Commit 980a5de7522 for php.net

commit 980a5de7522659e28a80641b3ae739a2722cc70b
Merge: 82a15338e29 b9c64e21899
Author: Ilia Alshanetsky <ilia@ilia.ws>
Date:   Wed Sep 9 07:44:54 2026 -0400

    Merge branch 'PHP-8.5'

    * PHP-8.5:
      dom: clear the xpath callback registrations before freeing them

diff --cc NEWS
index 4df5387dfe4,63cbbca22b5..7c9c4f08ed1
--- a/NEWS
+++ b/NEWS
@@@ -1,9 -1,14 +1,14 @@@
  PHP                                                                        NEWS
  |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 -?? ??? ????, PHP 8.5.12
 +?? ??? ????, PHP 8.6.0RC1

+ - DOM:
+   . Fixed use-after-free when re-constructing a DOMXPath whose php:function
+     registrations are freed while still reachable from the cycle collector.
+     (Ilia Alshanetsky)
+

 -24 Sep 2026, PHP 8.5.11
 +10 Sep 2026, PHP 8.6.0beta3

  - BCMath:
    . Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds