Commit aed9bab1312 for php

commit aed9bab13120b3ff538cc8fb1d4a2290b6b79c68
Merge: f59a037dbf8 f991e962b1b
Author: Ilia Alshanetsky <ilia@ilia.ws>
Date:   Thu Oct 1 17:41:48 2026 -0400

    Merge branch 'PHP-8.5' into PHP-8.6

    * PHP-8.5:
      TSRM: Fix Windows shared memory payload offset

diff --cc NEWS
index 0277ee871e2,d1bd9c5bfab..191a241cb24
--- a/NEWS
+++ b/NEWS
@@@ -6,37 -6,43 +6,39 @@@ PH
    . Fixed BcMath\Number results that truncate to zero keeping a negative sign
      and comparing less than zero. (Ilia Alshanetsky)

 +- CLI:
 +  . Fixed the built-in server truncating an error page and leaking its
 +    unsent part after a partial socket write. (Ilia Alshanetsky)
 +
  - Core:
 -  . Fixed bug GH-23644 (Optimizer leaves a constant-vs-constant comparison
 -    unfolded, crashing the VM in zval_undefined_cv). (ndossche)
 -  . Fixed OSS-Fuzz 532353396 (assertion failure with static type). (Girgias)
 -  . Fix GH-23662 (Avoid NAN warning in print_r()). (CodedByManish)
 -  . Fix GH-21999: GC inconsistency with lazy object, var_dump(), and object
 -    comparison. (Arnaud)
    . Fixed OSS-Fuzz #536440507 (Immutable class incorrect assertion).
      (ndossche)
 +  . Fixed bug GH-23628 (Tracing JIT reads undefined property slots of lazy
 +    proxy objects instead of forwarding to the real instance). (lisachenko)
 +  . Fixed bug GH-23882 (array_map() optimization is incorrect for
 +    strict_types=1). (timwolla)
 +  . Fixed OSS-Fuzz #565486253 (coerced arg with '...' on non-variadic
 +    function). (ndossche)
    . Fixed AVX being reported as supported when the OS has not enabled AVX
      state. (Ilia Alshanetsky)
 +  . Fixed OSS-Fuzz #552682112 (assertion failure wrt
 +    zp_arg_must_be_sent_by_ref()). (ndossche)
 +  . Fixed GH-23921 (Fibers start with error_reporting = 0 when the
 +    error_reporting INI directive is not set). (Girgias)
    . Fixed GH-23980 (ZEND_ASSERT violation @ ZEND_INCLUDE_OR_EVAL). (ndossche)
 +  . Deprecated using "let" or "is" as the name of a class, function, or
 +    constant, and as an alias in class_alias() and use declarations. (Girgias)
 +  . Deprecated using "_" as a constant name and as an alias for a class or
 +    constant in use declarations. (Girgias)
 +  . Switch the POSIX high resolution timer back to CLOCK_MONOTONIC from
 +    CLOCK_MONOTONIC_RAW. (nicolas-grekas)
 +  . Fixed array_map optimization with non-literal function or non-literal args.
 +    (Arnaud)
    . Fixed use-after-free when a dl()-loaded extension declares a frameless
      function and a later request calls it. (Ilia Alshanetsky)
+   . Fixed System V shared memory emulation for Windows attaching segments past
+     the end of their mapping. (Ilia Alshanetsky)

 -- CLI
 -  . Fix GH-22567 (Windows ZTS CLI SAPI should refresh its TSRMLS cache during
 -    request activation). (matyhtf)
 -  . Fixed bug GH-23764 (Built-in server leaks a file descriptor on every HEAD
 -    request for a static file). (jakubskopal)
 -  . Fixed the built-in server truncating an error page and leaking its
 -    unsent part after a partial socket write. (Ilia Alshanetsky)
 -
 -- DOM:
 -  . Fixed use-after-free when re-constructing a DOMXPath whose php:function
 -    registrations are freed while still reachable from the cycle collector.
 -    (Ilia Alshanetsky)
 -  . Fixed Dom\HTMLDocument::getElementById() not finding ids of SVG and
 -    MathML elements. (Ilia Alshanetsky)
 -  . Fixed Dom\HTMLDocument giving attributes the namespace of their element
 -    when a fragment is parsed with an xlink, xml or xmlns context element.
 -    (Ilia Alshanetsky)
 -  . Fixed bug GH-23887 (Dom\HTMLCollection::namedItem() assertion failure,
 -    hang, or missed first element). (Lazizbek Ergashev)
 -
  - FFI:
    . Fixed crashes with FFI callbacks created from __call() trampolines
      and array callables whose object is released. (Ilia Alshanetsky)