Commit 6baec6288b3 for php.net
commit 6baec6288b30f27b0eec18816df689ec6dc69d7b
Merge: 6bad8fdeaa1 8d0d6307aac
Author: Ilia Alshanetsky <ilia@ilia.ws>
Date: Sat Sep 19 17:37:05 2026 -0400
Merge branch 'PHP-8.4' into PHP-8.5
* PHP-8.4:
Fix three Win32-only defects in proc_open descriptor handling
diff --cc NEWS
index 0a8f3f02eb4,51580b6c778..592c19bb1a9
--- a/NEWS
+++ b/NEWS
@@@ -53,8 -50,23 +53,13 @@@ PH
. Fixed a crash when SQLite3::close() is called from a userland callback.
(Ilia Alshanetsky)
+ - Standard:
+ . Fixed three Windows-only proc_open() defects: an uninitialized
+ PROCESS_INFORMATION, an indeterminate comspec pointer after a failed
+ lookup, and an unchecked CreateFileA() failure. (Ilia Alshanetsky)
+
-- XSL:
- . Fixed bug GH-23730 (use-after-free when XSLTProcessor::importStylesheet()
- is called during a transformation). (David Carlier)
-
-- Zip:
- . Fixed ZipArchive::extractTo() ignoring files given in a non-list array.
- (David Carlier)
- . Fixed bug GH-23747 (ZipArchive::close() use-after-free from a progress or
- cancel callback). (David Carlier)
-
-24 Sep 2026, PHP 8.4.26
+24 Sep 2026, PHP 8.5.11
- BCMath:
. Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds