Fix GH-9323: crash when the VM enters userspace code via the GC

Closes GH-9323

Fix bug #79451: Using DOMDocument->replaceChild on doctype causes double free

Closes GH-9201

Fix GH-9316: $http_response_header is wrong for long status line

While the reason-phrase in a HTTP response status line is usually
short, there is no actual limit specified by the RFCs.

Fix GH-9316: $http_response_header is wrong for long status line

While the reason-phrase in a HTTP response status line is usually
short, there is no actual limit specified by the RFCs. As such, we
must not assume that the line fits into the buffer (which is currently
128 bytes large).

Since there is no real need to present the complete status line, we
simply read and discard the rest of a long line.

Co-authored-by: Tim Düsterhus <timwolla@googlemail.com>

Closes GH-9319.

show more ...

Fix GH-9339: OpenSSL oid_file path check warning contains uninitialized path

Prepare for 8.0.24

Correct IntlDateFormatter::formatObject params

Closes GH-9341.

Re-fix GH-8409: SSL handshake timeout persistent connections hanging

This fix is another solution to replace d0527427be57957157aec5e26a28899b380140df, use zend_try and zend_catch to make sur

Re-fix GH-8409: SSL handshake timeout persistent connections hanging

This fix is another solution to replace d0527427be57957157aec5e26a28899b380140df, use zend_try and zend_catch to make sure persistent stream will be released when error occurred.

Closes GH-9332.

show more ...

Fix GH-9296: `ksort` behaves incorrectly on arrays with mixed keys

The comparator function used at ksort in SORT_REGULAR mode
need to be consistent with basic comparison rules. These rul

Fix GH-9296: `ksort` behaves incorrectly on arrays with mixed keys

The comparator function used at ksort in SORT_REGULAR mode
need to be consistent with basic comparison rules. These rules
were changed in PHP-8.0 for numeric strings, but comparator
used at ksort kept the old behaviour. It leads to inconsistent
situations, when after ksort the first key is GREATER than some
of the next ones by according to the basic comparison operators.

Closes GH-9293.

show more ...

Fix GH-8472: stream_socket_accept result may have incorrect metadata

[CI skip] update NEWS

Remove ZEND_DVAL_TO_LVAL_CAST_OK (#9215)

* Remove ZEND_DVAL_TO_LVAL_CAST_OK
As far as I can see, this operation should always use the _slow method, and the results seem to be wrong when

Remove ZEND_DVAL_TO_LVAL_CAST_OK (#9215)

* Remove ZEND_DVAL_TO_LVAL_CAST_OK
As far as I can see, this operation should always use the _slow method, and the results seem to be wrong when ZEND_DVAL_TO_LVAL_CAST_OK is enabled.

* update NEWS

show more ...

[ci-skip] Fix for bug #80047 was included in previous release

We are removing the entry in 8.0.23, as the fix was included
in the 8.0.22 release. Given that an entry already exists, we

[ci-skip] Fix for bug #80047 was included in previous release

We are removing the entry in 8.0.23, as the fix was included
in the 8.0.22 release. Given that an entry already exists, we
are just deleting extra lines.

show more ...

Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable)

Fix GH-9032: SQLite3 authorizer crashes on NULL values

The arguments 3 to 6 of the authorizer callback may be `NULL`[1], and
we have to properly deal with that. Instead of causing a seg

Fix GH-9032: SQLite3 authorizer crashes on NULL values

The arguments 3 to 6 of the authorizer callback may be `NULL`[1], and
we have to properly deal with that. Instead of causing a segfault, we
deny authorization, which is still better than a crash, and apparently,
we cannot do better anyway.

[1] <https://www.sqlite.org/c3ref/set_authorizer.html>

Closes GH-9040.

show more ...

Fix GH-9155: dba_open("non-existing", "c-", "flatfile") segfaults

We must not assume that the lock file has been opened.

Closes GH-9156.

Fix GH-9033: Loading blacklist file can fail due to negative length

If the blacklist file contains a line with a single double-quote, we
called `zend_strndup(pbuf, -1)` what causes an un

Fix GH-9033: Loading blacklist file can fail due to negative length

If the blacklist file contains a line with a single double-quote, we
called `zend_strndup(pbuf, -1)` what causes an unnecessary bail out;
instead we just ignore that line.

If the blacklist file contains an empty line, we may have caused an OOB
read; instead we just ignore that line.

Closes GH-9036.

show more ...

Fix memory leak in LMDB driver

Fix GH-9017: php_stream_sock_open_from_socket could return NULL

Closes GH-9020.

Prepare for PHP 8.0.23

Revert "FPM: Downgrade occasional "failed to acquire scoreboard" warning"

This reverts commit 3040f75f434f64756655faba9d1eaaa76e4babb0.

FPM: Downgrade occasional "failed to acquire scoreboard" warning

With request timeouts configured, php-fpm occasionally prints the
following warning:

WARNING: failed to acqui

FPM: Downgrade occasional "failed to acquire scoreboard" warning

With request timeouts configured, php-fpm occasionally prints the
following warning:

WARNING: failed to acquire scoreboard

This is happens when php-fpm checks the child scoreboards for timeouts,
but fails to acquire a lock immediately. As this can (and does) occur
during normal operation, this commit downgrades this to a notice.
Closes #9019.

show more ...

random extension macOs handling update.

Not such as fix but taking more precautions.
Indeed, the arc4random has two little flaws in this platform,
one already caught upfront by the e

random extension macOs handling update.

Not such as fix but taking more precautions.
Indeed, the arc4random has two little flaws in this platform,
one already caught upfront by the extension (ie size 0), also
internal use of ccrng_generate which can silently fail in few rare
cases.

Closes #7824.

show more ...

[ci skip] NEWS

Prevent potential buffer overflow for large value of php_cli_server_workers_max

Fixes #8989.
Closes #9000.

Fix GH-8923: error_log on Windows can hold the file write lock

On Windows, closing a file which is locked may not immediately remove
the lock. The `LockFileEx()` documentation states:

Fix GH-8923: error_log on Windows can hold the file write lock

On Windows, closing a file which is locked may not immediately remove
the lock. The `LockFileEx()` documentation states:

| Therefore, it is recommended that your process explicitly unlock all
| files it has locked when it terminates.

We comply, and also use the macro `LOCK_EX` instead of the magic number
`2`.

Closes GH-8925.

show more ...