Commit fa0e11f185f for php.net
commit fa0e11f185f928674d22518f89d329c1c271f788
Merge: ddbf829fefd 0c52780287d
Author: Ilia Alshanetsky <ilia@ilia.ws>
Date: Mon Jun 15 17:24:33 2026 -0400
Merge branch 'PHP-8.4' into PHP-8.5
* PHP-8.4:
Fix zend_string leak on case-variant duplicate setcookie() options
diff --cc ext/standard/head.c
index 087ba6a3480,27626e15f2d..28bac59e48d
--- a/ext/standard/head.c
+++ b/ext/standard/head.c
@@@ -217,9 -219,10 +223,12 @@@ static zend_result php_head_parse_cooki
} else if (zend_string_equals_literal_ci(key, "httponly")) {
*httponly = zval_is_true(value);
} else if (zend_string_equals_literal_ci(key, "samesite")) {
+ if (*samesite) {
+ zend_string_release(*samesite);
+ }
*samesite = zval_get_string(value);
+ } else if (zend_string_equals_literal_ci(key, "partitioned")) {
+ *partitioned = zval_is_true(value);
} else {
zend_value_error("%s(): option \"%s\" is invalid", get_active_function_name(), ZSTR_VAL(key));
return FAILURE;