaris/Illumos. (David Carlier)
 . Added pcntl_getqos_class/pcntl_setqos_class for macOs. (David Carlier)
 . Added SIGCKPT/SIGCKPTEXIT constants for DragonFlyBSD. (David Carlier)
 . Added FreeBSD's SIGTRAP handling to pcntl_siginfo_to_zval. (David Carlier)
 . Added POSIX pcntl_waitid. (Vladimir Vrzić)
 . Fixed bug GH-16769: (pcntl_sigwaitinfo aborts on signal value
 as reference). (David Carlier)

- PCRE:
 . Upgrade bundled pcre2lib to version 10.43. (nielsdos)
 . Add "/r" modifier. (Ayesh)
 . Upgrade bundled pcre2lib to version 10.44. (Ayesh)
 . Fixed GH-16189 (underflow on offset argument). (David Carlier)
 . Fix UAF issues with PCRE after request shutdown. (nielsdos)

- PDO:
 . Fixed setAttribute and getAttribute. (SakiTakamachi)
 . Implemented PDO driver-specific subclasses RFC. (danack, kocsismate)
 . Added support for PDO driver-specific SQL parsers. (Matteo Beccati)
 . Fixed bug GH-14792 (Compilation failure on pdo_* extensions).
 (Peter Kokot)
 . mysqlnd: support ER_CLIENT_INTERACTION_TIMEOUT. (Appla)
 . The internal header php_pdo_int.h is no longer installed; it is not
 supposed to be used by PDO drivers. (cmb)
 . Fixed bug GH-16167 (Prevent mixing PDO sub-classes with different DSN).
 (kocsismate)