mirrors/php-src
0
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2024-11-24 02:15:04 +08:00
Code Issues Packages Projects Releases Wiki Activity
96049867d8
php-src/NEWS

1542 lines
52 KiB
Plaintext
Raw Normal View History

remove BOM from NEWS
2015-07-21 22:36:36 +08:00
PHP NEWS
Please add in any changes/bug fixes you've made - we need to keep a details ChangeLog...
1999-07-23 07:54:54 +08:00
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Prepare for PHp 8.0.26
2022-10-11 21:24:53 +08:00
?? ??? 2022, PHP 8.0.26
Fix GH-9709: Guard against current_execute_data==NULL in is_handle_exception_set
2022-10-22 09:18:55 +08:00
- CLI:
. Fixed bug GH-9709 (Null pointer dereference with -w/-s options). (Adam Saponara)
[ci skip] NEWS
2022-10-16 18:43:21 +08:00
- Core:
. Fixed bug GH-9752 (Generator crashes when interrupted during argument
evaluation with extra named params). (Arnaud)
[ci skip] NEWS
2022-10-22 16:42:07 +08:00
. Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during
initialization). (Arnaud)
[ci skip] NEWS
2022-10-16 18:43:21 +08:00
Update NEWS
2022-10-18 01:22:29 +08:00
- Date:
. Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if
the argument is an offset larger than 100*60 minutes). (Derick)
Add NEWS entry for #9841 Closes GH-9841
2022-10-28 01:29:17 +08:00
- mysqli:
. Fixed bug GH-9841 (mysqli_query throws warning despite using
silenced error mode). (Kamil Tekiela)
Fix GH-8430: OpenSSL compiled with old disgests does not build Specifically no-md2, no-md4 or no-rmd160 were not supported
2022-10-23 05:11:05 +08:00
- OpenSSL:
. Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does
not build). (Jakub Zelenka, fsbruva)
Fix GH-9720: Null pointer dereference while serializing the response When traversing the result array, we need to cater to `param_name` possibly being `NULL`. Prior to PHP 7.0.0, this was implicitly done because `param_name` was of type `char*`. Closes GH-9739.
2022-10-13 18:35:08 +08:00
- SOAP:
. Fixed GH-9720 (Null pointer dereference while serializing the response).
(cmb)
Prepare for PHp 8.0.26
2022-10-11 21:24:53 +08:00
27 Oct 2022, PHP 8.0.25
Bump for 8.0.25
2022-09-14 07:46:26 +08:00
move CVEs in 8.0.25 changelog
2022-10-26 20:18:19 +08:00
- GD:
. Fixed bug #81739: OOB read due to insufficient input validation in
imageloadfont(). (CVE-2022-31630) (cmb)
- Hash:
. Fixed bug #81738: buffer overflow in hash_update() on long parameter.
(CVE-2022-37454) (nicky at mouha dot be)
Fix GH-9583: session_create_id() fails with user defined save handler that doesn't have a validateId() method
2022-09-24 19:05:50 +08:00
- Session:
. Fixed bug GH-9583 (session_create_id() fails with user defined save handler
that doesn't have a validateId() method). (Girgias)
[ci skip] NEWS
2022-10-01 17:23:15 +08:00
- Streams:
. Fixed bug GH-9590 (stream_select does not abort upon exception or empty
valid fd set). (Arnaud)
Bump for 8.0.25
2022-09-14 07:46:26 +08:00
29 Sep 2022, PHP 8.0.24
Prepare for 8.0.24
2022-08-17 17:56:42 +08:00
Fix GH-9323: crash when the VM enters userspace code via the GC Closes GH-9323
2022-08-19 12:09:07 +08:00
- Core:
. Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function)
(Tim Starling)
Fix GH-9361: Segmentation fault on script exit Using a lot of memory may overflow some `int` calculations; to avoid that we make sure that the operands are promoted to `size_t`. This issue has been analyzed by @chschneider. Closes GH-9379.
2022-08-19 22:26:26 +08:00
. Fixed bug GH-9361 (Segmentation fault on script exit #9379). (cmb,
Christian Schneider)
Fix lsp error in eval'd code referring to incorrect class for static type Fixes GH-9407 Closes GH-9471
2022-09-02 23:10:09 +08:00
. Fixed bug GH-9407 (LSP error in eval'd code refers to wrong class for static
type). (ilutov)
add missing CVEs
2022-09-30 15:18:03 +08:00
. Fixed bug #81727: Don't mangle HTTP variable names that clash with ones
that have a specific semantic meaning. (CVE-2022-31629). (Derick)
Fix GH-9323: crash when the VM enters userspace code via the GC Closes GH-9323
2022-08-19 12:09:07 +08:00
Fix #79451: DOMDocument->replaceChild on doctype causes double free We have to reset intSubset if replacing doctype with another doctype node. Closes GH-9201. Closes GH-9376.
2022-08-04 22:04:41 +08:00
- DOM:
. Fixed bug #79451 (DOMDocument->replaceChild on doctype causes double free).
(Nathan Freeman)
Fix GH-8885: access.log with stderr writes logs to error_log after reload This fix allows restoring the the original stderr so the logs are correctly written.
2022-07-03 19:12:55 +08:00
- FPM:
. Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to
error_log after daemon reload). (Dmitry Menshikov)
Fix bug #77780: "Headers already sent" when previous connection was aborted This change primarily splits SAPI deactivation to module and destroy parts. The reason is that currently some SAPIs might bail out on deactivation. One of those SAPI is PHP-FPM that can bail out on request end if for example the connection is closed by the client (web sever). The problem is that in such case the resources are not freed and some values reset. The most visible impact can have not resetting the PG(headers_sent) which can cause erorrs in the next request. One such issue is described in #77780 bug which this fixes and is also cover by a test in this commit. It seems reasonable to separate deactivation and destroying of the resource which means that the bail out will not impact it.
2022-06-26 22:34:33 +08:00
. Fixed bug #77780 ("Headers already sent..." when previous connection was
aborted). (Jakub Zelenka)
Fix GH-8885: access.log with stderr writes logs to error_log after reload This fix allows restoring the the original stderr so the logs are correctly written.
2022-07-03 19:12:55 +08:00
Fix GH-9308 GMP throws the wrong error when a GMP object is passed to gmp_init() Closes GH-9490
2022-09-06 18:37:04 +08:00
- GMP
. Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed
to gmp_init()). (Girgias)
Fix GH-9421 Incorrect argument number for ValueError in NumberFormatter Closes GH-9489
2022-08-31 00:16:27 +08:00
- Intl
. Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
(Girgias)
Fix GH-9411: PgSQL large object resource is incorrectly closed Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de> Closes GH-9411.
2022-09-05 20:53:33 +08:00
- PDO_PGSQL:
. Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
(Yurunsoft)
add missing CVEs
2022-09-30 15:18:03 +08:00
- Phar:
. Fixed bug #81726: phar wrapper: DOS when using quine gzip file.
