Commit 3a40e29e084 for php.net
commit 3a40e29e084f0284a5d929daff26b772f2a05de9
Merge: df2c6bb19e7 9a479812aee
Author: Ilia Alshanetsky <ilia@ilia.ws>
Date: Tue Jul 14 15:55:42 2026 -0400
Merge branch 'PHP-8.5'
* PHP-8.5:
Fix GH-22666: pdo_odbc heap overflow on oversized output param
diff --cc NEWS
index 793e0966dfb,a954be2e35c..367860feb47
--- a/NEWS
+++ b/NEWS
@@@ -1,32 -1,14 +1,34 @@@
PHP NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
-?? ??? ????, PHP 8.5.9
+?? ??? ????, PHP 8.6.0alpha3
+
+- ODBC:
+ . Fixed bug GH-22668 (Heap buffer over-read when a column value exceeds the
+ driver-reported display size). (iliaal)
+
+- PDO_ODBC:
+ . Fixed bug GH-22667 (Heap buffer over-read when a column value exceeds the
+ driver-reported display size). (iliaal)
++ . Fixed bug GH-22666 (Heap buffer overflow when an output parameter value is
++ longer than the declared maxlen). (iliaal)
+
+- Reflection:
+ . Fixed bug GH-22681 (Reflection*::__toString() truncates on null bytes).
+ (DanielEScherzer)
+
+16 Jul 2026, PHP 8.6.0alpha2
- Core:
- . Fixed bug GH-22290 (AST pretty printing does not correctly handle strings
- containing NUL). (iliaal)
- . Fixed bug GH-22206 (missing return in global register detection).
- (P3p111n0)
+ . Sync Boost.Context assembly with 1.91.0. (kn1g78)
+ . Fixed bug GH-22387 (AST pretty-printing drops meaningful parentheses around
+ RHS of instanceof). (timwolla)
+ . Fixed bug GH-15672 and GH-15911 (Stack overflow when an internal function
+ recurses through zend_call_function, such as a self-attached SPL
+ iterator). (iliaal)
. Lock unmodified readonly properties for modification after clone-with.
(NickSdot)
+ . abort() instead of exit() on hard OOM. (realFlowControl)
+ . perf: ZTS: move AG and SCNG into native __thread storage. (henderkes)
- Calendar:
. Fixed bug GH-22602 (gregoriantojd() and juliantojd() integer overflow with