Commit de748772668 for php.net

commit de748772668634dd984c9c295e5b82bde6aa8254
Merge: cafbcde1620 9309a1e27c0
Author: Weilin Du <weilindu@php.net>
Date:   Tue Sep 8 00:11:02 2026 +0800

    Merge branch 'PHP-8.5'

    * PHP-8.5:
      Fix bounds check in multibyte UTF detection (#23527)

diff --cc NEWS
index 5c6f6e8db9e,490c9f559a8..c1bf79e07fb
--- a/NEWS
+++ b/NEWS
@@@ -7,14 -7,14 +7,16 @@@ PH
      n_scale. (Ilia Alshanetsky)

  - Core:
+   . Fixed out-of-bounds reads during automatic UTF-16/32 encoding detection.
+     (Yudai Takada)
 -  . Fixed bug GH-15375 (Nested "yield from" skips items after a valid() or
 -    next() call on the inner generator). (iliaal)
 +  . Calling is_a() or is_subclass_of() with a string as the first argument
 +    when $allow_string is false is now deprecated. (Daniel Scherzer)
    . Fixed bug GH-23232 (lone namespace separator asks the autoloader for an
      empty class name). (spawnia)
 -  . Fixed bug GH-23301 (Nested "yield from" yields a value twice when the
 -    middle generator delegates again). (Lazizbek Ergashev)
 +
 +- CLI:
 +  . Fixed bug GH-23242 (PHP development server does not support Expect
 +    100-continue flow control). (Sjoerd Langkemper)

  - DOM:
    . Fixed NamedNodeMap::getNamedItemNS() with an empty URI not matching