[ci skip] NEWS for GH-15275

ext/standard: enabling feature detection auxiliary vector on OpenBSD.

close gh-15175

Fix GH-15210: phpdbg_print_changed_zvals working on a real copy instead.

Close GH-15229

ext/soap: Deprecate passing an int to SoapServer::addFunction() (#15310)

Also deprecate SOAP_FUNCTIONS_ALL constant.

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_soa

ext/soap: Deprecate passing an int to SoapServer::addFunction() (#15310)

Also deprecate SOAP_FUNCTIONS_ALL constant.

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_soap_functions_all_constant_and_passing_it_to_soapserveraddfunction

show more ...

Fix GH-15292: Dynamic AVX detection is broken for MSVC

See https://learn.microsoft.com/en-us/cpp/preprocessor/predefined-macros?view=msvc-170
For x64, either _M_X64 or _M_AMD64 would wor

Fix GH-15292: Dynamic AVX detection is broken for MSVC

See https://learn.microsoft.com/en-us/cpp/preprocessor/predefined-macros?view=msvc-170
For x64, either _M_X64 or _M_AMD64 would work but I'm going with what's
already used in php-src.

Closes GH-15301.

show more ...

ext/core: Deprecate passing E_USER_ERROR to trigger_error() (#15308)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_passing_e_user_error_to_trigger_error

ext/xml: Deprecate xml_set_object() and passing non-callable strings as handlers (#15293)

hash: Add SHA-NI implementation of SHA-256 (#15152)

* hash: Add SSE2 implementation of SHA-256

Implementation taken from
tarsnap/libcperciva@661752aee82dcc8070754e3e539fdc7782bd

hash: Add SHA-NI implementation of SHA-256 (#15152)

* hash: Add SSE2 implementation of SHA-256

Implementation taken from
tarsnap/libcperciva@661752aee82dcc8070754e3e539fdc7782bd3942.

Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de>
Co-authored-by: Niels Dossche <7771979+nielsdos@users.noreply.github.com>

* zend_cpuinfo: Add ZEND_CPU_FEATURE_SHA

* hash: Add SHA-NI implementation of SHA-256

Implementation taken from
tarsnap/libcperciva@661752aee82dcc8070754e3e539fdc7782bd3942.

Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de>

* NEWS / UPGRADING

---------

Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de>
Co-authored-by: Niels Dossche <7771979+nielsdos@users.noreply.github.com>

show more ...

Fix GH-15268: heap buffer overflow in phpdbg (zend_hash_num_elements() Zend/zend_hash.h)

The class is not yet linked, so we cannot access `parent`, but only
`parent_name`.

Close

Fix GH-15268: heap buffer overflow in phpdbg (zend_hash_num_elements() Zend/zend_hash.h)

The class is not yet linked, so we cannot access `parent`, but only
`parent_name`.

Closes GH-15277.

show more ...

ext/spl: Follow-up on GH-9704 (#15295)

Co-authored-by: Tim Düsterhus <timwolla@googlemail.com>

ext/dba: Deprecate passing null|false to dba_key_split() (#15297)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_passing_null_and_false_to_dba_key_split

Revert "Fix bug #69280: SoapClient classmap doesn't support fully qualified class name (#14398)"

This reverts commit 476706165a227ea6b1d73299b9b6486a6ca073a9.

Although the fix is co

Revert "Fix bug #69280: SoapClient classmap doesn't support fully qualified class name (#14398)"

This reverts commit 476706165a227ea6b1d73299b9b6486a6ca073a9.

Although the fix is correct, people are relying on the bug and their
code stopped working, see GH-15252.

show more ...

Deprecate passing incorrect data types for options to ext/hash functions (#15236)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_passing_incorrect_data_types_for_options_to_ext

Deprecate passing incorrect data types for options to ext/hash functions (#15236)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_passing_incorrect_data_types_for_options_to_exthash_functions

show more ...

Fix GH-15155: Keep stream context in filtered streams

Closes GH-15156

Fix GH-15181: Disabled output handler is flushed again

When an `PHP_OUTPUT_HANDLER_FAILURE` occurs, the output handler becomes
disabled (i.e. the `PHP_OUTPUT_HANDLER_DISABLED` flag is se

Fix GH-15181: Disabled output handler is flushed again

When an `PHP_OUTPUT_HANDLER_FAILURE` occurs, the output handler becomes
disabled (i.e. the `PHP_OUTPUT_HANDLER_DISABLED` flag is set). However,
there is no guard for disabled handlers in `php_output_handler_op()`
what may cause serious issues (as reported, UB due to passing `NULL` as
the 2nd argument of `memcpy`, because the handler's buffer has already
been `NULL`ed). Therefore, we add a respective guard for disabled
handlers, and return `PHP_OUTPUT_HANDLER_FAILURE` right away.

Closes GH-15183.

show more ...

Fix crash when converting array data for array in shm in xxh3

Closes GH-15237.

Fix SoapFault property destruction

Two issues:
1) We should not modify the object when we pass invalid values
2) We should reset the properties to their default value otherwise we

Fix SoapFault property destruction

Two issues:
1) We should not modify the object when we pass invalid values
2) We should reset the properties to their default value otherwise we
get a UAF.

Regressed in df219ccf9d6be8302eef3ab6e26fd00fbd2fef71

Closes GH-15248.

show more ...

Fix missing variance check for abstract set with asymmetric type (#15157)

Fixes GH-15140

Fix bug #51558: shared readline build fails (#15242)

The 'rl_pending_input' is a variable in Readline library and checking it
with PHP_CHECK_LIBRARY wouldn't find it on some systems.

Fix bug #51558: shared readline build fails (#15242)

The 'rl_pending_input' is a variable in Readline library and checking it
with PHP_CHECK_LIBRARY wouldn't find it on some systems.

Library check works on most systems but not on the mentioned AIX in the
bug as it exports variables and functions differently whereas the linker
couldn't resolve the variable as a function.

This should fix the build on systems where this caused issues, such as
AIX.

The <readline/readline.h> is not self-contained header and needs to also
have <stdio.h> included before to have FILE type available. This fixes
the issue on unpatched default readline installations, such as macOS.

Checking this variable ensures that the found library is the correct
library and also that it is of minimum version needed by current PHP
code (https://bugs.php.net/48608).

The library check:

```c
| char rl_pending_input ();
| int main (void) {
| return rl_pending_input ();
| }
```

The declaration check:

```c
| #include <stdio.h>
| #include <readline/readline.h>
| int main (void) {
| #ifndef rl_pending_input
| #ifdef __cplusplus
| (void) rl_pending_input;
| #else
| (void) rl_pending_input;
| #endif
| #endif
| ;
| return 0;
| }
```

Closes https://bugs.php.net/51558

show more ...

Fix zend_function.prop_info pointer for trait hooks (#15245)

Fixes GH-15240

Remove DOMImplementation::getFeature() (#15233)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#remove_domimplementationgetfeature_feature_version

Deprecate DOM_PHP_ERR (#15234)

* Deprecate DOM_PHP_ERR

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_dom_php_err_constant

* Apply suggestions from code revie

Deprecate DOM_PHP_ERR (#15234)

* Deprecate DOM_PHP_ERR

RFC: https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_dom_php_err_constant

* Apply suggestions from code review

Co-authored-by: Tim Düsterhus <timwolla@googlemail.com>

---------

Co-authored-by: Tim Düsterhus <timwolla@googlemail.com>

show more ...

Deprecate date_sunrise and date_sunset constants (#12978)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4

session: Deprecate `session.sid_length` and `session.sid_bits_per_character` (#15213)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4

random: Deprecate `lcg_value()` (#15211)

RFC: https://wiki.php.net/rfc/deprecations_php_8_4