Prepare for 8.0.22

Fix GH-8827: Intentionally closing std handles no longer possible

We revert the commits which caused this regression from the PHP-8.0 and
PHP-8.1 branches for now. We keep it in "master

Fix GH-8827: Intentionally closing std handles no longer possible

We revert the commits which caused this regression from the PHP-8.0 and
PHP-8.1 branches for now. We keep it in "master" because of PR #8833
which may offer a proper fix without BC break.

show more ...

Fix GH-8563 Different results for seek() on SplFileObject and SplTempFileObject

With memory streams if we get a NULL buffer we must not instantiate an empty line

Fix potential use after free in php_binary_init()

Closes GH-8791.

Fix memory leak

This fixes oss-fuzz #48051

Fix bug #67764: fpm: syslog.ident does not work

Fix GH-8778: Integer arithmethic with large number variants fails

When casting a `variant` to `int`, we need to heed the proper `zval`
type, which is an signed 64bit integer on x64, whil

Fix GH-8778: Integer arithmethic with large number variants fails

When casting a `variant` to `int`, we need to heed the proper `zval`
type, which is an signed 64bit integer on x64, while `VT_INT` is only
a signed 32bit integer.

Closes GH-8779.

show more ...

Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.

Merge remote-tracking branch 'derickr/bug77342' into PHP-8.0

Skip tests on 32-bit

Fixed bug #77243 (Weekdays are calculated incorrectly for negative years)

FPM: Fix use after free in `fpm_evaluate_full_path`
Closes #8796.

NEWS

Fix GH-8781 ZipArchive::close deletes zip file without updating stat cache

JIT: Fix missing register store

This fixes oss-fuzz #48023

Fix use after free

This fixes oss-fuzz #47997

Fix handling of single-key connection strings

A connection string may contain just a single key, but
PHP used ";" as the heuristic to detect if a string was a connection
string versu

Fix handling of single-key connection strings

A connection string may contain just a single key, but
PHP used ";" as the heuristic to detect if a string was a connection
string versus plain DSN. However, a single-key connection string
would get treated like a DSN name, i.e. "DSN=*LOCAL". This makes it
so that "=" is used, as a connection string must contain a key.

Closes GH-8748.

show more ...

Fix bad integer promotion in mysqlnd big5 charset detection

[ci skip] missing CVE

Fix and improve OpenSSL VCWD path checking test for bug #50293

Pass signature to openssl_verify in bug81713 test

Fix bug #50293 and #81713: file path checking in OpenSSL functions

It introduces a single function to check file paths passed to OpenSSL
functions. It expands the path, check null bytes

Fix bug #50293 and #81713: file path checking in OpenSSL functions

It introduces a single function to check file paths passed to OpenSSL
functions. It expands the path, check null bytes and finally does
an open basedir check.

show more ...

Fix LONG_CHECK_VALID_INT in socket extension

Backport fcba0a49fc227ea0a0c033446ccb6b5dac631f1d

Forgot this file exists in lower branches

Fix memory leak

This fixes oss-fuzz #47791