Commit 46b40957b17 for php.net
commit 46b40957b172eb7bafcdd9e50d804004e485b2db
Merge: a75f28d4791 11047a7a668
Author: Ilia Alshanetsky <ilia@ilia.ws>
Date: Mon Aug 10 15:08:43 2026 -0400
Merge branch 'PHP-8.4' into PHP-8.5
* PHP-8.4:
Fix use-after-free when __clone() retains the stylesheet copy
diff --cc NEWS
index ade75459307,6447fa7bc88..299678d0a00
--- a/NEWS
+++ b/NEWS
@@@ -90,15 -83,19 +90,19 @@@ PH
. Fixed bug GH-15836 (Use-after-free when a user stream filter accesses
$this->stream during the close flush). (iliaal)
-- Sysvshm:
- . Fixed out-of-bounds write when shm_attach() opens an existing segment with
- a size larger than the segment actually is. (David Carlier)
-
+ - XSL:
+ . Fixed use-after-free when a DOMDocument subclass __clone() retains the
+ stylesheet copy made by XSLTProcessor::importStylesheet(). (iliaal)
+
-- Zip:
- . Fixed ZipArchive::addGlob() and ZipArchive::addPattern() ignoring their
- default options when no options array is given. (David Carlier)
+30 Jul 2026, PHP 8.5.9
-30 Jul 2026, PHP 8.4.24
+- Core:
+ . Fixed bug GH-22290 (AST pretty printing does not correctly handle strings
+ containing NUL). (iliaal)
+ . Fixed bug GH-22206 (missing return in global register detection).
+ (P3p111n0)
+ . Lock unmodified readonly properties for modification after clone-with.
+ (NickSdot)
- BCMath:
. Fixed GHSA-x692-q9x7-8c3f (Out-of-bounds write in bccomp()).