ext/standard: Throw ValueErrors in str_getcsv() for invalid inputs (#15365)

This was forgotten when adjusting the behaviour of other CSV functions

Deprecate using "_" as a class name (#15360)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_using_a_single_underscore_as_a_class_name

ext/(standard|spl): Deprecate passing a non-empty string as the $enclosure parameter (#15362)

ext/curl: Add HTTP/3 constants (#15350)

This intends to supersede the two following PRs:
- #12000 because it does not modify the stub file, but only update the
arginfo file. It a

ext/curl: Add HTTP/3 constants (#15350)

This intends to supersede the two following PRs:
- #12000 because it does not modify the stub file, but only update the
arginfo file. It also proposes to merge to GA branches, and is
currently marked as Requires RM Approval.
- #12543 Essentially the same as this PR and from the same author, as
this, but its about a year old and requires rebasing anyway.

This adds the `CURL_HTTP_VERSION_3` and `CURL_HTTP_VERSION_3ONLY`
constants on relevant versions (7.66 and 7.88 respectively).

It is possible to use HTTP/3 without having these constants declared,
but having them declared in PHP makes things more approachable and
"official".

show more ...

ext/mysqli: Deprecate passing the parameter to mysqli_store_result() (#15311)

And deprecate the MYSQLI_STORE_RESULT_COPY_DATA constant.

RFC: https://wiki.php.net/rfc/deprecations_ph

ext/mysqli: Deprecate passing the parameter to mysqli_store_result() (#15311)

And deprecate the MYSQLI_STORE_RESULT_COPY_DATA constant.

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_the_second_parameter_to_mysqli_store_result

show more ...

[skip ci] Add NEWS/UPGRADING entries for mysqli deprecations

ext/sockets: controlling ephemeral port ranges on *BSD.

whether ephemeral ports are onto the privileged low port ranges
or a range more fit for restricted scenarios.

cl

ext/sockets: controlling ephemeral port ranges on *BSD.

whether ephemeral ports are onto the privileged low port ranges
or a range more fit for restricted scenarios.

close GH-15335

show more ...

Fix GH-15331: dom: Element::$substitutedNodeValue test failed

Bug in libxml, amend test to accept both outputs.

[ci skip] NEWS for GH-15275

[ci skip] NEWS for GH-15275

[ci skip] NEWS for GH-15275

ext/standard: enabling feature detection auxiliary vector on OpenBSD.

close gh-15175

Fix GH-15210: phpdbg_print_changed_zvals working on a real copy instead.

Close GH-15229

ext/soap: Deprecate passing an int to SoapServer::addFunction() (#15310)

Also deprecate SOAP_FUNCTIONS_ALL constant.

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_soa

ext/soap: Deprecate passing an int to SoapServer::addFunction() (#15310)

Also deprecate SOAP_FUNCTIONS_ALL constant.

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_soap_functions_all_constant_and_passing_it_to_soapserveraddfunction

show more ...

Fix GH-15292: Dynamic AVX detection is broken for MSVC

See https://learn.microsoft.com/en-us/cpp/preprocessor/predefined-macros?view=msvc-170
For x64, either _M_X64 or _M_AMD64 would wor

Fix GH-15292: Dynamic AVX detection is broken for MSVC

See https://learn.microsoft.com/en-us/cpp/preprocessor/predefined-macros?view=msvc-170
For x64, either _M_X64 or _M_AMD64 would work but I'm going with what's
already used in php-src.

Closes GH-15301.

show more ...

ext/core: Deprecate passing E_USER_ERROR to trigger_error() (#15308)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_passing_e_user_error_to_trigger_error

ext/xml: Deprecate xml_set_object() and passing non-callable strings as handlers (#15293)

hash: Add SHA-NI implementation of SHA-256 (#15152)

* hash: Add SSE2 implementation of SHA-256

Implementation taken from
tarsnap/libcperciva@661752aee82dcc8070754e3e539fdc7782bd

hash: Add SHA-NI implementation of SHA-256 (#15152)

* hash: Add SSE2 implementation of SHA-256

Implementation taken from
tarsnap/libcperciva@661752aee82dcc8070754e3e539fdc7782bd3942.

Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de>
Co-authored-by: Niels Dossche <7771979+nielsdos@users.noreply.github.com>

* zend_cpuinfo: Add ZEND_CPU_FEATURE_SHA

* hash: Add SHA-NI implementation of SHA-256

Implementation taken from
tarsnap/libcperciva@661752aee82dcc8070754e3e539fdc7782bd3942.

Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de>

* NEWS / UPGRADING

---------

Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de>
Co-authored-by: Niels Dossche <7771979+nielsdos@users.noreply.github.com>

show more ...

Fix GH-15268: heap buffer overflow in phpdbg (zend_hash_num_elements() Zend/zend_hash.h)

The class is not yet linked, so we cannot access `parent`, but only
`parent_name`.

Close

Fix GH-15268: heap buffer overflow in phpdbg (zend_hash_num_elements() Zend/zend_hash.h)

The class is not yet linked, so we cannot access `parent`, but only
`parent_name`.

Closes GH-15277.

show more ...

ext/spl: Follow-up on GH-9704 (#15295)

Co-authored-by: Tim Düsterhus <timwolla@googlemail.com>

ext/dba: Deprecate passing null|false to dba_key_split() (#15297)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_passing_null_and_false_to_dba_key_split

Revert "Fix bug #69280: SoapClient classmap doesn't support fully qualified class name (#14398)"

This reverts commit 476706165a227ea6b1d73299b9b6486a6ca073a9.

Although the fix is co

Revert "Fix bug #69280: SoapClient classmap doesn't support fully qualified class name (#14398)"

This reverts commit 476706165a227ea6b1d73299b9b6486a6ca073a9.

Although the fix is correct, people are relying on the bug and their
code stopped working, see GH-15252.

show more ...

Deprecate passing incorrect data types for options to ext/hash functions (#15236)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_passing_incorrect_data_types_for_options_to_ext

Deprecate passing incorrect data types for options to ext/hash functions (#15236)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_passing_incorrect_data_types_for_options_to_exthash_functions

show more ...

Fix GH-15155: Keep stream context in filtered streams

Closes GH-15156

Fix GH-15181: Disabled output handler is flushed again

When an `PHP_OUTPUT_HANDLER_FAILURE` occurs, the output handler becomes
disabled (i.e. the `PHP_OUTPUT_HANDLER_DISABLED` flag is se

Fix GH-15181: Disabled output handler is flushed again

When an `PHP_OUTPUT_HANDLER_FAILURE` occurs, the output handler becomes
disabled (i.e. the `PHP_OUTPUT_HANDLER_DISABLED` flag is set). However,
there is no guard for disabled handlers in `php_output_handler_op()`
what may cause serious issues (as reported, UB due to passing `NULL` as
the 2nd argument of `memcpy`, because the handler's buffer has already
been `NULL`ed). Therefore, we add a respective guard for disabled
handlers, and return `PHP_OUTPUT_HANDLER_FAILURE` right away.

Closes GH-15183.

show more ...