Commit affde50531c for php.net
commit affde50531cf6d6ef97df1866d363daa60302e26
Merge: 9f32f90ad35 55d759dc96b
Author: Ilia Alshanetsky <ilia@ilia.ws>
Date: Mon Aug 17 06:44:29 2026 -0400
Merge branch 'PHP-8.5'
* PHP-8.5:
Fix DOMNameSpaceNode clone UAF after xinclude
diff --cc NEWS
index a75d304276f,1bac1989e7e..8e795015064
--- a/NEWS
+++ b/NEWS
@@@ -5,33 -5,17 +5,35 @@@ PH
- Core:
. Fixed bug GH-15375 (Nested "yield from" skips items after a valid() or
next() call on the inner generator). (iliaal)
+ . Fixed GH-10497 (Allow direct mutation of objects stored in constants or
+ class constants via OBJ->prop = $val). (Khaled Alam)
+ . Reverted GH-22833, which attempted to fix bug GH-18985. (ilutov)
+
+- Curl:
+ . Set content length using CURLOPT_POSTFIELDSIZE_LARGE instead of
+ CURLOPT_POSTFIELDSIZE. This makes it possible to post strings larger than
+ 2GB on some platforms, e.g. Windows. (Sjoerd Langkemper)
- DOM:
+ . Fixed bug GH-22624 (use-after-free via DOMNameSpaceNode after
+ DOMDocument::xinclude()). (David Carlier)
+ . Fixed a use-after-free when cloning a DOMNameSpaceNode after
+ DOMDocument::xinclude(). (iliaal)
-- Opcache:
- . Fixed opcache.protect_memory race under ZTS. (realFlowControl)
+- PDO_PGSQL:
+ . Fixed several lazy fetch (PDO::ATTR_PREFETCH => 0) defects: an infinite
+ loop when cleaning up a fetch left in a COPY, a use-after-free when a
+ statement with emulated or disabled prepares is destroyed, a connection
+ left busy for the next fetch, and rows delivered from a result another
+ statement took over. (KentarouTakeda)
+
+- Phar:
+ . Fixed Phar archives being automatically detected when ".phar" only occurs
+ in a directory name or is not a filename extension in an included file's
+ path. (Weilin Du)
- Readline:
- . Fixed the interactive shell not waiting for the pager process to exit.
- (Weilin Du)
+ . Fixed class constant completion in the interactive shell. (Weilin Du)
- Zip:
. Fixed bug GH-17787 (ZipArchive stream stops reading early when the archive