Set libtool tag per command instead of global one

Global --tag=CC defined in configure.ac is not correct in all cases. For example
linking objects that were compiled from C++ sources nee

Set libtool tag per command instead of global one

Global --tag=CC defined in configure.ac is not correct in all cases. For example
linking objects that were compiled from C++ sources needs to be done with C++
compiler, however for link mode libtool will prefer compiler indicated with
--tag.

Fixes GH-12349

show more ...

ext/gd: Fix GH-13082

Issue occur when compiling with recent clang releases (> 13) and
with the '-Os' optimisation level, after using
`imageloadfont` which returns a proper GdFont cl

ext/gd: Fix GH-13082

Issue occur when compiling with recent clang releases (> 13) and
with the '-Os' optimisation level, after using
`imageloadfont` which returns a proper GdFont class leads to
a subtle bug when attempting to use via the imagefont* function.

show more ...

[ci skip] NEWS

Fix #71465: PHAR doesn't know about litespeed

We should perhaps look into a generic system to ask the SAPI whether
a feature should be supported or not. Or, we should look into making

Fix #71465: PHAR doesn't know about litespeed

We should perhaps look into a generic system to ask the SAPI whether
a feature should be supported or not. Or, we should look into making
a denylist instead of an allowlist.
Anyway, let's not try doing anything fancy on stable branches.

Closes GH-13070.

show more ...

PHP-8.2 is now for PHP 8.2.16-dev

Fix #77432: Segmentation fault on including phar file

phar_get_pharfp() can return NULL. In this case this is because the
stream gets closed by the include code in the engine. However, t

Fix #77432: Segmentation fault on including phar file

phar_get_pharfp() can return NULL. In this case this is because the
stream gets closed by the include code in the engine. However, the phar
entry is still cached, so when the next include happens the engine tries
to read from a closed (and nullified) stream.
Use the same fix as in phar_open_entry_fp(): take into account that the
phar_get_pharfp() can return NULL and in that case reopen the phar
archive.

Closes GH-13056.

show more ...

Fix GH-12974: Apache crashes on shutdown when using pg_pconnect()

On ZTS, the global variables are stored in dynamically allocated memory.
When the module gets shut down this memory is r

Fix GH-12974: Apache crashes on shutdown when using pg_pconnect()

On ZTS, the global variables are stored in dynamically allocated memory.
When the module gets shut down this memory is released. After the module
is shut down, only then are the persistent resources cleared. Normally
this isn't an issue, but pgsql and odbc refer to the globals to modify
some counters, after the globals have been freed.
Fix this by guarding the modification.

Closes GH-13032.

show more ...

ext/pgsql: pgsql.allow_persistent, no need to use such large type for boolean state.

also ext/odbc, simplifying odd comparison with non persistent connections.

Close GH-12976

GH-12943 ext/intl accept C as acceptable locale argument.

Close GH-12955

Fix GH-12980: tidynode.props.attribute is missing "Boolean Attributes" and empty attributes

Closes GH-12993.

Add cross-compiling 3rd argument to AC_RUN_IFELSE

Autotools emits warning if 3rd argument is empty. Call is wrapped in the
AC_CACHE_CHECK with php_cv_* cache variable name according to t

Add cross-compiling 3rd argument to AC_RUN_IFELSE

Autotools emits warning if 3rd argument is empty. Call is wrapped in the
AC_CACHE_CHECK with php_cv_* cache variable name according to the docs.

Closes GH-12966

show more ...

Fix GH-12969: Fixed PDO::getAttribute() to get PDO::ATTR_STRINGIFY_FETCHES

Partial backport of GH-12793.

Closes GH-12970.

Fix GH-12987: openssl_csr_sign might leak new cert on error

Closes GH-12988

Fix GH-12905: FFI::new interacts badly with observers

Because these functions are copied and not properly registered (which we
can't), the observer code doesn't add the temporaries on st

Fix GH-12905: FFI::new interacts badly with observers

Because these functions are copied and not properly registered (which we
can't), the observer code doesn't add the temporaries on startup.
Add them via a callback during startup.

Closes GH-12906.

show more ...

Fix GH-12953: SSA integrity verification failed when loading composer classmaps with more than 11k elements

This is a false positive. The cycle detection code stops at 10.000
iterations.

Fix GH-12953: SSA integrity verification failed when loading composer classmaps with more than 11k elements

This is a false positive. The cycle detection code stops at 10.000
iterations. Instead of stopping at a fixed amount, make it more robust
by implementing Floyd's cycle detection algorithm.

Closes GH-12954.

show more ...

Fix GH-12767: Fixed to be able to change autocommit mode using setAttribute

Signed-off-by: Gina Peter Banyard <girgias@php.net>

Fix getting the address of an uninitialized property of a SimpleXMLElement resulting in a crash

Closes GH-12945.

Fix GH-12962: Double free of init_file in phpdbg_prompt.c

See GH-12962 for analysis.

Closes GH-12963.

Fix GH-9698: stream_wrapper_register crashes with FFI\CData provided as class

Closes GH-12926

Fix SELinux mprotect execheap error due to mem adjacent to heap

It seems SELinux has a bug where memory directly adjacent to the heap is
interpreted as heap memory. Dodge this issue by l

Fix SELinux mprotect execheap error due to mem adjacent to heap

It seems SELinux has a bug where memory directly adjacent to the heap is
interpreted as heap memory. Dodge this issue by leaving some space between the
heap and memory suggested by find_prefered_mmap_base.

See GH-12932
See https://bugzilla.kernel.org/show_bug.cgi?id=218258
Closes GH-12942

show more ...

Fix GH-12936: hash() function hangs endlessly if using sha512 on strings >= 4GiB

There's two problems:
- Some loops used `unsigned int` instead of `size_t`.
- The 2*N-bit addition th

Fix GH-12936: hash() function hangs endlessly if using sha512 on strings >= 4GiB

There's two problems:
- Some loops used `unsigned int` instead of `size_t`.
- The 2*N-bit addition that is emulated using 2 N bit numbers has a bug:
it first truncated the number to 32/64 bit and only then shifted. This
resulted in the wrong length info stored inside the resulting hash.

Closes GH-12937.

show more ...

Fix zend_jit_undefined_long_key overwriting dim when dim == result

Fixes oss-fuzz #64727
Closes GH-12900

Fix max_execution_time with cli-server router script

When the cli-server specifies a router script, we run it using
zend_execute_scripts instead of php_execute_script, because the former

Fix max_execution_time with cli-server router script

When the cli-server specifies a router script, we run it using
zend_execute_scripts instead of php_execute_script, because the former preserves
the return value of the script. However, php_execute_script also starts resets
the execution timer with the value from max_execution_time. If the timer has
previously been initialized with max_input_time, it will never be reset, and
thus trigger at the incorrect time.

Closes GH-12886

show more ...

PHP-8.2 is now for PHP 8.2.15-dev

Fix the default value of $fetchMode in PDO::pgsqlGetNotify()