Commit 19eda22e90b for php.net

commit 19eda22e90bc6e1a7265263ee17d9ed6af685d5f
Merge: 3a1b95e43ae c4c356a7bac
Author: Weilin Du <weilindu@php.net>
Date:   Sun Aug 9 00:10:12 2026 +0800

    Merge branch 'PHP-8.4' into PHP-8.5

    * PHP-8.4:
      Fix GH-23120: DOMNode::isEqualNode stack overflow on deeply nested trees (#23140)

diff --cc NEWS
index 19cb73aba23,e4a21b1bfa4..7fcd21fbbdc
--- a/NEWS
+++ b/NEWS
@@@ -15,20 -12,21 +15,22 @@@ PH
      Dom\XMLDocument). (Lazizbek Ergashev)
    . Fixed bug GH-22825 (DOMElement::setAttribute() fails silently when the DTD
      declares a default value for the attribute). (iliaal)
 -  . Fixed bug GH-22447 (UAF at dom_objects_free_storage when setting an
 -    attribute node that collides by local name with a namespaced
 -    attribute). (David Carlier)
+   . Fixed bug GH-23120 (Stack overflow when comparing deeply nested DOM nodes
+     with DOMNode::isEqualNode()). (Weilin Du)

 -- MBString:
 -  . Fixed bug GH-22779 (mb_strrpos() returns the wrong position for a negative
 -    offset in a non-UTF-8 encoding). (Eyüp Can Akman)
 -  . Fixed bug GH-21036 (mb_ereg_search_getregs() crashes after mb_eregi()
 -    invalidates the regex cache). (Matthias Goergens)
 +- Intl:
 +  . Fixed IntlListFormatter::__construct() leaving stale global error state
 +    after successful calls. (Weilin Du)

  - Opcache:
 -  . Fixed bug GH-22857 (Function JIT emits wrong code for FETCH_OBJ_FUNC_ARG on a
 -    property hook getter, losing register-held variables). (Zhao Hao)
 +  . Fixed GH-22693 (DT_TEXTREL in JIT-generated TLS access on x86_64).
 +    (David Carlier)
 +  . Fixed bug GH-22763 (JIT fails to clear ZREG_TYPE_ONLY after setting reg).
 +    (Arnaud)
 +  . Fixed bug GH-22857 (Function JIT emits wrong code for FETCH_OBJ_FUNC_ARG on
 +    a property hook getter, losing register-held variables). (Zhao Hao)
 +  . Fixed bug GH-22916 (Preserve parent regs in zend_jit_deoptimizer_start()).
 +    (Arnaud)

  - OpenSSL:
    . Fix missing error check on invalid alpn protocols. (ndossche)