Commit 4d303daf07c for php

commit 4d303daf07cfd5eec89f4bba18be6774823c910c
Merge: 247199192c5 974de49381d
Author: Jakub Zelenka <bukka@php.net>
Date:   Tue Oct 27 17:02:28 2026 +0100

    Merge branch 'PHP-8.4' into PHP-8.5

    * PHP-8.4:
      Fix FPM worker output prefix longer than its buffer or log_limit

diff --cc NEWS
index 3fa71b51334,e63029cba56..94bad1b0eb6
--- a/NEWS
+++ b/NEWS
@@@ -47,16 -52,34 +47,23 @@@ PH
      NULL deref on first use after a failed open). (Girgias)

  - DOM:
 -  . Fixed bug GH-23352 (UAF reading an attribute value node retained across
 -    DOMDocument::adoptNode()). (David Carlier)
 -  . Fixed bug GH-24260 (querySelectorAll() returns duplicate elements for
 -    selector lists). (fivefilters)
 -  . Fixed bug GH-23334 (Use-after-free in php_dom_free_templated_content()).
 -    (David Carlier, ndossche)
 -  . Fixed bug GH-22077 (UAF in custom XPath function). (Joe Afflerbach)
 -  . Fixed bug GH-22554 (use-after-free with XPath callback returning a node
 -    from a foreign document). (David Carlier)
 -  . Fixed DOMXPath crash wrapping a foreign node after a nodeset callback.
 -    (Ilia Alshanetsky)
    . Fix error paths in dom_xml_serializing_a_document_node(). (ndossche)

+ - FFI:
+   . Fixed bug GH-24582 (Memory leaks in ext/ffi parser when finalize_type()
+     bails out). (matyapiro31, David Carlier)
+
 +- Fileinfo:
 +  . Fixed bug GH-24289 (finfo::file() reports the wrong argument number for
 +    an invalid $filename). (Lazizbek Ergashev)
 +
  - FPM:
    . Fixed bug GH-24229 (fcgi_close() passes shutdown() a literal 1, which is
      SHUT_RD in WASI). (Ryosuke Ishibashi)
+   . Fixed crash and stack memory disclosure in the worker output logging with
+     a pool name longer than the message prefix buffer or log_limit.
+     (Martin Mirchev)

 -- Fileinfo:
 -  . Fixed bug GH-24289 (finfo::file() reports the wrong argument number for
 -    an invalid $filename). (Lazizbek Ergashev)
 -
  - FTP:
    . Fix double free in ext/ftp data_accept() on accept failure. (alepacheco)