[ci skip] NEWS

SO_ATTACH_REUSEPORT_CBPF filter update. SDK_AD_QUEUE support to attach to a queue.

Closes #9690

Fix GH-9720: Null pointer dereference while serializing the response

When traversing the result array, we need to cater to `param_name`
possibly being `NULL`. Prior to PHP 7.0.0, this w

Fix GH-9720: Null pointer dereference while serializing the response

When traversing the result array, we need to cater to `param_name`
possibly being `NULL`. Prior to PHP 7.0.0, this was implicitly done
because `param_name` was of type `char*`.

Closes GH-9739.

show more ...

Fix potential heap corruption due to alignment mismatch

The fix for bug 63327[1] changed the extra size of mysqlnd allocations
from `sizeof(size_t)` to the properly aligned values; howev

Fix potential heap corruption due to alignment mismatch

The fix for bug 63327[1] changed the extra size of mysqlnd allocations
from `sizeof(size_t)` to the properly aligned values; however, the
allocation in `_mysqlnd_pestrdup()` has apparently been overlooked,
which (currently) causes detectable heap corruption when running
mysqli_get_client_stats.phpt on 32bit Windows versions.

[1] <https://github.com/php/php-src/commit/338a47bb856872f9ab0db94e867333d73279ca85>

Closes GH-9724.

show more ...

Fix GH-9653: does not inconditionally support copy_file_range on older kernels.

As mentioned in its manpage, it had been reworked in the 5.3 line to support cross filesystem interactions.

Fix GH-9653: does not inconditionally support copy_file_range on older kernels.

As mentioned in its manpage, it had been reworked in the 5.3 line to support cross filesystem interactions.
Closes #GH-9656

show more ...

[ci skip] Update NEWS for PHP 8.2.0RC5

Fix GH-9589: dl() segfaults when module is already loaded

As of PHP 8.2.0, `zend_module_entry` structures are no longer copied,
so when a module is permanently loaded, and users try to d

Fix GH-9589: dl() segfaults when module is already loaded

As of PHP 8.2.0, `zend_module_entry` structures are no longer copied,
so when a module is permanently loaded, and users try to dynamically
load that module again, the structure is corrupted[1], causing a
segfault on shutdown.

We catch that by checking whether any dynamically loaded module is
already loaded, and bailing out in that case without modifying the
`zend_module_entry` structure.

[1] <https://github.com/php/php-src/issues/9589#issuecomment-1263718701>

Closes GH-9689.

show more ...

Fix GH-9566: disable assembly for Fiber on FreeBSD i386.

preparing in case there is more architectures especially the not tested.

Throw in ReflectionMethod::__construct() when initialized with private parent method

Fixes GH-9470
Closes GH-9640

[ci skip] Fix formatting of wrapped entries in NEWS

[skip ci] Add NEWS entry for json_validate()

[ci skip] NEWS

Fix GH-9655: Allow pure intersection types to be implicitly nullable

Closes GH-9659

NEWS: Add libmagic upgrade note

Signed-off-by: Anatol Belski <ab@php.net>

[ci skip] NEWS

[ci skip] NEWS

[ci skip] NEWS

socket module add SO_ATTACH_REUSEPORT_CPBF for Linux.

to be used in conjunction with SO_REUSPORT, giving a greater control
over how we bind a socket instead of the round robin workflow,

socket module add SO_ATTACH_REUSEPORT_CPBF for Linux.

to be used in conjunction with SO_REUSPORT, giving a greater control
over how we bind a socket instead of the round robin workflow, we do
instead attach to the processor id as :
- we assign the processor_id to A in the BPF filter.
- then returns A.

in other words, a more modern version of SO_INCOMING_CPU (ie can have a per
worker notion we do not use here).
Closes #8062

show more ...

[ci skip] Update NEWS for PHP 8.2.0RC4

Fix GH-9583: session_create_id() fails with user defined save handler that doesn't have a validateId() method

Add CVEs

Fix #81726: phar wrapper: DOS when using quine gzip file

The phar wrapper needs to uncompress the file; the uncompressed file
might be compressed, so the wrapper implementation loops. Th

Fix #81726: phar wrapper: DOS when using quine gzip file

The phar wrapper needs to uncompress the file; the uncompressed file
might be compressed, so the wrapper implementation loops. This raises
potential DOS issues regarding too deep or even infinite recursion (the
latter are called compressed file quines[1]). We avoid that by
introducing a recursion limit; we choose the somewhat arbitrary limit
`3`.

This issue has been reported by real_as3617 and gPayl0ad.

[1] <https://honno.dev/gzip-quine/>

show more ...

Fix #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning.

Set SA_ONSTACK in zend_sigaction (#9597)

Revert "Fix parse_url(): can not recognize port without scheme"

This reverts commit 72d83709d9524945c93012f7bbb222e412df485a.

Closes GH-9569