Fix GH-12999: zend_strnlen build fix when platform misses strnlen support.

fix from @rainerjung

Implement request #48520: openssl_csr_new should allow multiple values/fields in dn

Closes GH-12984

Fix bug #80269: OpenSSL sets Subject wrong with extraattribs parameter

Closes GH-12979

Fix GH-12987: openssl_csr_sign might leak new cert on error

Closes GH-12988

RFC: Add 4 new rounding modes to round() function (#12056)

https://wiki.php.net/rfc/new_rounding_modes_to_round_function

Co-authored-by: Tim Düsterhus <tim@bastelstu.be>

Fix GH-12905: FFI::new interacts badly with observers

Because these functions are copied and not properly registered (which we
can't), the observer code doesn't add the temporaries on st

Fix GH-12905: FFI::new interacts badly with observers

Because these functions are copied and not properly registered (which we
can't), the observer code doesn't add the temporaries on startup.
Add them via a callback during startup.

Closes GH-12906.

show more ...

Fix GH-12953: SSA integrity verification failed when loading composer classmaps with more than 11k elements

This is a false positive. The cycle detection code stops at 10.000
iterations.

Fix GH-12953: SSA integrity verification failed when loading composer classmaps with more than 11k elements

This is a false positive. The cycle detection code stops at 10.000
iterations. Instead of stopping at a fixed amount, make it more robust
by implementing Floyd's cycle detection algorithm.

Closes GH-12954.

show more ...

Fix GH-12767: Fixed to be able to change autocommit mode using setAttribute

Signed-off-by: Gina Peter Banyard <girgias@php.net>

Fix GH-12929: SimpleXMLElement with stream_wrapper_register can segfault

Move SimpleXML invalidation code after node checks

This is safe, i.e. the tree hasn't been modified yet, bec

Fix GH-12929: SimpleXMLElement with stream_wrapper_register can segfault

Move SimpleXML invalidation code after node checks

This is safe, i.e. the tree hasn't been modified yet, because either we
didn't call a libxml modification function yet, or xmlNewChild is called
with a NULL pointer, which makes it bail out and return NULL.

Closes GH-12947.

show more ...

Fix getting the address of an uninitialized property of a SimpleXMLElement resulting in a crash

Closes GH-12945.

Fix GH-12962: Double free of init_file in phpdbg_prompt.c

See GH-12962 for analysis.

Closes GH-12963.

Fix GH-9698: stream_wrapper_register crashes with FFI\CData provided as class

Closes GH-12926

Fix SELinux mprotect execheap error due to mem adjacent to heap

It seems SELinux has a bug where memory directly adjacent to the heap is
interpreted as heap memory. Dodge this issue by l

Fix SELinux mprotect execheap error due to mem adjacent to heap

It seems SELinux has a bug where memory directly adjacent to the heap is
interpreted as heap memory. Dodge this issue by leaving some space between the
heap and memory suggested by find_prefered_mmap_base.

See GH-12932
See https://bugzilla.kernel.org/show_bug.cgi?id=218258
Closes GH-12942

show more ...

Fix GH-12936: hash() function hangs endlessly if using sha512 on strings >= 4GiB

There's two problems:
- Some loops used `unsigned int` instead of `size_t`.
- The 2*N-bit addition th

Fix GH-12936: hash() function hangs endlessly if using sha512 on strings >= 4GiB

There's two problems:
- Some loops used `unsigned int` instead of `size_t`.
- The 2*N-bit addition that is emulated using 2 N bit numbers has a bug:
it first truncated the number to 32/64 bit and only then shifted. This
resulted in the wrong length info stored inside the resulting hash.

Closes GH-12937.

show more ...

Fix zend_jit_undefined_long_key overwriting dim when dim == result

Fixes oss-fuzz #64727
Closes GH-12900

Enable ifunc checks on FreeBSD 12+

This was disabled in 2019 due to problems reported in FreeBSD 11. The original
report (PHP bug 77284) includes a comment that FreeBSD 12 worked - which

Enable ifunc checks on FreeBSD 12+

This was disabled in 2019 due to problems reported in FreeBSD 11. The original
report (PHP bug 77284) includes a comment that FreeBSD 12 worked - which also
happens to be the first version ifunc use appeared in libc.

Close GH-12288

show more ...

number_format: cast large floats within range of int to int

This prevents loosing precision for numbers above 2^52.

Closes GH-12333

[ci skip] zend_call_stack NEWS update

Fix #44383: PHP DateTime not converted to xsd:datetime

Closes GH-12437.
Closes GH-11725.

Feature: ext/pdo_firebird: Add transaction isolation level and mode settings (#12815)

* Added transaction isolation level and access mode

* Raise a ValueError if an invalid value i

Feature: ext/pdo_firebird: Add transaction isolation level and mode settings (#12815)

* Added transaction isolation level and access mode

* Raise a ValueError if an invalid value is passed to PDO::FB_TRANSACTION_ISOLATION_LEVEL.

show more ...

Fix max_execution_time with cli-server router script

When the cli-server specifies a router script, we run it using
zend_execute_scripts instead of php_execute_script, because the former

Fix max_execution_time with cli-server router script

When the cli-server specifies a router script, we run it using
zend_execute_scripts instead of php_execute_script, because the former preserves
the return value of the script. However, php_execute_script also starts resets
the execution timer with the value from max_execution_time. If the timer has
previously been initialized with max_input_time, it will never be reset, and
thus trigger at the incorrect time.

Closes GH-12886

show more ...

[sodium] Add AEGIS-128L and AEGIS-256 (#12867)

Also don't prevent usage of AES-GCM on aarch64, it's been supported since libsodium 1.0.18.

Fixes #12312

Fix GH-12727: NumberFormatter constructor throws an exception on invalid locale.

Also re-establishing exception throwing on IntlDateFormatter constructor
overwritten by accident most lik

Fix GH-12727: NumberFormatter constructor throws an exception on invalid locale.

Also re-establishing exception throwing on IntlDateFormatter constructor
overwritten by accident most likely so postponing it for next major
release.

Close GH-12868

show more ...

Fix GH-12854: 8.3 - as final trait-used method does not correctly report visibility in Reflection

Closes GH-12857.

PHP-8.3 is now for PHP 8.3.2-dev