mirrors/php-src
0
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2024-11-23 18:04:36 +08:00
Code Issues Packages Projects Releases Wiki Activity
07d81592e9
php-src/NEWS

1720 lines
60 KiB
Plaintext
Raw Normal View History

remove BOM from NEWS
2015-07-21 22:36:36 +08:00
PHP NEWS
Please add in any changes/bug fixes you've made - we need to keep a details ChangeLog...
1999-07-23 07:54:54 +08:00
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
PHP-8.1 is now for PHP 8.1.26-dev
2023-10-11 04:54:03 +08:00
?? ??? ????, PHP 8.1.26
Fix registerNodeClass with abstract class crashing This always results in a segfault when trying to instantiate, so this never worked. At least throw an error instead of segfaulting to prevent developers from being confused. Closes GH-12420.
2023-10-12 02:51:52 +08:00
- DOM:
. Fix registerNodeClass with abstract class crashing. (nielsdos)
Fix GH-11121: ReflectionFiber segfault Closes GH-12391. Co-authored-by: Aaron Piotrowski <aaron@trowski.com>
2023-10-09 16:46:55 +08:00
- Fiber:
. Fixed bug GH-11121 (ReflectionFiber segfault). (danog, trowski, bwoebi)
Fix GH-12232: FPM: segfault dynamically loading extension without opcache Also fixes incorrect assertion in ini init that php_dl is always temporary. Closes GH-12277
2023-09-23 05:02:19 +08:00
- FPM:
. Fixed bug GH-12232 (FPM: segfault dynamically loading extension without
opcache). (Jakub Zelenka)
Report warning if JIT cannot be enabled Closes GH-12404
2023-10-10 23:11:01 +08:00
- Opcache:
. Added warning when JIT cannot be enabled. (danog)
[ci skip] NEWS Entry for 90f2e7607a.
2023-10-11 23:17:11 +08:00
. Fixed bug GH-8143 (Crashes in zend_accel_inheritance_cache_find since
upgrading to 8.1.3 due to corrupt on-disk file cache). (turchanov)
PHP-8.1 is now for PHP 8.1.26-dev
2023-10-11 04:54:03 +08:00
Fix GH-12392: Segmentation fault on SoapClient::__getTypes There are two issues: - UAF because the hashmap resized while being iterated over, yet the local variables used internally in the macros are not updated. - The hashmap being iterated over is modified: entries are deleted after other entries have been added. This causes the deletion to fail sometimes because indices of buckets have shifted. Fix it by using a while loop iteration and HashPosition position tracker instead. Issue exists on PHP 8.1 too, but is much harder to trigger. The test file reproduces the issue reliably on PHP 8.2 and up. Closes GH-12409.
2023-10-11 06:11:16 +08:00
- SOAP:
. Fixed bug GH-12392 (Segmentation fault on SoapClient::__getTypes).
(nielsdos)
Add missing module dependency for xsl This module cannot work without the DOM extension. Closes GH-12441.
2023-10-15 06:13:57 +08:00
- XSL:
. Add missing module dependency. (nielsdos)
PHP-8.1 is now for PHP 8.1.26-dev
2023-10-11 04:54:03 +08:00
26 Oct 2023, PHP 8.1.25
PHP-8.1 is now for PHP 8.1.25-dev
2023-09-13 05:21:51 +08:00
Fix GH-12207 memory leak of doc blocks of static properties When declaring the same static property with a doc block in a class and in a trait, the doc block of the property in the class is leaked. While at it, possibly fix doc comment for internal classes. Close GH-12238
2023-09-18 20:28:39 +08:00
- Core:
. Fixed bug GH-12207 (memory leak when class using trait with doc block).
(rioderelfte)
Fix GH-12215: Module entry being overwritten causes type errors in ext/dom (<= PHP 8.3) When we try to load an extension multiple times, we still overwrite the type, module number, and handle. If the module number is used to indicate module boundaries (e.g. in reflection and in dom, see e.g. dom_objects_set_class_ex), then all sorts of error can happen. In the case of ext/dom, OP's error happens because the following happens: - The property handler is set up incorrectly in dom_objects_set_class_ex() because the wrong module number is specified. The class highest in the hierarchy is DOMNode, so the property handler is incorrectly set to that of DOMNode instead of DOMDocument. - The documentElement property doesn't exist on DOMNode, it only exists on DOMDocument, so it tries to read using zend_std_read_property(). As there is no user property called documentElement, that read operation returns an undef value. However, the type is still checked, resulting in the strange exception. Closes GH-12219.
2023-09-15 23:15:11 +08:00
. Fixed bug GH-12215 (Module entry being overwritten causes type errors in
ext/dom). (nielsdos)
Fix GH-12273 - configure __builtin_cpu_init() check __builtin_cpu_init() is documented as having a void return type. It happens to return int on gcc, but is void on clang. Close GH-122274
2023-09-23 00:11:22 +08:00
. Fixed bug GH-12273 (__builtin_cpu_init check). (Freaky)
Fix #80092: ZTS + preload = segfault on shutdown After preloading has executed, the executor globals for class_table and function_table are still referring to the values during preloading. If no request happens after that then these values will remain dangling pointers. If then the -v option on CLI or -h option (and possibly others) on CGI is provided, there is a double free. Fix it by nulling the pointers explicitly after preloading has finished to fix it for all SAPIs. Closes GH-12311.
2023-09-28 04:16:43 +08:00
. Fixed bug #80092 (ZTS + preload = segfault on shutdown). (nielsdos)
Fix GH-12207 memory leak of doc blocks of static properties When declaring the same static property with a doc block in a class and in a trait, the doc block of the property in the class is leaked. While at it, possibly fix doc comment for internal classes. Close GH-12238
2023-09-18 20:28:39 +08:00
php_cli_server: ensure single date header is present Currently the PHP Development Server appends a Date header in the response, despite already set from user code. Added a check condition before append the header, and a test file. Closes GH-12363.
2023-10-05 15:36:18 +08:00
- CLI:
. Ensure a single Date header is present. (coppolafab)
Fix GH-11997: ctype_alnum 5 times slower in PHP 8.1 or greater Currently, a common function is used where a function pointer gets passed to check the character class type. If we instead use a macro, the macro version of these character class type checkers can be used. While this gives only a minor speed-up for glibc-based systems, on Alpine this gives a multi-facor speed-up This is essentially a manual revert of dc80ea7e38. Full discussion in GH-11997. Closes GH-12300.
2023-09-26 02:00:53 +08:00
- CType:
. Fixed bug GH-11997 (ctype_alnum 5 times slower in PHP 8.1 or greater).
(nielsdos)
Restore old namespace reconciliation behaviour The xmlDOMWrapReconcileNamespaces method we used to fix the namespace corruption issues in 8.1.21/8.2.8 caused regressions. Primarily, there is a similar corruption that the xmlReconciliateNs method used to have in which a namespace is suddenly shifted (SAML-Toolkits/php-saml#562) and the side-effect of removing redundant namespaces causes problems when a specific serialization is required. Closes GH-12308.
2023-09-28 04:32:01 +08:00
- DOM:
. Restore old namespace reconciliation behaviour. (nielsdos)
Fix GH-8996: DOMNode serialization on PHP ^8.1 PHP 8.1 introduced a seemingly unintentional BC break in ca94d55a19 by blocking the (un)serialization of DOM objects. This was done because the serialization never really worked and just resulted in an empty object, which upon unserialization just resulted in an object that you can't use. Users can however implement their own serialization methods, but the commit made that impossible as the ACC flag gets passed down to the child class. An approach was tried in #10307 with a new ACC flag to selectively allow serialization with subclasses if they implement the right methods. However, that was found to be too ad hoc. Instead, let's abuse how the __sleep and __wakeup methods work to throw the exception instead. If the child class implements the __serialize / __unserialize method, then the throwing methods won't be called. Similarly, if the child class implements __sleep and __wakeup, then they're overridden and it doesn't matter that they throw. For the user, this PR has the exact same behaviour for (sub)classes that don't implement the serialization methods: an exception will be thrown. For code that previously implemented subclasses with these methods, this approach will make that code work again. This approach should be both BC preserving and unbreak user's code. Closes GH-12388. For the test: Co-authored-by: wazelin <contact@sergeimikhailov.com>
2023-10-09 06:15:54 +08:00
. Fixed bug GH-8996 (DOMNode serialization on PHP ^8.1). (nielsdos)
Restore old namespace reconciliation behaviour The xmlDOMWrapReconcileNamespaces method we used to fix the namespace corruption issues in 8.1.21/8.2.8 caused regressions. Primarily, there is a similar corruption that the xmlReconciliateNs method used to have in which a namespace is suddenly shifted (SAML-Toolkits/php-saml#562) and the side-effect of removing redundant namespaces causes problems when a specific serialization is required. Closes GH-12308.
2023-09-28 04:32:01 +08:00
NEWS: Added note about #11891 [ci skip] Signed-off-by: Anatol Belski <ab@php.net>
2023-10-01 01:16:42 +08:00
- Fileinfo:
. Fixed bug GH-11891 (fileinfo returns text/xml for some svg files). (usarise)
[skip ci] Fix NEWS entry
2023-09-14 19:16:43 +08:00
- Filter:
. Fix explicit FILTER_REQUIRE_SCALAR with FILTER_CALLBACK (ilutov)
PHP-8.1 is now for PHP 8.1.25-dev
2023-09-13 05:21:51 +08:00
Fix GH-12186: segfault copying/cloning a finalized HashContext Closes GH-12186. Closes GH-12187.
2023-09-12 19:36:20 +08:00
- Hash:
. Fixed bug GH-12186 (segfault copying/cloning a finalized HashContext).
(MaxSem)
Fix GH-12243, segfault on IntlDateFormatter::construct with dateType set to UDAT_PATTERN but not timeType. udat_open expects its timeStyle's argument to be set to UDAT_PATTERN when dateStyle is, regardless if there an actual pattern or not. Close GH-12245
2023-09-20 01:47:29 +08:00
- Intl:
. Fixed bug GH-12243 (segfault on IntlDateFormatter::construct).
(David Carlier)
Fix GH-12282: IntlDateFormatter::construct should throw an exception is the locale field has an invalid value. Close GH-12282
2023-09-23 20:32:53 +08:00
. Fixed bug GH-12282 (IntlDateFormatter::construct should throw an exception
on an invalid locale). (David Carlier)
Fix GH-12243, segfault on IntlDateFormatter::construct with dateType set to UDAT_PATTERN but not timeType. udat_open expects its timeStyle's argument to be set to UDAT_PATTERN when dateStyle is, regardless if there an actual pattern or not. Close GH-12245
2023-09-20 01:47:29 +08:00
Fix GH-12297: PHP Startup: Invalid library (maybe not a PHP library) 'mysqlnd.so' in Unknown on line On some configurations, the COMPILE_DL_MYSQLND must come from config.h. If it isn't set, the get_module function won't be exposed, resulting in a failure when trying to load the library. It's the same issue ext/fileinfo had a while back that was fixed in b0ba368d5. Closes GH-12299.
2023-09-26 01:38:42 +08:00
- MySQLnd:
. Fixed bug GH-12297 (PHP Startup: Invalid library (maybe not a PHP library)
'mysqlnd.so' in Unknown on line). (nielsdos)
Invalidate path even if the file was deleted Closes GH-12323
2023-09-29 22:57:13 +08:00
- Opcache:
. Fixed opcache_invalidate() on deleted file. (mikhainin)
Fix GH-12380: JIT+private array property access inside closure accesses private property in child class For private fields, the scope has to be taken into account, otherwise the property info may come from the wrong ce. Closes GH-12381.
2023-10-08 05:46:29 +08:00
. Fixed bug GH-12380 (JIT+private array property access inside closure
accesses private property in child class). (nielsdos)
Invalidate path even if the file was deleted Closes GH-12323
2023-09-29 22:57:13 +08:00
Fix GH-11956: PCRE regular expressions with JIT enabled gives different result The code in the attached test used to work correctly in PHP 8.0, but not in 8.1+. This is because PHP 8.1+ uses a more modern version of pcre2 than PHP 8.0, and that pcre2 versions has a regression. While upgrading pcre2lib seems to be only done for the master branch, it is possible to backport upstream fixes to stable branches. This has been already done in the past in for JIT regressions [1], so it is not unprecedented. We backport the upstream pcre2 fix [2]. [1] https://github.com/php/php-src/commit/788a701e222 [2] https://github.com/PCRE2Project/pcre2/pull/135 Closes GH-12108.
2023-09-03 02:24:39 +08:00
- PCRE:
. Fixed bug GH-11956 (Backport upstream fix, PCRE regular expressions with
JIT enabled gives different result). (nielsdos)
Fix GH-12170: Can't use xpath with comments in SimpleXML Closes GH-12177.
2023-09-12 01:54:54 +08:00
- SimpleXML:
. Fixed bug GH-12170 (Can't use xpath with comments in SimpleXML). (nielsdos)
Fix GH-12223: Entity reference produces infinite loop in var_dump/print_r Closes GH-12223.
2023-09-16 20:18:33 +08:00
. Fixed bug GH-12223 (Entity reference produces infinite loop in
var_dump/print_r). (nielsdos)
Fix GH-12167 and GH-12169: Unable to get comment or processing instruction contents in SimpleXML Closes GH-12289.
2023-09-24 05:07:30 +08:00
. Fixed bug GH-12167 (Unable to get processing instruction contents in
SimpleXML). (nielsdos)
. Fixed bug GH-12169 (Unable to get comment contents in SimpleXML).
(nielsdos)
Fix GH-12170: Can't use xpath with comments in SimpleXML Closes GH-12177.
2023-09-12 01:54:54 +08:00
Fix GH-12190: stream_context_create with address and port at 0. Prior to the 8.1 rewrite, inet_aton was used for ipv4 addresses therefore addresses like `0` passed. For the bindto's case where both ip and port are set as such, we discard the address binding. Close GH-12195
2023-09-13 05:45:24 +08:00
- Streams:
. Fixed bug GH-12190 (binding ipv4 address with both address and port at 0).
(David Carlier)
Fix return type of stub of xml_parse_into_struct() Closes GH-12253.
2023-09-21 02:49:10 +08:00
- XML:
. Fix return type of stub of xml_parse_into_struct(). (nielsdos)
Fix memory leak when calling xml_parse_into_struct() twice Closes GH-12254.
2023-09-21 02:51:42 +08:00
. Fix memory leak when calling xml_parse_into_struct() twice. (nielsdos)
Fix return type of stub of xml_parse_into_struct() Closes GH-12253.
2023-09-21 02:49:10 +08:00
Fix type error on XSLTProcessor::transformToDoc return value with SimpleXML The return type is wrong. You can also use this method with SimpleXML. In fact, PHP provides a way that even third party libraries can hook into its XML handling. Therefore, we cannot even use the SimpleXML|DOMDocument|false union type as third party extensions may extend the possibilities. Broke in 8.1 in 1b35056a33. Closes GH-12315.
2023-09-29 05:49:42 +08:00
- XSL:
. Fix type error on XSLTProcessor::transformToDoc return value with
SimpleXML. (nielsdos)
Fix socket_export_stream() with wrong protocol Closes GH-12310.
2023-09-28 02:17:47 +08:00
- Sockets:
. Fix socket_export_stream() with wrong protocol (twosee)
PHP-8.1 is now for PHP 8.1.25-dev
2023-09-13 05:21:51 +08:00
28 Sep 2023, PHP 8.1.24
PHP-8.1 is now for PHP 8.1.24-dev
2023-08-16 03:09:58 +08:00
Fix segfault in format_default_value due to unexpected enum/object Evaluating constants at comptime can result in arrays that contain objects. This is problematic for printing the default value of constant ASTs containing objects, because we don't actually know what the constructor arguments were. Avoid this by not propagating array constants. Fixes GH-11937 Closes GH-11947
2023-08-12 22:11:29 +08:00
- Core:
. Fixed bug GH-11937 (Constant ASTs containing objects). (ilutov)
On riscv64 require libatomic if actually needed clang and newer gcc releases support byte-sized atomic accesses on riscv64 through inline builtins. In both cases the hard dependency on libatomic added by GH-11321 isn't useful. Stop using AC_CHECK_LIB() which is too naive to notice that libatomic isn't needed. Instead, PHP_CHECK_FUNC() will retry the check with -latomic if required. Closes GH-11790
2023-08-29 01:47:19 +08:00
. Fixed bug GH-11790 (On riscv64 require libatomic if actually needed).
(Jeremie Courreges-Anglas)
Fix freeing of incompletely initialized closures Addref to relevant fields before allocating any memory. Also only set/remove the ZEND_ACC_HEAP_RT_CACHE flag after allocating memory. Fixes GH-12073 Closes GH-12074
2023-08-29 22:53:38 +08:00
. Fixed bug GH-12073 (Segfault when freeing incompletely initialized
closures). (ilutov)
Prevents double call to internal iterator rewind handler Closes GH-12060 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-08-28 00:18:34 +08:00
. Fixed bug GH-12060 (Internal iterator rewind handler is called twice).
(ju1ius)
Fix zend_separate_if_call_and_write for FUNC_ARGs Fixes GH-12102 Closees GH-12140
2023-09-06 19:22:59 +08:00
. Fixed bug GH-12102 (Incorrect compile error when using array access on TMP
value in function call). (ilutov)
Fix segfault in format_default_value due to unexpected enum/object Evaluating constants at comptime can result in arrays that contain objects. This is problematic for printing the default value of constant ASTs containing objects, because we don't actually know what the constructor arguments were. Avoid this by not propagating array constants. Fixes GH-11937 Closes GH-11947
2023-08-12 22:11:29 +08:00
Fix memory leak when setting an invalid DOMDocument encoding Because the failure path did not release the string, there was a memory leak. As the only valid types for this function are IS_NULL and IS_STRING, we and IS_NULL is always rejected in practice, solve the issue by not using a function that increments the refcount in the first place. Closes GH-12002.
2023-08-20 05:54:53 +08:00
- DOM:
. Fix memory leak when setting an invalid DOMDocument encoding. (nielsdos)
ext/iconv: fix build for netbsd. NetBSD still adopts the old iconv signature for buffer inputs. The next release will too so we can assume it will remain that way for a while. Close GH-12001
2023-08-20 02:20:01 +08:00
- Iconv:
. Fixed build for NetBSD which still uses the old iconv signature.
(David Carlier)
Fixed bug GH-12020: intl_get_error_message() broken after MessageFormatter::formatMessage() fails Passing NULL as the pointer to intl_error* will use the global error stack. This is what we need to do instead of pushing it onto the temporary format object that is released.
2023-09-03 07:59:20 +08:00
- Intl:
. Fixed bug GH-12020 (intl_get_error_message() broken after
MessageFormatter::formatMessage() fails). (Girgias)
Fix implicit/explicit port in mysqlnd
2023-03-24 21:52:20 +08:00
- MySQLnd:
. Fixed bug GH-10270 (Invalid error message when connection via SSL fails:
"trying to connect via (null)"). (Kamil Tekiela)
PHP-8.1 is now for PHP 8.1.24-dev
2023-08-16 03:09:58 +08:00
Fix memory leak with failed SQLPrepare Closes GH-12095 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-09-01 02:25:46 +08:00
- ODBC:
. Fixed memory leak with failed SQLPrepare. (NattyNarwhal)
Fix persistent procedural ODBC connections not getting closed Like oci8, procedural ODBC uses an apply function on the hash list to enumerate persistent connections and close the specific one. However, this function take zvals, not resources. However, it was getting casted as such, causing it to interpret the pointer incorrectly. This could have caused other issues, but mostly manifested as failing to close the connection even fi it matched. The function now takes a zval and gets the resource from that. In addition, it also removes the cast of the function pointer and moves casting to the function body, to avoid possible confusion like this in refactors again. It also cleans up style and uses constants in the function body. Closes GH-12132 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-09-01 03:14:30 +08:00
. Fixed persistent procedural ODBC connections not getting closed.
(NattyNarwhal)
Fix memory leak with failed SQLPrepare Closes GH-12095 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-09-01 02:25:46 +08:00
Fix #52751: XPath processing-instruction() function is not supported. Closes GH-12165.
2023-09-10 03:17:02 +08:00
- SimpleXML:
. Fixed bug #52751 (XPath processing-instruction() function is not
supported). (nielsdos)
Fix GH-11972: RecursiveCallbackFilterIterator regression in 8.1.18 When you do an assignment between two zvals (no, not zval*), you copy all fields. This includes the additional u2 data. So that means for example the Z_NEXT index gets copied, which in some cases can therefore cause a cycle in zend_hash lookups. Instead of doing an assignment, we should be doing a ZVAL_COPY (or ZVAL_COPY_VALUE for non-refcounting cases). This avoids copying u2. Closes GH-12086.
2023-08-31 03:25:03 +08:00
- SPL:
. Fixed bug GH-11972 (RecursiveCallbackFilterIterator regression in 8.1.18).
(nielsdos)
Fix GH-11878: SQLite3 callback functions cause a memory leak with a callable array In this test file, the free_obj handler is called with a refcount of 2, caused by the fact we do a GC_ADDREF() to increase its refcount while its refcount is still 1 because the Foo object hasn't been destroyed yet (due to the cycle caused by the sqlite function callback). Solve this by introducing a get_gc handler. Closes GH-11881.
2023-09-09 01:56:36 +08:00
- SQLite3:
. Fixed bug GH-11878 (SQLite3 callback functions cause a memory leak with
a callable array). (nielsdos, arnaud-lb)
PHP-8.1 is now for PHP 8.1.24-dev
2023-08-16 03:09:58 +08:00
31 Aug 2023, PHP 8.1.23
PHP-8.1 is now for PHP-8.1.23-dev
2023-07-19 05:30:49 +08:00
Fix GH-11716: cli server crashes on SIGINT when compiled with ZEND_RC_DEBUG=1 Closes GH-11757.
2023-07-21 19:25:50 +08:00
- CLI:
. Fixed bug GH-11716 (cli server crashes on SIGINT when compiled with
ZEND_RC_DEBUG=1). (nielsdos)
Fix GH-10964: Improve `man` page about the built-in server Closes GH-11857.
2023-08-02 22:02:00 +08:00
. Fixed bug GH-10964 (Improve man page about the built-in server).
(Alexandre Daubois)
Fix GH-11716: cli server crashes on SIGINT when compiled with ZEND_RC_DEBUG=1 Closes GH-11757.
2023-07-21 19:25:50 +08:00
fix: handle the GNU specific version of strerror_r Close GH-11882
2023-08-06 00:03:46 +08:00
- Core:
. Fixed strerror_r detection at configuration time. (Kévin Dunglas)
Fix GH-11416: Crash with DatePeriod when uninitialised objects are passed in
2023-08-09 17:19:10 +08:00
- Date:
. Fixed bug GH-11416: Crash with DatePeriod when uninitialised objects
are passed in. (Derick)
Fix DOMEntity field getter bugs - publicId could crash PHP if none was provided - notationName never worked The fields of this classs were untested. This new test file changes that. Closes GH-11779.
2023-07-24 05:39:33 +08:00
- DOM:
. Fix DOMEntity field getter bugs. (nielsdos)
Fix incorrect attribute existence check in DOMElement::setAttributeNodeNS() Closes GH-11776.
2023-07-23 20:59:32 +08:00
. Fix incorrect attribute existence check in DOMElement::setAttributeNodeNS.
(nielsdos)
Fix DOMCharacterData::replaceWith() with itself Previously, when replacing the node with itself (or contained within itself), the node disappeared. Closes GH-11770.
2023-07-23 03:47:09 +08:00
. Fix DOMCharacterData::replaceWith() with itself. (nielsdos)
Fix empty argument cases for DOMParentNode methods Closes GH-11768.
2023-07-23 01:05:09 +08:00
. Fix empty argument cases for DOMParentNode methods. (nielsdos)
Fix GH-11791: Wrong default value of DOMDocument::xmlStandalone At one point this was changed from a bool to an int in libxml2, with negative values meaning it is unspecified. Because it is cast to a bool this therefore returned true instead of the expected false. Closes GH-11793.
2023-07-26 03:09:47 +08:00
. Fixed bug GH-11791 (Wrong default value of DOMDocument::xmlStandalone).
(nielsdos)
Fix json_encode result on DOMDocument According to https://www.php.net/manual/en/class.domdocument: When using json_encode() on a DOMDocument object the result will be that of encoding an empty object. But this was broken in 8.1. The output was `{"config": null}`. That's because the config property is defined with a default value of NULL, hence it was included. The other properties are not included because they don't have a default property, and nothing is ever written to their backing field. Hence, the JSON encoder excludes them. Similarly, `(array) $doc` would yield the same `config` key in the array. Closes GH-11840.
2023-07-31 23:57:53 +08:00
. Fix json_encode result on DOMDocument. (nielsdos)
Fix manually calling __construct() on DOM classes Closes GH-11894.
2023-08-06 22:49:02 +08:00
. Fix manually calling __construct() on DOM classes. (nielsdos)
Fix GH-11830: ParentNode methods should perform their checks upfront Closes GH-11887.
2023-08-06 03:27:02 +08:00
. Fixed bug GH-11830 (ParentNode methods should perform their checks
upfront). (nielsdos)
Fix segfault when DOMParentNode::prepend() is called when the child disappears Closes GH-11906.
2023-08-08 03:16:33 +08:00
. Fix segfault when DOMParentNode::prepend() is called when the child
disappears. (nielsdos)
Fix DOMEntity field getter bugs - publicId could crash PHP if none was provided - notationName never worked The fields of this classs were untested. This new test file changes that. Closes GH-11779.
2023-07-24 05:39:33 +08:00
Fix leaking definitions on FFI::cdef()->new() Previously, FFI_G(symbols) and FFI_G(tags) were never cleaned up when calling new on an existing object. However, if cdef() is called without parameters these globals are NULL and might be created when new() creates new definitions. These would then be discarded without freeing them. Closes GH-11751
2023-07-20 19:28:02 +08:00
- FFI:
. Fix leaking definitions when using FFI::cdef()->new(...). (ilutov)
PHP-8.1 is now for PHP-8.1.23-dev
2023-07-19 05:30:49 +08:00
Fix GH-11440: authentication to a sha256_password account fails over SSL This is similar to bug #78680, but that bug wasn't really fixed in all places. This is the only remaining place. Closes GH-11444.
2023-06-13 05:42:11 +08:00
- MySQLnd:
. Fixed bug GH-11440 (authentication to a sha256_password account fails over
SSL). (nielsdos)
Fix GH-11438: mysqlnd fails to authenticate with sha256_password accounts using passwords longer than 19 characters https://dev.mysql.com/doc/dev/mysql-server/latest/page_caching_sha2_authentication_exchanges.html tells us that the nonce used in this authentication method is 20 bytes long. However, we might receive additional scramble data in php_mysqlnd_greet_read not used in this method. On my test setup, I received 21 bytes (20 bytes + '\0'). This resulted in the xor computation to incorrectly include the NUL byte. Every password of at least 20 characters therefore failed to authenticate using this method. Looking at mysql-server source code also seems to reveal that it always uses a fixed number of scramble bytes [1]. [1] https://github.com/mysql/mysql-server/blob/ea7087d885006918ad54458e7aad215b1650312c/sql/auth/sha2_password.cc#L1078-L1079 Closes GH-11445. Co-authored-by: Kamil Tekiela <tekiela246@gmail.com>
2023-06-13 05:47:42 +08:00
. Fixed bug GH-11438 (mysqlnd fails to authenticate with sha256_password
accounts using passwords longer than 19 characters).
(nielsdos, Kamil Tekiela)
Fix MySQL Statement has a empty query result when the response field has changed, also Segmentation fault Closes GH-11551.
2023-06-28 16:29:31 +08:00
. Fixed bug GH-11550 (MySQL Statement has a empty query result when
the response field has changed, also Segmentation fault).
(Yurunsoft)
Fix error checking in mysqlnd Closes GH-11925
2023-08-10 01:09:54 +08:00
. Fixed invalid error message "Malformed packet" when connection is dropped.
(Kamil Tekiela)
Fix GH-11440: authentication to a sha256_password account fails over SSL This is similar to bug #78680, but that bug wasn't really fixed in all places. This is the only remaining place. Closes GH-11444.
2023-06-13 05:42:11 +08:00
Fix GH-11715: opcache.interned_strings_buffer either has no effect or opcache_get_status() / phpinfo() is wrong There are a couple of oddities. 1) The interned strings buffer comprises the whole hashtable datastructure. Therefore, it seems that the interned strings buffer size is the size of only said table. However, in the current code it also includes the size of the zend_accel_shared_globals. 2) ZCSG(interned_strings).end is computed starting from the accelerator globals struct itself. I would expect it to start from the part where the interned strings table starts. 3) When computing the used size, it is done using ZCSG(interned_strings).end - ZCSG(interned_strings).start. However, this does not include the uin32_t slots array because ZCSG(interned_strings).start pointers after that array. This patch corrrects these 3 points. Closes GH-11717.
2023-07-17 08:34:49 +08:00
- Opcache:
. Fixed bug GH-11715 (opcache.interned_strings_buffer either has no effect or
opcache_get_status() / phpinfo() is wrong). (nielsdos)
Check if restart is pending before trying to lock SHM This reduces lock contention when Opcache restart is scheduled but not yet started. Closes GH-11805
2023-07-27 19:54:29 +08:00
. Avoid adding an unnecessary read-lock when loading script from shm if
restart is in progress. (mikhainin)
Fix GH-11715: opcache.interned_strings_buffer either has no effect or opcache_get_status() / phpinfo() is wrong There are a couple of oddities. 1) The interned strings buffer comprises the whole hashtable datastructure. Therefore, it seems that the interned strings buffer size is the size of only said table. However, in the current code it also includes the size of the zend_accel_shared_globals. 2) ZCSG(interned_strings).end is computed starting from the accelerator globals struct itself. I would expect it to start from the part where the interned strings table starts. 3) When computing the used size, it is done using ZCSG(interned_strings).end - ZCSG(interned_strings).start. However, this does not include the uin32_t slots array because ZCSG(interned_strings).start pointers after that array. This patch corrrects these 3 points. Closes GH-11717.
2023-07-17 08:34:49 +08:00
Revert the fix for GH-11498 People relied on manually waiting for children, but the fix for GH-11498 broke this. Fixing this in PHP is fundamentally incompatible with doing the wait loop in userland. This reverts to the old behaviour. Closes GH-11863.
2023-08-03 03:08:52 +08:00
- PCNTL:
. Revert behaviour of receiving SIGCHLD signals back to the behaviour
before 8.1.22. (nielsdos)
Fix #81992: SplFixedArray::setSize() causes use-after-free Upon resizing, the elements are destroyed from lower index to higher index. When an element refers to an object with a destructor, it can refer to a lower (i.e. already destroyed) element, causing a uaf. Set refcounted zvals to NULL after destroying them to avoid a uaf. Closes GH-11959.
2023-08-14 07:41:54 +08:00
- SPL:
. Fixed bug #81992 (SplFixedArray::setSize() causes use-after-free).
(nielsdos)
Prevent int overflow on $decimals in number_format Closes GH-11714. Closes GH-11649.
2023-07-17 02:03:01 +08:00
- Standard:
. Prevent int overflow on $decimals in number_format. (Marc Bennewitz)
Fix off-by-one bug when truncating tempnam prefix The tempnam documentation currently states that "Only the first 63 characters of the prefix are used, the rest are ignored". However when the prefix is 64 characters-long, the current implementation fails to strip the last character, diverging from the documented behavior. This patch fixes the implementation so it matches the documented behavior for that specific case where the prefix is 64 characters long. Closes GH-11870 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-08-04 09:27:49 +08:00
. Fixed bug GH-11870 (Fix off-by-one bug when truncating tempnam prefix)
(athos-ribeiro)
Prevent int overflow on $decimals in number_format Closes GH-11714. Closes GH-11649.
2023-07-17 02:03:01 +08:00
PHP-8.1 is now for PHP-8.1.23-dev
2023-07-19 05:30:49 +08:00
03 Aug 2023, PHP 8.1.22
PHP-8.1 is now for PHP 8.1.22-dev
2023-06-20 22:07:05 +08:00
Fix GH-11522: PHP version check fails with '-' separator Remove php version suffix from '-' separator. Closes GH-11524.
2023-06-24 22:30:57 +08:00
- Build:
[ci skip] NEWS
2023-07-10 22:01:52 +08:00
. Fixed bug GH-11522 (PHP version check fails with '-' separator).
(SVGAnimate)
Fix GH-11522: PHP version check fails with '-' separator Remove php version suffix from '-' separator. Closes GH-11524.
2023-06-24 22:30:57 +08:00
Fix interrupted CLI output causing the process to exit When writing the output in the CLI is interrupted by a signal, the writing will fail in sapi_cli_single_write(), causing an exit later in sapi_cli_ub_write(). This was the other part of the issue in GH-11498. The solution is to restart the write if an EINTR has been observed. Closes GH-11510.
2023-06-23 06:07:46 +08:00
- CLI:
. Fix interrupted CLI output causing the process to exit. (nielsdos)
Fix mis-compilation of by-reference nullsafe operator Fixes oss-fuzz #60011 Closes GH-11540 Co-authored-by: Dmitry Stogov <dmitry@zend.com> Co-authored-by: Niels Dossche <7771979+nielsdos@users.noreply.github.com>
2023-06-27 01:08:52 +08:00
- Core:
. Fixed oss-fuzz #60011 (Mis-compilation of by-reference nullsafe operator).
(ilutov)
Fix use-of-uninitialized-value with ??= on assert Normally, PHP evaluates all expressions in offsets (property or array), as well as the right hand side of assignments before actually fetching the offsets. This is well explained in this blog post. https://www.npopov.com/2017/04/14/PHP-7-Virtual-machine.html#writes-and-memory-safety For ??= we have a bit of a problem in that the rhs must only be evaluated if the lhs is null or undefined. Thus, we have to first compile the lhs with BP_VAR_IS, conditionally run the rhs and then re-fetch the lhs with BP_VAR_W to to make sure the offsets are valid if they have been invalidated. However, we don't want to just re-evaluate the entire lhs because it may contain side-effects, as in $array[$x++] ??= 42;. In this case, we don't want to re-evaluate $x++ because it would result in writing to a different offset than was previously tested. The same goes for function calls, like $array[foo()] ??= 42;, where the second call to foo() might result in a different value. PHP behaves correctly in these cases. This is implemented by memoizing sub-expressions in the lhs of ??= and reusing them when compiling the lhs for the second time. This is done for any expression that isn't a variable, i.e. anything that can (potentially) be written to. Unfortunately, this also means that function calls are considered writable due to their return-by-reference semantics, and will thus not be memoized. The expression foo()['bar'] ??= 42; will invoke foo() twice. Even worse, foo(bar()) ??= 42; will call both foo() and bar() twice, but foo(bar() + 1) ??= 42; will only call foo() twice. This is likely not by design, and was just overlooked in the implementation. The RFC does not specify how function calls in the lhs of the coalesce assignment behaves. This should probably be improved in the future. Now, the problem this commit actually fixes is that ??= may memoize expressions inside assert() function calls that may not actually execute. This is not only an issue when using the VAR in the second expression (which would usually also be skipped) but also when freeing the VAR. For this reason, it is not safe to memoize assert() sub-expressions. There are two possible solutions: 1. Don't memoize any sub-expressions of assert(), meaning they will execute twice. 2. Throw a compile error. Option 2 is not quite simple, because we can't disallow all memoization inside assert(), as that would break assertions like assert($array[foo()] ??= 'bar');. Code like this is highly unlikely (and dubious) but possible. In this case, we would need to make sure that a memoized value could not be used across the assert boundary it was created in. The complexity for this is not worthwhile. So we opt for option 1 and disable memoization immediately inside assert(). Fixes GH-11580 Closes GH-11581
2023-07-03 20:59:13 +08:00
. Fixed use-of-uninitialized-value with ??= on assert. (ilutov)
zend_gdb disable gdb detection for FreeBSD < 11. ref PR: https://github.com/php/php-src/pull/11599. Close GH-11646
2023-07-09 17:48:01 +08:00
. Fixed build for FreeBSD before the 11.0 releases. (David Carlier)
Fix mis-compilation of by-reference nullsafe operator Fixes oss-fuzz #60011 Closes GH-11540 Co-authored-by: Dmitry Stogov <dmitry@zend.com> Co-authored-by: Niels Dossche <7771979+nielsdos@users.noreply.github.com>
2023-06-27 01:08:52 +08:00
Fix crash when an invalid callback function is passed to CURLMOPT_PUSHFUNCTION Previously this caused a SIGABRT. Closes GH-11639.
2023-07-09 00:30:28 +08:00
- Curl:
. Fix crash when an invalid callback function is passed to
CURLMOPT_PUSHFUNCTION. (nielsdos)
Fixed GH-11368: Date modify returns invalid datetime
2023-06-23 00:49:51 +08:00
- Date:
. Fixed bug GH-11368 (Date modify returns invalid datetime). (Derick)
Fix GH-11625: DOMElement::replaceWith() doesn't replace node with DOMDocumentFragment but just deletes node or causes wrapping <></> depending on libxml2 version Depending on the libxml2 version, the behaviour is either to not render the fragment correctly, or to wrap it inside <></>. Fix it by unpacking fragments manually. This has the side effect that we need to move the unlinking check in the replacement function to earlier because the empty child list is now possible in non-error cases. Also fixes a mistake in the linked list management. Closes GH-11627.
2023-07-08 05:13:56 +08:00
- DOM:
. Fixed bug GH-11625 (DOMElement::replaceWith() doesn't replace node with
DOMDocumentFragment but just deletes node or causes wrapping <></>
depending on libxml2 version). (nielsdos)
NEWS: Add note for #11298 [ci skip] Signed-off-by: Anatol Belski <ab@php.net>
2023-07-02 00:56:07 +08:00
- Fileinfo:
. Fixed bug GH-11298 (finfo returns wrong mime type for xz files). (Anatol)
Fix context option check for "overwrite" in FTP Use zend_is_true() to read value of FTP context option "overwrite". Closes GH-11332.
2023-05-28 09:47:27 +08:00
- FTP:
. Fix context option check for "overwrite". (JonasQuinten)
Fix GH-10562: Memory leak and invalid state with consecutive ftp_nb_fget When the user does not fully consume the data stream, but instead opens a new one, a memory leak occurs. Moreover, the state is invalid: when more commands arrive they'll be handled out-of-sync because the state of the client does not match what the server is doing. This leads to all sorts of weirdness, for example: Warning: ftp_nb_fget(): OK. Fix it by gracefully closing the old data stream when a new data stream is started. Closes GH-11606.
2023-07-07 03:07:52 +08:00
. Fixed bug GH-10562 (Memory leak and invalid state with consecutive
ftp_nb_fget). (nielsdos)
Fix context option check for "overwrite" in FTP Use zend_is_true() to read value of FTP context option "overwrite". Closes GH-11332.
2023-05-28 09:47:27 +08:00
Fix most external GD 2.3.3 compatibility * ext/gd/tests/bug45799.phpt: tweak to work with external gd. The expected output from this test contains an extra newline with gd-2.3.3 from the system (Gentoo). Adding a whitespace wildcard takes care of it, and the test still passes with the bundled version of gd. * ext/gd/tests: external gd-2.3.3 compatibility. Support for the legacy "gd" image format was removed from gd-2.3.3 upstream: https://github.com/libgd/libgd/blob/master/CHANGELOG.md#233---2021-09-12 Several tests for the gd extension utilize that format, and naturally fail when gd-2.3.3 from the system is used. This commit skips those tests when the version of gd is at least 2.3.3. * ext/gd/tests/bug73159.phpt: skip with external gd >= 2.3.3 This test uses the imagegd2() function to check that https://github.com/libgd/libgd/issues/289 is fixed. When an external gd without support for the "gd" format is used, no error is thrown, but a nonsense result is printed: this is normal. The corresponding upstream test is disabled in that situation; it's not expected to work. This commit skips the corresponding PHP test under the same circumstances to fix a test failure with external gd >= 2.3.3. * ext/gd/tests/bug73155.phpt: skip with external gd >= 2.3.3 This test uses the imagegd2() function to check that https://github.com/libgd/libgd/issues/309 is fixed. When an external gd without support for the "gd" format is used, no error is thrown, but a nonsense result is printed: this is normal. The corresponding upstream test is disabled in that situation; it's not expected to work. This commit skips the corresponding PHP test under the same circumstances to fix a test failure with external gd >= 2.3.3. * ext/gd/tests/bug73157.phpt: skip with external gd >= 2.3.3 This test ensures that the third (chunk_size) parameter to imagegd2() is respected when a fourth parameter is also given. However, when an external gd without support for the "gd" format is used, the call to imagegd2() does not really work at all. It doesn't fail, but it produces an "image" with a nonsense chunk size. To avoid failures when an external gd >= 2.3.3 is used, we skip the test entirely in that case. * ext/gd/tests/bug77973.phpt: accept lowercase "Invalid" This test fails with an external gd because the test expects "Invalid" where upstream gd says "invalid". This commit tweaks the expected output to accept an arbitrary character in the i/I position. * ext/gd/tests/bug39780_extern.phpt: update for external gd-2.3.3. Since there are no CI runs with external gd, I can only assume that this test has fallen out-of-date due to changes in PHP itself. I've tweaked the expected output (only slightly) so that the test passes with both gd-2.3.2 and gd-2.3.3. * ext/gd/tests/bug66356.phpt: update expected output for external gd. Newer (external) versions of GD start their error messages with lowercase characters, whereas this test is expecting them in uppercase. A single-character wildcard now supports both formats. * ext/gd/tests/imagegd_truecolor.phpt: skip with external gd >= 2.3.3. This test uses the imagegd() function, but the "gd" format has been disabled by default in upstream gd-2.3.3. We still get some kind of image data back from the call to imagegd(), but its "signature", "truecolor", and "size" no longer match the expected values. This commit skips the test when an external gd >= 2.3.3 is used. * ext/gd/tests/createfromwbmp2_extern.phpt: update for external gd-2.3.3. * ext/gd/tests/libgd00086_extern.phpt: update for external gd-2.3.3. Since there are no CI runs with external gd, I can only assume that this test has fallen out-of-date due to changes in PHP itself. I've tweaked the expected output (only slightly) so that the test passes with both gd-2.3.2 and gd-2.3.3. * ext/gd/tests/bug77272.phpt: update expected output for external gd. Newer (external) versions of GD start their error messages with lowercase characters, whereas this test is expecting them in uppercase. A single-character wildcard now supports both formats. * ext/gd/tests/bug77479.phpt: update for newer external gd. This test fails with gd-2.3.3 (at least) due to minor capitalization and whitespace issues. We add some wildcards to account for the difference. Closes GH-11257. Closes GH-11262. Closes GH-11264. Closes GH-11280.
2023-05-17 20:59:53 +08:00
- GD:
. Fix most of the external libgd test failures. (Michael Orlitzky)
Fix hash_pbkdf2 options parameter The value needs to be initialized to NULL as it is optional. Furthermore, the parameter was completely missing in the stub signature. Closes GH-11731
2023-07-18 04:11:49 +08:00
- Hash:
. Fix use-of-uninitialized-value in hash_pbkdf2(), fix missing $options
parameter in signature. (ilutov)
ext/intl: Fix memory leak in MessageFormatter::format() Closes GH-11658
2023-07-10 18:23:49 +08:00
- Intl:
. Fix memory leak in MessageFormatter::format() on failure. (Girgias)
NEWS Signed-off-by: Ben Ramsey <ramsey@php.net>
2023-08-01 05:00:57 +08:00
- Libxml:
. Fixed bug GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading
in XML without enabling it). (CVE-2023-3823) (nielsdos, ilutov)
Fix GH-11300: license issue: restricted unicode license headers Closes GH-11572.
2023-07-02 00:34:40 +08:00
- MBString:
. Fix GH-11300 (license issue: restricted unicode license headers).
(nielsdos)
Fix GH-10914: OPCache with Enum and Callback functions results in segmentation fault See linked issue for analysis. Closes GH-11675.
2023-07-11 22:39:25 +08:00
- Opcache:
. Fixed bug GH-10914 (OPCache with Enum and Callback functions results in
segmentation fault). (nielsdos)
Prevent potential deadlock if accelerated globals cannot be allocated Not sure if this is possible to hit in practice, zend_accel_error_noreturn doesn't return so the unlock isn't called. Other callsites that use both zend_accel_error_noreturn and zend_shared_alloc_unlock first perform the unlocking. Closes GH-11718.
2023-07-17 08:44:35 +08:00
. Prevent potential deadlock if accelerated globals cannot be allocated.
(nielsdos)
Fix GH-10914: OPCache with Enum and Callback functions results in segmentation fault See linked issue for analysis. Closes GH-11675.
2023-07-11 22:39:25 +08:00
Fix GH-11498: SIGCHLD is not always returned from proc_open Linux, and maybe other unixes, may merge multiple standard signals into a single one. This causes issues when keeping track of process IDs. Solve this by manually checking which children are dead using waitpid(). Test case is based on taka-oyama's test code. Closes GH-11509.
2023-06-23 06:04:07 +08:00
- PCNTL:
. Fixed bug GH-11498 (SIGCHLD is not always returned from proc_open).
(nielsdos)
Mangle PCRE regex cache key with JIT option Closes GH-11396
2023-06-09 05:25:41 +08:00
- PCRE:
. Mangle PCRE regex cache key with JIT option. (mvorisek)
PHP-8.1 is now for PHP 8.1.22-dev
2023-06-20 22:07:05 +08:00
Fix GH-11587 PDO::ATTR_STRINGIFY_FETCHES should return strings even in if PDO::ATTR_EMULATE_PREPARES is enabled This also includes a fix for the MySQL ND driver to actually respect the user decided behaviour. Closes GH-11622 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-07-07 20:32:43 +08:00
- PDO:
. Fix GH-11587 (After php8.1, when PDO::ATTR_EMULATE_PREPARES is true
and PDO::ATTR_STRINGIFY_FETCHES is true, decimal zeros are no longer
filled). (SakiTakamachi)
Fix GH-11492: Make test failure: ext/pdo_sqlite/tests/bug_42589.phpt Closes GH-11494.
2023-06-21 08:02:15 +08:00
- PDO SQLite:
. Fix GH-11492 (Make test failure: ext/pdo_sqlite/tests/bug_42589.phpt).
(KapitanOczywisty, CViniciusSDias)
Add missing check on EVP_VerifyUpdate() in phar util Closes GH-11640.
2023-07-09 02:17:04 +08:00
- Phar:
. Add missing check on EVP_VerifyUpdate() in phar util. (nielsdos)
NEWS Signed-off-by: Ben Ramsey <ramsey@php.net>
2023-08-01 05:00:57 +08:00
. Fixed bug GHSA-jqcx-ccgc-xwhv (Buffer mismanagement in phar_dir_read()).
(CVE-2023-3824) (nielsdos)
Add missing check on EVP_VerifyUpdate() in phar util Closes GH-11640.
2023-07-09 02:17:04 +08:00
[ci skip] NEWS The alphabet is hard...
2023-07-08 01:26:57 +08:00
- PHPDBG:
. Fixed bug GH-9669 (phpdbg -h options doesn't list the -z option). (adsr)
Remove session ID set through REQUEST_URI
2023-06-18 04:49:53 +08:00
- Session:
. Removed broken url support for transferring session ID. (ilutov)
Fix serialization of RC1 objects appearing in object graph twice Previously, if an object had RC1 it would never be recorded in php_serialize_data.ht because it was assumed that it could not be encountered again. This assumption is incorrect though as the object itself may be saved inside an array with RCn. This results in a new instance of the object, instead of a second reference to the same object. This is solved by tracking these objects in php_serialize_data.ht. To retain performance, track if the current object resides in a potentially nested RCn array. If not, and if the object is RC1 itself it may be omitted from php_serialize_data.ht. Additionally, we may treat the array root itself as RC1 because it may not appear in the object graph again without recursion. Recursive arrays are still somewhat broken even with this change, as the tracking of the array only happens when the reference is encountered, thus resulting in a -> a' -> a' for a self recursive array a -> a. Recursive arrays have limited support in serialize anyway, so we ignore this case for now. Co-authored-by: Dmitry Stogov <dmitry@zend.com> Co-authored-by: Martin Hoch <martin@littlerobot.de> Closes GH-11349 Closes GH-11305
2023-05-23 23:39:17 +08:00
- Standard:
. Fix serialization of RC1 objects appearing in object graph twice. (ilutov)
Fix replaced error handling in SQLite3Stmt::__construct The error handling is replaced using zend_replace_error_handling(), but when SQLITE3_CHECK_INITIALIZED() returns early, the old error handling isn't restored. In the past, SQLITE3_CHECK_INITIALIZED() threw a warning when the check failed. This was replaced a few years ago with an error exception. So we can fix the bug by just removing the replacing error handling as it accomplishes nothing anymore. Closes GH-11607.
2023-07-07 04:02:56 +08:00
- SQLite3:
. Fix replaced error handling in SQLite3Stmt::__construct. (nielsdos)
PHP-8.1 is now for PHP 8.1.22-dev
2023-06-20 22:07:05 +08:00
06 Jul 2023, PHP 8.1.21
PHP-8.1 is now for PHP 8.1.21-dev
2023-05-24 05:19:16 +08:00
Fix bug GH-11246 cli/get_set_process_title Fail to clobber_error only when the argv is a non-contiguous area Don't increment the end_of_error if a non-contiguous area is encountered in environ Closes GH-11247
2023-05-16 08:37:42 +08:00
- CLI:
. Fixed bug GH-11246 (cli/get_set_process_title fails on MacOS).
(James Lucas)
Fix GCC 12 compilation on riscv64 Close GH-11321
2023-05-26 02:26:28 +08:00
- Core:
. Fixed build for the riscv64 architecture/GCC 12. (Daniil Gentili)
Fix GH-11433: Unable to set CURLOPT_ACCEPT_ENCODING to NULL Closes GH-11446.
2023-06-13 05:58:34 +08:00
- Curl:
. Fixed bug GH-11433 (Unable to set CURLOPT_ACCEPT_ENCODING to NULL).
(nielsdos)
Fix GH-11288 and GH-11289 and GH-11290 and GH-9142: DOMExceptions and segfaults with replaceWith This replaces the implementation of before and after with one following the spec very strictly, instead of trying to figure out the state we're in by looking at the pointers. Also relaxes the condition on text node copying to prevent working on a stale node pointer. Closes GH-11299.
2023-05-23 05:50:06 +08:00
- DOM:
. Fixed bugs GH-11288 and GH-11289 and GH-11290 and GH-9142 (DOMExceptions
and segfaults with replaceWith). (nielsdos)
Fix GH-10234: Setting DOMAttr::textContent results in an empty attribute value We can't directly call xmlNodeSetContent, because it might encode the string through xmlStringLenGetNodeList for types XML_DOCUMENT_FRAG_NODE, XML_ELEMENT_NODE, XML_ATTRIBUTE_NODE. In these cases we need to use a text node to avoid the encoding. For the other cases, we *can* rely on xmlNodeSetContent because it is either a no-op, or handles the content without encoding and clears the properties field if needed. The test was taken from the issue report, for the test: Co-authored-by: ThomasWeinert <thomas@weinert.info> Closes GH-10245.
2023-01-07 02:51:49 +08:00
. Fixed bug GH-10234 (Setting DOMAttr::textContent results in an empty
attribute value). (nielsdos)
Fix return value in stub file for DOMNodeList::item Not explicitly documenting the possibility of returning DOMElement causes the Intelephense linter (a popular PHP linter with ~9 million downloads: https://marketplace.visualstudio.com/items?itemName=bmewburn.vscode-intelephense-client) to think this code is bad: $xp->query("whatever")->item(0)->getAttribute("foo"); DOMNode does not have getAttribute (while DOMElement does). Documenting the DOMElement return type should fix Intelephense's linter. Closes GH-11342.
2023-05-29 22:53:00 +08:00
. Fix return value in stub file for DOMNodeList::item. (divinity76)
Fix spec compliance error for DOMDocument::getElementsByTagNameNS Spec link: https://dom.spec.whatwg.org/#concept-getelementsbytagnamens Spec says we should match any namespace when '*' is provided. This was however not the case: elements that didn't have a namespace were not returned. This patch fixes the error by modifying the namespace check. Closes GH-11343.
2023-05-30 00:36:02 +08:00
. Fix spec compliance error with '*' namespace for
DOMDocument::getElementsByTagNameNS. (nielsdos)
Fix DOMElement::append() and DOMElement::prepend() hierarchy checks We could end up in an invalid hierarchy, resulting in infinite loops and eventual crashes if we don't check for the DOM hierarchy validity. Closes GH-11344.
2023-05-30 04:29:50 +08:00
. Fix DOMElement::append() and DOMElement::prepend() hierarchy checks.
(nielsdos)
Fix GH-11347: Memory leak when calling a static method inside an xpath query It's a type confusion bug. `zend_make_callable` may change the function name of the fci to become an array, causing a crash in debug mode on `zval_ptr_dtor_str(&fci.function_name);` in `dom_xpath_ext_function_php`. On a production build it doesn't crash but only causes a leak, because the array elements are not destroyed, only the array container itself is. We can use the nogc variant because it cannot contain cycles, the potential array can only contain 2 strings. Closes GH-11350.
2023-05-30 23:20:04 +08:00
. Fixed bug GH-11347 (Memory leak when calling a static method inside an
xpath query). (nielsdos)
Fix bug #67440: append_node of a DOMDocumentFragment does not reconcile namespaces The test was amended from the original issue report. For the test: Co-authored-by: php@deep-freeze.ca The problem is that the regular dom_reconcile_ns() only works on a single node. We actually have to reconciliate the whole tree in case a fragment was added. This also required to move some code around such that this special case could be handled separately. Closes GH-11362.
2023-06-03 22:41:44 +08:00
. Fixed bug #67440 (append_node of a DOMDocumentFragment does not reconcile
namespaces). (nielsdos)
Fix bug #81642: DOMChildNode::replaceWith() bug when replacing a node with itself Closes GH-11363.
2023-06-03 23:54:37 +08:00
. Fixed bug #81642 (DOMChildNode::replaceWith() bug when replacing a node
with itself). (nielsdos)
Fix bug #77686: Removed elements are still returned by getElementById From the moment an ID is created, libxml2's behaviour is to cache that element, even if that element is not yet attached to the document. Similarly, only upon destruction of the element the ID is actually removed by libxml2. Since libxml2 has such behaviour deeply ingrained in the library, and uses the cache for various purposes, it seems like a bad idea and lost cause to fight it. Instead, we'll simply walk the tree upwards to check if the node is attached to the document. Closes GH-11369.
2023-06-04 21:13:37 +08:00
. Fixed bug #77686 (Removed elements are still returned by getElementById).
(nielsdos)
Fix #70359 and #78577: segfaults with DOMNameSpaceNode * Fix type confusion and parent reference * Manually manage the lifetime of the parent * Add regression tests * Break out to a helper, and apply the use-after-free fix to xpath Closes GH-11402.
2023-06-09 03:22:20 +08:00
. Fixed bug #70359 (print_r() on DOMAttr causes Segfault in
php_libxml_node_free_list()). (nielsdos)
. Fixed bug #78577 (Crash in DOMNameSpace debug info handlers). (nielsdos)
Fix lifetime issue with getAttributeNodeNS() It's the same issue that I fixed previously in GH-11402, but in a different place. Closes GH-11422.
2023-06-11 04:48:16 +08:00
. Fix lifetime issue with getAttributeNodeNS(). (nielsdos)
Fix "invalid state error" with cloned namespace declarations Closes GH-11429.
2023-06-12 05:44:58 +08:00
. Fix "invalid state error" with cloned namespace declarations. (nielsdos)
Fix bug #55294 and #47530 and #47847: namespace reconciliation issues We'll use the DOM wrapper version of libxml2 instead of the regular one. It's conforming to the behaviour we expect of DOM. Most of this patch is tests. I based and extended the tests on the code attached with the aforementioned bug reports. Therefore the credits for the tests: Co-authored-by: hilse at web dot de Co-authored-by: robin2008 at altruists dot org Co-authored-by: sgunderson at bigfoot dot com We'll also change the searching point of the internal reconciliation to start at the top of the added tree to avoid redundant work now that the function is changed. Closes GH-11454.
2023-06-15 03:49:31 +08:00
. Fixed bug #55294 and #47530 and #47847 (various namespace reconciliation
issues). (nielsdos)
Fix #80332: Completely broken array access functionality with DOMNamedNodeMap The problem is the usage of zval_get_long(). In particular, if the string is non-numeric the result of zval_get_long() will be 0 without giving an error or warning. This is misleading for users: users get the impression that they can use strings to access the map because it coincidentally works for the first item (which is at index 0). Of course, this fails with any other index which causes confusion and bugs. This patch adds proper support for using string offsets while accessing the map. It does so by detecting if it's a non-numeric string, and then using the getNamedItem() method instead of item(). I had to split up the array access implementation code for DOMNodeList and DOMNamedNodeMap first to be able to do this. Closes GH-11468.
2023-06-18 02:52:52 +08:00
. Fixed bug #80332 (Completely broken array access functionality with
DOMNamedNodeMap). (nielsdos)
Fix GH-11288 and GH-11289 and GH-11290 and GH-9142: DOMExceptions and segfaults with replaceWith This replaces the implementation of before and after with one following the spec very strictly, instead of trying to figure out the state we're in by looking at the pointers. Also relaxes the condition on text node copying to prevent working on a stale node pointer. Closes GH-11299.
2023-05-23 05:50:06 +08:00
Fix allocation loop in zend_shared_alloc_startup() The break is outside the if, so if it succeeds or not this will always stop after the first loop iteration instead of trying more allocators if the first one fails. Closes GH-11306.
2023-05-24 01:50:09 +08:00
- Opcache:
. Fix allocation loop in zend_shared_alloc_startup(). (nielsdos)
Access violation when ALLOC_FALLBACK fixed Close GH-11312
2023-05-24 23:23:27 +08:00
. Access violation on smm_shared_globals with ALLOC_FALLBACK. (KoudelkaB)
Fix GH-11336: php still tries to unlock the shared memory ZendSem with opcache.file_cache_only=1 but it was never locked I chose to check for the value of lock_file instead of checking the file_cache_only, because it is probably a little bit faster and we're going to access the lock_file variable anyway. It's also more generic. Closes GH-11341.
2023-05-29 22:39:58 +08:00
. Fixed bug GH-11336 (php still tries to unlock the shared memory ZendSem
with opcache.file_cache_only=1 but it was never locked). (nielsdos)
Fix allocation loop in zend_shared_alloc_startup() The break is outside the if, so if it succeeds or not this will always stop after the first loop iteration instead of trying more allocators if the first one fails. Closes GH-11306.
2023-05-24 01:50:09 +08:00
Fix bug GH-9356: Incomplete SAN validation of IPv6 address IPv6 addresses are valid entries in subjectAltNames. Certificate Authorities may issue certificates including IPv6 addresses except if they fall within addresses in the RFC 4193 range. Google and CloudFlare provide IPv6 addresses in their DNS over HTTPS services. Internal CAs do not have those restrictions and can issue Unique local addresses in certificates. Closes GH-11145
2023-04-28 09:02:49 +08:00
- OpenSSL:
. Fixed bug GH-9356 Incomplete validation of IPv6 Address fields in
subjectAltNames (James Lucas, Jakub Zelenka).
ext/pgsql: fix PGtrace invalid free issue. disable trace when closing the connection, is a no op if there is no stream attached to it. Close GH-11403
2023-06-09 05:52:49 +08:00
- PGSQL:
. Fixed intermittent segfault with pg_trace. (David Carlier)
Fix cross-compilation check in phar generation for FreeBSD FreeBSD's shell is very POSIX strict. This patch makes sure it works correctly under FreeBSD too. Closes GH-11441.
2023-06-13 01:19:11 +08:00
- Phar:
. Fix cross-compilation check in phar generation for FreeBSD. (peter279k)
Fix GH-11338: SplFileInfo empty getBasename with more than one slash Regressed in 13e4ce386bb7. Closes GH-11340.
2023-05-29 22:16:01 +08:00
- SPL:
. Fixed bug GH-11338 (SplFileInfo empty getBasename with more than one
slash). (nielsdos)
Fix access on NULL pointer in array_merge_recursive() Closes GH-11303
2023-05-23 18:10:27 +08:00
- Standard:
. Fix access on NULL pointer in array_merge_recursive(). (ilutov)
Fix exception handling in array_multisort() Closes GH-11302
2023-05-23 15:54:54 +08:00
. Fix exception handling in array_multisort(). (ilutov)
PHP-8.1 is now for PHP 8.1.21-dev
2023-05-24 05:19:16 +08:00
08 Jun 2023, PHP 8.1.20
PHP-8.1 is now for PHP 8.1.20-dev
2023-04-25 22:18:30 +08:00
Fix GH-9068: Conditional jump or move depends on uninitialised value(s) This patch preserves the scratch registers of the SysV x86-64 ABI by storing them to the stack and restoring them later. We need to do this to prevent the registers of the caller from being corrupted. The reason these get corrupted is because the compiler is unaware of the Valgrind replacement function and thus makes assumptions about the original function regarding registers which are not true for the replacement function. For implementation I used a GCC and Clang attribute. A more general approach would be to use inline assembly but that's also less portable and quite hacky. This attributes is supported since GCC 7.x, but the target option is only supported since 11.x. For Clang the target option does not matter. Closes GH-10221.
2023-05-03 03:21:01 +08:00
- Core:
. Fixed bug GH-9068 (Conditional jump or move depends on uninitialised
value(s)). (nielsdos)
Fix GH-11189: Exceeding memory limit in zend_hash_do_resize leaves the array in an invalid state There are more places in zend_hash.c where the resize happened after some values on the HashTable struct were set. I reordered them all, but writing a test for these would rely on the particular amount of bytes allocated at given points in time.
2023-05-05 18:00:32 +08:00
. Fixed bug GH-11189 (Exceeding memory limit in zend_hash_do_resize leaves
the array in an invalid state). (Bob)
Fix GH-11222: foreach by-ref may jump over keys during a rehash Signed-off-by: Bob Weinand <bobwei9@hotmail.com>
2023-05-10 22:44:29 +08:00
. Fixed bug GH-11222 (foreach by-ref may jump over keys during a rehash).
(Bob)
Fix GH-9068: Conditional jump or move depends on uninitialised value(s) This patch preserves the scratch registers of the SysV x86-64 ABI by storing them to the stack and restoring them later. We need to do this to prevent the registers of the caller from being corrupted. The reason these get corrupted is because the compiler is unaware of the Valgrind replacement function and thus makes assumptions about the original function regarding registers which are not true for the replacement function. For implementation I used a GCC and Clang attribute. A more general approach would be to use inline assembly but that's also less portable and quite hacky. This attributes is supported since GCC 7.x, but the target option is only supported since 11.x. For Clang the target option does not matter. Closes GH-10221.
2023-05-03 03:21:01 +08:00
Fix GH-11281: DateTimeZone::getName() does not include seconds in offset If the seconds portion is non-zero, include the seconds in the output. Closes GH-11282.
2023-05-20 07:19:28 +08:00
- Date:
. Fixed bug GH-11281 (DateTimeZone::getName() does not include seconds in
offset). (nielsdos)
Fix GH-10834: exif_read_data() cannot read smaller stream wrapper chunk sizes php_stream_read() may return less than the requested amount of bytes by design. This patch introduces a static function for exif which reads from the stream in a loop until all the requested bytes are read. For the test: Co-authored-by: dotpointer Closes GH-10924.
2023-03-24 23:01:52 +08:00
- Exif:
. Fixed bug GH-10834 (exif_read_data() cannot read smaller stream wrapper
chunk sizes). (nielsdos)
Fix GH-10461: Postpone FPM child freeing in event loop This is to prevent after free accessing of the child event that might happen when child is killed and the message is delivered at that same time. Also fixes GH-10889 and properly fixes GH-8517 that was not previously fixed correctly.
2023-04-15 23:07:09 +08:00
- FPM:
. Fixed bug GH-10461 (PHP-FPM segfault due to after free usage of
child->ev_std(out|err)). (Jakub Zelenka)
Fix bug #64539: FPM status - query_string not properly JSON encoded Closes GH-11050
2023-04-10 21:15:57 +08:00
. Fixed bug #64539 (FPM status page: query_string not properly JSON encoded).
(Jakub Zelenka)
FPM: Fix memory leak for invalid primary script file handle Closes GH-11088
2023-04-16 22:54:45 +08:00
. Fixed memory leak for invalid primary script file handle. (Jakub Zelenka)
Fix GH-10461: Postpone FPM child freeing in event loop This is to prevent after free accessing of the child event that might happen when child is killed and the message is delivered at that same time. Also fixes GH-10889 and properly fixes GH-8517 that was not previously fixed correctly.
2023-04-15 23:07:09 +08:00
Fix GH-11180: hash_file() appears to be restricted to 3 arguments Closes GH-11198.
2023-05-07 00:23:24 +08:00
- Hash:
. Fixed bug GH-11180 (hash_file() appears to be restricted to 3 arguments).
(nielsdos)
Fix GH-11160: Few tests failed building with new libxml 2.11.0 It's possible to categorise the failures into 2 categories: - Changed error message. In this case we either duplicate the test and modify the error message. Or if the change in error message is small, we use the EXPECTF matchers to make the test compatible with both old and new versions of libxml2. - Missing warnings. This is caused by a change in libxml2 where the parser started using SAX APIs internally [1]. In this case the error_type passed to php_libxml_internal_error_handler() changed from PHP_LIBXML_ERROR to PHP_LIBXML_CTX_WARNING because it internally started to use the SAX handlers instead of the generic handlers. However, for the SAX handlers the current input stack is empty, so nothing is actually printed. I fixed this by falling back to a regular warning without a filename & line number reference, which mimicks the old behaviour. Furthermore, this change now also shows an additional warning in a test which was previously hidden. [1] https://gitlab.gnome.org/GNOME/libxml2/-/commit/9a82b94a94bd310db426edd453b0f38c6c8f69f5 Closes GH-11162.
2023-04-30 03:07:50 +08:00
- LibXML:
. Fixed bug GH-11160 (Few tests failed building with new libxml 2.11.0).
(nielsdos)
Fix incorrect match default branch optimization Fixes GH-11134 Closes GH-11135
2023-04-26 17:55:23 +08:00
- Opcache:
. Fixed bug GH-11134 (Incorrect match default branch optimization). (ilutov)
Fix too wide OR and AND range inference There is a typo which causes the AND and OR range inference to infer a wider range than necessary. Fix this typo. There are many ranges for which the inference is too wide, I just picked one for AND and one for OR that I found through symbolic execution. In this example test, the previous range inferred for test_or was [-27..-1] instead of [-20..-1]. And the previous range inferred for test_and was [-32..-25] instead of [-28..-25]. Closes GH-11170.
2023-05-01 07:54:23 +08:00
. Fixed too wide OR and AND range inference. (nielsdos)
Fix GH-11245 (In some specific cases SWITCH with one default statement will cause segfault) The block optimizer pass allows the use of sources of the preceding block if the block is a follower and not a target. This causes issues when trying to remove FREE instructions: if the source is not in the block of the FREE, then the FREE and source are still removed. Therefore the other successor blocks, which must consume or FREE the temporary, will still contain the FREE opline. This opline will now refer to a temporary that doesn't exist anymore, which most of the time results in a crash. For these kind of non-local scenarios, we'll let the SSA based optimizations handle those cases. Closes GH-11251.
2023-05-17 00:03:47 +08:00
. Fixed bug GH-11245 (In some specific cases SWITCH with one default
statement will cause segfault). (nielsdos)
PHP-8.1 is now for PHP 8.1.20-dev
2023-04-25 22:18:30 +08:00
Fix ZPP of pg_lo_export() Closes GH-11132
2023-04-26 05:20:39 +08:00
- PGSQL:
. Fixed parameter parsing of pg_lo_export(). (kocsismate)
Fix GH-11099: Generating phar.php during cross-compile can't be done Closes GH-11243.
2023-05-16 00:31:57 +08:00
- Phar:
. Fixed bug GH-11099 (Generating phar.php during cross-compile can't be
done). (peter279k)
Fix GH-8426: make test fail while soap extension build If you build soap as a shared object, then these tests fail on non-Windows, or when the PHP install hasn't been make install-ed yet, but is executed from the development directory. Closes GH-11211.
2023-05-09 05:37:12 +08:00
- Soap:
Update NEWS
2023-06-07 06:06:13 +08:00
. Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient random
[ci skip] add CVE in NEWS
2023-06-22 14:04:56 +08:00
bytes in HTTP Digest authentication for SOAP).
(CVE-2023-3247) (nielsdos, timwolla)
Fix GH-8426: make test fail while soap extension build If you build soap as a shared object, then these tests fail on non-Windows, or when the PHP install hasn't been make install-ed yet, but is executed from the development directory. Closes GH-11211.
2023-05-09 05:37:12 +08:00
. Fixed bug GH-8426 (make test fail while soap extension build). (nielsdos)
Fix GH-11178: Segmentation fault in spl_array_it_get_current_data (PHP 8.1.18) Dynamic property case in zend_get_property_info() can return NULL for prop info. This was not handled. Closes GH-11182.
2023-05-03 02:53:22 +08:00
- SPL:
. Fixed bug GH-11178 (Segmentation fault in spl_array_it_get_current_data
(PHP 8.1.18)). (nielsdos)
Propagate STREAM_DISABLE_OPEN_BASEDIR src flag to php_stream_stat_path_ex Otherwise we can get open_basedir warnings from the stat call while still performing the actual copy. Fixes GH-11138 Closes GH-11156
2023-04-29 00:04:47 +08:00
- Standard:
. Fixed bug GH-11138 (move_uploaded_file() emits open_basedir warning for
source file). (ilutov)
Fix GH-11274: POST/PATCH request via file_get_contents + stream_context_create switches to GET after a HTTP 308 redirect RFC 7231 states that status code 307 should keep the POST method upon redirect. RFC 7538 does the same for code 308. Although it's not mandated by the RFCs that PATCH is also kept (we can choose), it seems like keeping PATCH will be the most consistent and understandable behaviour. This patch also changes an existing test because it was testing for the wrong behaviour. Closes GH-11275.
2023-05-19 18:55:39 +08:00
. Fixed bug GH-11274 (POST/PATCH request switches to GET after a HTTP 308
redirect). (nielsdos)
Propagate STREAM_DISABLE_OPEN_BASEDIR src flag to php_stream_stat_path_ex Otherwise we can get open_basedir warnings from the stat call while still performing the actual copy. Fixes GH-11138 Closes GH-11156
2023-04-29 00:04:47 +08:00
Fix GH-11175 and GH-11177: Stream socket timeout undefined behaviour A negative value like -1 may overflow and cause incorrect results in the timeout variable, which causes an immediate timeout. As this is caused by undefined behaviour the exact behaviour depends on the compiler, its version, and the platform. A large overflow is also possible, if an extremely large timeout value is passed we also set an indefinite timeout. This is because the timeout value is at least a 64-bit number and waiting for UINT64_MAX/1000000 seconds is waiting about 584K years. Closes GH-11183.
2023-05-03 05:45:50 +08:00
- Streams:
Fix GH-10031: [Stream] STREAM_NOTIFY_PROGRESS over HTTP emitted irregularly for last chunk of data It's possible that the server already sent in more data than just the headers. Since the stream only accepts progress increments after the headers are processed, the already read data is never added to the process. We account for this by adjusting the progress counter by the difference of already read header data and the body. For the test: Co-authored-by: aetonsi <18366087+aetonsi@users.noreply.github.com> Closes GH-10492.
2023-02-03 07:00:42 +08:00
. Fixed bug GH-10031 ([Stream] STREAM_NOTIFY_PROGRESS over HTTP emitted
irregularly for last chunk of data). (nielsdos)
Fix GH-11175 and GH-11177: Stream socket timeout undefined behaviour A negative value like -1 may overflow and cause incorrect results in the timeout variable, which causes an immediate timeout. As this is caused by undefined behaviour the exact behaviour depends on the compiler, its version, and the platform. A large overflow is also possible, if an extremely large timeout value is passed we also set an indefinite timeout. This is because the timeout value is at least a 64-bit number and waiting for UINT64_MAX/1000000 seconds is waiting about 584K years. Closes GH-11183.
2023-05-03 05:45:50 +08:00
. Fixed bug GH-11175 (Stream Socket Timeout). (nielsdos)
. Fixed bug GH-11177 (ASAN UndefinedBehaviorSanitizer when timeout = -1
passed to stream_socket_accept/stream_socket_client). (nielsdos)
PHP-8.1 is now for PHP 8.1.20-dev
2023-04-25 22:18:30 +08:00
11 May 2023, PHP 8.1.19
PHP-8.1 is now for PHP 8.1.19-dev
2023-03-30 08:51:20 +08:00
Unary minus const expression consistency - of 0.0 should result in -0.0 Closes GH-10978
2023-03-30 19:22:52 +08:00
- Core:
. Fix inconsistent float negation in constant expressions. (ilutov)
Fix GH-8841: php-cli core dump calling a badly formed function It's actually not php-cli specific, nor SAPI specific. We should delay the registration of the function into the function table until after the compilation was successful, otherwise the function is mistakingly registered and a NULL dereference will happen when trying to call it. I based my test of Nikita's test, so credits to him for the test: https://github.com/php/php-src/pull/8933#issuecomment-1259881008 Closes GH-10989.
2023-04-01 20:25:38 +08:00
. Fixed bug GH-8841 (php-cli core dump calling a badly formed function).
(nielsdos)
Fix GH-10737: PHP 8.1.16 segfaults on line 597 of sapi/apache2handler/sapi_apache2.c The TSRM keeps a hashtable mapping the thread IDs to the thread resource pointers. It's possible that the thread disappears without us knowing, and then another thread gets spawned some time later with the same ID as the disappeared thread. Note that since it's a new thread the TSRM key pointer and cached pointer will be NULL. The Apache request handler `php_handler()` will try to fetch some fields from the SAPI globals. It uses a lazy thread resource allocation by calling `ts_resource(0);`. This allocates a thread resource and sets up the TSRM pointers if they haven't been set up yet. At least, that's what's supposed to happen. But since we are in a situation where the thread ID still has the resources of the *old* thread associated in the hashtable, the loop in `ts_resource_ex` will find that thread resource and assume the thread has been setup already. But this is not the case since this thread is actually a new thread, just reusing the ID of the old one, without any relation whatsoever to the old thread. Because of this assumption, the TSRM pointers will not be setup, leading to a NULL pointer dereference when trying to access the SAPI globals. We can easily detect this scenario: if we're in the fallback path, and the pointer is NULL, and we're looking for our own thread resource, we know we're actually reusing a thread ID. In that case, we'll free up the old thread resources gracefully (gracefully because there might still be resources open like database connection which need to be shut down cleanly). After freeing the resources, we'll create the new resources for this thread as if the stale resources never existed in the first place. From that point forward, it is as if that situation never occurred. The fact that this situation happens isn't that bad because a child process containing threads will eventually be respawned anyway by the SAPI, so the stale thread resources won't remain forever. Note that we can't simply assign our own TSRM pointers to the existing thread resource for our ID, since it was actually from a different thread (just with the same ID!). Furthermore, the dynamically loaded extensions have their own pointer, which is only set when their constructor is called, so we'd have to call their constructor anyway... I also tried to call the dtor and then the ctor again for those resources on the pre-existing thread resource to reuse storage, but that didn't work properly because other code doesn't expect something like that to happen, which breaks assumptions, and this in turn caused Valgrind to (rightfully) complain about memory bugs. Note 2: I also had to fix a bug in the core globals destruction because it always assumed that the thread destroying them was the owning thread, which on TSRM shutdown isn't always the case. A similar bug was fixed recently with the JIT globals. Closes GH-10863.
2023-03-16 04:18:37 +08:00
. Fixed bug GH-10737 (PHP 8.1.16 segfaults on line 597 of
[ci skip] UPDATE NEWS ElliotNB helped me a lot debugging this by constantly testing the patches. It is only fair that he is mentioned too, as I couldn't have solved it without his help.
2023-04-12 04:17:47 +08:00
sapi/apache2handler/sapi_apache2.c). (nielsdos, ElliotNB)
Fix GH-11028: Heap Buffer Overflow in zval_undefined_cv. For analysis see https://github.com/php/php-src/issues/11028#issuecomment-1508460440 Closes GH-11083.
2023-04-08 21:23:58 +08:00
. Fixed bug GH-11028 (Heap Buffer Overflow in zval_undefined_cv.). (nielsdos)
Fix incorrect CG(memoize_mode) state after bailout in ??= Fixes GH-11108 Closes GH-11109
2023-04-20 21:41:50 +08:00
. Fixed bug GH-11108 (Incorrect CG(memoize_mode) state after bailout in ??=).
(ilutov)
Unary minus const expression consistency - of 0.0 should result in -0.0 Closes GH-10978
2023-03-30 19:22:52 +08:00
[ci skip] NEWS
2023-03-31 03:41:11 +08:00
- DOM:
. Fixed bug #80602 (Segfault when using DOMChildNode::before()).
(Nathan Freeman)
Fix incorrect error handling in dom_zvals_to_fragment() Discovered this pre-existing problem while testing GH-10682. Note: this problem existed *before* that PR. * Not all paths throw a hierarchy request error * xmlFreeNode must be used instead of xmlFree for the fragment to also free its children. * Free up nodes that couldn't be added when xmlAddChild fails. I unified the error handling code that's exactly the same with a goto to prevent at least some of such problems in the future. Closes GH-10981.
2023-03-31 03:28:09 +08:00
. Fixed incorrect error handling in dom_zvals_to_fragment(). (nielsdos)
PHP-8.1 is now for PHP 8.1.19-dev
2023-03-30 08:51:20 +08:00
Fix GH-9397: exif read : warnings and errors : Potentially invalid endianess, Illegal IFD size and Undefined index Don't misinterpret DJI info maker note as DJI maker note. The DJI and DJI info maker note both share the "DJI" make string. This caused the current code to try to interpret the DJI info maker note as a DJI maker note. However, the DJI info maker note requires custom parsing. Therefore, the misinterpretation actually caused the current code to believe that there was an unrecoverable error in the IFD for the maker note by returning false in the maker note parser. This in turn caused the inability to parse other EXIF metadata. This patch adds the identification of the DJI info maker note so that it cannot be misinterpreted. Since we don't implement custom parsing, it achieves this by setting the tag list to a special marker value (in this case the NULL pointer). When this marker value is detected, the function will just skip parsing the maker note and return true. Therefore, the other code will believe that the IFD is not corrupt. This approach is similar to handing an unrecognised maker note type (see the loop on top of exif_process_IFD_in_MAKERNOTE() which also returns true and treats it as a string). The end result of this patch is that the DJI info maker note is considered as unknown to the caller of exif_process_IFD_in_MAKERNOTE(), and therefore that the other EXIF metadata can be parsed successfully. Also fix debug output typos in exif. Closes GH-10470.
2023-01-30 06:32:52 +08:00
- Exif:
. Fixed bug GH-9397 (exif read : warnings and errors : Potentially invalid
endianess, Illegal IFD size and Undefined index). (nielsdos)
[ci skip] NEWS for 11071
2023-04-18 17:45:50 +08:00
- Intl:
. Fixed bug GH-11071 (TZData version not displayed anymore). (Remi)
Fix incorrect zval type_flags in preg_replace_callback_array() for immutable arrays The ZVAL_ARR macro always set the zval type_info to IS_ARRAY_EX, even if the hash table is immutable. Since in preg_replace_callback_array() we can return the passed array directly, and that passed array can be immutable, we need to reset the type_flags to keep the VM from performing ref-counting on the array. Fixes GH-10968 Closes GH-10970
2023-03-29 20:37:52 +08:00
- PCRE:
. Fixed bug GH-10968 (Segfault in preg_replace_callback_array()). (ilutov)
Fix GH-10990: mail() throws TypeError after iterating over $additional_headers array by reference We should dereference the values, otherwise references don't work. Closes GH-10991.
2023-04-01 21:02:30 +08:00
- Standard:
. Fixed bug GH-10990 (mail() throws TypeError after iterating over
$additional_headers array by reference). (nielsdos)
Support enums in array_unique Fixes GH-9775 Closes GH-11015
2023-04-05 00:19:19 +08:00
. Fixed bug GH-9775 (Duplicates returned by array_unique when using enums).
(ilutov)
Fix GH-10990: mail() throws TypeError after iterating over $additional_headers array by reference We should dereference the values, otherwise references don't work. Closes GH-10991.
2023-04-01 21:02:30 +08:00
PHP-8.1 is now for PHP 8.1.19-dev
2023-03-30 08:51:20 +08:00
13 Apr 2023, PHP 8.1.18
PHP-8.1 is now for PHP 8.1.18-dev
2023-03-01 04:37:52 +08:00
[ci skip] NEWS
2023-03-03 18:40:09 +08:00
- Core:
. Added optional support for max_execution_time in ZTS/Linux builds
(Kévin Dunglas)
Fix GH-10709: UAF in recursive AST evaluation Fixes https://oss-fuzz.com/testcase-detail/6445949468934144 Closes GH-10718
2023-02-27 20:47:57 +08:00
. Fixed use-after-free in recursive AST evaluation. (ilutov)
Fix GH-8646: Memory leak PHP FPM 8.1 Fixes GH-8646 See https://github.com/php/php-src/issues/8646 for thorough discussion. Interned strings that hold class entries can get a corresponding slot in map_ptr for the CE cache. map_ptr works like a bump allocator: there is a counter which increases to allocate the next slot in the map. For class name strings in non-opcache we have: - on startup: permanent + interned - on request: interned For class name strings in opcache we have: - on startup: permanent + interned - on request: either not interned at all, which we can ignore because they won't get a CE cache entry or they were already permanent + interned or we get a new permanent + interned string in the opcache persistence code Notice that the map_ptr layout always has the permanent strings first, and the request strings after. In non-opcache, a request string may get a slot in map_ptr, and that interned request string gets destroyed at the end of the request. The corresponding map_ptr slot can thereafter never be used again. This causes map_ptr to keep reallocating to larger and larger sizes. We solve it as follows: We can check whether we had any interned request strings, which only happens in non-opcache. If we have any, we reset map_ptr to the last permanent string. We can't lose any permanent strings because of map_ptr's layout. Closes GH-10783.
2023-03-05 06:22:05 +08:00
. Fixed bug GH-8646 (Memory leak PHP FPM 8.1). (nielsdos)
Fix GH-10801: Named arguments in CTE functions cause a segfault Fixes GH-10801 Named arguments are not supported by the constant evaluation routine, in the sense that they are ignored. This causes two issues: - It causes a crash because not all oplines belonging to the call are removed, which results in SEND_VA{L,R} which should've been removed. - It causes semantic issues (demonstrated in the test case). This case never worked anyway, leading to crashes or incorrect behaviour, so just prevent CTE of calls with named parameters for now. We can choose to support it later, but introducing support for this in a stable branch seems too dangerous. This patch does not change the removal of SEND_* opcodes in remove_call because the crash bug can't be triggered anymore with this patch as there are no named parameters anymore and no variadic CTE functions exist. Closes GH-10811.
2023-03-09 05:49:41 +08:00
. Fixed bug GH-10801 (Named arguments in CTE functions cause a segfault).
(nielsdos)
Fix GH-8789 and GH-10015: Fix ZTS zend signal crashes due to NULL globals Fixes GH-8789. Fixes GH-10015. This is one small part of the underlying bug for GH-10737, as in my attempts to reproduce the issue I constantly hit this crash easily. (The fix for the other underlying issue for that bug will follow soon.) It's possible that a signal arrives at a thread that never handled a PHP request before. This causes the signal globals to dereference a NULL pointer because the TSRM pointers for the thread aren't set up to point to the thread resources yet. PR GH-9766 previously fixed this for master by ignoring the signal if the thread didn't handle a PHP request yet. While this fixes the crash bug, I think the solution is suboptimal for 3 reasons: 1) The signal is ignored and a message is printed saying there is a bug. However, this is not a bug at all. For example in Apache, the signal set up happens on child process creation, and the thread resource creation happens lazily when the first request is handled by the thread. Hence, the fact that the thread resources aren't set up yet is not actually buggy behaviour. 2) I believe since it was believed to be buggy behaviour, that fix was only applied to master, so 8.1 & 8.2 keep on crashing. 3) We can do better than ignoring the signal. By just acting in the same way as if the signals aren't active. This means we need to take the same path as if the TSRM had already shut down. Closes GH-10861.
2023-03-16 05:28:08 +08:00
. Fixed bug GH-8789 (PHP 8.0.20 (ZTS) zend_signal_handler_defer crashes on
apache). (nielsdos)
. Fixed bug GH-10015 (zend_signal_handler_defer crashes on apache shutdown).
(nielsdos)
Fix NUL byte in exception string terminating Exception::__toString() Fixes GH-10810 Closes GH-10873
2023-03-18 02:35:58 +08:00
. Fixed bug GH-10810 (Fix NUL byte terminating Exception::__toString()).
(ilutov)
Reset EG(trampoline).op_array.last_var that FFI may modify Closes GH-10916
2023-03-24 03:30:56 +08:00
. Fix potential memory corruption when mixing __callStatic() and FFI. (ilutov)
PHP-8.1 is now for PHP 8.1.18-dev
2023-03-01 04:37:52 +08:00
Fix GH-10583: DateTime modify with tz pattern should not update linked timezone
2023-03-23 19:46:31 +08:00
- Date:
. Fixed bug GH-10583 (DateTime modify with tz pattern should not update
linked timezone). (Derick)
Fix GH-10611: fpm_env_init_main leaks environ Closes GH-10618.
2023-02-19 03:41:26 +08:00
- FPM:
. Fixed bug GH-10611 (fpm_env_init_main leaks environ). (nielsdos)
Destroy file_handle in fpm_main If it's not in the CG(open_files) list, we need to destroy the file handle ourselves. Co-authored-by: Jakub Zelenka <bukka@php.net> Closes GH-10707.
2023-02-26 20:21:37 +08:00
. Destroy file_handle in fpm_main. (Jakub Zelenka, nielsdos)
Fix bug #74129: Incorrect SCRIPT_NAME with apache ProxyPassMatch This happens when there are spaces are in the path info. The reason is that Apache decodes the path info part in the SCRIPT_NAME as per CGI RFC. FPM tries to strip path info from the SCRIPT_NAME but the comparison is done against SCRIPT_FILENAME which is not decoded. For that to work we have to decode it before comparison if there is any encoded character. Closes GH-10869
2023-03-13 03:30:16 +08:00
. Fixed bug #74129 (Incorrect SCRIPT_NAME with apache ProxyPassMatch when
spaces are in path). (Jakub Zelenka)
Fix GH-10611: fpm_env_init_main leaks environ Closes GH-10618.
2023-02-19 03:41:26 +08:00
Propagate success status of ftp_close() to userland The docs say that this function returns true on success, and false on error. This function always returns true in the current implementation because the success return value from ftp_close() is never propagated to userland. This affects one test: since the test server exits after an invalid login, the ftp close correctly fails (because the server has gone away).
2023-03-03 18:24:32 +08:00
- FTP:
. Propagate success status of ftp_close(). (nielsdos)
Fix GH-10521: ftp_get/ftp_nb_get resumepos offset is maximum 10GB The char arrays were too small for a long on 64-bit systems, which resulted in cutting off the string at the end with a NUL byte. Use a size of MAX_LENGTH_OF_LONG to fix this issue instead of a fixed size of 11 chars. Closes GH-10525.
2023-02-07 05:53:29 +08:00
. Fixed bug GH-10521 (ftp_get/ftp_nb_get resumepos offset is maximum 10GB).
(nielsdos)
Propagate success status of ftp_close() to userland The docs say that this function returns true on success, and false on error. This function always returns true in the current implementation because the success return value from ftp_close() is never propagated to userland. This affects one test: since the test server exits after an invalid login, the ftp close correctly fails (because the server has gone away).
2023-03-03 18:24:32 +08:00
ext/imap/config.m4: -Werror=implicit-function-declaration compatibility. The recent clang-16 throws errors for implicitly defined functions by default. In many ./configure tests, an undefined function (which is "implicitly defined" when you try to call it) is undefined because it really does not exist. But in one case, utf8_to_mutf7() is undefined because we forgot to include the header that defines it. This commit updates the test for utf8_to_mutf7: * We now include the header (c-client.h) that defines it. * A "checking... yes/no" message was added to the test. * The test was switched from PHP_IMAP_TEST_BUILD to AC_COMPILE_IFELSE. This was the easiest way to avoid a return-type mismatch that runs afoul of -Werror=implicit-int. * CPPFLAGS is temporarily amended with the -I flag needed to find c-client.h. Fixes GH-10947. Closes GH-10948 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-03-26 22:30:57 +08:00
- IMAP:
. Fix build failure with Clang 16. (orlitzky)
Fix GH-8979: Possible Memory Leak with SSL-enabled MySQL connections The stream context inside `mysqlnd_vio::enable_ssl()` is leaking. In particular: when `php_stream_context_set()` get called the refcount of `context` is increased by 1, which means that `context` will now have a refcount of 2. Later on we remove the context from the stream by calling `php_stream_context_set(stream, NULL)` but that leaves our `context` with a refcount of 1, and therefore it's never destroyed. In my test case this yielded a leak of 1456 bytes per connection (but could be more depending on your settings ofc). Annoyingly, Valgrind doesn't find it because the context is still in the `EG(regular_list)` and will thus be destroyed at the end of the request. However, I still think this bug needs to be fixed because as the users in the issue report already mentioned: there can be long-running PHP scripts. Fix it by decreasing the refcount to transfer the ownership. Closes GH-10909.
2023-03-23 04:49:37 +08:00
- MySQLnd:
. Fixed bug GH-8979 (Possible Memory Leak with SSL-enabled MySQL
connections). (nielsdos)
Fix GH-10728: opcache capstone header's inclusion. Remove capstone include folder. For most of the supported systems it worked fine somehow despite the pkg-config --cflags, but is always include it even on Linux. Closes GH-10732.
2023-03-01 03:14:46 +08:00
- Opcache:
. Fixed build for macOS to cater with pkg-config settings. (David Carlier)
Fix GH-8065: opcache.consistency_checks > 0 causes segfaults in PHP >= 8.1.5 in fpm context Disable opcache.consistency_checks. This feature does not work right now and leads to memory leaks and other problems. For analysis and discussion see GH-8065. In GH-10624 it was decided to disable the feature to prevent problems for end users. If end users which to get some consistency guarantees, they can rely on opcache.protect_memory. Closes GH-10798.
2023-03-07 04:06:54 +08:00
. Fixed bug GH-8065 (opcache.consistency_checks > 0 causes segfaults in
PHP >= 8.1.5 in fpm context). (nielsdos)
Fix GH-10728: opcache capstone header's inclusion. Remove capstone include folder. For most of the supported systems it worked fine somehow despite the pkg-config --cflags, but is always include it even on Linux. Closes GH-10732.
2023-03-01 03:14:46 +08:00
Add missing error check on PEM_write_bio_PKCS7() Closes GH-10752.
2023-03-05 03:10:10 +08:00
- OpenSSL:
. Add missing error checks on file writing functions. (nielsdos)
Fix missing and inconsistent error check on SQLAllocHandle * Missing check: SQLAllocHandle() for the environment wasn't checked in pdo_odbc_handle_factory(). Add a check similar to the other ones for SQLAllocHandle(). * Inconsistent check: one of the SQLAllocHandle() calls wasn't checked for SQL_SUCCESS_WITH_INFO. However, looking at the other uses and the documentation we should probably check this as well. Furthermore, since there was a mix of "SQLAllocHandle: reason" and "SQLAllocHandle (reason)" in the error reporting, I made them consistently use the first option as that seems to be the most used for error reporting in this file. Closes GH-10740.
2023-03-01 17:14:01 +08:00
Fix GH-10908: Bus error with PDO Firebird on RPI with 64 bit kernel and 32 bit userland The alignment of sqldata is in most cases only the basic alignment, so the code type-puns it to a larger type, it *can* crash due to the misaligned access. This is only an issue for types > 4 bytes because every sensible system requires an alignment of at least 4 bytes for allocated data. Even though this patch uses memcpy, the compiler is smart enough to optimise it to something more efficient, especially on x86. This is just the usual approach to solve these alignment problems. Actually, unaligned memory access is undefined behaviour, so even on x86 platforms, where the bug doesn't cause a crash, this can be problematic. Furthermore, even though the issue talks about a 64-bit kernel and 32-bit userspace, this doesn't necessarily need to be the case to trigger this crash. Test was Co-authored-by: rvk01 Closes GH-10920.
2023-03-24 05:53:18 +08:00
- PDO Firebird:
. Fixed bug GH-10908 (Bus error with PDO Firebird on RPI with 64 bit kernel
and 32 bit userland). (nielsdos)
Fix missing and inconsistent error check on SQLAllocHandle * Missing check: SQLAllocHandle() for the environment wasn't checked in pdo_odbc_handle_factory(). Add a check similar to the other ones for SQLAllocHandle(). * Inconsistent check: one of the SQLAllocHandle() calls wasn't checked for SQL_SUCCESS_WITH_INFO. However, looking at the other uses and the documentation we should probably check this as well. Furthermore, since there was a mix of "SQLAllocHandle: reason" and "SQLAllocHandle (reason)" in the error reporting, I made them consistently use the first option as that seems to be the most used for error reporting in this file. Closes GH-10740.
2023-03-01 17:14:01 +08:00
- PDO ODBC:
. Fixed missing and inconsistent error checks on SQLAllocHandle. (nielsdos)
Add missing error check on PEM_write_bio_PKCS7() Closes GH-10752.
2023-03-05 03:10:10 +08:00
Fix GH-10766: PharData archive created with Phar::Zip format does not keep files metadata (datetime) Due to an incorrect check, the datetime was never actually set. To test this we need to write the file using phar, but read the file using a different method to not get a cached, or a value that's been transformed twice and is therefore accidentally correct. Closes GH-10769
2023-03-04 07:04:02 +08:00
- Phar:
. Fixed bug GH-10766 (PharData archive created with Phar::Zip format does
not keep files metadata (datetime)). (nielsdos)
Add missing error checks on EVP_MD_CTX_create() and EVP_VerifyInit() The first one returns NULL on error, and the second one returns 0 on error. These weren't checked. Closes GH-10762.
2023-03-03 22:17:21 +08:00
. Add missing error checks on EVP_MD_CTX_create() and EVP_VerifyInit().
(nielsdos)
Fix GH-10766: PharData archive created with Phar::Zip format does not keep files metadata (datetime) Due to an incorrect check, the datetime was never actually set. To test this we need to write the file using phar, but read the file using a different method to not get a cached, or a value that's been transformed twice and is therefore accidentally correct. Closes GH-10769
2023-03-04 07:04:02 +08:00
ext/psql: pg_meta_data, extended mode, fix typo for pseudo typtype. Closes GH-10865.
2023-03-17 03:28:07 +08:00
- PGSQL:
. Fixed typo in the array returned from pg_meta_data (extended mode).
(David Carlier)
Fix GH-10519: Array Data Address Reference Issue We need to carry around a reference to the underlying Bucket to be able to modify it by reference. Closes GH-10749 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-03-02 21:15:56 +08:00
- SPL:
. Fixed bug GH-10519 (Array Data Address Reference Issue). (Nathan Freeman)
[skip ci] Add NEWS entry
2023-03-25 23:26:18 +08:00
. Fixed bug GH-10844 (ArrayIterator allows modification of readonly props).
(ilutov)
Fix GH-10519: Array Data Address Reference Issue We need to carry around a reference to the underlying Bucket to be able to modify it by reference. Closes GH-10749 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-03-02 21:15:56 +08:00
Fix GH-10885: Leaking stream_socket_server context `php_stream_context_set` already increases the refcount. Closes GH-10886
2023-03-20 19:08:13 +08:00
- Standard:
. Fixed bug GH-10885 (stream_socket_server context leaks). (ilutov)
Fix GH-10052: Browscap crashes PHP 8.1.12 on request shutdown (apache2) get_browser() implements a lazy parse system for the browscap INI configuration. There are two possible moments when a browscap configuration can be loaded: during module startup or during request. In case of module startup, the strings are persistent strings, while for the request they are not. The INI parser must therefore know whether to create persistent or non-persistent strings. It does this by looking at CG(ini_parser_unbuffered_errors). If that value is 1 it's persistent, otherwise non-persistent. Note that this also controls how the errors are reported: if it's 1 then the errors are sent to stderr, otherwise we get E_WARNINGs. Currently, a hardcoded value of 1 is always used for that CG value in browscap_read_file(). This means we'll always create persistent strings *and* we'll not report parse errors correctly as E_WARNINGs. We fix both the crash and the lack of warnings by passing the value of persistent instead of a hardcoded 1. This is also in line with how other INI parsing code is called in ext/standard: they also make sure that during request a value of 0 is passed. Closes GH-10883.
2023-03-20 05:11:09 +08:00
. Fixed bug GH-10052 (Browscap crashes PHP 8.1.12 on request shutdown
(apache2)). (nielsdos)
Fix buffer-overflow in php_fgetcsv() with \0 delimiter and enclosure Fixes oss-fuzz #57392 Closes GH-10923
2023-03-24 22:19:58 +08:00
. Fixed oss-fuzz #57392 (Buffer-overflow in php_fgetcsv() with \0 delimiter
and enclosure). (ilutov)
Fix undefined behaviour in unpack() atoi()'s return value is actually undefined when an underflow or overflow occurs. For example on 32-bit on my system the overflow test which inputs "h2147483648" results in repetitions==2147483647 and on 64-bit this gives repetitions==-2147483648. The reason the test works on 32-bit is because there's a second undefined behaviour problem: in case 'h' when repetitions==2147483647, we add 1 and divide by 2. This is signed-wrap undefined behaviour and accidentally triggers the overflow check like we wanted to. Avoid all this trouble and use strtol with explicit error checking. This also fixes a semantic bug where repetitions==INT_MAX would result in the overflow check to trigger, even though there is no overflow. Closes GH-10943.
2023-03-26 03:56:17 +08:00
. Fixed undefined behaviour in unpack(). (nielsdos)
Fix GH-10885: Leaking stream_socket_server context `php_stream_context_set` already increases the refcount. Closes GH-10886
2023-03-20 19:08:13 +08:00
PHP-8.1 is now for PHP 8.1.18-dev
2023-03-01 04:37:52 +08:00
16 Mar 2023, PHP 8.1.17
PHP-8.1 is now for PHP 8.1.16-dev
2023-01-18 00:24:25 +08:00
Fix incorrect check condition in ZEND_YIELD The condition `UNEXPECTED(Z_TYPE_P(key)) == IS_REFERENCE` always returned false, because `UNEXPECTED(expression)` always returns 0 or 1. Move the parens so the comparison is executed properly. Closes GH-10332.
2023-01-16 06:15:40 +08:00
- Core:
. Fixed incorrect check condition in ZEND_YIELD. (nielsdos)
[ci skip] NEWS (#10442)
2023-01-25 06:19:21 +08:00
. Fixed incorrect check condition in type inference. (nielsdos)
[ci skip] NEWS
2023-01-28 02:36:28 +08:00
. Fixed overflow check in OnUpdateMemoryConsumption. (nielsdos)
. Fixed bug GH-9916 (Entering shutdown sequence with a fiber suspended in a
Generator emits an unavoidable fatal error or crashes). (Arnaud)
Fix GH-10437: Set active fiber to null on bailout (#10443)
2023-01-29 00:13:58 +08:00
. Fixed bug GH-10437 (Segfault/assertion when using fibers in shutdown
function after bailout). (trowski)
[ci skip] NEWS (#10586)
2023-02-15 03:27:29 +08:00
. Fixed SSA object type update for compound assignment opcodes. (nielsdos)
Update NEWS with scanner and parser build fixes
2023-02-18 00:36:43 +08:00
. Fixed language scanner generation build. (Daniel Black)
Fix incorrect type for return value of zend_update_static_property_ex() zend_update_static_property_ex() returns a zend_result, but the return value is stored here in a bool. A bool is unsigned on my system, so in case zend_update_static_property_ex() returns FAILURE (== -1) this gets converted to 1 instead. This is not a valid zend_result value. This means that (transitive) callers could mistakingly think the function succeeded while it did in fact not succeed. Fix it by changing the type to zend_result. Closes GH-10691.
2023-02-24 23:53:20 +08:00
. Fixed zend_update_static_property() calling zend_update_static_property_ex()
misleadingly with the wrong return type. (nielsdos)
[skip ci] Add github reference to bug fix in NEWS
2023-02-25 03:44:47 +08:00
. Fix bug GH-10570 (Fixed unknown string hash on property fetch with integer
constant name). (nielsdos)
Fix GH-10692: PHP crashes on Windows when an inexistent filename is executed Fixes GH-10692 php_fopen_primary_script() does not initialize all fields of zend_file_handle. So when it fails and when fastcgi is true, the zend_destroy_file_handle() function will try to free uninitialized pointers, causing a segmentation fault. Fix it by zero-initializing file handles just like the zend_stream_init_fp() counterpart does. Closes GH-10697.
2023-02-25 20:42:45 +08:00
. Fixed php_fopen_primary_script() call resulted on zend_destroy_file_handle()
freeing dangling pointers on the handle as it was uninitialized. (nielsdos)
[ci skip] NEWS (#10442)
2023-01-25 06:19:21 +08:00
ext/curl: suppress -Wdeprecated-declarations Closes GH-10531.
2023-02-07 19:16:03 +08:00
- Curl:
. Fixed deprecation warning at compile time. (Max Kellermann)
Fixed bug GH-10270 Unable to return CURL_READFUNC_PAUSE in readfunc callback Closes GH-10607 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-02-17 12:53:05 +08:00
. Fixed bug GH-10270 (Unable to return CURL_READFUNC_PAUSE in readfunc
callback). (Pierrick Charron)
ext/curl: suppress -Wdeprecated-declarations Closes GH-10531.
2023-02-07 19:16:03 +08:00
Merge remote-tracking branch 'derickr/GH-10447-p-format-specifier' into PHP-8.1
2023-01-31 20:59:03 +08:00
- Date:
. Fix GH-10447 ('p' format specifier does not yield 'Z' for 00:00). (Derick)
[ci skip] NEWS (#10442)
2023-01-25 06:19:21 +08:00
- FFI:
. Fixed incorrect bitshifting and masking in ffi bitfield. (nielsdos)
PHP-8.1 is now for PHP 8.1.16-dev
2023-01-18 00:24:25 +08:00
Sync boost/context assembly files for fibers Fixes GH-10398 The stack was misaligned upon entering the trampoline function [1], this causes a CPU trap when the SSE instruction is executed to copy data from the stack. This was fixed upstream [2]. This commit syncs all upstream changes from the boost/context assembly files to our copy. [1] https://github.com/php/php-src/pull/10407#issuecomment-1404180877 [2] https://github.com/boostorg/context/pull/219 Closes GH-10407.
2023-01-22 03:49:31 +08:00
- Fiber:
. Fixed assembly on alpine x86. (nielsdos)
Fix colletion of unfinished function call in fibers Fixes GH-10496. Co-authored-by: Bob Weinand <bobwei9@hotmail.com>
2023-02-11 01:07:34 +08:00
. Fixed bug GH-10496 (segfault when garbage collector is invoked inside of
fiber). (Bob, Arnaud)
Sync boost/context assembly files for fibers Fixes GH-10398 The stack was misaligned upon entering the trampoline function [1], this causes a CPU trap when the SSE instruction is executed to copy data from the stack. This was fixed upstream [2]. This commit syncs all upstream changes from the boost/context assembly files to our copy. [1] https://github.com/php/php-src/pull/10407#issuecomment-1404180877 [2] https://github.com/boostorg/context/pull/219 Closes GH-10407.
2023-01-22 03:49:31 +08:00
Fix GH-10315: FPM unknown child alert not valid This changes the log level for an unknown child during wait as this is not unuasual if FPM master has pid 1 and also possible in some cases for higher pid processes. Based on that and the fact that this is not really a problem, there is just a debug level message emitted for pid 1 and for higher pid a warning is emitted. Closes GH-10319
2023-01-15 00:55:16 +08:00
- FPM:
. Fixed bug GH-10315 (FPM unknown child alert not valid). (Jakub Zelenka)
Fix GH-10385: FPM successful config test early exit This introduces an enum `fpm_init_return_status` to propagate the status up to fpm_main. This also makes the code clearer by not using magic integer return numbers. Closes GH-10388
2023-01-21 05:17:27 +08:00
. Fixed bug GH-10385 (FPM successful config test early exit). (nielsdos)
Fix GH-10315: FPM unknown child alert not valid This changes the log level for an unknown child during wait as this is not unuasual if FPM master has pid 1 and also possible in some cases for higher pid processes. Based on that and the fact that this is not really a problem, there is just a debug level message emitted for pid 1 and for higher pid a warning is emitted. Closes GH-10319
2023-01-15 00:55:16 +08:00
Fix GH-10647: Spoofchecker isSuspicious/areConfusable methods error code's argument. Closes GH-10653.
2023-02-22 00:13:25 +08:00
- Intl:
. Fixed bug GH-10647 (Spoolchecker isSuspicious/areConfusable methods
error code's argument always returning NULL0. (Nathan Freeman)
Update NEWS with scanner and parser build fixes
2023-02-18 00:36:43 +08:00
- JSON:
. Fixed JSON scanner and parser generation build.
(Daniel Black, Jakub Zelenka)
ext/mbstring: fix new_value length check Commit 8bbd0952e5bba88 added a check rejecting empty strings; in the merge commiot 379d9a1cfc6462 however it was changed to a NULL check, one that did not make sense because ZSTR_VAL() is guaranteed to never be NULL; the length check was accidently removed by that merge commit. This bug was found by GCC's -Waddress warning: ext/mbstring/mbstring.c:748:27: warning: the comparison will always evaluate as ‘true’ for the address of ‘val’ will never be NULL [-Waddress] 748 | if (!new_value || !ZSTR_VAL(new_value)) { | ^ Closes GH-10532 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-02-07 19:26:19 +08:00
- MBString:
. ext/mbstring: fix new_value length check. (Max Kellermann)
Fix GH-10627: mb_convert_encoding crashes PHP on Windows Fixes GH-10627 The php_mb_convert_encoding() function can return NULL on error, but this case was not handled, which led to a NULL pointer dereference and hence a crash. Closes GH-10628 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-02-20 04:43:34 +08:00
. Fix bug GH-10627 (mb_convert_encoding crashes PHP on Windows). (nielsdos)
ext/mbstring: fix new_value length check Commit 8bbd0952e5bba88 added a check rejecting empty strings; in the merge commiot 379d9a1cfc6462 however it was changed to a NULL check, one that did not make sense because ZSTR_VAL() is guaranteed to never be NULL; the length check was accidently removed by that merge commit. This bug was found by GCC's -Waddress warning: ext/mbstring/mbstring.c:748:27: warning: the comparison will always evaluate as ‘true’ for the address of ‘val’ will never be NULL [-Waddress] 748 | if (!new_value || !ZSTR_VAL(new_value)) { | ^ Closes GH-10532 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-02-07 19:26:19 +08:00
Fix incorrect page_size check The current check always evaluated to false because if `!page_size` is true, then `page_size & (page_size - 1)` equals `0 & (0 - 1)` which is always 0. The if condition is meant to check if page_size is zero or not a power of two, thus we must change the AND to an OR to fix this issue. Closes GH-10427 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-01-24 05:11:08 +08:00
- Opcache:
. Fix incorrect page_size check. (nielsdos)
Fix missing readonly modification error with inc/dec in JIT Closes GH-10746
2023-03-02 08:09:36 +08:00
. Fix readonly modification check when using inc/dec operators on readonly
property with JIT. (ilutov)
Fix incorrect page_size check The current check always evaluated to false because if `!page_size` is true, then `page_size & (page_size - 1)` equals `0 & (0 - 1)` which is always 0. The if condition is meant to check if page_size is zero or not a power of two, thus we must change the AND to an OR to fix this issue. Closes GH-10427 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-01-24 05:11:08 +08:00
Fix incorrect error checking in php_openssl_set_server_dh_param() SSL_CTX_set_tmp_dh() and SSL_CTX_set0_tmp_dh_pkey() return 1 on success and 0 on error. But only < 0 was checked which means that errors were never caught. Closes GH-10705.
2023-02-26 06:39:00 +08:00
- OpenSSL:
. Fixed php_openssl_set_server_dh_param() DH params errors handling. (nielsdos)
Update NEWS
2023-02-07 23:28:50 +08:00
- PDO OCI:
. Fixed bug #60994 (Reading a multibyte CLOB caps at 8192 chars).
(Michael Voříšek)
Fix GH-10715: phpdbg heap buffer overflow -- by misuse of the option "--run" Fixes GH-10715 When a string starting with a NUL character is passed to phpdbg_vprint(), the vasprintf() will return that 0 characters have been printed. This causes msglen == 0. When phpdbg_process_print() is called with a message of length 0, the -1 to check for '\n' will perform an out of bounds read. Since nothing is printed anyway for msglen == 0, it seems best to just skip the printing routine for this case. Closes GH-10720.
2023-02-28 02:44:42 +08:00
- PHPDBG:
. Fixed bug GH-10715 (heap buffer overflow on --run option misuse). (nielsdos)
Fix GH-10672 (pg_lo_open segfaults in the strict_types mode) We need to use the proper ZPP qualifier for zend_string Closes GH-10677
2023-02-23 13:35:39 +08:00
- PGSQL:
. Fix GH-10672 (pg_lo_open segfaults in the strict_types mode). (girgias)
Fix incorrect check in phar tar parsing The entry.flags was used to check whether the entry has the directory flag. The flags however were masked to only contain the permissions. We need to check the mode, before the permission masking, instead of the flags to check whether it is a directory. Closes GH-10464 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-01-28 07:07:35 +08:00
- Phar:
. Fix incorrect check in phar tar parsing. (nielsdos)
Fix GH-10623: ReflectionFunction::getClosureUsedVariables() returns empty array in presence of variadic arguments The code was missing the handling for the RECV_VARIADIC instruction. Additional regression test for GH-10623 Co-authored-by: Fabio Ivona <fabio.ivona@defstudio.it>
2023-02-19 22:31:37 +08:00
- Reflection:
. Fixed bug GH-10623 (Reflection::getClosureUsedVariables opcode fix with
variadic arguments). (nielsdos)
Fix segfault when using ReflectionFiber (fixes #10439) Closes GH-10478
2023-02-23 02:39:10 +08:00
. Fix Segfault when using ReflectionFiber suspended by an internal function.
(danog)
Fix GH-10623: ReflectionFunction::getClosureUsedVariables() returns empty array in presence of variadic arguments The code was missing the handling for the RECV_VARIADIC instruction. Additional regression test for GH-10623 Co-authored-by: Fabio Ivona <fabio.ivona@defstudio.it>
2023-02-19 22:31:37 +08:00
Propagate errors correctly in ps_files_cleanup_dir() In SessionHandler::gc, we use a virtual call to PS(default_mod)->s_gc to call the gc implementation. That return value is checked against FAILURE (-1). One of the call targets of PS(default_mod)->s_gc is ps_gc_files(). ps_gc_files() calls to ps_files_cleanup_dir(). The latter function has some error checks and outputs a notice if something goes wrong. In cases of errors, the function returns 0. This means that the check in SessionHandler::gc will misinterpret this as a success and report that 0 files have been *successfully* cleaned up. Fix it by returning -1 to indicate something *did* go wrong. Closes GH-10644.
2023-02-21 18:40:41 +08:00
- Session:
. Fixed ps_files_cleanup_dir() on failure code paths with -1 instead of 0 as
the latter was considered success by callers. (nielsdos).
Fix GH-10292 1st param of mt_srand() has UNKNOWN default on PHP <8.3 Closes GH-10429
2023-01-25 02:00:41 +08:00
- Standard:
. Fixed bug GH-10292 (Made the default value of the first param of srand() and
mt_srand() unknown). (kocsismate)
Fix incorrect check in cs_8559_5 in map_from_unicode() The condition `code == 0x0450 || code == 0x045D` is always false because of an incorrect range check on code. According to the BMP coverage in the encoding spec for ISO-8859-5 (https://encoding.spec.whatwg.org/iso-8859-5-bmp.html) the range of valid characters is 0x0401 - 0x045F (except for 0x040D, 0x0450, 0x045D). The current check has an upper bound of 0x044F instead of 0x045F. Fix this by changing the upper bound. Closes GH-10399 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-01-21 20:50:36 +08:00
. Fix incorrect check in cs_8559_5 in map_from_unicode(). (nielsdos)
Avoid crash for reset/end/next/prev() on ffi classes (#9711) (And any PECLs returning `zend_empty_array` in the handler->get_properties overrides) Closes GH-9697 This is similar to the fix used in d9651a941915eb5fb5ad557090b65256fd8509b6 for array_walk. This should make it safer for php-src (and PECLs, long-term) to return the empty immutable array in `handler->get_properties` to avoid wasting memory. See https://github.com/php/php-src/issues/9697#issuecomment-1273613175 The only possible internal iterator position for the empty array is at the end of the empty array (nInternalPointer=0). The `zend_hash*del*` helpers will always set nInternalPointer to 0 when an array becomes empty, regardless of previous insertions/deletions/updates to the array.
2023-02-03 22:17:33 +08:00
. Fix bug GH-9697 for reset/end/next/prev() attempting to move pointer of
properties table for certain internal classes such as FFI classes
Fix incorrect error check in browsecap for pcre2_match() pcre2_match() returns error codes < 0, but only the "no match" error code was handled. Fix it by changing the check to >= 0. Closes GH-10632 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-02-20 17:56:10 +08:00
. Fix incorrect error check in browsecap for pcre2_match(). (nielsdos)
Fix GH-10292 1st param of mt_srand() has UNKNOWN default on PHP <8.3 Closes GH-10429
2023-01-25 02:00:41 +08:00
Fix memory leaks in ext-tidy We must not instantiate the object prior checking error conditions Moreover, we need to release the HUGE amount of memory for files which are over 4GB when throwing a ValueError Closes GH-10545
2023-02-08 22:52:40 +08:00
- Tidy:
. Fix memory leaks when attempting to open a non-existing file or a file over
4GB. (Girgias)
Add missing error check on tidyLoadConfig Parse errors were not reported for the default config, they were only reported when explicitly another config was loaded. This means that users may not be aware of errors in their configuration and therefore the behaviour of Tidy might not be what they intended. This patch fixes that issue by using a common function. In fact, the check for -1 might be enough for the current implementation of Tidy, but the Tidy docs say that any value other than 0 indicates an error. So future errors might not be caught when just using an error code of -1. Therefore, this also changes the error code checks of == -1 to < 0 and == 1 to > 0. Closes GH-10636 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-02-20 21:32:45 +08:00
. Add missing error check on tidyLoadConfig. (nielsdos)
Fix memory leaks in ext-tidy We must not instantiate the object prior checking error conditions Moreover, we need to release the HUGE amount of memory for files which are over 4GB when throwing a ValueError Closes GH-10545
2023-02-08 22:52:40 +08:00
Fix incorrect string length for output_handler in zlib ini code The length of "output_handler" is supposed to be passed, but as sizeof is used, the resulting number includes the NUL character, so the length is off-by-one. Subtract one to pass the correct length. Closes GH-10667.
2023-02-23 02:36:37 +08:00
- Zlib:
. Fixed output_handler directive value's length which counted the string
terminator. (nieldos)
PHP-8.1 is now for PHP 8.1.17-dev
2023-02-14 03:16:07 +08:00
14 Feb 2023, PHP 8.1.16
- Core:
. Fixed bug #81744 (Password_verify() always return true with some hash).
(CVE-2023-0567). (Tim Düsterhus)
. Fixed bug #81746 (1-byte array overrun in common path resolve code).
(CVE-2023-0568). (Niels Dossche)
Fix missing colon in NEWS
2023-02-14 18:46:48 +08:00
- SAPI:
Update NEWS
2023-02-14 18:23:59 +08:00
. Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart
Fix incorrect character in NEWS
2023-02-14 18:33:56 +08:00
request body). (CVE-2023-0662) (Jakub Zelenka)
ext/mbstring: fix new_value length check Commit 8bbd0952e5bba88 added a check rejecting empty strings; in the merge commiot 379d9a1cfc6462 however it was changed to a NULL check, one that did not make sense because ZSTR_VAL() is guaranteed to never be NULL; the length check was accidently removed by that merge commit. This bug was found by GCC's -Waddress warning: ext/mbstring/mbstring.c:748:27: warning: the comparison will always evaluate as ‘true’ for the address of ‘val’ will never be NULL [-Waddress] 748 | if (!new_value || !ZSTR_VAL(new_value)) { | ^ Closes GH-10532 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-02-07 19:26:19 +08:00
PHP-8.1 is now for PHP 8.1.16-dev
2023-01-18 00:24:25 +08:00
02 Feb 2023, PHP 8.1.15
PHP-8.1 is now for PHP 8.1.15-dev
2022-12-08 01:29:37 +08:00
Fix GH-9949: Partial content on incomplete POST request `ap_get_brigade()` may fail for different reasons, and we must not pretend that a partially read POST payload is fine; instead we report a content length of zero what matches all other `read_post()` callbacks of bundled SAPIs. Closes GH-10059.
2022-12-07 00:37:47 +08:00
- Apache:
. Fixed bug GH-9949 (Partial content on incomplete POST request). (cmb)
PHP-8.1 is now for PHP 8.1.15-dev
2022-12-08 01:29:37 +08:00
Merge remote-tracking branch 'derickr/gh10072-execute-ex' into PHP-8.1
2022-12-24 00:35:48 +08:00
- Core:
. Fixed bug GH-10072 (PHP crashes when execute_ex is overridden and a __call
trampoline is used from internal code). (Derick)
Fix GH-10251: Assertion `(flag & (1<<3)) == 0' failed. zend_get_property_guard previously assumed that at least "str" has a pre-computed hash. This is not always the case, for example when a string is created by bitwise operations, its hash is not set. Instead of forcing a computation of the hashes, drop the hash comparison. Closes GH-10254 Co-authored-by: Changochen <changochen1@gmail.com> Signed-off-by: George Peter Banyard <girgias@php.net>
2023-01-07 20:49:24 +08:00
. Fix GH-10251 (Assertion `(flag & (1<<3)) == 0' failed). (nielsdos)
Fix incorrect comparison in block optimization pass We're in the case of ZEND_JMPZ_EX or ZEND_JMPNZ_EX. The opcode gets overwritten and only after the overwriting gets checked if we're in a JMPZ or JMPNZ case. This results in a wrong optimization. Close GH-10329
2023-01-15 22:29:03 +08:00
. Fix wrong comparison in block optimisation pass after opcode update. (nieldsdos)
[ci skip] NEWS
2023-01-20 23:47:36 +08:00
. Fix GH-10248 (Assertion `!(zval_get_type(&(*(property))) == 10)' failed).
(nielsdos)
Merge remote-tracking branch 'derickr/gh10072-execute-ex' into PHP-8.1
2022-12-24 00:35:48 +08:00
Fix GH-9891: DateTime modify with unixtimestamp (@) must work like setTimestamp
2022-12-20 22:41:13 +08:00
- Date:
. Fixed bug GH-9891 (DateTime modify with unixtimestamp (@) must work like
setTimestamp). (Derick)
Fixed GH-10218: DateTimeZone fails to parse time zones that contain the "+" character
2023-01-10 23:15:49 +08:00
. Fixed bug GH-10218 (DateTimeZone fails to parse time zones that contain the
"+" character). (Derick)
Fix GH-9891: DateTime modify with unixtimestamp (@) must work like setTimestamp
2022-12-20 22:41:13 +08:00
Fix GH-10249: Assertion `size >= page_size + 1 * page_size' failed. Co-authored-by: Changochen <changochen1@gmail.com> Closes GH-10284
2023-01-11 05:55:20 +08:00
- Fiber:
. Fix assertion on stack allocation size. (nielsdos)
Fix GH-9981: FPM does not reset fastcgi.error_header
2022-12-23 02:32:16 +08:00
- FPM:
. Fixed bug GH-9981 (FPM does not reset fastcgi.error_header).
(Jakub Zelenka)
Fix bug #67244: Wrong owner:group for listening unix socket Update FPM www.conf to reflect the actual logic
2023-01-13 18:31:01 +08:00
. Fixed bug #67244 (Wrong owner:group for listening unix socket).
(Jakub Zelenka)
Fix GH-9981: FPM does not reset fastcgi.error_header
2022-12-23 02:32:16 +08:00
Handle exceptions from __toString in XXH3's initialization The initialization routine for XXH3 was not prepared for exceptions from seed. Fix this by using try_convert_to_string. For discussion, please see: GH-10305 Closes GH-10352 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-01-17 05:33:06 +08:00
- Hash:
. Handle exceptions from __toString in XXH3's initialization (nielsdos)
Fix GH-10112: LDAP\Connection::__construct() refers to ldap_create() There is no `ldap_create()`, but rather `ldap_connect()`. Closes GH-10115.
2022-12-16 19:16:38 +08:00
- LDAP:
. Fixed bug GH-10112 (LDAP\Connection::__construct() refers to ldap_create()).
(cmb)
Use different mblen_table for different SJIS variants
2023-01-05 17:34:33 +08:00
- MBString:
. Fixed: mb_strlen (and a couple of other mbstring functions) would wrongly treat 0x80, 0xFD, 0xFE, 0xFF, and certain other byte values as the first byte of a 2-byte SJIS character. (Alex Dowad)
[ci skip] NEWS
2022-12-21 21:55:21 +08:00
- Opcache:
. Fix inverted bailout value in zend_runtime_jit() (Max Kellermann).
Initialize ping_auto_globals_mask to prevent undefined behaviour Closes GH-10121
2022-12-17 23:02:55 +08:00
. Fix access to uninitialized variable in accel_preload(). (nielsdos)
ext/opcache/jit: handle zend_jit_find_trace() failures Commit 6c25413 added the flag ZEND_JIT_EXIT_INVALIDATE which resets the trace handlers in zend_jit_trace_exit(), but forgot to consider that on ZEND_JIT_TRACE_STOP_LINK, this changed handler gets passed to zend_jit_find_trace(), causing it to fail, either by returning 0 (results in bogus data) or by aborting due to ZEND_UNREACHABLE(). In either case, this crashes the PHP process. I'm not quite sure how to fix this multi-threading problem properly; my suggestion is to just fail the zend_jit_trace() call. After all, the whole ZEND_JIT_EXIT_INVALIDATE fix was about reloading modified scripts, so there's probably no point in this pending zend_jit_trace() call.
2022-12-22 20:02:52 +08:00
. Fix zend_jit_find_trace() crashes. (Max Kellermann)
ext/opcache/jit/zend_jit_trace: add missing lock for EXIT_INVALIDATE Commit 6c254131831 added the flag ZEND_JIT_EXIT_INVALIDATE which resets the trace handlers in zend_jit_trace_exit(), but forgot to lock the shared memory section. This could cause another worker process who still saw the ZEND_JIT_TRACE_JITED flag to schedule ZEND_JIT_TRACE_STOP_LINK, but when it arrived at the ZEND_JIT_DEBUG_TRACE_STOP, the handler was already reverted by the first worker process and thus zend_jit_find_trace() fails. This in turn generated a bogus jump offset in the JITed code, crashing the PHP process.
2022-12-20 05:35:22 +08:00
. Added missing lock for EXIT_INVALIDATE in zend_jit_trace_exit. (Max Kellermann)
[ci skip] NEWS
2022-12-21 21:55:21 +08:00
Fix wrong flags check for compression method in phar_object.c I found this issue using static analysis tools, it reported that the condition was always false. We can see that flags is assigned in the switch statement above, but a mistake was made in the comparison. Closes GH-10328 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-01-15 22:05:36 +08:00
- Phar:
. Fix wrong flags check for compression method in phar_object.c (nielsdos)
Fix undefined behaviour in phpdbg_load_module_or_extension If zend_register_module_ex were to return NULL, then module_entry will be set to NULL, and the if's body will load module_entry->name. Since module_entry is NULL, loading the name would cause a NULL pointer dereference. However, since a NULL pointer dereference is undefined behaviour, the compiler is free to remove the check. Fix it by using *name instead of module_entry->name. Closes GH-10157 Signed-off-by: George Peter Banyard <girgias@php.net>
2022-12-23 04:03:45 +08:00
- PHPDBG:
. Fix undefined behaviour in phpdbg_load_module_or_extension(). (nielsdos)
Fix null pointer dereference of param When the validation logic for param->type was added, the logic did not account for the case where param could be NULL. The existing code did take that into account as can be seen in the `if (param)` check below. Furthermore, phpdbg_set_breakpoint_expression even calls phpdbg_create_conditional_break with param == NULL. Fix it by placing the validation logic inside a NULL check.
2022-12-27 04:43:53 +08:00
. Fix NULL pointer dereference in phpdbg_create_conditional_breal(). (nielsdos)
Fix GH-9710: phpdbg memory leaks by option "-h" Closes GH-10237 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-01-06 05:11:15 +08:00
. Fix GH-9710: phpdbg memory leaks by option "-h" (nielsdos)
Fix phpdbg segmentation fault in case of malformed input If you were to enter "w $>" the function would crash with a segmentation fault because last_index is still NULL at that point. Fix it by checking for NULL and erroring out if it is. Closes GH-10353 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-01-17 06:09:58 +08:00
. Fix phpdbg segmentation fault in case of malformed input (nielsdos)
Fix undefined behaviour in phpdbg_load_module_or_extension If zend_register_module_ex were to return NULL, then module_entry will be set to NULL, and the if's body will load module_entry->name. Since module_entry is NULL, loading the name would cause a NULL pointer dereference. However, since a NULL pointer dereference is undefined behaviour, the compiler is free to remove the check. Fix it by using *name instead of module_entry->name. Closes GH-10157 Signed-off-by: George Peter Banyard <girgias@php.net>
2022-12-23 04:03:45 +08:00
Fix memory leak in posix_ttyname() Closes GH-10190
2022-12-30 23:11:09 +08:00
- Posix:
. Fix memory leak in posix_ttyname() (girgias)
Fix GH-10187: Segfault in stripslashes() with arm64 Closes GH-10188 Co-authored-by: todeveni <toni.viemero@iki.fi> Signed-off-by: George Peter Banyard <girgias@php.net>
2022-12-30 21:31:40 +08:00
- Standard:
. Fix GH-10187 (Segfault in stripslashes() with arm64). (nielsdos)
Fix substr_replace with slots in repl_ht being UNDEF The check that was supposed to check whether the array slot was UNDEF was wrong and never triggered. This resulted in a replacement with the empty string or the wrong string instead of the correct one. The correct check pattern can be observed higher up in the function's code. Closes GH-10323 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-01-15 04:01:22 +08:00
. Fix substr_replace with slots in repl_ht being UNDEF. (nielsdos)
Fix GH-10187: Segfault in stripslashes() with arm64 Closes GH-10188 Co-authored-by: todeveni <toni.viemero@iki.fi> Signed-off-by: George Peter Banyard <girgias@php.net>
2022-12-30 21:31:40 +08:00
Fix Windows shmget() wrt. IPC_PRIVATE Fixes #9944 https://man7.org/linux/man-pages/man2/shmget.2.html notes The name choice IPC_PRIVATE was perhaps unfortunate, IPC_NEW would more clearly show its function. Closes GH-9946.
2022-11-15 21:01:45 +08:00
- TSRM:
. Fixed Windows shmget() wrt. IPC_PRIVATE. (Tyson Andre)
Fix missing check for xmlTextWriterEndElement xmlTextWriterEndElement returns -1 if the call fails. There was already a check for retval, but the return value wasn't assigned to retval. The other caller of xmlTextWriterEndElement is in xmlwriter_write_element_ns, which does the check correctly. Closes GH-10324 Signed-off-by: George Peter Banyard <girgias@php.net>
2023-01-15 06:38:38 +08:00
- XMLWriter
. Fix missing check for xmlTextWriterEndElement (nielsdos)
PHP-8.1 is now for PHP 8.1.15-dev
2022-12-08 01:29:37 +08:00
05 Jan 2023, PHP 8.1.14
PHP-8.1 is now for PHP 8.1.14-dev
2022-11-09 00:57:34 +08:00
Fix GH-9905: constant() behaves inconsistent when class is undefined Directly referring to a constant of an undefined throws an exception; there is not much point in `constant()` raising a fatal error in this case. Closes GH-9907.
2022-11-09 00:13:35 +08:00
- Core:
. Fixed bug GH-9905 (constant() behaves inconsistent when class is undefined).
(cmb)
[ci skip] Fix GH-9918: License information for xxHash is not included in README.REDIST.BINS file Closes GH-9919.
2022-11-08 13:42:39 +08:00
. Fixed bug GH-9918 (License information for xxHash is not included in
README.REDIST.BINS file). (Akama Hitoshi)
Fix GH-9650: Can't initialize heap: [0x000001e7] Closes GH-9721.
2022-11-14 22:16:31 +08:00
. Fixed bug GH-9650 (Can't initialize heap: [0x000001e7]). (Michael Voříšek)
Avoid undefined behavior in Windows ftok(3) emulation `.nFileIndexHigh` is a unsigned 32bit number. Casting that to `__int64` and shifting left by 32bits triggers undefined behavior if the most significant bit of `.nFileIndexHigh` is set. We could avoid that by casting to `(__uint64)`, but in that case the whole clause doesn't have an effect anymore, so we drop it altogether. Closes GH-9958.
2022-11-15 22:37:32 +08:00
. Fixed potentially undefined behavior in Windows ftok(3) emulation. (cmb)
PHP-8.1 is now for PHP 8.1.14-dev
2022-11-09 00:57:34 +08:00
Fixed GH-9699, GH-9866, and GH-9880 (problems with diff); and GH-9700 (greedy tzid parsing)
2022-11-30 23:47:43 +08:00
- Date:
. Fixed bug GH-9699 (DateTimeImmutable::diff differences in 8.1.10 onwards -
timezone related). (Derick)
. Fixed bug GH-9700 (DateTime::createFromFormat: Parsing TZID string is too
greedy). (Derick)
. Fixed bug GH-9866 (Time zone bug with \DateTimeInterface::diff()). (Derick)
. Fixed bug GH-9880 (DateTime diff returns wrong sign on day count when using
a timezone). (Derick)
[ci skip] Fix NEWS FPM entries
2022-11-23 02:47:24 +08:00
- FPM:
. Fixed bug GH-9959 (Solaris port event mechanism is still broken after bug
#66694). (Petr Sumbera)
. Fixed bug #68207 (Setting fastcgi.error_header can result in a WARNING).
(Jakub Zelenka)
Fix GH-8517: FPM child pointer can be potentially uninitialized There might be a moment when the child log event is executed after freeing a child. That could possibly happen if the child output is triggered at the same as the terminating of the child. Then the output event could be potentially processed after the terminating event which would cause this kind of issue. The issue might got more visible after introducing the log_stream on a child because it is more likely that this cannot be dereferenced after free. However it is very hard to reproduce this issue so there is no test for this. The fix basically prevents passing a child pointer and instead passes the child PID and then looks the child up by the PID when it is being processed. This is obviously slower but it is a safe way to do it and the slow down should not be hopefully visible in a way that it would overload a master process.
2022-08-28 21:58:42 +08:00
. Fixed bug GH-8517 (Random crash of FPM master process in
fpm_stdio_child_said). (Jakub Zelenka)
[ci skip] Fix NEWS FPM entries
2022-11-23 02:47:24 +08:00
[ci skip] NEWS
2022-11-13 20:40:45 +08:00
- MBString:
. Fixed bug GH-9535 (The behavior of mb_strcut in mbstring has been changed in
PHP8.1). (Nathan Freeman)
[ci skip] NEWS
2022-11-25 21:07:30 +08:00
- Opcache:
. Fixed bug GH-9968 (Segmentation Fault during OPCache Preload).
(Arnaud, michdingpayc)
Fix GH-9064: PHP fails to build if openssl was built with no-ec
2022-11-25 20:49:12 +08:00
- OpenSSL:
. Fixed bug GH-9064 (PHP fails to build if openssl was built with --no-ec).
(Jakub Zelenka)
Fix GH-10000: Test failures when OpenSSL compiled with no-dsa
2022-11-25 22:02:03 +08:00
. Fixed bug GH-10000 (OpenSSL test failures when OpenSSL compiled with
no-dsa). (Jakub Zelenka)
Fix GH-9064: PHP fails to build if openssl was built with no-ec
2022-11-25 20:49:12 +08:00
[ci skip] NEWS
2022-11-13 20:40:45 +08:00
- Pcntl:
[ci skip] NEWS
2022-11-13 18:05:12 +08:00
. Fixed bug GH-9298 (Signal handler called after rshutdown leads to crash).
(Erki Aring)
Fix GH-9971: Incorrect NUMERIC value returned from PDO_Firebird Dialect 1 databases store and transfer `NUMERIC(15,2)` values as doubles, which we need to cater to in `firebird_stmt_get_col()` to avoid `ZEND_ASSUME(0)` to ever be triggered, since that may result in undefined behavior. Since adding a regression test would require to create a dialect 1 database, we go without it. Closes GH-10021.
2022-11-29 22:32:46 +08:00
- PDO_Firebird:
. Fixed bug GH-9971 (Incorrect NUMERIC value returned from PDO_Firebird).
(cmb)
Update NEWS
2023-01-04 14:03:23 +08:00
- PDO/SQLite:
. Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
(cmb)
Fix GH-9932: Discards further characters for session name. As those are converted, it s better to make aware of the code caller of the naming inadequacy. Closes GH-9940.
2022-11-15 20:27:44 +08:00
- Session:
. Fixed GH-9932 (session name silently fails with . and [). (David Carlier)
Fix GH-9883 SplFileObject::__toString() reads next line We need to overwrite the __toString magic method for SplFileObject, similarly to how DirectoryIterator overwrites it Moreover, the custom cast handler is useless as we define __toString methods, so use the standard one instead. Closes GH-9912
2022-11-09 23:24:30 +08:00
- SPL:
. Fixed GH-9883 (SplFileObject::__toString() reads next line). (Girgias)
Fix GH-10011 (Trampoline autoloader will get reregistered and cannot be unregistered) There are two issues to resolve: 1. The FCC is not refetch when trying to unregister a trampoline 2. Comparing the function pointer of trampolines is meaningless as they are reallocated, thus we need to compare the name of the function Found while working on GH-8294 Closes GH-10033
2022-12-02 09:23:48 +08:00
. Fixed GH-10011 (Trampoline autoloader will get reregistered and cannot be
unregistered). (Girgias)
Fix GH-9883 SplFileObject::__toString() reads next line We need to overwrite the __toString magic method for SplFileObject, similarly to how DirectoryIterator overwrites it Moreover, the custom cast handler is useless as we define __toString methods, so use the standard one instead. Closes GH-9912
2022-11-09 23:24:30 +08:00
Fix #81742: open_basedir bypass in SQLite3 by using file URI A previous fix[1] was not sufficient to catch all potential file URIs, because the patch did not cater to URL encoding. Properly parsing and decoding the URI may yield a different result than the handling of SQLite3, so we play it safe, and reject any file URIs if open_basedir is configured. [1] <https://bugs.php.net/bug.php?id=77967> Closes GH-10018.
2022-12-05 23:26:02 +08:00
- SQLite3:
. Fixed bug #81742 (open_basedir bypass in SQLite3 by using file URI). (cmb)
PHP-8.1 is now for PHP 8.1.14-dev
2022-11-09 00:57:34 +08:00
24 Nov 2022, PHP 8.1.13
PHP-8.1 is now for PHP 8.1.13-dev
2022-10-12 07:47:00 +08:00
Fix GH-9709: Guard against current_execute_data==NULL in is_handle_exception_set
2022-10-22 09:18:55 +08:00
- CLI:
. Fixed bug GH-9709 (Null pointer dereference with -w/-s options). (Adam Saponara)
[ci skip] NEWS
2022-10-16 18:44:05 +08:00
- Core:
. Fixed bug GH-9752 (Generator crashes when interrupted during argument
evaluation with extra named params). (Arnaud)
[ci skip] NEWS
2022-10-22 16:44:37 +08:00
. Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during
initialization). (Arnaud)
Merge branch 'PHP-8.0' into PHP-8.1 * PHP-8.0: Fix potential NULL pointer dereference Windows shm*() functions
2022-11-02 21:52:52 +08:00
. Fixed potential NULL pointer dereference Windows shm*() functions. (cmb)
[ci skip] NEWS
2022-11-04 23:01:52 +08:00
. Fixed bug GH-9750 (Generator memory leak when interrupted during argument
evaluation. (Arnaud)
[ci skip] NEWS
2022-10-16 18:44:05 +08:00
Update NEWS
2022-10-18 01:22:29 +08:00
- Date:
. Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if
the argument is an offset larger than 100*60 minutes). (Derick)
Fix GH-9754: SaltStack hangs when running php-fpm 8.1.11 SaltStack uses Python subprocess and redirects stderr to stdout which is then piped to the returned output. If php-fpm starts in daemonized mode, it should close stderr. However a fix introduced in GH-8913 keeps stderr around so it can be later restored. That causes the issue reported in GH-9754. The solution is to keep stderr around only when php-fpm runs in foreground as the issue is most likely visible only there. Basically there is no need to restore stderr when php-fpm is daemonized.
2022-10-29 22:21:15 +08:00
- FPM:
. Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running
php-fpm 8.1.11). (Jakub Zelenka)
Add NEWS entry for #9841
2022-10-28 18:23:37 +08:00
- mysqli:
. Fixed bug GH-9841 (mysqli_query throws warning despite using
silenced error mode). (Kamil Tekiela)
Fix potential heap corruption due to alignment mismatch The fix for bug 63327[1] changed the extra size of mysqlnd allocations from `sizeof(size_t)` to the properly aligned values; however, the allocation in `_mysqlnd_pestrdup()` has apparently been overlooked, which (currently) causes detectable heap corruption when running mysqli_get_client_stats.phpt on 32bit Windows versions. [1] <https://github.com/php/php-src/commit/338a47bb856872f9ab0db94e867333d73279ca85> Closes GH-9724.
2022-10-11 23:14:39 +08:00
- MySQLnd:
. Fixed potential heap corruption due to alignment mismatch. (cmb)
PHP-8.1 is now for PHP 8.1.13-dev
2022-10-12 07:47:00 +08:00
Fix GH-8430: OpenSSL compiled with old disgests does not build Specifically no-md2, no-md4 or no-rmd160 were not supported
2022-10-23 05:11:05 +08:00
- OpenSSL:
. Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does
not build). (Jakub Zelenka, fsbruva)
Fix GH-9720: Null pointer dereference while serializing the response When traversing the result array, we need to cater to `param_name` possibly being `NULL`. Prior to PHP 7.0.0, this was implicitly done because `param_name` was of type `char*`. Closes GH-9739.
2022-10-13 18:35:08 +08:00
- SOAP:
. Fixed GH-9720 (Null pointer dereference while serializing the response).
(cmb)
Prepare for PHp 8.0.26
2022-10-11 21:24:53 +08:00
PHP-8.1 is now for PHP 8.1.13-dev
2022-10-12 07:47:00 +08:00
27 Oct 2022, PHP 8.1.12
PHP-8.1 is now for PHP 8.1.12-dev
2022-09-14 05:09:47 +08:00
Fix GH-9566: disable assembly for Fiber on FreeBSD i386. preparing in case there is more architectures especially the not tested.
2022-09-18 14:59:14 +08:00
- Core:
. Fixes segfault with Fiber on FreeBSD i386 architecture. (David Carlier)
NEWS: Add entry for GH-8805 [ci skip] Signed-off-by: Anatol Belski <ab@php.net>
2022-09-18 21:39:07 +08:00
- Fileinfo:
. Fixed bug GH-8805 (finfo returns wrong mime type for woff/woff2 files).
(Anatol)
PHP-8.1 is now for PHP 8.1.12-dev
2022-09-14 05:09:47 +08:00
move CVEs in 8.1.12 changelog
2022-10-26 20:21:26 +08:00
- GD:
. Fixed bug #81739: OOB read due to insufficient input validation in
imageloadfont(). (CVE-2022-31630) (cmb)
- Hash:
. Fixed bug #81738: buffer overflow in hash_update() on long parameter.
(CVE-2022-37454) (nicky at mouha dot be)
[ci skip] Add missing NEWS entry
2022-10-10 20:00:41 +08:00
- MBString:
- Fixed bug GH-9683 (Problem when ISO-2022-JP-MS is specified in
mb_ encode_mimeheader). (Alex Dowad)
Indirect call reduction for Jit code Changing indirect call to direct call for Jit code benefits the branch prediction, which gets 1% performance gain in our workload. Similarly, we change indirect jump to direct jump. Signed-off-by: Su, Tao <tao.su@intel.com> Signed-off-by: Wang, Xue <xue1.wang@intel.com>
2022-09-20 09:51:34 +08:00
- Opcache:
. Added indirect call reduction for jit on x86 architectures. (wxue1)
Fix GH-9583: session_create_id() fails with user defined save handler that doesn't have a validateId() method
2022-09-24 19:05:50 +08:00
- Session:
. Fixed bug GH-9583 (session_create_id() fails with user defined save handler
that doesn't have a validateId() method). (Girgias)
[ci skip] NEWS
2022-10-01 17:24:08 +08:00
- Streams:
. Fixed bug GH-9590 (stream_select does not abort upon exception or empty
valid fd set). (Arnaud)
PHP-8.1 is now for PHP 8.1.12-dev
2022-09-14 05:09:47 +08:00
29 Sep 2022, PHP 8.1.11
PHP-8.1 is now for PHP 8.1.11-dev
2022-08-16 23:45:29 +08:00
Fix GH-9323: crash when the VM enters userspace code via the GC Closes GH-9323
2022-08-19 12:09:07 +08:00
- Core:
. Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function)
(Tim Starling)
Fix GH-9361: Segmentation fault on script exit Using a lot of memory may overflow some `int` calculations; to avoid that we make sure that the operands are promoted to `size_t`. This issue has been analyzed by @chschneider. Closes GH-9379.
2022-08-19 22:26:26 +08:00
. Fixed bug GH-9361 (Segmentation fault on script exit #9379). (cmb,
Christian Schneider)
Fix class name FQN when AST dumping new and class const Fixes GH-9447 Closes GH-9462
2022-09-02 05:17:20 +08:00
. Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class
constants in constant expressions). (ilutov)
add missing CVEs
2022-09-30 15:19:03 +08:00
. Fixed bug #81727: Don't mangle HTTP variable names that clash with ones
that have a specific semantic meaning. (CVE-2022-31629). (Derick)
Fix GH-9323: crash when the VM enters userspace code via the GC Closes GH-9323
2022-08-19 12:09:07 +08:00
Fix #79451: DOMDocument->replaceChild on doctype causes double free We have to reset intSubset if replacing doctype with another doctype node. Closes GH-9201. Closes GH-9376.
2022-08-04 22:04:41 +08:00
- DOM:
. Fixed bug #79451 (DOMDocument->replaceChild on doctype causes double free).
(Nathan Freeman)
Fix GH-8885: access.log with stderr writes logs to error_log after reload This fix allows restoring the the original stderr so the logs are correctly written.
2022-07-03 19:12:55 +08:00
- FPM:
. Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to
error_log after daemon reload). (Dmitry Menshikov)
Fix bug #77780: "Headers already sent" when previous connection was aborted This change primarily splits SAPI deactivation to module and destroy parts. The reason is that currently some SAPIs might bail out on deactivation. One of those SAPI is PHP-FPM that can bail out on request end if for example the connection is closed by the client (web sever). The problem is that in such case the resources are not freed and some values reset. The most visible impact can have not resetting the PG(headers_sent) which can cause erorrs in the next request. One such issue is described in #77780 bug which this fixes and is also cover by a test in this commit. It seems reasonable to separate deactivation and destroying of the resource which means that the bail out will not impact it.
2022-06-26 22:34:33 +08:00
. Fixed bug #77780 ("Headers already sent..." when previous connection was
aborted). (Jakub Zelenka)
Fix GH-8885: access.log with stderr writes logs to error_log after reload This fix allows restoring the the original stderr so the logs are correctly written.
2022-07-03 19:12:55 +08:00
Fix GH-9308 GMP throws the wrong error when a GMP object is passed to gmp_init() Closes GH-9490
2022-09-06 18:37:04 +08:00
- GMP
. Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed
to gmp_init()). (Girgias)
Fix GH-9421 Incorrect argument number for ValueError in NumberFormatter Closes GH-9489
2022-08-31 00:16:27 +08:00
- Intl
. Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
(Girgias)
Fix pcre.jit on Apple Silicon This backports https://github.com/zherczeg/sljit/pull/105. Relates to bug #80435, however, it doesn't solve the bus error on PHP 8.0, but PHP 8.1 builds fine now. Closes GH-9279.
2022-08-09 05:54:24 +08:00
- PCRE:
. Fixed pcre.jit on Apple Silicon. (Niklas Keller)
Fix GH-9411: PgSQL large object resource is incorrectly closed Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de> Closes GH-9411.
2022-09-05 20:53:33 +08:00
- PDO_PGSQL:
. Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
(Yurunsoft)
add missing CVEs
2022-09-30 15:19:03 +08:00
- Phar:
. Fixed bug #81726: phar wrapper: DOS when using quine gzip file.
(CVE-2022-31628). (cmb)
[ci skip] NEWS
2022-09-02 19:53:20 +08:00
- Reflection:
. Fixed bug GH-8932 (ReflectionFunction provides no way to get the called
class of a Closure). (cmb, Nicolas Grekas)
Fix GH-9316: $http_response_header is wrong for long status line While the reason-phrase in a HTTP response status line is usually short, there is no actual limit specified by the RFCs. As such, we must not assume that the line fits into the buffer (which is currently 128 bytes large). Since there is no real need to present the complete status line, we simply read and discard the rest of a long line. Co-authored-by: Tim Düsterhus <timwolla@googlemail.com> Closes GH-9319.
2022-08-17 20:20:57 +08:00
- Streams:
. Fixed bug GH-9316 ($http_response_header is wrong for long status line).
(cmb, timwolla)
PHP-8.1 is now for PHP 8.1.11-dev
2022-08-16 23:45:29 +08:00
01 Sep 2022, PHP 8.1.10
PHP-8.1 is now for PHP 8.1.10-dev
2022-07-20 12:48:52 +08:00
Fix --CGI-- support of run-tests.php The `--CGI--` section is supposed to be just a marker, and to be empty as such. However, a previous refactoring[1] broke that. [1] <https://github.com/php/php-src/commit/9140c9038a83ff55a78f357f8485de086d83d94e> Closes GH-9061.
2022-07-20 19:19:58 +08:00
- Core:
. Fixed --CGI-- support of run-tests.php. (cmb)
[CI skip] update NEWS
2022-08-04 23:05:12 +08:00
. Fixed incorrect double to long casting in latest clang. (zeriyoshi)
Fix GH-9266: GC root buffer keeps growing when dtors are present Do not reset cleared count on GC rerun. Closes GH-9265.
2022-08-09 00:47:21 +08:00
. Fixed bug GH-9266 (GC root buffer keeps growing when dtors are present).
(Michael Olšavský)
PHP-8.1 is now for PHP 8.1.10-dev
2022-07-20 12:48:52 +08:00
Update NEWS
2022-07-21 19:34:45 +08:00
- Date:
. Fixed bug GH-8730 (DateTime::diff miscalculation is same time zone of
different type). (Derick)
Add test case for GH-8964
2022-07-22 18:30:00 +08:00
. Fixed bug GH-8964 (DateTime object comparison after applying delta less
than 1 second). (Derick)
Add test case for GH-9601: DateInterval 1.5s added to DateTimeInterface is rounded down since PHP 8.1.0
2022-07-28 18:02:50 +08:00
. Fixed bug GH-9106: (DateInterval 1.5s added to DateTimeInterface is rounded
down since PHP 8.1.0). (Derick)
Update NEWS
2022-07-21 19:34:45 +08:00
. Fixed bug #81263 (Wrong result from DateTimeImmutable::diff). (Derick)
Update NEWS
2022-07-21 21:09:27 +08:00
- DBA:
. Fixed LMDB driver memory leak on DB creation failure (Girgias)
Merge branch 'PHP-8.0' into PHP-8.1 * PHP-8.0: Fix GH-9155: dba_open("non-existing", "c-", "flatfile") segfaults
2022-07-27 18:13:32 +08:00
. Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults)
(cmb)
Update NEWS
2022-07-21 21:09:27 +08:00
Fix GH-9309: Segfault when connection is used after imap_close() We actually need to check whether `php_imap_object.imap_stream` is `NULL` to detect that the connection has already been closed. Closes GH-9313.
2022-08-12 20:42:42 +08:00
- IMAP:
. Fixed bug GH-9309 (Segfault when connection is used after imap_close()).
(cmb)
Correct IntlDateFormatter::formatObject params Closes GH-9341.
2022-08-15 20:25:59 +08:00
- Intl:
. Fixed IntlDateFormatter::formatObject() parameter type. (Gert de Pagter)
Fix GH-9008: mb_detect_encoding(): wrong results with null $encodings Passing `null` to `$encodings` is supposed to behave like passing the result of `mb_detect_order()`. Therefore, we need to remove the non- encodings from the `elist` in this case as well. Thus, we duplicate the global `elist`, so we can modify it. Closes GH-9063.
2022-07-20 20:33:57 +08:00
- MBString:
Update NEWS
2022-07-21 19:34:45 +08:00
. Fixed bug GH-9008 (mb_detect_encoding(): wrong results with null $encodings).
Fix GH-9008: mb_detect_encoding(): wrong results with null $encodings Passing `null` to `$encodings` is supposed to behave like passing the result of `mb_detect_order()`. Therefore, we need to remove the non- encodings from the `elist` in this case as well. Thus, we duplicate the global `elist`, so we can modify it. Closes GH-9063.
2022-07-20 20:33:57 +08:00
(cmb)
Fix GH-9033: Loading blacklist file can fail due to negative length If the blacklist file contains a line with a single double-quote, we called `zend_strndup(pbuf, -1)` what causes an unnecessary bail out; instead we just ignore that line. If the blacklist file contains an empty line, we may have caused an OOB read; instead we just ignore that line. Closes GH-9036.
2022-07-18 21:46:38 +08:00
- OPcache:
. Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
(cmb)
[ci skip] NEWS
2022-08-02 01:32:02 +08:00
. Fixed bug GH-9164 (Segfault in zend_accel_class_hash_copy).
(Arnaud, Sergei Turchanov)
Fix GH-9033: Loading blacklist file can fail due to negative length If the blacklist file contains a line with a single double-quote, we called `zend_strndup(pbuf, -1)` what causes an unnecessary bail out; instead we just ignore that line. If the blacklist file contains an empty line, we may have caused an OOB read; instead we just ignore that line. Closes GH-9036.
2022-07-18 21:46:38 +08:00
Fix GH-9339: OpenSSL oid_file path check warning contains uninitialized path
2022-08-15 19:05:19 +08:00
- OpenSSL:
. Fixed bug GH-9339 (OpenSSL oid_file path check warning contains
uninitialized path). (Jakub Zelenka)
Fix GH-9032: SQLite3 authorizer crashes on NULL values The arguments 3 to 6 of the authorizer callback may be `NULL`[1], and we have to properly deal with that. Instead of causing a segfault, we deny authorization, which is still better than a crash, and apparently, we cannot do better anyway. [1] <https://www.sqlite.org/c3ref/set_authorizer.html> Closes GH-9040.
2022-07-18 23:33:34 +08:00
- PDO_SQLite:
. Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values). (cmb)
- SQLite3:
. Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values). (cmb)
Fix GH-8472: stream_socket_accept result may have incorrect metadata
2022-08-05 03:52:44 +08:00
- Streams:
. Fixed bug GH-8472 (The resource returned by stream_socket_accept may have
incorrect metadata). (Jakub Zelenka)
[skip ci] Add missing NEWS entry for GH-8409 fix to PHP-8.1 branch (skip-ci)
2022-08-14 21:18:28 +08:00
. Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections
hanging). (Jakub Zelenka, Twosee)
Fix GH-8472: stream_socket_accept result may have incorrect metadata
2022-08-05 03:52:44 +08:00
PHP-8.1 is now for PHP 8.1.10-dev
2022-07-20 12:48:52 +08:00
04 Aug 2022, PHP 8.1.9
PHP-8.1 is now for PHP 8.1.9-dev
2022-06-22 00:03:50 +08:00
Prevent potential buffer overflow for large value of php_cli_server_workers_max Fixes #8989. Closes #9000.
2022-07-13 20:55:51 +08:00
- CLI:
. Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS
environment variable. (yiyuaner)
Fix GH-8923: error_log on Windows can hold the file write lock On Windows, closing a file which is locked may not immediately remove the lock. The `LockFileEx()` documentation states: | Therefore, it is recommended that your process explicitly unlock all | files it has locked when it terminates. We comply, and also use the macro `LOCK_EX` instead of the magic number `2`. Closes GH-8925.
2022-07-05 22:09:32 +08:00
- Core:
. Fixed bug GH-8923 (error_log on Windows can hold the file write lock). (cmb)
[ci skip] NEWS
2022-07-15 19:14:17 +08:00
. Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
(Tobias Bachert)
Fix GH-8923: error_log on Windows can hold the file write lock On Windows, closing a file which is locked may not immediately remove the lock. The `LockFileEx()` documentation states: | Therefore, it is recommended that your process explicitly unlock all | files it has locked when it terminates. We comply, and also use the macro `LOCK_EX` instead of the magic number `2`. Closes GH-8925.
2022-07-05 22:09:32 +08:00
[ci skip] NEWS
2022-07-10 05:00:52 +08:00
- CLI:
. Fixed GH-8952 (Intentionally closing std handles no longer possible).
(Arnaud, cmb)
Fixed #80047: DatePeriod doesn't warn with custom DateTimeImmutable
2022-06-24 18:13:49 +08:00
- Date:
. Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
(Derick)
FPM: zlog, fix free on wrong address for message prepend.
2022-06-16 04:33:33 +08:00
- FPM:
. Fixed zlog message prepend, free on incorrect address. (Heiko Weber)
FPM: Fix possible double free on configuration load failure. Closes #8948.
2022-07-07 21:51:09 +08:00
. Fixed possible double free on configuration loading failure. (Heiko Weber).
FPM: zlog, fix free on wrong address for message prepend.
2022-06-16 04:33:33 +08:00
Fix GH-8848: imagecopyresized() error refers to the wrong argument Closes GH-8849.
2022-06-23 19:23:27 +08:00
- GD:
. Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
(cmb)
PHP-8.1 is now for PHP 8.1.9-dev
2022-06-22 00:03:50 +08:00
intl extension, build fix for icu >= 69.x release. ubrk/ucnv_safeClone had been deprecated in favor of ubrk/ucnv_clone which does not use user provided stacks but remain thread safe.
2022-07-08 20:56:17 +08:00
- Intl:
. Fixed build for ICU 69.x and onwards. (David Carlier)
Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file)
2022-06-29 17:10:46 +08:00
- OPcache:
. Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php
syntaxe of a valid file). (Dmitry)
[ci skip] NEWS
2022-07-18 18:35:24 +08:00
. Fixed bug GH-8030 (Segfault with JIT and large match/switch statements).
(Arnaud)
Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file)
2022-06-29 17:10:46 +08:00
[ci skip] Update news
2022-07-08 05:08:20 +08:00
- Reflection:
. Fixed bug GH-8943 (Fixed Reflection::getModifiersNames() with readonly
modifier). (Pierrick)
Fix attribute target validation on fake closures Fixes GH-8982 Closes GH-9173
2022-07-28 17:19:24 +08:00
. Fixed bug GH-8982 (Attribute with TARGET_METHOD is rejected on fake
closure of method). (ilutov)
[ci skip] Update news
2022-07-08 05:08:20 +08:00
Fix the crypt sha apis build (with recent clang versions). Removing the said subtraction by casting instead. While at it fixing werror level on phpdbg too. Closes #8897.
2022-07-01 01:20:40 +08:00
- Standard:
random extension macOs handling update. Not such as fix but taking more precautions. Indeed, the arc4random has two little flaws in this platform, one already caught upfront by the extension (ie size 0), also internal use of ccrng_generate which can silently fail in few rare cases. Closes #7824.
2021-12-25 02:27:24 +08:00
. Fixed the crypt_sha256/512 api build with clang > 12. (David Carlier)
. Uses CCRandomGenerateBytes instead of arc4random_buf on macOs. (David Carlier).
Merge branch 'PHP-8.0' into PHP-8.1 * PHP-8.0: Fix GH-9017: php_stream_sock_open_from_socket could return NULL
2022-07-19 23:07:11 +08:00
. Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
(Heiko Weber)
Fix the crypt sha apis build (with recent clang versions). Removing the said subtraction by casting instead. While at it fixing werror level on phpdbg too. Closes #8897.
2022-07-01 01:20:40 +08:00
PHP-8.1 is now for PHP 8.1.9-dev
2022-06-22 00:03:50 +08:00
07 Jul 2022, PHP 8.1.8
Bump for 8.1.8-dev
2022-05-25 06:54:00 +08:00
Add IBT support for fiber Indirect Branch Tracking (IBT) is part of Intel's Control-Flow Enforcement Technology (CET). IBT is hardware based, forward edge Control-Flow-Integrity mechanism where any indirect CALL/JMP must target an ENDBR instruction or suffer #CP. This commit adds IBT support for fiber: 1. Add endbr32/64 in assembly 2. Inform compiler jump_fcontext may return via indirect branch Furthermore: gcc support CET since v8.1 and set it to default since gcc 11. That is, the ELF header of sapi/cli/php has a property named IBT. However, such property is lost since PHP8.1 because the assembly introduced by Fiber. This commit also fixes this. Closes GH-8339 Signed-off-by: Chen, Hu <hu1.chen@intel.com> Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de>
2022-04-26 16:58:22 +08:00
- Core:
. Fixed bug GH-8338 (Intel CET is disabled unintentionally). (Chen, Hu)
Fix Enum::from/tryFrom memory leak in JIT for internal enums when passing an int to a string enum. Previously, the int was coerced to a string. The JIT skips parameter clean up when unnecessary. In this particular case, passing int to from(int|string) normally doesn't cause a coercion so no dtor for the $value zval is generated. To circumvent this we avoid coersion by explicitly allowing ints and converting them to strings ourselves. Then we can free it appropriately. See GH-8518 Closes GH-8633
2022-05-26 01:50:02 +08:00
. Fixed leak in Enum::from/tryFrom for internal enums when using JIT (ilutov)
Verify internal types before abandoning call frame An internal caller executing a builtin method with a static return type will lose context if we drop our frame before performing the validation.
2022-06-01 00:02:22 +08:00
. Fixed calling internal methods with a static return type from
extension code. (Sara)
Fix RC=1 references of declared properties when casting objects to arrays Fixes GH-8655. Closes GH-8737.
2022-06-09 16:48:52 +08:00
. Fixed bug GH-8655 (Casting an object to array does not unwrap refcount=1
references). (Nicolas Grekas)
Fix potential use after free in php_binary_init() Closes GH-8791.
2022-06-15 22:51:06 +08:00
. Fixed potential use after free in php_binary_init(). (Heiko Weber)
Disallow assigning reference to unset readonly property Closes GH-7942 Closes GH-8188
2022-03-11 01:06:03 +08:00
. Fixed bug GH-7942 (Indirect mutation of readonly properties through
references). (ilutov)
Add IBT support for fiber Indirect Branch Tracking (IBT) is part of Intel's Control-Flow Enforcement Technology (CET). IBT is hardware based, forward edge Control-Flow-Integrity mechanism where any indirect CALL/JMP must target an ENDBR instruction or suffer #CP. This commit adds IBT support for fiber: 1. Add endbr32/64 in assembly 2. Inform compiler jump_fcontext may return via indirect branch Furthermore: gcc support CET since v8.1 and set it to default since gcc 11. That is, the ELF header of sapi/cli/php has a property named IBT. However, such property is lost since PHP8.1 because the assembly introduced by Fiber. This commit also fixes this. Closes GH-8339 Signed-off-by: Chen, Hu <hu1.chen@intel.com> Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de>
2022-04-26 16:58:22 +08:00
Fix GH-8827: Intentionally closing std handles no longer possible We revert the commits which caused this regression from the PHP-8.0 and PHP-8.1 branches for now. We keep it in "master" because of PR #8833 which may offer a proper fix without BC break.
2022-06-20 23:59:49 +08:00
- CLI:
. Fixed GH-8827 (Intentionally closing std handles no longer possible). (cmb)
Fix GH-8778: Integer arithmethic with large number variants fails When casting a `variant` to `int`, we need to heed the proper `zval` type, which is an signed 64bit integer on x64, while `VT_INT` is only a signed 32bit integer. Closes GH-8779.
2022-06-14 21:56:03 +08:00
- COM:
. Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
(cmb)
Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
2022-06-18 07:51:58 +08:00
- Curl:
. Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option. (Pierrick)
Merge branch 'PHP-8.0' into PHP-8.1
2022-05-26 22:18:56 +08:00
- Date:
. Fixed bug #72963 (Null-byte injection in CreateFromFormat and related
functions). (Derick)
Update NEWS in 8.1 too
2022-05-27 21:28:56 +08:00
. Fixed bug #74671 (DST timezone abbreviation has incorrect offset). (Derick)
Merge remote-tracking branch 'derickr/bug77342' into PHP-8.0
2022-06-17 16:35:20 +08:00
. Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
(Derick)
Update NEWS in 8.1 too
2022-05-27 21:44:35 +08:00
. Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
(Derick)
Merge branch 'PHP-8.0' into PHP-8.1
2022-05-26 22:18:56 +08:00
Move NEWS entry to PHP 8.1.8
2022-07-06 05:20:23 +08:00
- Fileinfo:
. Fixed bug #81723 (Heap buffer overflow in finfo_buffer). (CVE-2022-31627)
(cmb)
Fix imagecreatefromavif() memory leak This has been reported as https://github.com/libgd/libgd/issues/831. We port the respective fix to our bundled libgd. Closes GH-8812.
2022-06-17 19:19:51 +08:00
Fix bug #67764: fpm: syslog.ident does not work
2022-06-13 05:32:48 +08:00
- FPM:
. Fixed bug #67764 (fpm: syslog.ident don't work). (Jakub Zelenka)
Move NEWS entry to PHP 8.1.8
2022-07-06 05:20:23 +08:00
- GD:
. Fixed imagecreatefromavif() memory leak. (cmb)
Update NEWS with mb_detect_encoding changes
2022-05-26 00:52:27 +08:00
- MBString:
. mb_detect_encoding recognizes all letters in Czech alphabet (alexdowad)
. mb_detect_encoding recognizes all letters in Hungarian alphabet (alexdowad)
NEWS for GH-8685
2022-06-03 13:55:24 +08:00
. Fixed bug GH-8685 (pcre not ready at mbstring startup). (Remi)
[ci skip] Add missing NEWS entry
2022-06-13 20:39:00 +08:00
. Backwards-compatible mappings for 0x5C/0x7E in Shift-JIS are restored,
after they had been changed in 8.1.0. (Alex Dowad)
Bump for 8.1.8-dev
2022-05-25 06:54:00 +08:00
Fix handling of single-key connection strings A connection string may contain just a single key, but PHP used ";" as the heuristic to detect if a string was a connection string versus plain DSN. However, a single-key connection string would get treated like a DSN name, i.e. "DSN=*LOCAL". This makes it so that "=" is used, as a connection string must contain a key. Closes GH-8748.
2022-06-10 23:53:09 +08:00
- ODBC:
. Fixed handling of single-key connection strings. (Calvin Buckley)
[ci skip] NEWS
2022-05-27 19:19:19 +08:00
- OPcache:
. Fixed bug GH-8591 (tracing JIT crash after private instance method change).
(Arnaud, Dmitry, Oleg Stepanischev)
Fix bug #50293 and #81713: file path checking in OpenSSL functions It introduces a single function to check file paths passed to OpenSSL functions. It expands the path, check null bytes and finally does an open basedir check.
2022-05-22 06:36:03 +08:00
- OpenSSL:
. Fixed bug #50293 (Several openssl functions ignore the VCWD).
(Jakub Zelenka, cmb)
. Fixed bug #81713 (NULL byte injection in several OpenSSL functions working
with certificates). (Jakub Zelenka)
Fix handling of single-key connection strings A connection string may contain just a single key, but PHP used ";" as the heuristic to detect if a string was a connection string versus plain DSN. However, a single-key connection string would get treated like a DSN name, i.e. "DSN=*LOCAL". This makes it so that "=" is used, as a connection string must contain a key. Closes GH-8748.
2022-06-10 23:53:09 +08:00
- PDO_ODBC:
. Fixed handling of single-key connection strings. (Calvin Buckley)
Closes GH-8626: Fix PDOStatement->execute() failed. Then execute successfully, errorInfo() information is incorrect
2022-05-25 11:13:49 +08:00
NEWS
2022-06-15 21:39:24 +08:00
- Zip:
. Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat
cache). (Remi)
Fix date on PHP 8.1.7 release
2022-06-08 00:28:41 +08:00
09 Jun 2022, PHP 8.1.7
Prepare for PHP 8.1.7
2022-04-27 08:22:15 +08:00
Stop closing stderr and stdout streams (#8570) Extensions may (and do) write to stderr in mshutdown and similar. In the best case, with the stderr stream closed, it's just swallowed. However, some libraries will do things like try to detect color, and these will outright fail and cause an error path to be taken.
2022-05-17 06:54:47 +08:00
- CLI:
. Fixed bug GH-8575 (CLI closes standard streams too early). (Levi Morrison)
Fixed bug GH-7758 (Problems with negative timestamps and fractions)
2022-05-20 19:58:34 +08:00
- Date:
Fixed bug #51934 (strtotime plurals / incorrect time)
2022-05-20 20:11:01 +08:00
. Fixed bug #51934 (strtotime plurals / incorrect time). (Derick)
Fixed bug #51987 (Datetime fails to parse an ISO 8601 ordinal date (extended format))
2022-05-20 20:13:56 +08:00
. Fixed bug #51987 (Datetime fails to parse an ISO 8601 ordinal date
(extended format)). (Derick)
Fixed bug #66019 (DateTime object does not support short ISO 8601 time format - YYYY-MM-DDTHH)
2022-05-20 20:00:34 +08:00
. Fixed bug #66019 (DateTime object does not support short ISO 8601 time
format - YYYY-MM-DDTHH) (cmb, Derick)
. Fixed bug #68549 (Timezones and offsets are not properly used when working
with dates) (Derick, Roel Harbers)
Fixed bug #81565 (date parsing fails when provided with timezones including seconds)
2022-05-20 20:17:50 +08:00
. Fixed bug #81565 (date parsing fails when provided with timezones including
seconds). (Derick)
Fixed bug GH-7758 (Problems with negative timestamps and fractions)
2022-05-20 19:58:34 +08:00
. Fixed bug GH-7758 (Problems with negative timestamps and fractions).
(Derick, Ilija)
Update NEWS entry with correct version for FPM ACL fix
2022-04-30 03:43:50 +08:00
- FPM:
. Fixed ACL build check on MacOS. (David Carlier)
Fix bug #72185: php-fpm writes empty fcgi record causing nginx 502 This issue might happen if there is change of the fcgi stream when the buffer is full. Then the empty record is created which signals end of stream which is incorrect. The actual fix without a test was contributed by GitHub user @loveharmful in GH-3198.
2022-05-08 03:13:50 +08:00
. Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
(Jakub Zelenka, loveharmful)
FPM: Fix use after free in `fpm_evaluate_full_path` Closes #8796.
2022-06-16 05:17:00 +08:00
. Fixes use after free. (Heiko Weber).
Prepare for PHP 8.1.7
2022-04-27 08:22:15 +08:00
Update NEWS
2022-06-06 15:00:38 +08:00
- mysqlnd:
. Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
(c dot fol at ambionics dot io)
[ci skip] NEWS
2022-05-13 18:24:32 +08:00
- OPcache:
[ci skip] NEWS
2022-05-13 18:44:16 +08:00
. Fixed bug GH-8461 (tracing JIT crash after function/method change).
[ci skip] NEWS
2022-05-13 18:24:32 +08:00
(Arnaud, Dmitry)
Fix bug #79589: ssl3_read_n:unexpected eof while reading The unexpected EOF failure was introduced in OpenSSL 3.0 to prevent truncation attack. However there are many non complaint servers and it is causing break for many users including potential majority of those where the truncation attack is not applicable. For that reason we try to keep behavior consitent with older OpenSSL versions which is also the path chosen by some other languages and web servers. Closes GH-8369
2022-05-15 20:49:17 +08:00
- OpenSSL:
. Fixed bug #79589 (error:14095126:SSL routines:ssl3_read_n:unexpected eof
while reading). (Jakub Zelenka)
Fix pcntl Haiku build guarding SIGIO constant. Closes GH-8612.
2022-05-24 03:20:33 +08:00
- Pcntl:
. Fixed Haiku build. (David Carlier)
Update NEWS
2022-06-06 15:00:38 +08:00
- pgsql
. Fixed bug #81720: Uninitialized array in pg_query_params().
(CVE-2022-31625) (cmb)
Fix GH-8578: Error on wrong parameter on SoapHeader constructor Closes GH-8579.
2022-05-19 03:11:38 +08:00
- Soap:
. Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
(robertnisipeanu)
Fix GH-8538: SoapClient may strip parts of nmtokens When stripping the namespace prefix, we can assume that this does not contain any colons, while the rest of the name may contain colons. Hence we must not use `strrchr()` but rather `strchr()` instead. Closes GH-8543.
2022-05-12 21:23:12 +08:00
. Fixed bug GH-8538 (SoapClient may strip parts of nmtokens). (cmb)
Fix GH-8578: Error on wrong parameter on SoapHeader constructor Closes GH-8579.
2022-05-19 03:11:38 +08:00
Fix GH-8235: iterator_count() may run indefinitely We need to prevent integer overflow to eventually stop the iteration. A test case doesn't appear sensible for this, because even on 32bit architectures a respective test easily runs for a few minutes. Closes GH-8447.
2022-04-27 22:45:03 +08:00
- SPL:
. Fixed bug GH-8235 (iterator_count() may run indefinitely). (cmb)
[ci skip] NEWS
2022-05-07 00:21:11 +08:00
- Standard:
. Fixed bug GH-8185 (Crash during unloading of extension after dl() in ZTS).
(Arnaud)
[ci skip] NEWS
2022-05-02 20:51:54 +08:00
- Zip:
. Fixed type for index in ZipArchive::replaceFile. (Martin Rehberger)
Prepare for PHP 8.1.7
2022-04-27 08:22:15 +08:00
12 May 2022, PHP 8.1.6
Bump for 8.1.6-dev
2022-03-31 23:37:41 +08:00
Fix GH-8310: Registry settings are no longer recognized `zend_file_handle->filename` is a `zend_string*` pointer now, so we must not cast to `char*` but rather pass the underlying `char*`. Closes GH-8313.
2022-04-06 21:25:14 +08:00
- Core:
. Fixed bug GH-8310 (Registry settings are no longer recognized). (cmb)
Merge branch 'PHP-8.0' into PHP-8.1 * PHP-8.0: Move locks in TSRM.c to prevent races
2022-04-11 23:18:57 +08:00
. Fixed potential race condition during resource ID allocation. (ryancaicse)
Fix preloading of constants containing enums Fixes GH-8133
2022-04-14 20:54:34 +08:00
. Fixed bug GH-8133 (Preloading of constants containing arrays with enums
segfaults). (ilutov)
Haiku fix ZTS build disabling `tsrm_ls_cache` usage.
2022-04-12 02:23:33 +08:00
. Fixed Haiku ZTS builds. (David Carlier)
Fix GH-8310: Registry settings are no longer recognized `zend_file_handle->filename` is a `zend_string*` pointer now, so we must not cast to `char*` but rather pass the underlying `char*`. Closes GH-8313.
2022-04-06 21:25:14 +08:00
Fixed #7752, #8101, #81660: DateTimeZone::getTransitions() returns insufficient data
2022-04-01 20:28:05 +08:00
- Date:
. Fixed bug GH-7752 (DateTimeZone::getTransitions() returns insufficient
data). (Derick)
. Fixed bug GH-8108 (Timezone doesn't work as intended). (Derick)
. Fixed bug #81660 (DateTimeZone::getTransitions() returns invalid data).
(Derick)
Merge branch 'PHP-8.0' into PHP-8.1
2022-04-01 23:38:10 +08:00
. Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are
not rethrown into the generator). (Bob)
Bump for 8.1.6-dev
2022-03-31 23:37:41 +08:00
Fix GH-8433: Assigning function pointers to structs in FFI leaks memory
2022-04-24 20:53:04 +08:00
- FFI:
. Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
(Bob)
Fix bug #76003: FPM /status reports wrong number of active processe The fix introduces early locking of scoreboard when it is updated which prevents the race condition causing an incorrect number of active processes being set.
2022-04-09 20:20:07 +08:00
- FPM:
. Fixed bug #76003 (FPM /status reports wrong number of active processe).
(Jakub Zelenka)
Fix bug #77023: FPM cannot shutdown processes This change introduces subsequent kill of the process when idle process quit (SIGQUIT) does not succeed. It can happen in some situations and means that FPM is not able to scale down in dynamic pm. Using SIGKILL fixes the issue.
2022-04-17 05:49:39 +08:00
. Fixed bug #77023 (FPM cannot shutdown processes). (Jakub Zelenka)
Fix FPM kqueue handler fix remove callback typo It avoids confusion on failed event.
2022-04-18 17:57:34 +08:00
. Fixed comment in kqueue remove callback log message. (David Carlier)
Fix bug #76003: FPM /status reports wrong number of active processe The fix introduces early locking of scoreboard when it is updated which prevents the race condition causing an incorrect number of active processes being set.
2022-04-09 20:20:07 +08:00
Merge branch 'PHP-8.0' into PHP-8.1 * PHP-8.0: Fix #81714: segfault when serializing finalized HashContext
2022-04-05 19:34:08 +08:00
- Hash:
. Fixed bug #81714 (segfault when serializing finalized HashContext). (cmb)
Fix GH-8218: ob_end_clean does not reset Content-Encoding header The fix for GH-7953 introduced a regression by being to deliberate adding the respective headers. These must only be added, if the handler starts, but is not finalizing. Closes GH-8353.
2022-04-12 23:18:00 +08:00
- Iconv:
. Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
(cmb)
Fix GH-8364: msgfmt_format $values may not support references We need to deref any references passed in the `$values` array. While we could handle this in the type switch, doing it right away in the foreach loop makes that more explicit, and also circumvents the missing range checks for integers which are not passed as int or double. Closes GH-8407.
2022-04-20 21:38:00 +08:00
- Intl:
. Fixed bug GH-8364 (msgfmt_format $values may not support references). (cmb)
Error handling for UTF-8 complies with WHATWG specification In 7502c86342, I adjusted the number of error markers emitted on invalid UTF-8 text to be more consistent with mbstring's behavior on other text encodings (generally, it emits one error marker for one unexpected byte). I didn't expect that anybody would actually care one way or the other, but felt that it was better to be consistent than not. Later, Martin Auswöger kindly pointed out that the WHATWG encoding specification, which governs how various text encodings are handled by web browsers, does actually specify how many error markers should be generated for any given piece of invalid UTF-8 text. Until now, we have never really paid much attention to the WHATWG specification, but we do want to comply with as many relevant specifications as possible. And since PHP is commonly used for web applications, compatibility with the behavior of web browsers is obviously a good thing.
2022-04-15 21:57:35 +08:00
- MBString:
. Number of error markers emitted for invalid UTF-8 text matches WHATWG specification.
This is a return to the behavior of PHP 8.0 and earlier. (alexdowad)
Fix GH-8267: MySQLi uses unsupported format specifier on Windows Instead of using the unsupported `%I64u` and `%I64d` format specifiers on Windows, we use the portable `PRIu64` and `PRId64` specifiers. The `L64()` macro and the `my_longlong` typedef should be adapted as well, as the `i64` literal suffix is still supported by MSVC, but using `LL` or `ll` is recommended[1], and the standard `int64_t` is available there anyway. This is not urgent, though. [1] <https://docs.microsoft.com/en-us/cpp/cpp/numeric-boolean-and-pointer-literals-cpp?view=msvc-170#integer-literals> Closes GH-8268.
2022-03-29 19:53:15 +08:00
- MySQLi:
. Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
(cmb)
[ci skip] NEWS
2022-05-07 00:21:11 +08:00
- OPcache:
. Fixed bug GH-8063 (OPcache breaks autoloading after E_COMPILE_ERROR).
(Arnaud)
Fix GH-8366: ArrayIterator may leak when calling __construct() When we detach an iterator, we also have to delete it. Closes GH-8374.
2022-04-14 22:07:36 +08:00
- SPL:
. Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
(cmb)
Fix GH-8273: SplFileObject: key() returns wrong value
2022-04-07 21:24:04 +08:00
. Fixed bug GH-8273 (SplFileObject: key() returns wrong value). (Girgias)
Fix GH-8366: ArrayIterator may leak when calling __construct() When we detach an iterator, we also have to delete it. Closes GH-8374.
2022-04-14 22:07:36 +08:00
Preserve file-position when php://temp switches to temporary file Closes GH-8333.
2022-04-09 23:49:47 +08:00
- Streams:
. Fixed php://temp does not preserve file-position when switched to temporary
file. (Bernd Holzmüller)
Fix GH-8218: ob_end_clean does not reset Content-Encoding header The fix for GH-7953 introduced a regression by being to deliberate adding the respective headers. These must only be added, if the handler starts, but is not finalizing. Closes GH-8353.
2022-04-12 23:18:00 +08:00
- zlib:
. Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
(cmb)
Merge branch 'PHP-8.0' into PHP-8.1 * PHP-8.0: Fix GH-8267: MySQLi uses unsupported format specifier on Windows
2022-04-07 23:04:22 +08:00
14 Apr 2022, PHP 8.1.5
Bump for 8.1.5-dev
2022-03-03 00:38:22 +08:00
Fix GH-8176: Fix leaking enum values in property initializers
2022-03-07 10:53:38 +08:00
- Core:
. Fixed bug GH-8176 (Enum values in property initializers leak). (Bob)
Fix freeing of internal attribute arguments
2022-03-08 03:35:16 +08:00
. Fixed freeing of internal attribute arguments. (Bob)
Fix memory leak of function attribute hash table (#8070) ==109253== 280 (56 direct, 224 indirect) bytes in 1 blocks are definitely lost in loss record 4 of 4 ==109253== at 0x483B7F3: malloc (in /usr/lib/x86_64-linux-gnu/valgrind/vgpreload_memcheck-amd64-linux.so) ==109253== by 0x6D9FA2: __zend_malloc (zend_alloc.c:3068) ==109253== by 0x745138: zend_add_attribute (zend_attributes.c:226) ==109253== by 0x6680D1: zend_add_parameter_attribute (zend_attributes.h:102) ==109253== by 0x66B787: zm_startup_zend_test (test.c:478) ==109253== by 0x7224CD: zend_startup_module_ex (zend_API.c:2202) ==109253== by 0x72252C: zend_startup_module_zval (zend_API.c:2217) ==109253== by 0x734288: zend_hash_apply (zend_hash.c:2011) ==109253== by 0x722C30: zend_startup_modules (zend_API.c:2328) ==109253== by 0x67409B: php_module_startup (main.c:2256) ==109253== by 0x88EDDE: php_cli_startup (php_cli.c:409) ==109253== by 0x890F61: main (php_cli.c:1334)
2022-03-07 23:32:46 +08:00
. Fixed bug GH-8070 (memory leak of internal function attribute hash).
(Tim Düsterhus)
Fix GH-8160: ZTS support on Alpine is broken We need to export `__MUSL__` so that phpize builds can see the proper macro, and also need to fix "_tsrm_ls_cache" usage for musl. Closes GH-8180.
2022-03-07 19:04:21 +08:00
. Fixed bug GH-8160 (ZTS support on Alpine is broken). (Michael Voříšek)
Fix GH-8176: Fix leaking enum values in property initializers
2022-03-07 10:53:38 +08:00
Fix signedness confusion in php_filter_validate_domain() As is, there is the possibility that integer underflow occurs, making `_php_filter_validate_domain()` succeed for very long domain names. Cf. <https://pwning.systems/posts/php_filter_var_shenanigans/>.
2022-03-28 17:26:17 +08:00
- Filter:
. Fixed signedness confusion in php_filter_validate_domain(). (cmb)
Allowing catching arg type deprecations in intl classes Closes GH-8115 Closes GH-8117
2022-02-18 20:23:57 +08:00
- Intl:
. Fixed bug GH-8115 (Can't catch arg type deprecation when instantiating Intl
classes). (ilutov)
Fix GH-8142: Compilation error on cygwin * pcntl: SIGPOLL/si_band is unsupported * intl: enable the signal apis with `_POSIX_C_SOURCE` Closes GH-8146.
2022-02-24 03:41:19 +08:00
. Fixed bug GH-8142 (Compilation error on cygwin). (David Carlier)
Fix IntlPartsIterator key off-by-one error Closes GH-7734 Closes GH-8172
2022-03-04 17:59:52 +08:00
. Fixed bug GH-7734 (Fix IntlPartsIterator key off-by-one error and first
key). (ilutov)
Fix GH-8142: Compilation error on cygwin * pcntl: SIGPOLL/si_band is unsupported * intl: enable the signal apis with `_POSIX_C_SOURCE` Closes GH-8146.
2022-02-24 03:41:19 +08:00
Fix GH-8208: mb_encode_mimeheader: $indent functionality broken We also need to factor in the indent, when getting the encoder result. Closes GH-8213.
2022-03-17 19:21:02 +08:00
- MBString:
. Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
(cmb)
Fix GH-8068: mysqli_fetch_object creates inaccessible properties When fetching into objects, we need to create object style hash tables, i.e. where numeric column names are stored as string keys instead of integer keys. Instead of the slightly more efficient alternative to create the desired hash table in the first place, we go for the more readable implementation and convert the array style hash table using `zend_symtable_to_proptable()`. Co-authored-by: Kamil Tekiela <tekiela246@gmail.com> Closes GH-8189.
2022-03-11 02:21:06 +08:00
- MySQLi:
. Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
(cmb)
Fix GH-8142: Compilation error on cygwin * pcntl: SIGPOLL/si_band is unsupported * intl: enable the signal apis with `_POSIX_C_SOURCE` Closes GH-8146.
2022-02-24 03:41:19 +08:00
- Pcntl:
. Fixed bug GH-8142 (Compilation error on cygwin). (David Carlier)
Bump for 8.1.5-dev
2022-03-03 00:38:22 +08:00
Fix result_type related stack corruption on LLP64 architectures Integer parameters are stored in `zend_long` values, which have 64 bits on LLP64, but `long` has only 32 bits there. Adding a test might be overkill, because the broken behavior could already be observed when running pg_select_001.phpt on Windows debug builds, which report the stack corruption. Closes GH-8263.
2022-03-28 21:04:57 +08:00
- PgSQL:
. Fixed result_type related stack corruption on LLP64 architectures. (cmb)
Fix GH-8253: pg_insert() fails for references We need to deref the values. Closes GH-8262.
2022-03-28 20:37:22 +08:00
. Fixed bug GH-8253 (pg_insert() fails for references). (cmb)
Fix result_type related stack corruption on LLP64 architectures Integer parameters are stored in `zend_long` values, which have 64 bits on LLP64, but `long` has only 32 bits there. Adding a test might be overkill, because the broken behavior could already be observed when running pg_select_001.phpt on Windows debug builds, which report the stack corruption. Closes GH-8263.
2022-03-28 21:04:57 +08:00
Fix Solaris builds of ext/sockets We enable the proper ancillary data handling layout and API. Closes GH-7859.
2021-12-31 12:55:04 +08:00
- Sockets:
. Fixed Solaris builds. (David Carlier)
[skip ci] Add NEWS entry
2022-05-23 05:29:32 +08:00
. Fix undefined behavior in php_set_inet6_addr. (ilutov)
Fix Solaris builds of ext/sockets We enable the proper ancillary data handling layout and API. Closes GH-7859.
2021-12-31 12:55:04 +08:00
Fix GH-8121: SplFileObject - seek and key with csv file inconsistent First, we must not free the current line before we call `spl_filesystem_file_read_csv()`, because then the `current_line` will not be properly updated. Since the EOF check is superfluous here, we move that part of the code to the branch for subtypes. This issue has been introduced by the fix for bug 75917. Second, we only must increase the `current_line` if we're not reading ahead. This issue has been introduced by the fix for bug 62004. Closes GH-8138.
2022-02-28 19:03:26 +08:00
- SPL:
. Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
(cmb)
Make DirectoryIterator current() / key() return types tentative Fixes GH-8192.
2022-03-13 00:31:38 +08:00
. Fixed bug GH-8192 (Cannot override DirectoryIterator::current() without
return typehint in 8.1). (Nikita)
Fix GH-8121: SplFileObject - seek and key with csv file inconsistent First, we must not free the current line before we call `spl_filesystem_file_read_csv()`, because then the `current_line` will not be properly updated. Since the EOF check is superfluous here, we move that part of the code to the branch for subtypes. This issue has been introduced by the fix for bug 75917. Second, we only must increase the `current_line` if we're not reading ahead. This issue has been introduced by the fix for bug 62004. Closes GH-8138.
2022-02-28 19:03:26 +08:00
Fix GH-8048: disk_*_space wrong for some filesystems on macOS A macOS bug in libc statvfs(3) call truncates 64 bit elements (e.g. f_blocks) to 32 bits. Thus, we force macOS to use statfs. Closes GH-8056.
2022-02-08 01:22:50 +08:00
- Standard:
. Fixed bug GH-8048 (Force macOS to use statfs). (risner)
Fix NEWS format
2022-03-01 18:32:28 +08:00
Bump for 8.1.5-dev
2022-03-03 00:38:22 +08:00
17 Mar 2022, PHP 8.1.4
Bump for 8.1.4-dev
2022-02-03 09:21:29 +08:00
Haiku fix ZTS build, disabling tls model Closes GH-8047.
2022-02-07 01:18:46 +08:00
- Core:
. Fixed Haiku ZTS build. (David Carlier)
[ci skip] news
2022-02-08 20:54:35 +08:00
. Fixed bug GH-8059 arginfo not regenerated for extension. (Remi)
Fix null static_variable_ptr for uncalled fake closures Closes GH-8083 Closes GH-8109
2022-02-17 21:48:18 +08:00
. Fixed bug GH-8083 Segfault when dumping uncalled fake closure with static
variables. (ilutov)
Fix GH-7958: Nested CallbackFilterIterator is leaking memory We implement `zend_object_iterator_funcs.get_gc` for user iterators to avoid the memory leak. Closes GH-8107.
2022-02-18 20:21:22 +08:00
. Fixed bug GH-7958 (Nested CallbackFilterIterator is leaking memory). (cmb)
Merge branch 'PHP-8.0' into PHP-8.1 * PHP-8.0: Fix GH-8074: Wrong type inference of range() result
2022-02-22 17:20:13 +08:00
. Fixed bug GH-8074 (Wrong type inference of range() result). (cmb)
Fix GH-8140: Wrong first class callable by name optimization When optimizing by name function calls, we must not replace `CALLABLE_CONVERT` opcodes, but have to keep them. Closes GH-8144.
2022-02-23 21:14:46 +08:00
. Fixed bug GH-8140 (Wrong first class callable by name optimization). (cmb)
Fix GH-8082: Prevent leaking memory on observed transient run_time_caches This is achieved by tracking the observers on the run_time_cache (with a fixed amount of slots, 2 for each observer). That way round, if the run_time_cache is freed all associated observer data is as well. This approach has been chosen, as to avoid any ABI or API breakage. Future versions may for example choose to provide a hookable API for run_time_cache freeing or similar.
2022-02-12 08:26:23 +08:00
. Fixed bug GH-8082 (op_arrays with temporary run_time_cache leak memory
when observed). (Bob)
Haiku fix ZTS build, disabling tls model Closes GH-8047.
2022-02-07 01:18:46 +08:00
Fixed libpng warning when loading interlaced images We enable interlace transform when reading png. Closes GH-8002.
2022-02-08 09:37:52 +08:00
- GD:
. Fixed libpng warning when loading interlaced images. (Brett)
Fix bug #76109: Implement fpm_scoreboard_copy fpm_scoreboard_copy locks the scoreboard while copying the scoreboard and all proc scoreboards. proc scoreboards are locked one by one while copying each struct. The old implementation (inside fpm_handle_status_request) only briefly locked the scoreboard while copying the scorebard. Closes GH-7931 Co-authored-by: Jakub Zelenka <bukka@php.net>
2018-03-19 20:06:04 +08:00
- FPM:
. Fixed bug #76109 (Unsafe access to fpm scoreboard).
(Till Backhaus, Jakub Zelenka)
Fix GH-7953: ob_clean() only does not set Content-Encoding If an output handler has not yet been started, calling `ob_clean()` causes it to start. If that happens, we must not forget to set the `Content-Encoding` and `Vary` headers. Closes GH-7960.
2022-01-20 23:55:57 +08:00
- Iconv:
. Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding). (cmb)
Fix GH-7980: Unexpected result for iconv_mime_decode We need to reset the shift state right after conversion, to cater to potenially following plain encodings. Also, there is no need to reset the shift for plain encodings, because these are not state-dependent. Closes GH-8025.
2022-02-03 21:26:57 +08:00
. Fixed bug GH-7980 (Unexpected result for iconv_mime_decode). (cmb)
Fix GH-7953: ob_clean() only does not set Content-Encoding If an output handler has not yet been started, calling `ob_clean()` causes it to start. If that happens, we must not forget to set the `Content-Encoding` and `Vary` headers. Closes GH-7960.
2022-01-20 23:55:57 +08:00
Add NEWS entry for recent MBString bugfix (re: '7bit' encoding) Thanks to Kamil Tekiela for mentioning that this should be done.
2022-02-24 04:56:55 +08:00
- MBString:
. Fixed bug GH-8128 (mb_check_encoding wrong result for 7bit). (alexdowad)
Fix bug GH-8058 - mysqlnd segfault when prepare fails Closes GH-8061
2022-02-08 20:08:26 +08:00
- MySQLnd:
. Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package). (Kamil Tekiela)
Fix GH-8080: ReflectionClass::getConstants() depends on def. order When we need to evaluate constant ASTs, we always have to do that in the scope where the constant has been defined, which may be a parent of the `ReflectionClass`'s scope. Closes GH-8106.
2022-02-16 19:32:17 +08:00
- Reflection:
. Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
(cmb)
Fix ReflectionProperty::__toString() of properties containing enums Fix GH-8444
2022-04-29 01:46:46 +08:00
. Fixed bug GH-8444 (Fix ReflectionProperty::__toString() of properties
containing instantiated enums). (ilutov)
Fix GH-8080: ReflectionClass::getConstants() depends on def. order When we need to evaluate constant ASTs, we always have to do that in the scope where the constant has been defined, which may be a parent of the `ReflectionClass`'s scope. Closes GH-8106.
2022-02-16 19:32:17 +08:00
Fix GH-7953: ob_clean() only does not set Content-Encoding If an output handler has not yet been started, calling `ob_clean()` causes it to start. If that happens, we must not forget to set the `Content-Encoding` and `Vary` headers. Closes GH-7960.
2022-01-20 23:55:57 +08:00
- Zlib:
. Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding). (cmb)
Bump for 8.0.17-dev
2022-02-03 07:44:02 +08:00
Bump for 8.1.4-dev
2022-02-03 09:21:29 +08:00
03 Feb 2022, PHP 8.1.3
Preparing for 8.1.3-dev
2022-01-05 02:29:41 +08:00
Fix #81430: Attribute instantiation leaves dangling pointer By switching attribute constructor stackframe to be called via trampoline the stack allocation is not causing dangling pointers in the zend_observer API anymore. Co-Authored-By: Florian Sowade <f.sowade@suora.com> Co-Authored-By: Christopher Becker <cmbecker69@gmx.de> Co-Authored-By: Dmitry Stogov <dmitry@zend.com> Closes GH-7885.
2022-01-05 18:09:25 +08:00
- Core:
. Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
(beberlei)
Fix GH-7896: Environment vars may be mangled on Windows When bug 77574[1] has been fixed, the fix only catered to variables retrieved via `getenv()` with a `$varname` passed, but neither to `getenv()` without arguments nor to the general import of environment variables into `$_ENV` and `$_SERVER`. We catch up on this by using `GetEnvironmentStringsW()` in `_php_import_environment_variables()` and converting the encoding to whatever had been chosen by the user. [1] <https://bugs.php.net/bug.php?id=75574> Closes GH-7928.
2022-01-11 20:43:42 +08:00
. Fixed bug GH-7896 (Environment vars may be mangled on Windows). (cmb)
Fix GH-7883 don't close not open file handle don't create a stream if file is not open
2022-01-17 17:23:15 +08:00
. Fixed bug GH-7883 (Segfault when INI file is not readable). (Remi)
Fix #81430: Attribute instantiation leaves dangling pointer By switching attribute constructor stackframe to be called via trampoline the stack allocation is not causing dangling pointers in the zend_observer API anymore. Co-Authored-By: Florian Sowade <f.sowade@suora.com> Co-Authored-By: Christopher Becker <cmbecker69@gmx.de> Co-Authored-By: Dmitry Stogov <dmitry@zend.com> Closes GH-7885.
2022-01-05 18:09:25 +08:00
Fix GH-7867: FFI::cast() from pointer to array is broken Casting from pointer to array is special, so we must not fall back to the general FFI casting. There is a particular issue regarding the size comparison, namely that the pointer size is always 8 for 64bit architectures, but the size of an array is determined by its declaration, so as is casting a pointer to an array with more than 8 elements would fail, but casting to an array with less than 9 elements succeeds, but the internal pointer would point to some arbitrary memory. We fix this by properly supporting the cast. An alternative would be to deny this kind of cast generally, since it is not necessarily safe. However, FFI isn't necessarily safe anyway. We also check pointer/array type compatibility when casting. Co-authored-by: Dmitry Stogov <dmitry@zend.com> Closes GH-7876.
2022-01-11 00:57:46 +08:00
- FFI:
. Fixed bug GH-7867 (FFI::cast() from pointer to array is broken). (cmb,
dmitry)
[ci skip] missing CVE
2022-06-10 20:35:12 +08:00
- Filter:
. Fix #81708: UAF due to php_filter_float() failing for ints.
(CVE-2021-21708) (cmb)
Fix memory leak on invalid port Closes GH-7911.
2022-01-08 15:48:28 +08:00
- FPM:
. Fixed memory leak on invalid port. (David Carlier)
[ci skip] Fix NEWS The fix for GH-7842 was too late for 8.1.2RC1, so will be in 8.1.3 only.
2022-01-21 19:05:53 +08:00
. Fixed bug GH-7842 (Invalid OpenMetrics response format returned by FPM
status page. (Stefano Arlandini)
Preparing for 8.1.3-dev
2022-01-05 02:29:41 +08:00
Fix GH-7902: mb_send_mail may delimit headers with LF only Email headers are supposed to be separated with CRLF. Period. We introduce a `CRLF` macro for better comprehensibility right away. Closes GH-7907.
2022-01-18 19:01:13 +08:00
- MBString:
. Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only). (cmb)
Strip MariaDB 10 prefix Closes GH-7972
2022-01-20 01:14:08 +08:00
- MySQLnd:
. Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped). (Kamil Tekiela)
Fix pcntl_rfork build for DragonFlyBSD RFTSIGZMB flag unsupported, guarding with the said flag instead of system in case the implementaion catches up with FreeBSD's. Closes GH-7918.
2022-01-10 01:10:21 +08:00
- pcntl:
. Fixed pcntl_rfork build for DragonFlyBSD. (David Carlier)
Fix ext/sockets build on Haiku The `SOCK_RDM` datagram option is unsupported on Haiku; instead `ifreq` has direct access to `ifr_index`. Closes GH-7849.
2021-12-29 16:53:56 +08:00
- Sockets:
Fix GH-7978: sockets extension compilation errors We fix the `ucred` detection when custom `CFLAGS` are in use. Closes GH-7981.
2022-01-21 21:39:30 +08:00
. Fixed bug GH-7978 (sockets extension compilation errors). (David Carlier)
Prepare for PHP 8.0.16
2022-01-04 20:40:46 +08:00
fix GH-7899 Regression in unpack for negative int value
2022-01-07 22:04:36 +08:00
- Standard:
. Fixed bug GH-7899 (Regression in unpack for negative int value). (Remi)
Fix GH-7875: mails are sent even if failure to log throws exception We explicitly check for an exception after the logging attempt, and bail out in that case. Co-authored-by: Tim Düsterhus <timwolla@googlemail.com> Closes GH-7878.
2022-01-04 22:44:56 +08:00
. Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
(cmb)
fix GH-7899 Regression in unpack for negative int value
2022-01-07 22:04:36 +08:00
Fix news entry for 8.1.2
2022-01-19 08:09:44 +08:00
20 Jan 2022, PHP 8.1.2
Prepare for 8.1.2
2021-12-02 21:19:16 +08:00
Fixed bug #81216 (Nullsafe operator leaks dynamic property name) Fixes oss-fuzz #38542
2021-12-04 23:04:24 +08:00
- Core:
. Fixed bug #81216 (Nullsafe operator leaks dynamic property name). (Dmitry)
Fix invalid opcode for ??= on $GLOBALS Closes #81684 Closes GH-7717
2021-12-05 05:35:57 +08:00
. Fixed bug #81684 (Using null coalesce assignment with $GLOBALS["x"] produces
opcode error). (ilutov)
fix #81656: GCC-11 silently ignores -R Closes GH-7688.
2021-11-25 14:43:14 +08:00
. Fixed bug #81656 (GCC-11 silently ignores -R). (Michael Wallner)
Improve final/abstract methods in interfaces error messages Closes #81683 Closes GH-7722
2021-12-06 03:26:37 +08:00
. Fixed bug #81683 (Misleading "access type ... must be public" error message
on final or abstract interface methods). (ilutov)
Fix #81585: cached_chunks are not counted to real_size on shutdown The amount of allocated system memory is kept in `real_size`, including the allocated `cached_chunks`. Thus, we need to keep the proper count at the end of the shutdown. Closes GH-7745.
2021-12-09 22:36:26 +08:00
. Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
(cmb)
Fix GH-7757: Multi-inherited final constant causes fatal error "Diamond" inheritance of final constants is supposed to be supported. Closes GH-7767.
2021-12-13 02:53:02 +08:00
. Fixed bug GH-7757 (Multi-inherited final constant causes fatal error).
(cmb)
Fix zend_fibers.c build with ZEND_FIBER_UCONTEXT Avoids (Solaris SPARC) issue: zend_fibers.c:77:9: error: unknown type name 'ucontext_t' Closes GH-7773.
2021-12-14 17:57:22 +08:00
. Fixed zend_fibers.c build with ZEND_FIBER_UCONTEXT. (Petr Sumbera)
riscv64 support for fibers We add riscv64 assembly files from Boost, needed for fibers support, and hook up riscv64 fibers support during configure. Closes GH-7879.
2022-01-03 18:57:29 +08:00
. Added riscv64 support for fibers. (Jeremie Courreges-Anglas)
Fixed bug #81216 (Nullsafe operator leaks dynamic property name) Fixes oss-fuzz #38542
2021-12-04 23:04:24 +08:00
Fix FILTER_FLAG_NO_RES_RANGE flag `2001:10::/28` is a reserved IPv6 range. But there's a typo in GH-7476, which caused IPv6 address like `240b:0010::1` will be filtered by the flag `FILTER_FLAG_NO_RES_RANGE`. http://www.faqs.org/rfcs/rfc6890.html Closes GH-7790.
2021-12-19 12:39:54 +08:00
- Filter:
. Fixed FILTER_FLAG_NO_RES_RANGE flag. (Yifan Tong)
Fix GH-7759: Incorrect return types for hash() and hash_hmac() `hash()` and `hash_hmac()` never return `false`; only `hash_file()` and `hash_hmac_file()` return `false` in case the data cannot be read. Closes GH-7760.
2021-12-12 05:16:00 +08:00
- Hash:
. Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
(cmb)
Fix GH-7826: Inconsistent argument name in hash_hmac_file and hash_file Like `hash_file()`, `hash_hmac_file()` expects a filename, and not some string data. Fixing this now, constitutes a (hopefully small) BC break though. Closes GH-7828.
2021-12-26 07:05:03 +08:00
. Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and
hash_file). (cmb)
Fix GH-7759: Incorrect return types for hash() and hash_hmac() `hash()` and `hash_hmac()` never return `false`; only `hash_file()` and `hash_hmac_file()` return `false` in case the data cannot be read. Closes GH-7760.
2021-12-12 05:16:00 +08:00
Fix #81693: mb_check_encoding(7bit) segfaults `php_mb_check_encoding()` now uses conversion to `mbfl_encoding_wchar`. Since `mbfl_encoding_7bit` has no `input_filter`, no filter can be found. Since we don't actually need to convert to wchar, we encode to 8bit. Closes GH-7712.
2021-12-04 01:43:59 +08:00
- MBString:
. Fixed bug #81693 (mb_check_encoding(7bit) segfaults). (cmb)
Fix #81658: MYSQL_OPT_LOAD_DATA_LOCAL_DIR not available in MariaDB This also introduces the boolean userland constant `MYSQLI_IS_MARIADB`.
2021-12-04 05:06:15 +08:00
- MySQLi:
. Fixed bug #81658 (MYSQL_OPT_LOAD_DATA_LOCAL_DIR not available in MariaDB).
(devnexen)
. Introduced MYSQLI_IS_MARIADB. (devnexen)
Fix bug GH-7746 (mysqli_sql_exception->sqlstate is inaccessible) Closes GH-7747
2021-12-30 22:15:29 +08:00
. Fixed bug GH-7746 (mysqli_sql_exception->getSqlState()). (Kamil Tekiela)
Fix #81658: MYSQL_OPT_LOAD_DATA_LOCAL_DIR not available in MariaDB This also introduces the boolean userland constant `MYSQLI_IS_MARIADB`.
2021-12-04 05:06:15 +08:00
Fix bug where large bigints may be truncated Unless stringified results are requested, we need to parse large bigints as unsigned, to avoid wrap-around behavior. Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de> Closes GH-7837.
2021-12-29 23:11:14 +08:00
- MySQLnd:
. Fixed bug where large bigints may be truncated. (Nathan Freeman, cmb)
Fix GH-7765: php_oci_cleanup_global_handles segfaults at second call We must not use the TSRM accessor macros in GINIT and GSHUTDOWN, but rather use the passed pointers directly. For simplicity, we inline `php_oci_cleanup_global_handles()`, and also the `PHP_OCI_CALL()` macros; the latter are unlikely to be needed here, but don't hurt. Closes GH-7766.
2021-12-13 01:37:15 +08:00
- OCI8:
. Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second
call). (cmb)
Fix #81679: Tracing JIT crashes on reattaching When a new process reattaches to OPcache, tracing JIT causes segfaults, because each new process allocates its own `zend_jit_traces` and `zend_jit_exit_groups` in SHM, although these need to be shared between all processes. We solve that by only allocating these structs for the first process, and store the pointers in `accel_shared_globals`, so we can reassign them when a new process reattaches. Closes GH-7776.
2021-12-15 18:47:44 +08:00
- OPcache:
. Fixed bug #81679 (Tracing JIT crashes on reattaching). (cmb)
Fix bug #81598: Use C.UTF-8 as LC_CTYPE locale by default Unfortunately, libedit is locale based and does not accept UTF-8 input when the C locale is used. This patch switches the default locale to C.UTF-8 instead (if it is available). This makes libedit work and I believe it shouldn't affect behavior of single-byte locale-dependent functions that PHP otherwise uses. Closes GH-7635.
2021-11-09 19:03:59 +08:00
- Readline:
. Fixed bug #81598 (Cannot input unicode characters in PHP 8 interactive
shell). (Nikita)
Fix #81681: ReflectionEnum throwing exceptions Enums are neither instantiable nor cloneable. Closes GH-7707.
2021-12-03 02:05:34 +08:00
- Reflection:
. Fixed bug #81681 (ReflectionEnum throwing exceptions). (cmb)
Prepare for 8.1.2
2021-12-02 21:19:16 +08:00
Fix error message allocation of PDO PgSQL Closes GH-7723.
2021-12-06 05:59:52 +08:00
- PDO_PGSQL:
. Fixed error message allocation of PDO PgSQL. (SATO Kentaro)
Avoid void* arithmetic in sockets/multicast.c on NetBSD On NetBSD, ifconf.ifc_buf member, unlike most of platforms, is a void pointer. We also fix the cpuinfo declarations with empty parameter lists. Closes GH-7819.
2021-12-23 22:21:47 +08:00
- Sockets:
. Avoid void* arithmetic in sockets/multicast.c on NetBSD. (David Carlier)
Merge branch 'PHP-8.0' into PHP-8.1 * PHP-8.0: Fix ext/sockets build on Haiku
2022-01-04 21:12:34 +08:00
. Fixed ext/sockets build on Haiku. (David Carlier)
Avoid void* arithmetic in sockets/multicast.c on NetBSD On NetBSD, ifconf.ifc_buf member, unlike most of platforms, is a void pointer. We also fix the cpuinfo declarations with empty parameter lists. Closes GH-7819.
2021-12-23 22:21:47 +08:00
Merge branch 'PHP-8.0' into PHP-8.1 * PHP-8.0: Fix #75917: SplFileObject::seek broken with CSV flags
2021-12-07 02:01:49 +08:00
- Spl:
. Fixed bug #75917 (SplFileObject::seek broken with CSV flags). (Aliaksandr
Bystry)
Fix GH-7809: Cloning a faked SplFileInfo object may segfault While the `path` is not supposed to be `NULL` for normal operation, it is possible to create `SplFileInfo` objects where that is the case, and we must not follow the null pointer. Closes GH-7814.
2021-12-23 07:14:44 +08:00
. Fixed bug GH-7809 (Cloning a faked SplFileInfo object may segfault). (cmb)
Merge branch 'PHP-8.0' into PHP-8.1 * PHP-8.0: Fix #75917: SplFileObject::seek broken with CSV flags
2021-12-07 02:01:49 +08:00
Fix GH-7748: gethostbyaddr outputs binary string `getnameinfo(3)` returns zero on success; all other values need to be regarded as failure.
2021-12-11 00:29:44 +08:00
- Standard:
. Fixed bug GH-7748 (gethostbyaddr outputs binary string). (cmb)
Fix GH-7815: php_uname doesn't recognise latest Windows versions We check `dwBuildNumber` to determine newer Windows versions. Closes GH-7816.
2021-12-23 19:52:50 +08:00
. Fixed bug GH-7815 (php_uname doesn't recognise latest Windows versions).
(David Warner)
Fix GH-7748: gethostbyaddr outputs binary string `getnameinfo(3)` returns zero on success; all other values need to be regarded as failure.
2021-12-11 00:29:44 +08:00
Prepare for 8.1.2
2021-12-02 21:19:16 +08:00
02 Dec 2021, PHP 8.1.1
[ci skip] PHP 8.1.0 ships today
2021-11-26 01:24:52 +08:00
Merge branch 'PHP-8.0' into PHP-8.1 * PHP-8.0: Fix #81649: imap_(un)delete accept sequences, not single numbers
2021-11-26 01:30:35 +08:00
- IMAP:
. Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
(cmb)
[ci skip] PHP 8.1.0 ships today
2021-11-26 01:24:52 +08:00
Update to PCRE2 10.39 We also apply an respective upstream fix[1]. [1] <https://github.com/PhilipHazel/pcre2/commit/d144199dfbefd276669a138b042f559b687b8bc8> Closes GH-7678.
2021-11-24 02:17:57 +08:00
- PCRE:
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
. Update bundled PCRE2 to 10.39. (cmb)
Fix #74604: Out of bounds in php_pcre_replace_impl Trying to allocate a `zend_string` with a length only slighty smaller than `SIZE_MAX` causes an integer overflow; we make sure that this doesn't happen by catering to the maximal overhead of a `zend_string`. Closes GH-7597.
2021-11-29 22:48:41 +08:00
. Fixed bug #74604 (Out of bounds in php_pcre_replace_impl). (cmb, Dmitry)
Update to PCRE2 10.39 We also apply an respective upstream fix[1]. [1] <https://github.com/PhilipHazel/pcre2/commit/d144199dfbefd276669a138b042f559b687b8bc8> Closes GH-7678.
2021-11-24 02:17:57 +08:00
Fix bug #81618: Correct dns_get_record on FreeBSD Modify dns_get_record to test for records result based on dns_errno to accommodate modern FreeBSD, for which res_nsearch() does not update h_errno directly. Add new php_dns_errno macro, and have it consult statp->res_h_errno when OS has res_nsearch(). Closes GH-7655.
2021-11-14 10:27:31 +08:00
- Standard:
Fix #81659: stream_get_contents() may unnecessarily overallocate Since we're going to read from the current stream position anyway, the `max_len` should be the size of the file minus the current position (still catering to potentially filtered streams). We must, however, make sure to cater to the file position being beyond the actual file size. While we're at, we also fix the step size in the comment, which is 8K. A further optimization could be done for unfiltered streams, thus saving that step size, but 8K might not be worth it. Closes GH-7693.
2021-11-26 20:44:36 +08:00
. Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
(cmb)
Fix bug #81618: Correct dns_get_record on FreeBSD Modify dns_get_record to test for records result based on dns_errno to accommodate modern FreeBSD, for which res_nsearch() does not update h_errno directly. Add new php_dns_errno macro, and have it consult statp->res_h_errno when OS has res_nsearch(). Closes GH-7655.
2021-11-14 10:27:31 +08:00
[ci skip] PHP 8.1.0 ships today
2021-11-26 01:24:52 +08:00
25 Nov 2021, PHP 8.1.0
The PHP-8.1 branch is now for 8.1.0
2021-11-10 07:49:14 +08:00
Fix bug #81507: Adjust XCOFF asm files for AIX assembler AIX assembler is a bit more strict than GNU assembler. Thus, adjust the XCOFF asm files to be able to accept both assembler. This pulls in upstream boost context changes from https://github.com/boostorg/context/pull/191. Closes GH-7579.
2021-10-13 17:28:48 +08:00
- Core:
Reordering non bug entries
2021-11-27 20:18:59 +08:00
. Fixed inclusion order for phpize builds on Windows. (cmb)
. Added missing hashtable insertion APIs for arr/obj/ref. (Sara)
. Implemented FR #77372 (Relative file path is removed from uploaded file).
(Björn Tantau)
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
. Fixed bug #81607 (CE_CACHE allocation with concurrent access). (Nikita,
Dmitry)
Fix bug #81507: Adjust XCOFF asm files for AIX assembler AIX assembler is a bit more strict than GNU assembler. Thus, adjust the XCOFF asm files to be able to accept both assembler. This pulls in upstream boost context changes from https://github.com/boostorg/context/pull/191. Closes GH-7579.
2021-10-13 17:28:48 +08:00
. Fixed bug #81507 (Fiber does not compile on AIX). (Clément Chigot)
Fix bug #78647 We can't take ownership of the delayed autoload table here. It is important that pending classes get loaded before resolving variance of any nested classed, as they might actually be lower in the hierarchy.
2021-11-06 00:33:08 +08:00
. Fixed bug #78647 (SEGFAULT in zend_do_perform_implementation_check).
(Nikita)
Fix #81518: Header injection via default_mimetype / default_charset We forbid setting these INI options to values containing NUL bytes, CR or LF. Closes GH-7574.
2021-10-12 21:34:25 +08:00
. Fixed bug #81518 (Header injection via default_mimetype / default_charset).
(cmb)
Fix bug #75941: Fix compile failure on Solaris with clang Closes GH-7525.
2021-09-29 03:44:12 +08:00
. Fixed bug #75941 (Fix compile failure on Solaris with clang). (Jaromír
Doleček)
Fix #81380 observer may not be initialized properly
2021-09-28 22:58:18 +08:00
. Fixed bug #81380 (Observer may not be initialized properly). (krakjoe)
Fixed bug #81514 Objects reuse the GC_PERSISTENT flag as IS_OBJ_WEAKLY_REFERENCED, which we did not account for in ZVAL_COPY_OR_DUP. To make things worse the incorrect zval_copy_ctor_func() invocation silently did nothing. To avoid that, add an assertion that it should only be called with arrays and strings (unlike the normal zval_copy_ctor() which can be safely called on any zval).
2021-10-08 16:31:24 +08:00
. Fixed bug #81514 (Using Enum as key in WeakMap triggers GC + SegFault).
(Nikita)
Standardize: Fixed Bug -> Fixed bug
2021-11-27 20:13:26 +08:00
. Fixed bug #81520 (TEST_PHP_CGI_EXECUTABLE badly set in run-tests.php).
NEWS
2021-10-12 19:34:13 +08:00
(Remi)
Fixed bug #81377 BP_VAR_UNSET should not result in undefined warnings.
2021-08-24 21:05:53 +08:00
. Fixed bug #81377 (unset() of $GLOBALS sub-key yields warning). (Nikita)
Fixed bug #81342 Allow arbitrary whitespace, not just horizontal spaces.
2021-08-10 23:10:35 +08:00
. Fixed bug #81342 (New ampersand token parsing depends on new line after it).
(Nikita)
Fix bug #81280 refuse to allow unicode chars in prompts
2021-08-03 05:30:14 +08:00
. Fixed bug #81280 (Unicode characters in cli.prompt causes segfault).
(krakjoe)
Fixed bug #81192 Normally the filename is the current filename, but when traits are involved, it might be a different one.
2021-08-12 20:34:48 +08:00
. Fixed bug #81192 ("Declaration should be compatible with" gives incorrect
line number with traits). (Nikita)
Fix #78919: CLI server: insufficient cleanup if request startup fails We need to run the full `php_cli_server_request_shutdown()` in case of failing `php_cli_server_request_startup()`. Patch contributed by @cataphract. Closes GH-7322.
2021-07-30 21:36:12 +08:00
. Fixed bug #78919 (CLI server: insufficient cleanup if request startup
fails). (cataphract, cmb)
Fix bug #81303 improve match errors
2021-07-30 06:19:47 +08:00
. Fixed bug #81303 (match error message improvements). (krakjoe)
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
. Fixed bug #81238 (Fiber support missing for Solaris Sparc). (trowski)
. Fixed bug #81237 (Comparison of fake closures doesn't work). (krakjoe)
Fix #81202 powerpc64 build fails on fibers
2021-06-26 16:16:25 +08:00
. Fixed bug #81202 (powerpc64 build fails on fibers). (krakjoe)
Fix bug #80072: Root live tmpvars after GC TMPVAR operands are destroyed using zval_ptr_dtor_nogc(), because they usually cannot contain cycles. However, there are some rare exceptions where this is possible, e.g. unserialize() return value. In such cases we rely on the producing code to root the value. If a GC run occurs between the rooting and consumption of the value, we would end up leaking it. To avoid this, root all live TMPVAR values after a GC run. Closes GH-7210.
2021-07-02 20:22:58 +08:00
. Fixed bug #80072 (Cyclic unserialize in TMPVAR operand may leak). (Nikita)
missing news/upgrading entry
2021-06-18 17:24:53 +08:00
. Fixed bug #81163 (__sleep allowed to return non-array). (krakjoe)
Fixed bug #75474 For fake closures, we need to share static variables with the original function, not work on a separate copy. Calling a function through Closure::fromCallable() should have the same behavior as calling it directly.
2021-02-17 21:45:35 +08:00
. Fixed bug #75474 (function scope static variables are not bound to a unique
function). (Nikita)
Fixed bug #53826 We should handle the case where the method doesn't exist, and where it is not visible the same way.
2021-02-18 21:16:48 +08:00
. Fixed bug #53826 (__callStatic fired in base class through a parent call if
the method is private). (Nikita)
Fix #81076 Invalid implicit binds cause incorrect count in static vars of closure debug info
2021-05-24 13:26:56 +08:00
. Fixed bug #81076 (incorrect debug info on Closures with implicit binds).
(krakjoe)
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
Placing core changes before anything else
2021-11-27 20:05:02 +08:00
- CLI:
. Fixed bug #81496 (Server logs incorrect request method). (lauri)
- COM:
. Dispatch using LANG_NEUTRAL instead of LOCALE_SYSTEM_DEFAULT. (Dmitry
Maksimov)
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
- Curl:
. Fixed bug #81085 (Support CURLOPT_SSLCERT_BLOB for cert strings).
(camporter)
Fix inclusion order for phpize builds on Windows `configure` for `phpize` builds on Windows creates Makefile and config.pickle.h and includes the latter via the command line option `/FI`. That implies that config.pickle.h is always included before config.w32.h, which means that standard definitions always override extension specific definitions, while it should be the other way round. Therefore, we change the inclusion order by including config.pickle.h at the end of config.w32.h if the former is available, and also make sure to avoid any potential C4005 warnings by `#undef`ining the macros before defining them. Closes GH-6269.
2020-10-04 18:50:58 +08:00
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
- Date:
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
. Fixed bug #81458 (Regression Incorrect difference after timezone change).
(Derick)
. Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
(cmb)
. Fixed bug #81504 (Incorrect timezone transition details for POSIX data).
(Derick)
. Fixed bug #80998 (Missing second with inverted interval). (Derick)
. Speed up finding timezone offset information. (Derick)
. Fixed bug #79580 (date_create_from_format misses leap year). (Derick)
. Fixed bug #80963 (DateTimeZone::getTransitions() truncated). (Derick)
. Fixed bug #80974 (Wrong diff between 2 dates in different timezones).
(Derick)
. Fixed bug #80998 (Missing second with inverted interval). (Derick)
. Fixed bug #81097 (DateTimeZone silently falls back to UTC when providing an
offset with seconds). (Derick)
. Fixed bug #81106 (Regression in 8.1: add() now truncate ->f). (Derick)
. Fixed bug #81273 (Date interval calculation not correct). (Derick)
. Fixed bug #52480 (Incorrect difference using DateInterval). (Derick)
. Fixed bug #62326 (date_diff() function returns false result). (Derick)
. Fixed bug #64992 (dst not handled past 2038). (Derick)
. Fixed bug #65003 (Wrong date diff). (Derick)
. Fixed bug #66545 (DateTime. diff returns negative values). (Derick)
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
. Fixed bug #68503 (date_diff on two dates with timezone set localised
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
returns wrong results). (Derick)
. Fixed bug #69806 (Incorrect date from timestamp). (Derick)
. Fixed bug #71700 (Extra day on diff between begin and end of march 2016).
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
(Derick)
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
. Fixed bug #71826 (DateTime::diff confuse on timezone 'Asia/Tokyo'). (Derick)
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
. Fixed bug #73460 (Datetime add not realising it already applied DST
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
change). (Derick)
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
. Fixed bug #74173 (DateTimeImmutable::getTimestamp() triggers DST switch in
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
incorrect time). (Derick)
. Fixed bug #74274 (Handling DST transitions correctly). (Derick)
. Fixed bug #74524 (Date diff is bad calculated, in same time zone). (Derick)
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
. Fixed bug #75167 (DateTime::add does only care about backward DST
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
transition, not forward). (Derick)
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
. Fixed bug #76032 (DateTime->diff having issues with leap days for
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
timezones ahead of UTC). (Derick)
. Fixed bug #76374 (Date difference varies according day time). (Derick)
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
. Fixed bug #77571 (DateTime's diff DateInterval incorrect in timezones from
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
UTC+01:00 to UTC+12:00). (Derick)
. Fixed bug #78452 (diff makes wrong in hour for Asia/Tehran). (Derick)
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
. Fixed bug #79452 (DateTime::diff() generates months differently between
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
time zones). (Derick)
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
. Fixed bug #79698 (timelib mishandles future timestamps (triggered by 'zic
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
-b slim')). (Derick)
. Fixed bug #79716 (Invalid date time created (with day "00")). (Derick)
. Fixed bug #80610 (DateTime calculate wrong with DateInterval). (Derick)
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
. Fixed bug #80664 (DateTime objects behave incorrectly around DST
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
transition). (Derick)
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
. Fixed bug #80913 (DateTime(Immutable)::sub around DST yield incorrect
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
time). (Derick)
- DBA:
. Fixed bug #81588 (TokyoCabinet driver leaks memory). (girgias)
- DOM:
. Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
(Viktor Volkov)
- FFI:
. Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not
defined). (Dmitry)
- Filter:
. Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
(cmb, Nikita)
Upgrade timelib to 2021.03 and fix many date/time issues
2021-03-30 23:18:57 +08:00
Upadate NEWS and UPRADING with info about FPM openmetrics format addition
2021-03-22 02:32:19 +08:00
- FPM:
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
. Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
(Jakub Zelenka)
. Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege
escalation) (CVE-2021-21703). (Jakub Zelenka)
Upadate NEWS and UPRADING with info about FPM openmetrics format addition
2021-03-22 02:32:19 +08:00
. Added openmetrics status format. (Cees-Jan Kiewiet)
Update NEWS for FPM process renaming on macOS
2021-03-22 02:42:55 +08:00
. Enable process renaming on macOS. (devnexen)
Update NEWS and UPGRADING for FPM addition of pm.max_spawn_rate
2021-03-29 04:15:35 +08:00
. Added pm.max_spawn_rate option to configure max spawn child processes rate.
(Paulius Sapragonas)
Merge branch 'PHP-8.0' * PHP-8.0: php-fpm: fix Solaris port events.mechanism
2021-05-11 17:08:11 +08:00
. Fixed bug #65800 (Events port mechanism). (psumbera)
Upadate NEWS and UPRADING with info about FPM openmetrics format addition
2021-03-22 02:32:19 +08:00
Convert FTP resource to object
2020-10-22 06:09:08 +08:00
- FTP:
Move FTP extension class `FTPConnection` to `FTP\Connection` With the [namespaces in bundled extensions RFC](https://wiki.php.net/rfc/namespaces_in_bundled_extensions) passed, renaming the new `\FTPConnection` class to `\FTP\Connection`. This also adds an entry to `./UPGRADING` file. Related: #6925, #5945
2021-05-08 19:28:42 +08:00
. Convert resource<ftp> to object \FTP\Connection. (Sara)
Convert FTP resource to object
2020-10-22 06:09:08 +08:00
NEWS for gdFont conversion
2020-10-22 07:43:28 +08:00
- GD:
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
. Fixed bug #71316 (libpng warning from imagecreatefromstring). (cmb)
NEWS for gdFont conversion
2020-10-22 07:43:28 +08:00
. Convert resource<gd font> to object \GdFont. (Sara)
NEWS: Add murmurhash info [ci skip] Signed-off-by: Anatol Belski <ab@php.net>
2020-11-01 01:50:30 +08:00
- hash:
. Implemented FR #68109 (Add MurmurHash V3). (Anatol, Michael)
NEWS: Associate FR to xxHash additions [ci skip] Signed-off-by: Anatol Belski <ab@php.net>
2021-02-21 20:37:16 +08:00
. Implemented FR #73385 (Add xxHash support). (Anatol)
NEWS: Add murmurhash info [ci skip] Signed-off-by: Anatol Belski <ab@php.net>
2020-11-01 01:50:30 +08:00
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
- JSON:
. Fixed bug #81532 (Change of $depth behaviour in json_encode() on PHP 8.1).
(Nikita)
Register JSON_ERROR_NON_BACKED_ENUM constant (#8285) Fixes GH-8238
2022-03-31 20:31:17 +08:00
. Fixed bug GH-8238 (Register JSON_ERROR_NON_BACKED_ENUM constant). (ilutov)
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
Convert resources to objects in ext/ldap Closes GH-6770
2021-03-13 19:11:40 +08:00
- LDAP:
Move resource-object classes of LDAP to `\LDAP` namespaces (#6963) Another change as per accepted [namespaces in bundled extensions RFC](https://wiki.php.net/rfc/namespaces_in_bundled_extensions). Related: #6925, #5945, #6960
2021-05-10 04:20:21 +08:00
. Convert resource<ldap link> to object \LDAP\Connection. (Máté)
. Convert resource<ldap result> to object \LDAP\Result. (Máté)
. Convert resource<ldap result entry> to object \LDAP\ResultEntry. (Máté)
Convert resources to objects in ext/ldap Closes GH-6770
2021-03-13 19:11:40 +08:00
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
- MBString:
. Fixed bug #76167 (mbstring may use pointer from some previous request).
(cmb, cataphract)
. Fixed bug #81390 (mb_detect_encoding() regression). (alexdowad)
. Fixed bug #81349 (mb_detect_encoding misdetcts ASCII in some cases).
(Nikita)
. Fixed bug #81298 (mb_detect_encoding() segfaults when 7bit encoding is
specified). (Nikita)
Move fetch_all implementation out of mysqlnd There doesn't seem to be any compelling reason to implement this in mysqlnd rather than mysqli. It's just a loop over fetch_into. This makes the function available under libmysqlclient as well, and thus fixes bug #79372.
2020-12-18 19:13:17 +08:00
- MySQLi:
. Fixed bug #70372 (Emulate mysqli_fetch_all() for libmysqlclient). (Nikita)
Fix #80330: Replace language in APIs and source code/docs Rename MYSQLI_REFRESH_SLAVE to MYSQLI_REFRESH_REPLICA in line with upstream change in MySQL. The old name is retained for backwards-compatibility reasons, and may be deprecated/removed in the future. Closes GH-6632.
2021-01-24 00:14:13 +08:00
. Fixed bug #80330 (Replace language in APIs and source code/docs).
(Darek Ślusarczyk)
Fix #80329: Add option to specify LOAD DATA LOCAL white list folder * allow the user to specify a folder where files that can be sent via LOAD DATA LOCAL can exist * add mysqli.local_infile_directory for mysqli (ignored if mysqli.allow_local_infile is enabled) * add PDO::MYSQL_ATTR_LOCAL_INFILE_DIRECTORY for pdo_mysql (ignored if PDO::MYSQL_ATTR_LOCAL_INFILE is enabled) * add related tests * fixes for building with libmysql 8.x * small improvement in existing tests * update php.ini-[development|production] files Closes GH-6448. Co-authored-by: Nikita Popov <nikic@php.net>
2021-02-22 18:03:24 +08:00
. Fixed bug #80329 (Add option to specify LOAD DATA LOCAL white list folder
(including libmysql)). (Darek Ślusarczyk)
Move fetch_all implementation out of mysqlnd There doesn't seem to be any compelling reason to implement this in mysqlnd rather than mysqli. It's just a loop over fetch_into. This makes the function available under libmysqlclient as well, and thus fixes bug #79372.
2020-12-18 19:13:17 +08:00
Fixed bug #80761 When row data split across multiple packets, allocate a temporary buffer that can be reallocated, and only copy into the row buffer pool arena once we know the final size. This avoids quadratic memory usage for very large results.
2021-02-23 18:14:51 +08:00
- MySQLnd:
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
. Fixed bug #63327 (Crash (Bus Error) in mysqlnd due to wrong alignment).
(Nikita)
Fixed bug #80761 When row data split across multiple packets, allocate a temporary buffer that can be reallocated, and only copy into the row buffer pool arena once we know the final size. This avoids quadratic memory usage for very large results.
2021-02-23 18:14:51 +08:00
. Fixed bug #80761 (PDO uses too much memory). (Nikita)
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
- Opcache:
. Fixed bug #81409 (Incorrect JIT code for ADD with a reference to array).
(Dmitry)
Standardize: Fixed Bug -> Fixed bug
2021-11-27 20:13:26 +08:00
. Fixed bug #81255 (Memory leak in PHPUnit with functional JIT).
. Fixed bug #80959 (infinite loop in building cfg during JIT compilation).
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
(Nikita, Dmitry)
. Fixed bug #81225 (Wrong result with pow operator with JIT enabled).
(Dmitry)
. Fixed bug #81249 (Intermittent property assignment failure with JIT
enabled). (Dmitry)
. Fixed bug #81256 (Assertion `zv != ((void *)0)' failed for "preload" with
JIT). (Dmitry)
. Fixed bug #81133 (building opcache with phpize fails). (krakjoe)
. Fixed bug #81136 (opcache header not installed). (krakjoe)
Added Inheritance Cache. This is a new transparent technology that eliminates overhead of PHP class inheritance. PHP classes are compiled and cached (by opcahce) separately, however their "linking" was done at run-time - on each request. The process of "linking" may involve a number of compatibility checks and borrowing methods/properties/constants form parent and traits. This takes significant time, but the result is the same on each request. Inheritance Cache performs "linking" for unique set of all the depending classes (parent, interfaces, traits, property types, method types involved into compatibility checks) once and stores result in opcache shared memory. As a part of the this patch, I removed limitations for immutable classes (unresolved constants, typed properties and covariant type checks). So now all classes stored in opcache are "immutable". They may be lazily loaded into process memory, if necessary, but this usually occurs just once (on first linking). The patch shows 8% improvement on Symphony "Hello World" app.
2021-02-10 03:53:57 +08:00
. Added inheritance cache. (Dmitry)
Bump minimal OpenSSL version to 1.0.2
2020-10-11 04:02:26 +08:00
- OpenSSL:
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
. Fixed bug #81502 ($tag argument of openssl_decrypt() should accept
null/empty string). (Nikita)
Bump minimal OpenSSL version to 1.0.2
2020-10-11 04:02:26 +08:00
. Bump minimal OpenSSL version to 1.0.2. (Jakub Zelenka)
NEWS: UPGRADING.INTERNALS: Add PCRE2 10.37 info [ci skip] Signed-off-by: Anatol Belski <ab@php.net>
2021-05-30 19:05:23 +08:00
- PCRE:
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
. Fixed bug #81424 (PCRE2 10.35 JIT performance regression). (cmb)
NEWS: UPGRADING.INTERNALS: Add PCRE2 10.37 info [ci skip] Signed-off-by: Anatol Belski <ab@php.net>
2021-05-30 19:05:23 +08:00
. Bundled PCRE2 is 10.37.
Rewrite PDO result binding Instead of requiring the type to be determined in advance by the describer function and then requiring get_col to return a buffer of appropriate type, allow get_col to return an arbitrary zval. See UPGRADING.INTERNALS for a more detailed description of the change. This makes the result fetching simpler, more efficient and more flexible. The general possibility already existed via the special PDO_PARAM_ZVAL type, but the usage was very inconvenient and/or inefficient. Now it's possible to easily implement behavior like "return int if it fits, otherwise string" and to avoid any kind of complex management of temporary buffers. This also fixes bug #40913 (our second highest voted bug of all time, for some reason). PARAM_LOB result bindings will now consistently return a stream resource, independently of the used database driver. I've tried my best to update all PDO drivers for this change, but some of the changes may be broken, as I cannot test or even build some of these drivers (in particular PDO dblib and PDO oci). Fixes are appreciated -- a working CI setup would be even more appreciated ;)
2020-12-17 19:05:37 +08:00
- PDO:
. Fixed bug #40913 (PDO_MYSQL: PDO::PARAM_LOB does not bind to a stream for
fetching a BLOB). (Nikita)
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
- PDO MySQL:
Merge branch 'PHP-8.0' * PHP-8.0: Fixed bug #81037 PDO discards error message text from prepared statement Closes GH-6978.
2021-05-14 19:00:34 +08:00
. Fixed bug #80908 (PDO::lastInsertId() return wrong). (matt)
Merge branch 'PHP-8.0' * PHP-8.0: Fix NEWS
2021-05-14 19:35:30 +08:00
. Fixed bug #81037 (PDO discards error message text from prepared
statement). (Kamil Tekiela)
Fixed bug #80908 The last insert ID should be an unsigned integer. Closes GH-6810.
2021-04-26 17:45:37 +08:00
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
- PDO OCI:
. Fixed bug #77120 (Support 'success with info' at connection).
(Sergei Morozov)
- PDO ODBC:
Add entries for new behavior of PDO_ODBC server info/version attributes
2021-05-08 05:41:26 +08:00
. Implement PDO_ATTR_SERVER_VERSION and PDO_ATTR_SERVER_INFO for
PDO::getAttribute(). (Calvin Buckley)
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
- PDO PgSQL:
. Fixed bug #81343 (pdo_pgsql: Inconsitent boolean conversion after calling
closeCursor()). (Philip Hofstetter)
- PDO SQLite:
Support native types in PDO SQLite Return integers and floats as native types if possible. As usual, the old behavior can be restored by enabling ATTR_STRINGIFY_FETCHES. Fixes bug #38334.
2020-12-23 17:57:19 +08:00
. Fixed bug #38334 (Proper data-type support for PDO_SQLITE). (Nikita)
Fixed misplaced PgSQL NEWS entry
2021-11-27 19:59:28 +08:00
- PgSQL:
. Fixed bug #81509 (pg_end_copy still expects a resource). (Matteo)
. Convert resource<pgsql link> to object \PgSql\Connection. (Máté)
. Convert resource<pgsql result> to object \PgSql\Result. (Máté)
. Convert resource<pgsql large object> to object \PgSql\Lob. (Máté)
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
- Phar:
. Use SHA256 by default for signature. (remi)
. Add support for OpenSSL_SHA256 and OpenSSL_SHA512 signature. (remi)
- phpdbg:
. Fixed bug #81135 (unknown help topic causes assertion failure). (krakjoe)
Convert pspell resources to objects
2020-10-22 08:12:55 +08:00
- PSpell:
Move resource-object classes of PSpell to `\PSpell` namespace [namespaces in bundled extensions](https://wiki.php.net/rfc/namespaces_in_bundled_extensions) changes for PSpell. - Rename `PSpell` class to `\PSpell\Dictionary` - Rename `PSpellConfig` class to `\PSpell\Config` - Add entries to `UPGRADING` file. Related: bd12c94f
2021-05-10 23:10:19 +08:00
. Convert resource<pspell> to object \PSpell\Dictionary. (Sara)
. Convert resource<pspell config> to object \PSpell\Config. (Sara)
Convert pspell resources to objects
2020-10-22 08:12:55 +08:00
Merge branch 'PHP-8.0' * PHP-8.0: fix bug #72998
2021-06-03 16:33:30 +08:00
- readline:
. Fixed bug #72998 (invalid read in readline completion). (krakjoe)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
ReflectionFunctionAbstract::getClosureUsedVariables Make a distinction at compile time between bind types for static variables getStaticVariables remains unchanged Fixes #80071
2021-05-21 15:28:08 +08:00
- Reflection:
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
. Fixed bug #81611 (ArgumentCountError when getting default value from
ReflectionParameter with new). (Cameron Porter)
. Fixed bug #81630 (PHP 8.1: ReflectionClass->getTraitAliases() crashes with
Internal error). (Nikita)
. Fixed bug #81457 (Enum: ReflectionMethod->getDeclaringClass() return a
ReflectionClass). (Nikita)
. Fixed bug #81474 (Make ReflectionEnum and related class non-final). (Nikita)
. Fixed bug #80821 (ReflectionProperty::getDefaultValue() returns current
value for statics). (Nikita)
. Fixed bug #80564 (ReflectionProperty::__toString() renders current value,
not default value). (Nikita)
. Fixed bug #80097 (ReflectionAttribute is not a Reflector). (beberlei)
. Fixed bug #81200 (no way to determine if Closure is static). (krakjoe)
. Implement ReflectionFunctionAbstract::getClosureUsedVariables. (krakjoe)
- Shmop:
. Fixed bug #81407 (shmop_open won't attach and causes php to crash). (cmb)
- SimpleXML:
. Fixed bug #81325 (Segfault in zif_simplexml_import_dom). (remi)
- SNMP:
. Implement SHA256 and SHA512 for security protocol. (remi)
ReflectionFunctionAbstract::getClosureUsedVariables Make a distinction at compile time between bind types for static variables getStaticVariables remains unchanged Fixes #80071
2021-05-21 15:28:08 +08:00
Add entries for new Sodium functions to NEWS
2021-05-08 06:50:28 +08:00
- Sodium:
. Added the XChaCha20 stream cipher functions. (P.I.E. Security Team)
. Added the Ristretto255 functions, which are available in libsodium 1.0.18.
(P.I.E. Security Team)
Fixed bug #80724 FilesystemIterator::FOLLOW_SYMLINKS is currently treated as a directory key mode flag, even though it does not change the way that the key during iteration is set. To address this, FOLLOW_SYMLINKS has been converted into an OTHER flag. Closes GH-6695.
2021-02-15 12:55:25 +08:00
- SPL:
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
. Fixed bug #66588 (SplFileObject::fgetcsv incorrectly returns a row on
premature EOF). (Aliaksandr Bystry)
. Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
(cmb, Nikita, Tyson Andre)
. Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1). (cmb)
. Fixed bug #81112 (Special json_encode behavior for SplFixedArray). (Nikita)
. Fixed bug #80945 ("Notice: Undefined index" on unset() ArrayObject
non-existing key). (Nikita)
Fixed bug #80724 FilesystemIterator::FOLLOW_SYMLINKS is currently treated as a directory key mode flag, even though it does not change the way that the key during iteration is set. To address this, FOLLOW_SYMLINKS has been converted into an OTHER flag. Closes GH-6695.
2021-02-15 12:55:25 +08:00
. Fixed bug #80724 (FilesystemIterator::FOLLOW_SYMLINKS remove KEY_AS_FILE
from bitmask). (Cameron Porter)
Sorting and standardize NEWS entries
2021-11-27 19:54:14 +08:00
- Standard:
. Fixed bug #81441 (gethostbyaddr('::1') returns ip instead of name after
calling some other method). (Nikita)
. Fixed bug #81491 (Incorrectly using libsodium for argon2 hashing).
(Dan Pock)
. Fixed bug #81142 (PHP 7.3+ memory leak when unserialize() is used on an
associative array). (Nikita)
. Fixed bug #81111 (Serialization is unexpectedly allowed on anonymous classes
with __serialize()). (Nikita)
. Fixed bug #81137 (hrtime breaks build on OSX before Sierra). (krakjoe)
. Fixed bug #77627 (method_exists on Closure::__invoke inconsistency).
(krakjoe)
- Streams:
. Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
(cmb)
- XML:
. Fixed bug #79971 (special character is breaking the path in xml function)
(CVE-2021-21707). (cmb)
. Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
(Aliaksandr Bystry, cmb)
- Zip:
. Fixed bug #81490 (ZipArchive::extractTo() may leak memory). (cmb, Remi)
. Fixed bug #77978 (Dirname ending in colon unzips to wrong dir). (cmb)
. Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination)
(CVE-2021-21706). (cmb)
. Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword). (Remi)
Reference in New Issue Copy Permalink