Commit b9c64e21899 for php.net

commit b9c64e218991e74a482b52bae9f845388ad05713
Merge: 9604be9c273 21e2c56aa40
Author: Ilia Alshanetsky <ilia@ilia.ws>
Date:   Wed Sep 9 07:37:15 2026 -0400

    Merge branch 'PHP-8.4' into PHP-8.5

    * PHP-8.4:
      dom: clear the xpath callback registrations before freeing them

diff --cc NEWS
index 97426e8cb82,3346d38ea89..63cbbca22b5
--- a/NEWS
+++ b/NEWS
@@@ -1,9 -1,14 +1,14 @@@
  PHP                                                                        NEWS
  |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 -?? ??? ????, PHP 8.4.27
 +?? ??? ????, PHP 8.5.12

+ - DOM:
+   . Fixed use-after-free when re-constructing a DOMXPath whose php:function
+     registrations are freed while still reachable from the cycle collector.
+     (Ilia Alshanetsky)
+

 -24 Sep 2026, PHP 8.4.26
 +24 Sep 2026, PHP 8.5.11

  - BCMath:
    . Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds