PHP NEWS

|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||

?? ??? ????, PHP 8.7.0alpha1

- Curl:

. curl_multi_exec() now throws a TypeError when still_running is not an int.

(arshidkv12)

- FPM:

. Use recommended TYPE, HELP order for OpenMetrics metadata.

(Marcel Hernandez)

- Hash:

. Fixed mhash_keygen_s2k() truncating a $length above INT_MAX instead of

throwing a ValueError. (Marc Bennewitz)

- Intl:

. Fixed Collator attribute and strength methods not rejecting an

unconstructed Collator. (Ilia Alshanetsky)

. Added optional $availableLocales argument to Locale::acceptFromHttp()

(GH-24074). (David Carlier)

. Fixed a double-free when Calendar::createInstance() or

IntlCalendar::fromDateTime() fails after adopting a TimeZone.

(Ilia Alshanetsky)

- Lexbor:

. Merge patches lexbor/lexbor@8a14bc0 and lexbor/lexbor@f67ce4b, fixing a

heap buffer overflow in :lexbor-contains() parsing and buffer overflows

in malformed decode replay. (alexandre-daubois)

. Merge patches lexbor/lexbor@859f100, lexbor/lexbor@a36e09a,

lexbor/lexbor@b0f7412, lexbor/lexbor@1b215a8, lexbor/lexbor@385afff,

lexbor/lexbor@e6c068f, lexbor/lexbor@327a8b6, lexbor/lexbor@917742f and

lexbor/lexbor@e89c258, fixing dropped usernames containing an at sign,

uninitialized memory in IDNA buffer growth, the encoding of a space

before a query or fragment in an opaque path, a query or fragment lost

after a dot segment in a path, replacement file drive paths, the output

encoding used for percent-encoding, the URLSearchParams tail pointer and

fragment serialization without a query. (alexandre-daubois)

- MBString:

. Fixed bug GH-23106 (mb_strpos() reads past the end of a haystack ending in

a truncated UTF-8 sequence). (Lazizbek Ergashev)

. Updated Unicode data tables to Unicode 18.0 (Yuya Hamada)

. Fixed mbstring functions emitting surrogates in UTF-8 output and flagging

it as valid UTF-8. (Nicolas Grekas)

- MySQLi:

. Fix GH-22854: Fixed failed assertion when accessing mysqli property after

failed reconnection. (Kamil Tekiela)

. Fixed memory leak when closing a prepared statement after its connection

was killed. (Kamil Tekiela)

- MySQLnd:

. Fixed field_count not resetting on OK packet. (Kamil Tekiela)

- Opcache:

. Fixed range inference of assignments through typed references.

(Ilia Alshanetsky)

. Fixed bug GH-23693 (Tracing JIT produces wrong results for a guard on a

loop-invariant addition). (Ilia Alshanetsky)

. Fixed OSS-Fuzz #545352966 (default value AST of an SHM-persisted partial).

(ndossche)

- PDO:

. Fixed PDOStatement::getColumnMeta() reading out of bounds for an invalid

column index. (Ilia Alshanetsky)

. Fixed PDOStatement::bindColumn() registering a binding for a column name

that is not in the result set. (Ilia Alshanetsky)

. Fixed bug GH-23962 (Destroying a persistent PDO instance rolls back a

transaction still in use by another instance). (Lazizbek Ergashev)

- PGSQL:

. Fixed pg_lo_write() rejecting data containing null bytes. (Ilia Alshanetsky)

- Posix:

. Reverted the validity check on the flags argument of posix_access().

(David Carlier)

- Readline:

. Fixed a heap over-read in the interactive shell prompt when cli.prompt is

set to an empty string. (Ilia Alshanetsky)

- Session:

. Fixed session_start() continuing after a failed create_sid() when

session.use_strict_mode rejects the supplied ID. (Ilia Alshanetsky)

. Fixed exceptions from user-defined create_sid() handlers being replaced

by return-value validation errors. (Ilia Alshanetsky)

- SimpleXML:

. Fixed bug GH-12171 (SimpleXML property-proxy equality ignores element

names). (Ilia Alshanetsky)

- SOAP:

. Fixed the SOAP client accepting a response body shorter than its

Content-Length and reusing the connection. (Ilia Alshanetsky)

- SPL:

. Fixed bug GH-23385 (SplDoublyLinkedList::serialize() use-after-free when

__serialize() removes an element). (David Carlier)

- SQLite:

. Fixed a crash when SQLite3::close() is called from a userland callback.

(Ilia Alshanetsky)

. Fixed bug GH-22051 (Inconsistent error reporting in SQLite3Result::reset()

and SQLite3Result::finalize()). (Ilia Alshanetsky)

- Streams:

. Applied the so_linger, so_rcvbuf and so_sndbuf context options to unix

sockets. (David Carlier)

- Standard:

. Fixed bug #60110 (fclose(), file_put_contents(), copy() do not return false

properly). (Jakub Zelenka, Ilija Tovilo)

. Fixed three Windows-only proc_open() defects: an uninitialized

PROCESS_INFORMATION, an indeterminate comspec pointer after a failed

lookup, and an unchecked CreateFileA() failure. (Ilia Alshanetsky)

. Fix persistent stream context lifetime during shutdown (Levi Morrison)

. Fixed bug GH-23780 (unserialize('') fails silently). (timwolla)

. Improved performance of array_splice() when inserting without removing

elements. (mehmetcansahin)

. Enforce max_filter_count: limit the number of filters that can be chained

in a php://filter URL. (Sjoerd Langkemper)

. Improved performance of array_chunk() when not preserving keys.

(mehmetcansahin)

- URI:

. Fix casing of enum cases in UriHostType and UrlHostType to match the RFC

and PHP’s naming policy. (timwolla)

- XML:

. Fixed xml_get_current_byte_index() returning negative values for byte

indexes beyond 2 GiB on Windows x64. (Marc Bennewitz)

- Zlib:

. Fixed inflate_init() dropping the preset dictionary for raw streams with

a non-default window. (Ilia Alshanetsky)

<<< NOTE: Insert NEWS from last stable release here prior to actual release! >>>