Commit 0bdfaf308b9 for php.net
commit 0bdfaf308b92b9218faabd555b949853250ae15f
Merge: 45978c183e9 cdeb0694f4c
Author: Derick Rethans <github@derickrethans.nl>
Date: Wed Jan 14 14:13:33 2026 +0000
Merge branch 'PHP-8.5'
* PHP-8.5:
Upgrade timelib to 2022.16
Updated to version 2025.3 (2025c)
diff --cc NEWS
index b3df4f43c46,384c21d01d9..1e406d156f0
--- a/NEWS
+++ b/NEWS
@@@ -1,29 -1,144 +1,32 @@@
PHP NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
-?? ??? ????, PHP 8.5.3
+?? ??? ????, PHP 8.6.0alpha1
- Core:
- . Fixed bug GH-20806 (preserve_none feature compatiblity with LTO).
- (henderkes)
- . Fixed bug GH-20767 (build failure with musttail/preserve_none feature
- on macOs). (David Carlier)
- . Fixed bug GH-20837 (NULL dereference when calling ob_start() in shutdown
- function triggered by bailout in php_output_lock_error()). (timwolla)
- . Fix OSS-Fuzz #471533782 (Infinite loop in GC destructor fiber). (ilutov)
- . Fix OSS-Fuzz #472563272 (Borked block_pass JMP[N]Z optimization). (ilutov)
- . Fixed bug GH-20914 (Internal enums can be cloned and compared). (Arnaud)
- . Fix OSS-Fuzz #474613951 (Leaked parent property default value). (ilutov)
- . Fixed bug GH-20895 (ReflectionProperty does not return the PHPDoc of a
- property if it contains an attribute with a Closure). (timwolla)
+ . Added first-class callable cache to share instances for the duration of the
+ request. (ilutov)
+ . It is now possible to use reference assign on WeakMap without the key
+ needing to be present beforehand. (ndossche)
+ . Added `clamp()`. (kylekatarnls, thinkverse)
+ - Date:
+ . Update timelib to 2022.16. (Derick)
+
-- MbString:
- . Fixed bug GH-20833 (mb_str_pad() divide by zero if padding string is
- invalid in the encoding). (ndossche)
-
-- Phar:
- . Fixed bug GH-20882 (buildFromIterator breaks with missing base directory).
- (ndossche)
-
-- Readline:
- . Fixed bug GH-18139 (Memory leak when overriding some settings
- via readline_info()). (ndossche)
-
-- SPL:
- . Fixed bug GH-20856 (heap-use-after-free in SplDoublyLinkedList iterator
- when modifying during iteration). (ndossche)
-
-- Standard:
- . Fixed bug #74357 (lchown fails to change ownership of symlink with ZTS)
- (Jakub Zelenka)
- . Fixed bug GH-20843 (var_dump() crash with nested objects)
- (David Carlier)
-
-15 Jan 2026, PHP 8.5.2
-
-- Core:
- . Fix OSS-Fuzz #465488618 (Wrong assumptions when dumping function signature
- with dynamic class const lookup default argument). (ilutov)
- . Fixed bug GH-20695 (Assertion failure in normalize_value() when parsing
- malformed INI input via parse_ini_string()). (ndossche)
- . Fixed bug GH-20714 (Uncatchable exception thrown in generator). (ilutov)
- . Fixed bug GH-20352 (UAF in php_output_handler_free via re-entrant
- ob_start() during error deactivation). (ndossche)
- . Fixed bug GH-20745 ("Casting out of range floats to int" applies to
- strings). (Bob)
-
- DOM:
- . Fixed bug GH-20722 (Null pointer dereference in DOM namespace node cloning
- via clone on malformed objects). (ndossche)
- . Fixed bug GH-20444 (Dom\XMLDocument::C14N() seems broken compared
- to DOMDocument::C14N()). (ndossche)
+ . Removed LIBXML_XINCLUDE from valid options for XMLDocument,
+ as it was a no-op. (ndossche)
-- EXIF:
- . Fixed bug GH-20631 (Integer underflow in exif HEIF parsing
- when pos.size < 2). (Oblivionsage)
-
-- Intl:
- . Fix leak in umsg_format_helper(). (ndossche)
-
-- LDAP:
- . Fix memory leak in ldap_set_options(). (ndossche)
-
-- Lexbor:
- . Fixed bug GH-20668 (\Uri\WhatWg\Url::withHost() crashes (SEGV) for URLs
- using the file: scheme). (lexborisov)
-
-- Mbstring:
- . Fixed bug GH-20674 (mb_decode_mimeheader does not handle separator).
- (Yuya Hamada)
-
-- OpenSSL:
- . Fixed bug GH-20802 (undefined behavior with invalid SNI_server_certs
- options). (David Carlier)
-
-- PCNTL:
- . Fixed bug with pcntl_getcpuaffinity() on solaris regarding invalid
- process ids handling. (David Carlier)
-
-- Phar:
- . Fixed bug GH-20732 (Phar::LoadPhar undefined behavior when reading fails).
+- Fileinfo:
+ . Fixed bug GH-20679 (finfo_file() doesn't work on remote resources).
(ndossche)
- . Fix SplFileInfo::openFile() in write mode. (ndossche)
- . Fix build on legacy OpenSSL 1.1.0 systems. (Giovanni Giacobbi)
- . Fixed bug #74154 (Phar extractTo creates empty files). (ndossche)
-
-- Session:
- . Fix support for MM module. (Michael Orlitzky)
-
-- Sqlite3:
- . Fixed bug GH-20699 (SQLite3Result fetchArray return array|false,
- null returned). (ndossche, plusminmax)
-
-- Standard:
- . Fix error check for proc_open() command. (ndossche)
- . Fix memory leak in mail() when header key is numeric. (Girgias)
- . Fixed bug GH-20582 (Heap Buffer Overflow in iptcembed). (ndossche)
-- URI:
- . Fixed bug GH-20771 (Assertion failure when getUnicodeHost() returns
- empty string). (ndossche)
-
-- Zlib:
- . Fix OOB gzseek() causing assertion failure. (ndossche)
-
-18 Dec 2025, PHP 8.5.1
-
-- Core:
- . Sync all boost.context files with release 1.86.0. (mvorisek)
- . Fixed bug GH-20435 (SensitiveParameter doesn't work for named argument
- passing to variadic parameter). (ndossche)
- . Fixed bug GH-20546 (preserve_none attribute configure check on macOs
- issue). (David Carlier/cho-m)
- . Fixed bug GH-20286 (use-after-destroy during userland stream_close()).
- (ndossche, David Carlier)
-
-- Bz2:
- . Fix assertion failures resulting in crashes with stream filter
- object parameters. (ndossche)
-
-- DOM:
- . Fix memory leak when edge case is hit when registering xpath callback.
- (ndossche)
- . Fixed bug GH-20395 (querySelector and querySelectorAll requires elements
- in $selectors to be lowercase). (ndossche)
- . Fix missing NUL byte check on C14NFile(). (ndossche)
-
-- Fibers:
- . Fixed bug GH-20483 (ASAN stack overflow with fiber.stack_size INI
- small value). (David Carlier)
+- Hash:
+ . Upgrade xxHash to 0.8.2. (timwolla)
- Intl:
+ . Added IntlNumberRangeFormatter class to format an interval of two numbers
+ with a given skeleton, locale, collapse type and identity fallback.
+ (BogdanUngureanu)
. Fixed bug GH-20426 (Spoofchecker::setRestrictionLevel() error message
suggests missing constants). (DanielEScherzer)