[ci skip] Merge branch 'PHP-7.4' into PHP-8.0

* PHP-7.4:
[ci skip] Fix NEWS

[ci skip] Fix NEWS

Bug #81026 has already been fixed in PHP 7.4.25 and 8.0.12.

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Fix #76167: mbstring may use pointer from some previous request

Merge branch 'PHP-7.4' into PHP-8.0

* PHP-7.4:
Fix #76167: mbstring may use pointer from some previous request

Fix #76167: mbstring may use pointer from some previous request

We must not reuse per-request memory across multiple requests, so this
check triggered during RINIT makes no sense. As ex

Fix #76167: mbstring may use pointer from some previous request

We must not reuse per-request memory across multiple requests, so this
check triggered during RINIT makes no sense. As explained in the bug
report[1], it can be even harmful, if some request startup fails, and
the pointers refer to already freed memory in the next request.

[1] <https://bugs.php.net/76167>

Closes GH-7604.

show more ...

Add FPM fix news

Fixed bug #81532

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Fix #81500: Interval serialization regression since 7.3.14 / 7.4.2

Merge branch 'PHP-7.4' into PHP-8.0

* PHP-7.4:
Fix #81500: Interval serialization regression since 7.3.14 / 7.4.2

Fix #81500: Interval serialization regression since 7.3.14 / 7.4.2

While it may not be desired, `DateInterval::$f` supports negative
values, at least with regard to calculations. We sti

Fix #81500: Interval serialization regression since 7.3.14 / 7.4.2

While it may not be desired, `DateInterval::$f` supports negative
values, at least with regard to calculations. We still need to guard
from assigning double values which are out of range for signed 64bit
integers (which would be undefined behavior). zend_dval_to_lval() does
this by returning `0` instead of triggering UB. This way we can avoid
setting the invalid marker, which doesn't work as expected anyway.

We must not do that only for unserialization, but also when the property
is set in the first place.

We need to adapt some of the existing tests wrt. this behavior. In
particular, we check for an arbitrary value in bug79015.phpt, to cater
to differences between 32bit and 64bit architectures.

Closes GH-7575.

show more ...

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Fix #81518: Header injection via default_mimetype / default_charset

Merge branch 'PHP-7.4' into PHP-8.0

* PHP-7.4:
Fix #81518: Header injection via default_mimetype / default_charset

Fix #81518: Header injection via default_mimetype / default_charset

We forbid setting these INI options to values containing NUL bytes, CR
or LF.

Closes GH-7574.

The PHP-8.1 branch is now for 8.1.0RC5

Fix bug #81521

The current error message is incorrect -- the problem here is not
that the property is invalid, but that these methods are unusable
prior to loading data, same as read

Fix bug #81521

The current error message is incorrect -- the problem here is not
that the property is invalid, but that these methods are unusable
prior to loading data, same as read().

show more ...

Merge branch 'PHP-8.0' into PHP-8.1

* PHP-8.0:
Fix #81424: PCRE2 10.35 JIT performance regression

Merge branch 'PHP-7.4' into PHP-8.0

* PHP-7.4:
Fix #81424: PCRE2 10.35 JIT performance regression

Fix #81424: PCRE2 10.35 JIT performance regression

We backport the respective upstream fix[1] to our bundled pcre2lib plus
the follow-up fix[2] for a functional regression.

[1]

Fix #81424: PCRE2 10.35 JIT performance regression

We backport the respective upstream fix[1] to our bundled pcre2lib plus
the follow-up fix[2] for a functional regression.

[1] <https://github.com/PhilipHazel/pcre2/commit/dc5f96663597572f694147aeec3525003c351123>
[2] <https://github.com/PhilipHazel/pcre2/commit/e7af7efaa11f71b187b0432e9e60f18ba4d90a0c>

Closes GH-7573.

show more ...

[ci skip] Fix NEWS

PHP 8.0.12RC1 has already been tagged a week ago, so later changes
target PHP 8.0.13.

NEWS

Add ZipArchive::clearError, getStreamIndex and getStreamName methods

public function clearError(): void {}
public function getStreamIndex(int $index, int $flags = 0) {}
p

Add ZipArchive::clearError, getStreamIndex and getStreamName methods

public function clearError(): void {}
public function getStreamIndex(int $index, int $flags = 0) {}
public function getStreamName(string $name, int $flags = 0) {}

ZipArchive::getStream is kept for BC

See https://github.com/pierrejoye/php_zip/issues/20

show more ...

Fixed bug #81494

Use the proper error reporting mechanism rather than throwing a
warning. This requires something of a hack because we don't have
direct access to the connection obje

Fixed bug #81494

Use the proper error reporting mechanism rather than throwing a
warning. This requires something of a hack because we don't have
direct access to the connection object at this point.

show more ...

Fixed bug #81502

Allow $tag to be null. This is the value that openssl_encrypt()
sets it to for non-AEAD ciphers, so we should also accept this
as an input to openssl_decrypt().

Fixed bug #81502

Allow $tag to be null. This is the value that openssl_encrypt()
sets it to for non-AEAD ciphers, so we should also accept this
as an input to openssl_decrypt().

Prior to PHP 8.1, null was accepted in weak mode due to the special
treatment of null arguments to internal functions.

show more ...

Fixed bug #81514

Objects reuse the GC_PERSISTENT flag as IS_OBJ_WEAKLY_REFERENCED,
which we did not account for in ZVAL_COPY_OR_DUP. To make things
worse the incorrect zval_copy_ctor

Fixed bug #81514

Objects reuse the GC_PERSISTENT flag as IS_OBJ_WEAKLY_REFERENCED,
which we did not account for in ZVAL_COPY_OR_DUP. To make things
worse the incorrect zval_copy_ctor_func() invocation silently did
nothing. To avoid that, add an assertion that it should only be
called with arrays and strings (unlike the normal zval_copy_ctor()
which can be safely called on any zval).

show more ...

Fixed bug #81512 (Unexpected behavior with arrays and JIT)