(CVE-2022-31628). (cmb)
[ci skip] NEWS
2022-09-02 19:40:31 +08:00
- Reflection:
. Fixed bug GH-8932 (ReflectionFunction provides no way to get the called
class of a Closure). (cmb, Nicolas Grekas)
Private method incorrectly marked as "overwrites" in reflection Fix GH-9409 Closes GH-9469
2022-09-02 22:12:38 +08:00
. Fixed bug GH-9409 (Private method is incorrectly dumped as "overwrites").
(ilutov)
[ci skip] NEWS
2022-09-02 19:40:31 +08:00
Fix GH-9316: $http_response_header is wrong for long status line While the reason-phrase in a HTTP response status line is usually short, there is no actual limit specified by the RFCs. As such, we must not assume that the line fits into the buffer (which is currently 128 bytes large). Since there is no real need to present the complete status line, we simply read and discard the rest of a long line. Co-authored-by: Tim Düsterhus <timwolla@googlemail.com> Closes GH-9319.
2022-08-17 20:20:57 +08:00
- Streams:
. Fixed bug GH-9316 ($http_response_header is wrong for long status line).
(cmb, timwolla)
Prepare for 8.0.24
2022-08-17 17:56:42 +08:00
01 Sep 2022, PHP 8.0.23
Prepare for PHP 8.0.23
2022-07-19 16:31:08 +08:00
[CI skip] update NEWS
2022-08-04 23:05:12 +08:00
- Core:
. Fixed incorrect double to long casting in latest clang. (zeriyoshi)
Fix memory leak in LMDB driver
2022-07-06 05:15:38 +08:00
- DBA:
. Fixed LMDB driver memory leak on DB creation failure (Girgias)
Fix GH-9155: dba_open("non-existing", "c-", "flatfile") segfaults We must not assume that the lock file has been opened. Closes GH-9156.
2022-07-26 22:12:21 +08:00
. Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
(cmb)
Fix memory leak in LMDB driver
2022-07-06 05:15:38 +08:00
Correct IntlDateFormatter::formatObject params Closes GH-9341.
2022-08-15 20:25:59 +08:00
- Intl:
. Fixed IntlDateFormatter::formatObject() parameter type. (Gert de Pagter)
Fix GH-9033: Loading blacklist file can fail due to negative length If the blacklist file contains a line with a single double-quote, we called `zend_strndup(pbuf, -1)` what causes an unnecessary bail out; instead we just ignore that line. If the blacklist file contains an empty line, we may have caused an OOB read; instead we just ignore that line. Closes GH-9036.
2022-07-18 21:46:38 +08:00
- OPcache:
. Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
(cmb)
Fix GH-9339: OpenSSL oid_file path check warning contains uninitialized path
2022-08-15 19:05:19 +08:00
- OpenSSL:
. Fixed bug GH-9339 (OpenSSL oid_file path check warning contains
uninitialized path). (Jakub Zelenka)
Fix GH-9032: SQLite3 authorizer crashes on NULL values The arguments 3 to 6 of the authorizer callback may be `NULL`[1], and we have to properly deal with that. Instead of causing a segfault, we deny authorization, which is still better than a crash, and apparently, we cannot do better anyway. [1] <https://www.sqlite.org/c3ref/set_authorizer.html> Closes GH-9040.
2022-07-18 23:33:34 +08:00
- PDO_SQLite:
. Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values). (cmb)
- SQLite3:
. Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values). (cmb)
Fix GH-9017: php_stream_sock_open_from_socket could return NULL Closes GH-9020.
2022-07-15 16:13:50 +08:00
- Standard:
. Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
(Heiko Weber)
Prepare for PHP 8.0.23
2022-07-19 16:31:08 +08:00
Fix GH-8472: stream_socket_accept result may have incorrect metadata
2022-08-05 03:52:44 +08:00
- Streams:
. Fixed bug GH-8472 (The resource returned by stream_socket_accept may have
incorrect metadata). (Jakub Zelenka)
Re-fix GH-8409: SSL handshake timeout persistent connections hanging This fix is another solution to replace d0527427be57957157aec5e26a28899b380140df, use zend_try and zend_catch to make sure persistent stream will be released when error occurred. Closes GH-9332.
2022-08-14 19:50:58 +08:00
. Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections
hanging). (Jakub Zelenka, Twosee)
Fix GH-8472: stream_socket_accept result may have incorrect metadata
2022-08-05 03:52:44 +08:00
Prepare for PHP 8.0.23
2022-07-19 16:31:08 +08:00
04 Aug 2022, PHP 8.0.22
Prepare for 8.0.22
2022-06-21 17:33:20 +08:00
Prevent potential buffer overflow for large value of php_cli_server_workers_max Fixes #8989. Closes #9000.
2022-07-13 20:55:51 +08:00
- CLI:
. Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS
environment variable. (yiyuaner)
Fix GH-8923: error_log on Windows can hold the file write lock On Windows, closing a file which is locked may not immediately remove the lock. The `LockFileEx()` documentation states: | Therefore, it is recommended that your process explicitly unlock all | files it has locked when it terminates. We comply, and also use the macro `LOCK_EX` instead of the magic number `2`. Closes GH-8925.
2022-07-05 22:09:32 +08:00
- Core:
. Fixed bug GH-8923 (error_log on Windows can hold the file write lock). (cmb)
[ci skip] NEWS
2022-07-15 19:14:17 +08:00
. Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
(Tobias Bachert)
Fix GH-8923: error_log on Windows can hold the file write lock On Windows, closing a file which is locked may not immediately remove the lock. The `LockFileEx()` documentation states: | Therefore, it is recommended that your process explicitly unlock all | files it has locked when it terminates. We comply, and also use the macro `LOCK_EX` instead of the magic number `2`. Closes GH-8925.
2022-07-05 22:09:32 +08:00
Fixed #80047: DatePeriod doesn't warn with custom DateTimeImmutable
2022-06-24 18:13:49 +08:00
- Date:
. Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
(Derick)
Abort LMDB transaction whe trying to delete non-existing key
2022-07-02 00:26:27 +08:00
- DBA:
. Fixed LMDB driver hanging when attempting to delete a non-existing key
(Girgias)
FPM: zlog, fix free on wrong address for message prepend.
2022-06-16 04:33:33 +08:00
- FPM:
. Fixed zlog message prepend, free on incorrect address. (Heiko Weber)
FPM: Fix possible double free on configuration load failure. Closes #8948.
2022-07-07 21:51:09 +08:00
. Fixed possible double free on configuration loading failure. (Heiko Weber).
FPM: zlog, fix free on wrong address for message prepend.
2022-06-16 04:33:33 +08:00
Fix GH-8848: imagecopyresized() error refers to the wrong argument Closes GH-8849.
2022-06-23 19:23:27 +08:00
- GD:
. Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
(cmb)
Prepare for 8.0.22
2022-06-21 17:33:20 +08:00
intl extension, build fix for icu >= 69.x release. ubrk/ucnv_safeClone had been deprecated in favor of ubrk/ucnv_clone which does not use user provided stacks but remain thread safe.
2022-07-08 20:56:17 +08:00
- Intl:
. Fixed build for ICU 69.x and onwards. (David Carlier)
Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file)
2022-06-29 17:10:46 +08:00
- OPcache:
. Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php
syntaxe of a valid file). (Dmitry)
Fix the crypt sha apis build (with recent clang versions). Removing the said subtraction by casting instead. While at it fixing werror level on phpdbg too. Closes #8897.
2022-07-01 01:20:40 +08:00
- Standard:
random extension macOs handling update. Not such as fix but taking more precautions. Indeed, the arc4random has two little flaws in this platform, one already caught upfront by the extension (ie size 0), also internal use of ccrng_generate which can silently fail in few rare cases. Closes #7824.
2021-12-25 02:27:24 +08:00
. Fixed the crypt_sha256/512 api build with clang > 12. (David Carlier)
. Uses CCRandomGenerateBytes instead of arc4random_buf on macOs. (David Carlier).
Fix the crypt sha apis build (with recent clang versions). Removing the said subtraction by casting instead. While at it fixing werror level on phpdbg too. Closes #8897.
2022-07-01 01:20:40 +08:00
Prepare for 8.0.22
2022-06-21 17:33:20 +08:00
07 Jul 2022, PHP 8.0.21
Bump for 8.0.21
2022-05-25 02:51:01 +08:00
Fix potential use after free in php_binary_init() Closes GH-8791.
2022-06-15 22:51:06 +08:00
- Core:
. Fixed potential use after free in php_binary_init(). (Heiko Weber)
Fix GH-8827: Intentionally closing std handles no longer possible We revert the commits which caused this regression from the PHP-8.0 and PHP-8.1 branches for now. We keep it in "master" because of PR #8833 which may offer a proper fix without BC break.
2022-06-20 23:59:49 +08:00
- CLI:
. Fixed GH-8827 (Intentionally closing std handles no longer possible). (cmb)
Fix GH-8778: Integer arithmethic with large number variants fails When casting a `variant` to `int`, we need to heed the proper `zval` type, which is an signed 64bit integer on x64, while `VT_INT` is only a signed 32bit integer. Closes GH-8779.
2022-06-14 21:56:03 +08:00
- COM:
. Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
(cmb)
Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
2022-06-18 07:51:58 +08:00
- Curl:
. Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option. (Pierrick)
Merge remote-tracking branch 'derickr/bug74671-dst-c-format' into PHP-8.0
2022-05-27 21:23:12 +08:00
- Date:
. Fixed bug #74671 (DST timezone abbreviation has incorrect offset). (Derick)
Merge remote-tracking branch 'derickr/bug77342' into PHP-8.0
2022-06-17 16:35:20 +08:00
. Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
(Derick)
Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
2022-05-20 23:23:16 +08:00
. Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
(Derick)
Bump for 8.0.21
2022-05-25 02:51:01 +08:00
Fix bug #67764: fpm: syslog.ident does not work
2022-06-13 05:32:48 +08:00
- FPM:
. Fixed bug #67764 (fpm: syslog.ident don't work). (Jakub Zelenka)
NEWS for GH-8685
2022-06-03 13:54:36 +08:00
- MBString:
. Fixed bug GH-8685 (pcre not ready at mbstring startup). (Remi)
Fix handling of single-key connection strings A connection string may contain just a single key, but PHP used ";" as the heuristic to detect if a string was a connection string versus plain DSN. However, a single-key connection string would get treated like a DSN name, i.e. "DSN=*LOCAL". This makes it so that "=" is used, as a connection string must contain a key. Closes GH-8748.
2022-06-10 23:53:09 +08:00
- ODBC:
. Fixed handling of single-key connection strings. (Calvin Buckley)
Fix bug #50293 and #81713: file path checking in OpenSSL functions It introduces a single function to check file paths passed to OpenSSL functions. It expands the path, check null bytes and finally does an open basedir check.
2022-05-22 06:36:03 +08:00
- OpenSSL:
. Fixed bug #50293 (Several openssl functions ignore the VCWD).
(Jakub Zelenka, cmb)
. Fixed bug #81713 (NULL byte injection in several OpenSSL functions working
with certificates). (Jakub Zelenka)
Fix handling of single-key connection strings A connection string may contain just a single key, but PHP used ";" as the heuristic to detect if a string was a connection string versus plain DSN. However, a single-key connection string would get treated like a DSN name, i.e. "DSN=*LOCAL". This makes it so that "=" is used, as a connection string must contain a key. Closes GH-8748.
2022-06-10 23:53:09 +08:00
- PDO_ODBC:
Closes GH-8626: Fix PDOStatement->execute() failed. Then execute successfully, errorInfo() information is incorrect
2022-05-25 11:13:49 +08:00
. Fixed errorInfo() result on successful PDOStatement->execute(). (Yurunsoft)
Fix handling of single-key connection strings A connection string may contain just a single key, but PHP used ";" as the heuristic to detect if a string was a connection string versus plain DSN. However, a single-key connection string would get treated like a DSN name, i.e. "DSN=*LOCAL". This makes it so that "=" is used, as a connection string must contain a key. Closes GH-8748.
2022-06-10 23:53:09 +08:00
. Fixed handling of single-key connection strings. (Calvin Buckley)
Closes GH-8626: Fix PDOStatement->execute() failed. Then execute successfully, errorInfo() information is incorrect
2022-05-25 11:13:49 +08:00
NEWS
2022-06-15 21:38:37 +08:00
- Zip:
. Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat
cache). (Remi)
Bump for 8.0.21
2022-05-25 02:51:01 +08:00
09 Jun 2022, PHP 8.0.20
Prepare for PHP 8.0.20
2022-04-26 16:17:50 +08:00
Stop closing stderr and stdout streams (#8569) Extensions may (and do) write to stderr in mshutdown and similar. In the best case, with the stderr stream closed, it's just swallowed. However, some libraries will do things like try to detect color, and these will outright fail and cause an error path to be taken.
2022-05-17 06:53:13 +08:00
- CLI:
. Fixed bug GH-8575 (CLI closes standard streams too early). (Levi Morrison)
Haiku fix ZTS build disabling `tsrm_ls_cache` usage.
2022-04-12 02:23:33 +08:00
- Core:
. Fixed Haiku ZTS builds. (David Carlier)
Prepare for PHP 8.0.20
2022-04-26 16:17:50 +08:00
Adding missing NEWS entry
2022-05-05 22:25:35 +08:00
- Date:
Update NEWS
2022-05-26 22:17:33 +08:00
. Fixed bug #72963 (Null-byte injection in CreateFromFormat and related
functions). (Derick)
Adding missing NEWS entry
2022-05-05 22:25:35 +08:00
. Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable
DateTime instances created using reflection). (Derick)
Move FPM ACS fix NEWS entry to 8.0.20
2022-04-30 03:46:38 +08:00
- FPM:
. Fixed ACL build check on MacOS. (David Carlier)
Fix bug #72185: php-fpm writes empty fcgi record causing nginx 502 This issue might happen if there is change of the fcgi stream when the buffer is full. Then the empty record is created which signals end of stream which is incorrect. The actual fix without a test was contributed by GitHub user @loveharmful in GH-3198.
