August 29, 2024

Community Fixes

PHP version 8.3.11 fixes

  • Streams
    • Reverted fix for GH-14930: Custom stream wrapper dir_readdir output truncated to 255 characters

PHP version 8.3.11, 8.2.23 fixes

  • Core

    • Fixed bug GH-15020: Memory leak in Zend/Optimizer/escape_analysis.c
    • Fixed bug GH-15023: Memory leak in Zend/zend_ini.c
    • Fixed bug GH-13330: Append -Wno-implicit-fallthrough flag conditionally
    • Fix uninitialized memory in network.c
    • Fixed bug GH-15108: Segfault when destroying generator during shutdown
    • Fixed bug GH-15275: Crash during GC of suspended generator delegate

  • Curl

    • Fixed case when curl_error returns an empty string

  • DOM

    • Fix UAF when removing doctype and using foreach iteration

  • FFI

    • Fixed bug GH-14286: ffi enum type (when enum has no name) make memory leak

  • Hash

    • Fix crash when converting array data for array in shm in xxh3

  • Intl

    • Fixed bug GH-15087: IntlChar::foldCase()'s $option is not optional

  • Opcache

    • Fixed bug GH-13817: Segmentation fault for enabled observers after pass 4
    • Fixed bug GH-13775: Memory leak possibly related to opcache SHM placement

  • Output

    • Fixed bug GH-15179: Segmentation fault (null pointer dereference) in ext/standard/url_scanner_ex.re

  • PDO_Firebird

    • Fix bogus fallthrough path in firebird_handle_get_attribute()

  • PHPDBG

    • Fixed bug GH-13199: EOF emits redundant prompt in phpdbg local console mode with libedit/readline
    • Fixed bug GH-15268: heap buffer overflow in phpdbg (zend_hash_num_elements()Zend/zend_hash.h)
    • Fixed bug GH-15210: use-after-free on watchpoint allocations

  • Random

    • Fixed part of bug GH-15381, checking getrandom availability on solaris

  • Soap

    • Fixed bug #55639: Digest autentication dont work
    • Fix SoapFault property destruction
    • Fixed bug GH-15252: SOAP XML broken since PHP 8.3.9 when using classmap constructor option

  • Standard

    • Fix passing non-finite timeout values in stream functions
    • Fixed GH-14780: p(f)sockopen timeout overflow

  • Streams

    • Fixed bug GH-15028: Memory leak in ext/phar/stream.c
    • Fixed bug GH-15034: Integer overflow on stream_notification_callbackbyte_max parameter with files bigger than 2GB

  • Tidy

    • Fix memory leaks in ext/tidy basedir restriction code

August 5, 2024

Community Fixes

PHP version 8.3.10 fixes

  • Fileinfo

    • Fixed bug GH-14888: README.REDIST.BINS refers to non-existing LICENSE.

  • Standard

    • Fixed bug GH-14775: range function overflow with negative step argument.

  • Streams

    • Fixed bug GH-14930: Custom stream wrapper dir_readdir output truncated to 255 characters in PHP 8.3.

PHP version 8.2.22 fixes

  • SimpleXML
    • Fixed bug GH-14638: null dereference after XML parsing failure.

PHP version 8.3.10, 8.2.22 fixes

  • Core

    • Fixed bug GH-13922: Fixed support for systems with sysconf(_SC_GETPW_R_SIZE_MAX) == -1.
    • Fixed bug GH-14626: Fix is_zend_ptr() for huge blocks.
    • Fixed bug GH-14590: Memory leak in FPM test gh13563-conf-bool-env.phpt.
    • Fixed OSS-Fuzz #69765.
    • Fixed bug GH-14741: Segmentation fault in Zend/zend_types.h.
    • Fixed bug GH-14969: Use-after-free in property coercion with __toString().
    • Fixed bug GH-14961: Comment between -> and keyword results in parse error.

  • Dom

    • Fixed bug GH-14702: DOMDocument::xinclude() crash.

  • Gd

    • ext/gd/tests/gh10614.phpt: skip if no PNG support.
    • restored warning instead of fata error.

  • LibXML

    • Fixed bug GH-14563: Build failure with libxml2 v2.13.0.

  • Opcache

    • Fixed bug GH-14550: No warning message when Zend DTrace is enabled that opcache.jit is implictly disabled.

  • Output

    • Fixed bug GH-14808: Unexpected null pointer in Zend/zend_string.h with empty output buffer.

  • PDO

    • Fixed bug GH-14712: Crash with PDORow access to null property.

  • Phar

    • Fixed bug GH-14603: null string from zip entry.

  • PHPDBG

    • Fixed bug GH-14596: crashes with ASAN and ZEND_RC_DEBUG=1.
    • Fixed bug GH-14553: echo output trimmed at NULL byte.

  • Shmop

    • Fixed bug GH-14537: shmop Windows 11 crashes the process.

  • SPL

    • Fixed bug GH-14639: Member access within null pointer in ext/spl/spl_observer.c.

  • Standard

    • Fix 32-bit wordwrap test failures.
    • Fixed bug GH-14774: time_sleep_until overflow.

  • Tidy

    • Fix memory leak in tidy_repair_file().

  • Treewide

    • Fix compatibility with libxml2 2.13.2.

  • XML

    • Move away from to-be-deprecated libxml fields.
    • Fixed bug GH-14834: Error installing PHP when --with-pear is used.