Commit 9d5a6159e9d for php.net

commit 9d5a6159e9d26746e09b7f8f546f128ad1d63032
Merge: 197bdc0a405 8196275133e
Author: Ilia Alshanetsky <ilia@ilia.ws>
Date:   Thu Aug 27 08:20:28 2026 -0400

    Merge branch 'PHP-8.4' into PHP-8.5

    * PHP-8.4:
      [http] Fix out-of-bounds read on empty Location header

diff --cc NEWS
index 466321cf102,59517a0dd35..074990dc4d5
--- a/NEWS
+++ b/NEWS
@@@ -56,15 -58,17 +56,19 @@@ PH
    . Fixed bug GH-23418 (Use-after-free when looking up mounted directories).
      (Weilin Du)

 +- Readline:
 +  . Fixed the interactive shell not waiting for the pager process to exit.
 +    (Weilin Du)
 +
+ - Standard:
+   . Fixed an out-of-bounds read when following a redirect response with an
+     empty Location header. (iliaal)
 -  . Fixed a memory leak in array_merge_recursive() when the recursive merge of
 -    an object converted to an array fails. (David Carlier)
+
  - Zip:
 +  . Fixed bug GH-17787 (ZipArchive stream stops reading early when the archive
 +    is freed while the stream is still open). (Eyüp Can Akman)
    . Fixed bug GH-23276 (ZipArchive subclass storing its own stream cannot be
      garbage collected). (Weilin Du, ndossche)
 -  . Fixed ZipArchive::extractTo() and ZipArchive::getFrom*() reporting success
 -    on corrupted entries. (David Carlier)

  - SAPI:
    . Fixed fuzzer targets failing to build in isolation. (Mrmaxmeier)