2022-05-08 03:13:50 +08:00
. Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
(Jakub Zelenka, loveharmful)
FPM: Fix use after free in `fpm_evaluate_full_path` Closes #8796.
2022-06-16 05:17:00 +08:00
. Fixes use after free. (Heiko Weber).
Move FPM ACS fix NEWS entry to 8.0.20
2022-04-30 03:46:38 +08:00
[ci skip] missing CVE
2022-06-10 20:31:48 +08:00
- Mysqlnd:
. Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
(c dot fol at ambionics dot io)
[ci skip] NEWS
2022-05-13 18:41:42 +08:00
- OPcache:
. Fixed bug GH-8466 (ini_get() is optimized out when the option does not
exist). (Arnaud)
[ci skip] missing CVE
2022-06-10 20:31:48 +08:00
- Pgsql:
. Fixed bug #81720: Uninitialized array in pg_query_params().
(CVE-2022-31625) (cmb)
Fix pcntl Haiku build guarding SIGIO constant. Closes GH-8612.
2022-05-24 03:20:33 +08:00
- Pcntl:
. Fixed Haiku build. (David Carlier)
Fix GH-8578: Error on wrong parameter on SoapHeader constructor Closes GH-8579.
2022-05-19 03:11:38 +08:00
- Soap:
. Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
(robertnisipeanu)
Fix GH-8538: SoapClient may strip parts of nmtokens When stripping the namespace prefix, we can assume that this does not contain any colons, while the rest of the name may contain colons. Hence we must not use `strrchr()` but rather `strchr()` instead. Closes GH-8543.
2022-05-12 21:23:12 +08:00
. Fixed bug GH-8538 (SoapClient may strip parts of nmtokens). (cmb)
Fix GH-8578: Error on wrong parameter on SoapHeader constructor Closes GH-8579.
2022-05-19 03:11:38 +08:00
Fix GH-8235: iterator_count() may run indefinitely We need to prevent integer overflow to eventually stop the iteration. A test case doesn't appear sensible for this, because even on 32bit architectures a respective test easily runs for a few minutes. Closes GH-8447.
2022-04-27 22:45:03 +08:00
- SPL:
. Fixed bug GH-8235 (iterator_count() may run indefinitely). (cmb)
[ci skip] NEWS
2022-05-02 20:50:16 +08:00
- Zip:
. Fixed type for index in ZipArchive::replaceFile. (Martin Rehberger)
Prepare for PHP 8.0.20
2022-04-26 16:17:50 +08:00
12 May 2022, PHP 8.0.19
Bump version Apparently, this has been forgotten when PHP 8.0.17RC1 and 8.0.18RC1 had been tagged. We also fix the version of the fix for GH-8253, which didn't make it into PHP 8.0.18RC1.
2022-04-05 19:19:02 +08:00
- Core:
. Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are
not rethrown into the generator). (Bob)
Refactor code to avoid duplication
2022-04-14 17:32:10 +08:00
- Date:
. Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
(Derick, Cody Mann)
Fix GH-8433: Assigning function pointers to structs in FFI leaks memory
2022-04-24 20:53:04 +08:00
- FFI:
. Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
(Bob)
Fix bug #76003: FPM /status reports wrong number of active processe The fix introduces early locking of scoreboard when it is updated which prevents the race condition causing an incorrect number of active processes being set.
2022-04-09 20:20:07 +08:00
- FPM:
. Fixed bug #76003 (FPM /status reports wrong number of active processe).
(Jakub Zelenka)
Fix bug #77023: FPM cannot shutdown processes This change introduces subsequent kill of the process when idle process quit (SIGQUIT) does not succeed. It can happen in some situations and means that FPM is not able to scale down in dynamic pm. Using SIGKILL fixes the issue.
2022-04-17 05:49:39 +08:00
. Fixed bug #77023 (FPM cannot shutdown processes). (Jakub Zelenka)
Fix FPM kqueue handler fix remove callback typo It avoids confusion on failed event.
2022-04-18 17:57:34 +08:00
. Fixed comment in kqueue remove callback log message. (David Carlier)
Fix bug #76003: FPM /status reports wrong number of active processe The fix introduces early locking of scoreboard when it is updated which prevents the race condition causing an incorrect number of active processes being set.
2022-04-09 20:20:07 +08:00
Fix GH-8218: ob_end_clean does not reset Content-Encoding header The fix for GH-7953 introduced a regression by being to deliberate adding the respective headers. These must only be added, if the handler starts, but is not finalizing. Closes GH-8353.
2022-04-12 23:18:00 +08:00
- Iconv:
. Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
(cmb)
Fix GH-8364: msgfmt_format $values may not support references We need to deref any references passed in the `$values` array. While we could handle this in the type switch, doing it right away in the foreach loop makes that more explicit, and also circumvents the missing range checks for integers which are not passed as int or double. Closes GH-8407.
2022-04-20 21:38:00 +08:00
- Intl:
. Fixed bug GH-8364 (msgfmt_format $values may not support references). (cmb)
Fix GH-8267: MySQLi uses unsupported format specifier on Windows Instead of using the unsupported `%I64u` and `%I64d` format specifiers on Windows, we use the portable `PRIu64` and `PRId64` specifiers. The `L64()` macro and the `my_longlong` typedef should be adapted as well, as the `i64` literal suffix is still supported by MSVC, but using `LL` or `ll` is recommended[1], and the standard `int64_t` is available there anyway. This is not urgent, though. [1] <https://docs.microsoft.com/en-us/cpp/cpp/numeric-boolean-and-pointer-literals-cpp?view=msvc-170#integer-literals> Closes GH-8268.
2022-03-29 19:53:15 +08:00
- MySQLi:
. Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
(cmb)
Fix GH-8366: ArrayIterator may leak when calling __construct() When we detach an iterator, we also have to delete it. Closes GH-8374.
2022-04-14 22:07:36 +08:00
- SPL:
. Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
(cmb)
Fix GH-8273: SplFileObject: key() returns wrong value
2022-04-07 21:24:04 +08:00
. Fixed bug GH-8273 (SplFileObject: key() returns wrong value). (Girgias)
Fix GH-8366: ArrayIterator may leak when calling __construct() When we detach an iterator, we also have to delete it. Closes GH-8374.
2022-04-14 22:07:36 +08:00
Preserve file-position when php://temp switches to temporary file Closes GH-8333.
2022-04-09 23:49:47 +08:00
- Streams:
. Fixed php://temp does not preserve file-position when switched to temporary
file. (Bernd Holzmüller)
Fix GH-8218: ob_end_clean does not reset Content-Encoding header The fix for GH-7953 introduced a regression by being to deliberate adding the respective headers. These must only be added, if the handler starts, but is not finalizing. Closes GH-8353.
2022-04-12 23:18:00 +08:00
- zlib:
. Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
(cmb)
Bump version Apparently, this has been forgotten when PHP 8.0.17RC1 and 8.0.18RC1 had been tagged. We also fix the version of the fix for GH-8253, which didn't make it into PHP 8.0.18RC1.
2022-04-05 19:19:02 +08:00
14 Apr 2022, PHP 8.0.18
Bump for 8.0.17-dev
2022-02-03 07:44:02 +08:00
Fix freeing of internal attribute arguments
2022-03-08 03:35:16 +08:00
- Core:
. Fixed freeing of internal attribute arguments. (Bob)
Fix memory leak of function attribute hash table (#8070) ==109253== 280 (56 direct, 224 indirect) bytes in 1 blocks are definitely lost in loss record 4 of 4 ==109253== at 0x483B7F3: malloc (in /usr/lib/x86_64-linux-gnu/valgrind/vgpreload_memcheck-amd64-linux.so) ==109253== by 0x6D9FA2: __zend_malloc (zend_alloc.c:3068) ==109253== by 0x745138: zend_add_attribute (zend_attributes.c:226) ==109253== by 0x6680D1: zend_add_parameter_attribute (zend_attributes.h:102) ==109253== by 0x66B787: zm_startup_zend_test (test.c:478) ==109253== by 0x7224CD: zend_startup_module_ex (zend_API.c:2202) ==109253== by 0x72252C: zend_startup_module_zval (zend_API.c:2217) ==109253== by 0x734288: zend_hash_apply (zend_hash.c:2011) ==109253== by 0x722C30: zend_startup_modules (zend_API.c:2328) ==109253== by 0x67409B: php_module_startup (main.c:2256) ==109253== by 0x88EDDE: php_cli_startup (php_cli.c:409) ==109253== by 0x890F61: main (php_cli.c:1334)
2022-03-07 23:32:46 +08:00
. Fixed bug GH-8070 (memory leak of internal function attribute hash).
(Tim Düsterhus)
Fix GH-8160: ZTS support on Alpine is broken We need to export `__MUSL__` so that phpize builds can see the proper macro, and also need to fix "_tsrm_ls_cache" usage for musl. Closes GH-8180.
2022-03-07 19:04:21 +08:00
. Fixed bug GH-8160 (ZTS support on Alpine is broken). (Michael Voříšek)
Move locks in TSRM.c to prevent races Closes GH-8298.
2022-04-03 23:28:44 +08:00
. Fixed potential race condition during resource ID allocation. (ryancaicse)
Fix freeing of internal attribute arguments
2022-03-08 03:35:16 +08:00
Fix signedness confusion in php_filter_validate_domain() As is, there is the possibility that integer underflow occurs, making `_php_filter_validate_domain()` succeed for very long domain names. Cf. <https://pwning.systems/posts/php_filter_var_shenanigans/>.
2022-03-28 17:26:17 +08:00
- Filter:
. Fixed signedness confusion in php_filter_validate_domain(). (cmb)
Fix #81714: segfault when serializing finalized HashContext We must not allow to serialize already finalized `HashContext`s, since the internal context is already freed. Since there is not much point in serializing finalized `HashContext`s, we just bail out in that case. Closes GH-8265.
2022-03-29 17:48:40 +08:00
- Hash:
. Fixed bug #81714 (segfault when serializing finalized HashContext). (cmb)
Fix GH-8142: Compilation error on cygwin * pcntl: SIGPOLL/si_band is unsupported * intl: enable the signal apis with `_POSIX_C_SOURCE` Closes GH-8146.
2022-02-24 03:41:19 +08:00
- Intl:
. Fixed bug GH-8142 (Compilation error on cygwin). (David Carlier)
Fix GH-8208: mb_encode_mimeheader: $indent functionality broken We also need to factor in the indent, when getting the encoder result. Closes GH-8213.
2022-03-17 19:21:02 +08:00
- MBString:
. Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
(cmb)
Fix GH-8068: mysqli_fetch_object creates inaccessible properties When fetching into objects, we need to create object style hash tables, i.e. where numeric column names are stored as string keys instead of integer keys. Instead of the slightly more efficient alternative to create the desired hash table in the first place, we go for the more readable implementation and convert the array style hash table using `zend_symtable_to_proptable()`. Co-authored-by: Kamil Tekiela <tekiela246@gmail.com> Closes GH-8189.
2022-03-11 02:21:06 +08:00
- MySQLi:
. Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
(cmb)
Fix GH-8142: Compilation error on cygwin * pcntl: SIGPOLL/si_band is unsupported * intl: enable the signal apis with `_POSIX_C_SOURCE` Closes GH-8146.
2022-02-24 03:41:19 +08:00
- Pcntl:
. Fixed bug GH-8142 (Compilation error on cygwin). (David Carlier)
Fix result_type related stack corruption on LLP64 architectures Integer parameters are stored in `zend_long` values, which have 64 bits on LLP64, but `long` has only 32 bits there. Adding a test might be overkill, because the broken behavior could already be observed when running pg_select_001.phpt on Windows debug builds, which report the stack corruption. Closes GH-8263.
2022-03-28 21:04:57 +08:00
- PgSQL:
. Fixed result_type related stack corruption on LLP64 architectures. (cmb)
Fix GH-8253: pg_insert() fails for references We need to deref the values. Closes GH-8262.
2022-03-28 20:37:22 +08:00
. Fixed bug GH-8253 (pg_insert() fails for references). (cmb)
Fix result_type related stack corruption on LLP64 architectures Integer parameters are stored in `zend_long` values, which have 64 bits on LLP64, but `long` has only 32 bits there. Adding a test might be overkill, because the broken behavior could already be observed when running pg_select_001.phpt on Windows debug builds, which report the stack corruption. Closes GH-8263.
2022-03-28 21:04:57 +08:00
Fix Solaris builds of ext/sockets We enable the proper ancillary data handling layout and API. Closes GH-7859.
2021-12-31 12:55:04 +08:00
- Sockets:
. Fixed Solaris builds. (David Carlier)
Fix undefined behavior in php_set_inet6_addr Postfix `++` on `NULL` is undefined behavior Closes GH-8607
2022-05-23 01:16:52 +08:00
. Fix undefined behavior in php_set_inet6_addr. (ilutov)
Fix Solaris builds of ext/sockets We enable the proper ancillary data handling layout and API. Closes GH-7859.
2021-12-31 12:55:04 +08:00
Fix GH-8121: SplFileObject - seek and key with csv file inconsistent First, we must not free the current line before we call `spl_filesystem_file_read_csv()`, because then the `current_line` will not be properly updated. Since the EOF check is superfluous here, we move that part of the code to the branch for subtypes. This issue has been introduced by the fix for bug 75917. Second, we only must increase the `current_line` if we're not reading ahead. This issue has been introduced by the fix for bug 62004. Closes GH-8138.
2022-02-28 19:03:26 +08:00
- SPL:
. Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
(cmb)
Fix GH-8048: disk_*_space wrong for some filesystems on macOS A macOS bug in libc statvfs(3) call truncates 64 bit elements (e.g. f_blocks) to 32 bits. Thus, we force macOS to use statfs. Closes GH-8056.
2022-02-08 01:22:50 +08:00
- Standard:
. Fixed bug GH-8048 (Force macOS to use statfs). (risner)
Fix NEWS format
2022-03-01 18:32:28 +08:00
17 Mar 2022, PHP 8.0.17
Haiku fix ZTS build, disabling tls model Closes GH-8047.
2022-02-07 01:18:46 +08:00
- Core:
. Fixed Haiku ZTS build. (David Carlier)
Fixed libpng warning when loading interlaced images We enable interlace transform when reading png. Closes GH-8002.
2022-02-08 09:37:52 +08:00
- GD:
. Fixed libpng warning when loading interlaced images. (Brett)
Fix bug #76109: Implement fpm_scoreboard_copy fpm_scoreboard_copy locks the scoreboard while copying the scoreboard and all proc scoreboards. proc scoreboards are locked one by one while copying each struct. The old implementation (inside fpm_handle_status_request) only briefly locked the scoreboard while copying the scorebard. Closes GH-7931 Co-authored-by: Jakub Zelenka <bukka@php.net>
2018-03-19 20:06:04 +08:00
- FPM:
. Fixed bug #76109 (Unsafe access to fpm scoreboard).
(Till Backhaus, Jakub Zelenka)
Fix GH-7953: ob_clean() only does not set Content-Encoding If an output handler has not yet been started, calling `ob_clean()` causes it to start. If that happens, we must not forget to set the `Content-Encoding` and `Vary` headers. Closes GH-7960.
2022-01-20 23:55:57 +08:00
- Iconv:
. Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding). (cmb)
Fix GH-7980: Unexpected result for iconv_mime_decode We need to reset the shift state right after conversion, to cater to potenially following plain encodings. Also, there is no need to reset the shift for plain encodings, because these are not state-dependent. Closes GH-8025.
2022-02-03 21:26:57 +08:00
. Fixed bug GH-7980 (Unexpected result for iconv_mime_decode). (cmb)
Fix GH-7953: ob_clean() only does not set Content-Encoding If an output handler has not yet been started, calling `ob_clean()` causes it to start. If that happens, we must not forget to set the `Content-Encoding` and `Vary` headers. Closes GH-7960.
2022-01-20 23:55:57 +08:00
Fix bug GH-8058 - mysqlnd segfault when prepare fails Closes GH-8061
2022-02-08 20:08:26 +08:00
- MySQLnd:
. Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package). (Kamil Tekiela)
Fix GH-8074: Wrong type inference of range() result If either the first or second operand of `range()` may be a string, we must not exclude the possibility that the result may be an array of longs. Closes GH-8131.
2022-02-21 23:27:53 +08:00
- OPcache:
. Fixed bug GH-8074 (Wrong type inference of range() result). (cmb)
Fix GH-8080: ReflectionClass::getConstants() depends on def. order When we need to evaluate constant ASTs, we always have to do that in the scope where the constant has been defined, which may be a parent of the `ReflectionClass`'s scope. Closes GH-8106.
2022-02-16 19:32:17 +08:00
- Reflection:
. Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
(cmb)
Fix GH-8273: SplFileObject: key() returns wrong value
2022-04-07 21:24:04 +08:00
. Fixed bug GH-8421 (Closures should accept attributes with
Add missing news entry for GH-8421
2022-04-23 17:21:51 +08:00
Attribute::TARGET_FUNCTION). (ollieread)
Fix GH-8080: ReflectionClass::getConstants() depends on def. order When we need to evaluate constant ASTs, we always have to do that in the scope where the constant has been defined, which may be a parent of the `ReflectionClass`'s scope. Closes GH-8106.
2022-02-16 19:32:17 +08:00
Fix GH-7953: ob_clean() only does not set Content-Encoding If an output handler has not yet been started, calling `ob_clean()` causes it to start. If that happens, we must not forget to set the `Content-Encoding` and `Vary` headers. Closes GH-7960.
2022-01-20 23:55:57 +08:00
- Zlib:
. Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding). (cmb)
Bump for 8.0.17-dev
2022-02-03 07:44:02 +08:00
17 Feb 2022, PHP 8.0.16
Prepare for PHP 8.0.16
2022-01-04 20:40:46 +08:00
Fix #81430: Attribute instantiation leaves dangling pointer By switching attribute constructor stackframe to be called via trampoline the stack allocation is not causing dangling pointers in the zend_observer API anymore. Co-Authored-By: Florian Sowade <f.sowade@suora.com> Co-Authored-By: Christopher Becker <cmbecker69@gmx.de> Co-Authored-By: Dmitry Stogov <dmitry@zend.com> Closes GH-7885.
2022-01-05 18:09:25 +08:00
- Core:
. Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
(beberlei)
Fix GH-7896: Environment vars may be mangled on Windows When bug 77574[1] has been fixed, the fix only catered to variables retrieved via `getenv()` with a `$varname` passed, but neither to `getenv()` without arguments nor to the general import of environment variables into `$_ENV` and `$_SERVER`. We catch up on this by using `GetEnvironmentStringsW()` in `_php_import_environment_variables()` and converting the encoding to whatever had been chosen by the user. [1] <https://bugs.php.net/bug.php?id=75574> Closes GH-7928.
2022-01-11 20:43:42 +08:00
. Fixed bug GH-7896 (Environment vars may be mangled on Windows). (cmb)
Fix #81430: Attribute instantiation leaves dangling pointer By switching attribute constructor stackframe to be called via trampoline the stack allocation is not causing dangling pointers in the zend_observer API anymore. Co-Authored-By: Florian Sowade <f.sowade@suora.com> Co-Authored-By: Christopher Becker <cmbecker69@gmx.de> Co-Authored-By: Dmitry Stogov <dmitry@zend.com> Closes GH-7885.
2022-01-05 18:09:25 +08:00
Fix GH-7867: FFI::cast() from pointer to array is broken Casting from pointer to array is special, so we must not fall back to the general FFI casting. There is a particular issue regarding the size comparison, namely that the pointer size is always 8 for 64bit architectures, but the size of an array is determined by its declaration, so as is casting a pointer to an array with more than 8 elements would fail, but casting to an array with less than 9 elements succeeds, but the internal pointer would point to some arbitrary memory. We fix this by properly supporting the cast. An alternative would be to deny this kind of cast generally, since it is not necessarily safe. However, FFI isn't necessarily safe anyway. We also check pointer/array type compatibility when casting. Co-authored-by: Dmitry Stogov <dmitry@zend.com> Closes GH-7876.
2022-01-11 00:57:46 +08:00
- FFI:
. Fixed bug GH-7867 (FFI::cast() from pointer to array is broken). (cmb,
dmitry)
[ci skip] missing CVE
2022-06-10 20:31:48 +08:00
- Filter:
. Fix #81708: UAF due to php_filter_float() failing for ints.
(CVE-2021-21708) (stas)
Fix memory leak on invalid port Closes GH-7911.
2022-01-08 15:48:28 +08:00
- FPM:
. Fixed memory leak on invalid port. (David Carlier)
Fix GH-7902: mb_send_mail may delimit headers with LF only Email headers are supposed to be separated with CRLF. Period. We introduce a `CRLF` macro for better comprehensibility right away. Closes GH-7907.
2022-01-18 19:01:13 +08:00
- MBString:
. Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only). (cmb)
Strip MariaDB 10 prefix Closes GH-7972
2022-01-20 01:14:08 +08:00
- MySQLnd:
. Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped). (Kamil Tekiela)
Fix ext/sockets build on Haiku The `SOCK_RDM` datagram option is unsupported on Haiku; instead `ifreq` has direct access to `ifr_index`. Closes GH-7849.
2021-12-29 16:53:56 +08:00
- Sockets:
. Fixed ext/sockets build on Haiku. (David Carlier)
Fix GH-7978: sockets extension compilation errors We fix the `ucred` detection when custom `CFLAGS` are in use. Closes GH-7981.
2022-01-21 21:39:30 +08:00
. Fixed bug GH-7978 (sockets extension compilation errors). (David Carlier)
Prepare for PHP 8.0.16
2022-01-04 20:40:46 +08:00
Fix GH-7875: mails are sent even if failure to log throws exception We explicitly check for an exception after the logging attempt, and bail out in that case. Co-authored-by: Tim Düsterhus <timwolla@googlemail.com> Closes GH-7878.
2022-01-04 22:44:56 +08:00
- Standard:
. Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
(cmb)
Prepare for PHP 8.0.16
2022-01-04 20:40:46 +08:00
20 Jan 2022, PHP 8.0.15
Bump for 8.0.15
2021-12-02 13:09:07 +08:00
fix #81656: GCC-11 silently ignores -R Closes GH-7688.
2021-11-25 14:43:14 +08:00
- Core:
. Fixed bug #81656 (GCC-11 silently ignores -R). (Michael Wallner)
Fix #81585: cached_chunks are not counted to real_size on shutdown The amount of allocated system memory is kept in `real_size`, including the allocated `cached_chunks`. Thus, we need to keep the proper count at the end of the shutdown. Closes GH-7745.
2021-12-09 22:36:26 +08:00
. Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
(cmb)
Bump for 8.0.15
2021-12-02 13:09:07 +08:00
Fix FILTER_FLAG_NO_RES_RANGE flag `2001:10::/28` is a reserved IPv6 range. But there's a typo in GH-7476, which caused IPv6 address like `240b:0010::1` will be filtered by the flag `FILTER_FLAG_NO_RES_RANGE`. http://www.faqs.org/rfcs/rfc6890.html Closes GH-7790.
2021-12-19 12:39:54 +08:00
- Filter:
. Fixed FILTER_FLAG_NO_RES_RANGE flag. (Yifan Tong)
Fix GH-7759: Incorrect return types for hash() and hash_hmac() `hash()` and `hash_hmac()` never return `false`; only `hash_file()` and `hash_hmac_file()` return `false` in case the data cannot be read. Closes GH-7760.
2021-12-12 05:16:00 +08:00
- Hash:
. Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
(cmb)
Fix GH-7826: Inconsistent argument name in hash_hmac_file and hash_file Like `hash_file()`, `hash_hmac_file()` expects a filename, and not some string data. Fixing this now, constitutes a (hopefully small) BC break though. Closes GH-7828.
2021-12-26 07:05:03 +08:00
. Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and
hash_file). (cmb)
Fix GH-7759: Incorrect return types for hash() and hash_hmac() `hash()` and `hash_hmac()` never return `false`; only `hash_file()` and `hash_hmac_file()` return `false` in case the data cannot be read. Closes GH-7760.
2021-12-12 05:16:00 +08:00
Fix bug where large bigints may be truncated Unless stringified results are requested, we need to parse large bigints as unsigned, to avoid wrap-around behavior. Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de> Closes GH-7837.
2021-12-29 23:11:14 +08:00
- MySQLnd:
. Fixed bug where large bigints may be truncated. (Nathan Freeman, cmb)
Fix GH-7765: php_oci_cleanup_global_handles segfaults at second call We must not use the TSRM accessor macros in GINIT and GSHUTDOWN, but rather use the passed pointers directly. For simplicity, we inline `php_oci_cleanup_global_handles()`, and also the `PHP_OCI_CALL()` macros; the latter are unlikely to be needed here, but don't hurt. Closes GH-7766.
2021-12-13 01:37:15 +08:00
- OCI8:
. Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second
call). (cmb)
Fix #81679: Tracing JIT crashes on reattaching When a new process reattaches to OPcache, tracing JIT causes segfaults, because each new process allocates its own `zend_jit_traces` and `zend_jit_exit_groups` in SHM, although these need to be shared between all processes. We solve that by only allocating these structs for the first process, and store the pointers in `accel_shared_globals`, so we can reassign them when a new process reattaches. Closes GH-7776.
2021-12-15 18:47:44 +08:00
- OPcache:
. Fixed bug #81679 (Tracing JIT crashes on reattaching). (cmb)
Fix error message allocation of PDO PgSQL Closes GH-7723.
2021-12-06 05:59:52 +08:00
- PDO_PGSQL:
. Fixed error message allocation of PDO PgSQL. (SATO Kentaro)
Avoid void* arithmetic in sockets/multicast.c on NetBSD On NetBSD, ifconf.ifc_buf member, unlike most of platforms, is a void pointer. We also fix the cpuinfo declarations with empty parameter lists. Closes GH-7819.
2021-12-23 22:21:47 +08:00
- Sockets:
. Avoid void* arithmetic in sockets/multicast.c on NetBSD. (David Carlier)
Fix #75917: SplFileObject::seek broken with CSV flags Closes GH-7697.
2021-11-30 21:23:50 +08:00
- Spl:
. Fixed bug #75917 (SplFileObject::seek broken with CSV flags). (Aliaksandr
Bystry)
Bump for 8.0.15
2021-12-02 13:09:07 +08:00
16 Dec 2021, PHP 8.0.14
Prep for 8.0.14
2021-11-02 23:55:12 +08:00
Fixed bug #81582 If __toString() comes from a trait, implement Stringable during inheritance.
2021-11-04 18:28:00 +08:00
- Core:
. Fixed bug #81582 (Stringable not implicitly declared if __toString() came
from a trait). (Nikita)
Fix bug #81591: ignore_repeated_errors broken We should suppress the error if the message is the same, not if it's different. Apparently we had no test coverage for these options.
2021-11-04 23:23:55 +08:00
. Fixed bug #81591 (Fatal Error not properly logged in particular cases).
(Nikita)
Fixed bug #81626 Backport of a8926474cb2c68cde2a7c0d19bcd95cdbda55ad2 to 7.4.
2021-11-16 19:44:51 +08:00
. Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to
Closure::fromCallable()). (Nikita)
Fixed bug #81631 We need to save the opline before fetching the operand, as it may throw an undef var warning.
2021-11-17 23:06:25 +08:00
. Fixed bug #81631 (::class with dynamic class name may yield wrong line
number). (Nikita)
Fixed bug #81582 If __toString() comes from a trait, implement Stringable during inheritance.
2021-11-04 18:28:00 +08:00
Fix bug #81513 (Future possibility for heap overflow in FPM zlog) This fixes currently unused code path in zlog that could lead to the heap overflow in the future.
