php-src/NEWS at master · php/php-src · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
PHP                                                                        NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
?? ??? ????, PHP 8.7.0alpha1

- Curl:
  . curl_multi_exec() now throws a TypeError when still_running is not an int.
    (arshidkv12)
  . Uploading multiple files with the same field name is now possible by
    passing an array of CURLFile or CURLStringFile objects to
    CURLOPT_POSTFIELDS. (Sjoerd Langkemper)

- FPM:
  . Use recommended TYPE, HELP order for OpenMetrics metadata.
    (Marcel Hernandez)

- Hash:
  . Fixed mhash_keygen_s2k() truncating a $length above INT_MAX instead of
    throwing a ValueError. (Marc Bennewitz)

- Intl:
  . Added Transliterator::toRules() and transliterator_to_rules().
    (Weilin Du, David Carlier)
  . Fixed Collator attribute and strength methods not rejecting an
    unconstructed Collator. (Ilia Alshanetsky)
  . Added optional $availableLocales argument to Locale::acceptFromHttp()
    (GH-24074). (David Carlier)
  . Fixed a double-free when Calendar::createInstance() or
    IntlCalendar::fromDateTime() fails after adopting a TimeZone.
    (Ilia Alshanetsky)

- Lexbor:
  . Merge patches lexbor/lexbor@8a14bc0 and lexbor/lexbor@f67ce4b, fixing a
    heap buffer overflow in :lexbor-contains() parsing and buffer overflows
    in malformed decode replay. (alexandre-daubois)
  . Merge patches lexbor/lexbor@859f100, lexbor/lexbor@a36e09a,
    lexbor/lexbor@b0f7412, lexbor/lexbor@1b215a8, lexbor/lexbor@385afff,
    lexbor/lexbor@e6c068f, lexbor/lexbor@327a8b6, lexbor/lexbor@917742f and
    lexbor/lexbor@e89c258, fixing dropped usernames containing an at sign,
    uninitialized memory in IDNA buffer growth, the encoding of a space
    before a query or fragment in an opaque path, a query or fragment lost
    after a dot segment in a path, replacement file drive paths, the output
    encoding used for percent-encoding, the URLSearchParams tail pointer and
    fragment serialization without a query. (alexandre-daubois)

- LibXML:
  . Clear the libxml last error in libxml_use_internal_errors(false).
    (lacatoire)

- MBString:
  . Fixed bug GH-23106 (mb_strpos() reads past the end of a haystack ending in
    a truncated UTF-8 sequence). (Lazizbek Ergashev)
  . Updated Unicode data tables to Unicode 18.0 (Yuya Hamada)
  . Fixed mbstring functions emitting surrogates in UTF-8 output and flagging
    it as valid UTF-8. (Nicolas Grekas)
  . Fixed bug GH-23958 (truncated encoding names resolving to full names). (Kamil Tekiela)

- MySQLi:
  . Fix GH-22854: Fixed failed assertion when accessing mysqli property after
    failed reconnection. (Kamil Tekiela)
  . Fixed memory leak when closing a prepared statement after its connection
    was killed. (Kamil Tekiela)

- MySQLnd:
  . Fixed field_count not resetting on OK packet. (Kamil Tekiela)

- Opcache:
  . Fixed range inference of assignments through typed references.
    (Ilia Alshanetsky)
  . Fixed bug GH-23693 (Tracing JIT produces wrong results for a guard on a
    loop-invariant addition). (Ilia Alshanetsky)
  . Fixed OSS-Fuzz #545352966 (default value AST of an SHM-persisted partial).
    (ndossche)

- PDO:
  . Fixed PDOStatement::getColumnMeta() reading out of bounds for an invalid
    column index. (Ilia Alshanetsky)
  . Fixed PDOStatement::bindColumn() registering a binding for a column name
    that is not in the result set. (Ilia Alshanetsky)
  . Fixed bug GH-23962 (Destroying a persistent PDO instance rolls back a
    transaction still in use by another instance). (Lazizbek Ergashev)

- PDO_PGSQL:
  . Improved performance of the SQL parser that handles placeholders.
    (brainexe)

- PGSQL:
  . Fixed pg_lo_write() rejecting data containing null bytes. (Ilia Alshanetsky)

- Posix:
  . Reverted the validity check on the flags argument of posix_access().
    (David Carlier)

- Readline:
  . Fixed a heap over-read in the interactive shell prompt when cli.prompt is
    set to an empty string. (Ilia Alshanetsky)

- Session:
  . Fixed session_start() continuing after a failed create_sid() when
    session.use_strict_mode rejects the supplied ID. (Ilia Alshanetsky)
  . Fixed exceptions from user-defined create_sid() handlers being replaced
    by return-value validation errors. (Ilia Alshanetsky)
  . Fixed calling SessionHandler::open() twice without an intervening
    close() when re-initializing an active session. (Ilia Alshanetsky)

- SimpleXML:
  . Fixed bug GH-12171 (SimpleXML property-proxy equality ignores element
    names). (Ilia Alshanetsky)

- SOAP:
  . Fixed the SOAP client accepting a response body shorter than its
    Content-Length and reusing the connection. (Ilia Alshanetsky)

- SPL:
  . Fixed bug GH-23385 (SplDoublyLinkedList::serialize() use-after-free when
    __serialize() removes an element). (David Carlier)

- SQLite:
  . Fixed a crash when SQLite3::close() is called from a userland callback.
    (Ilia Alshanetsky)
  . Fixed bug GH-22051 (Inconsistent error reporting in SQLite3Result::reset()
    and SQLite3Result::finalize()). (Ilia Alshanetsky)

- Streams:
  . Applied the so_linger, so_rcvbuf and so_sndbuf context options to unix
    sockets. (David Carlier)

- Standard:
  . Fixed bug #60110 (fclose(), file_put_contents(), copy() do not return false
    properly). (Jakub Zelenka, Ilija Tovilo)
  . Fixed three Windows-only proc_open() defects: an uninitialized
    PROCESS_INFORMATION, an indeterminate comspec pointer after a failed
    lookup, and an unchecked CreateFileA() failure. (Ilia Alshanetsky)
  . Fix persistent stream context lifetime during shutdown (Levi Morrison)
  . Fixed bug GH-23780 (unserialize('') fails silently). (timwolla)
  . Fixed stream_select() aborting the whole call once any watched stream's
    descriptor exceeded FD_SETSIZE; it no longer imposes that limit, so watching
    many descriptors no longer requires rebuilding with --enable-fd-setsize.
    (Frode Børli)
  . Fixed stream_select() on Windows capping the number of watched sockets at
    FD_SETSIZE; the winsock fd_set now grows on demand. (Frode Børli)
  . Fixed stream_select() on Windows overflowing a fixed 64-entry stack array
    (crashing with a stack buffer overrun) when passed more than 64 pipe or file
    handles; it now fails gracefully instead. (Frode Børli)
  . Improved performance of array_splice() when inserting without removing
    elements. (mehmetcansahin)
  . Enforce max_filter_count: limit the number of filters that can be chained
    in a php://filter URL. (Sjoerd Langkemper)
  . Improved performance of array_chunk() when not preserving keys.
    (mehmetcansahin)
  . Improved performance of resolving the charset of HTML functions,
    especially UTF-8. (Nicolas Grekas)
  . Improved performance of htmlspecialchars() when nothing needs encoding.
    (Nicolas Grekas)

- URI:
  . Fix casing of enum cases in UriHostType and UrlHostType to match the RFC
    and PHP’s naming policy. (timwolla)

- XML:
  . Fixed xml_get_current_byte_index() returning negative values for byte
    indexes beyond 2 GiB on Windows x64. (Marc Bennewitz)

- Zlib:
  . Fixed inflate_init() dropping the preset dictionary for raw streams with
    a non-default window. (Ilia Alshanetsky)

<<< NOTE: Insert NEWS from last stable release here prior to actual release! >>>