2021-11-08 04:55:09 +08:00
- FPM:
. Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
(Jakub Zelenka)
Fix #71316: libpng warning from imagecreatefromstring We backport the respective upstream fix[1] to our bundled libgd. [1] <https://github.com/libgd/libgd/commit/636100b9280a86e70d852d89251fc5492fce33f4> Closes GH-7615.
2021-10-26 20:58:17 +08:00
- GD:
. Fixed bug #71316 (libpng warning from imagecreatefromstring). (cmb)
Fix #81649: imap_(un)delete accept sequences, not single numbers As such, the parameter name `$message_num` is utmost misleading; it should be `$message_nums` as for other functions. Closes GH-7686.
2021-11-25 00:03:50 +08:00
- IMAP:
. Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
(cmb)
Fix #75725: ./configure: detecting RAND_egd Closes GH-7668.
2021-11-20 03:30:41 +08:00
- OpenSSL:
. Fixed bug #75725 (./configure: detecting RAND_egd). (Dilyan Palauzov)
Fix #74604: Out of bounds in php_pcre_replace_impl Trying to allocate a `zend_string` with a length only slighty smaller than `SIZE_MAX` causes an integer overflow; we make sure that this doesn't happen by catering to the maximal overhead of a `zend_string`. Closes GH-7597.
2021-11-29 22:48:41 +08:00
- PCRE:
. Fixed bug #74604 (Out of bounds in php_pcre_replace_impl). (cmb, Dmitry)
Fixed bug #81587 iterator_funcs_ptr may be null for Iterators with custom get_iterator. Ideally MultipleIterator would make use of get_iterator, but this would require a large implementation change.
2021-11-04 17:34:52 +08:00
- SPL:
. Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement
attached). (Nikita)
Fix bug #81618: Correct dns_get_record on FreeBSD Modify dns_get_record to test for records result based on dns_errno to accommodate modern FreeBSD, for which res_nsearch() does not update h_errno directly. Add new php_dns_errno macro, and have it consult statp->res_h_errno when OS has res_nsearch(). Closes GH-7655.
2021-11-14 10:27:31 +08:00
- Standard:
. Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
(fsbruva)
Fix #81659: stream_get_contents() may unnecessarily overallocate Since we're going to read from the current stream position anyway, the `max_len` should be the size of the file minus the current position (still catering to potentially filtered streams). We must, however, make sure to cater to the file position being beyond the actual file size. While we're at, we also fix the step size in the comment, which is 8K. A further optimization could be done for unfiltered streams, thus saving that step size, but 8K might not be worth it. Closes GH-7693.
2021-11-26 20:44:36 +08:00
. Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
(cmb)
Fix bug #81618: Correct dns_get_record on FreeBSD Modify dns_get_record to test for records result based on dns_errno to accommodate modern FreeBSD, for which res_nsearch() does not update h_errno directly. Add new php_dns_errno macro, and have it consult statp->res_h_errno when OS has res_nsearch(). Closes GH-7655.
2021-11-14 10:27:31 +08:00
Prep for 8.0.14
2021-11-02 23:55:12 +08:00
18 Nov 2021, PHP 8.0.13
[ci skip] Fix NEWS PHP 8.0.12RC1 has already been tagged a week ago, so later changes target PHP 8.0.13.
2021-10-12 19:34:25 +08:00
Fix #81518: Header injection via default_mimetype / default_charset We forbid setting these INI options to values containing NUL bytes, CR or LF. Closes GH-7574.
2021-10-12 21:34:25 +08:00
- Core:
. Fixed bug #81518 (Header injection via default_mimetype / default_charset).
(cmb)
Fix #81500: Interval serialization regression since 7.3.14 / 7.4.2 While it may not be desired, `DateInterval::$f` supports negative values, at least with regard to calculations. We still need to guard from assigning double values which are out of range for signed 64bit integers (which would be undefined behavior). zend_dval_to_lval() does this by returning `0` instead of triggering UB. This way we can avoid setting the invalid marker, which doesn't work as expected anyway. We must not do that only for unserialization, but also when the property is set in the first place. We need to adapt some of the existing tests wrt. this behavior. In particular, we check for an arbitrary value in bug79015.phpt, to cater to differences between 32bit and 64bit architectures. Closes GH-7575.
2021-10-15 23:35:16 +08:00
- Date:
. Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
(cmb)
Fix Bug #81588 TokyoCabinet driver leaks memory
2021-11-03 22:56:24 +08:00
- DBA:
. Fixed bug #81588 (TokyoCabinet driver leaks memory). (girgias)
Fix #76167: mbstring may use pointer from some previous request We must not reuse per-request memory across multiple requests, so this check triggered during RINIT makes no sense. As explained in the bug report[1], it can be even harmful, if some request startup fails, and the pointers refer to already freed memory in the next request. [1] <https://bugs.php.net/76167> Closes GH-7604.
2021-10-21 19:52:23 +08:00
- MBString:
. Fixed bug #76167 (mbstring may use pointer from some previous request).
(cmb, cataphract)
[ci skip] Fix NEWS PHP 8.0.12RC1 has already been tagged a week ago, so later changes target PHP 8.0.13.
2021-10-12 19:34:25 +08:00
- Opcache:
. Fixed bug #81512 (Unexpected behavior with arrays and JIT). (Dmitry)
Fix bug #81652 We need to check not only for defs but also for uses of the variable.
2021-11-24 22:18:31 +08:00
. Fixed bug #81652 (The value of error_reporting() gets overridden). (Nikita)
[ci skip] Fix NEWS PHP 8.0.12RC1 has already been tagged a week ago, so later changes target PHP 8.0.13.
2021-10-12 19:34:25 +08:00
Fix #81424: PCRE2 10.35 JIT performance regression We backport the respective upstream fix[1] to our bundled pcre2lib plus the follow-up fix[2] for a functional regression. [1] <https://github.com/PhilipHazel/pcre2/commit/dc5f96663597572f694147aeec3525003c351123> [2] <https://github.com/PhilipHazel/pcre2/commit/e7af7efaa11f71b187b0432e9e60f18ba4d90a0c> Closes GH-7573.
2021-10-12 18:04:16 +08:00
- PCRE:
. Fixed bug #81424 (PCRE2 10.35 JIT performance regression). (cmb)
[ci skip] Update NEWS
2021-11-15 15:35:26 +08:00
- XML:
[ci skip] Fix news entry for bug #79971
2021-11-16 20:06:04 +08:00
. Fixed bug #79971 (special character is breaking the path in xml function).
[ci skip] Update NEWS
2021-11-15 15:35:26 +08:00
(CVE-2021-21707) (cmb)
Prepare branch for 7.4.26-dev
2021-10-06 00:25:43 +08:00
Fix bug #81521 The current error message is incorrect -- the problem here is not that the property is invalid, but that these methods are unusable prior to loading data, same as read().
2021-10-12 22:41:37 +08:00
- XMLReader:
. Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid
property). (Nikita)
[ci skip] Fix NEWS PHP 8.0.12RC1 has already been tagged a week ago, so later changes target PHP 8.0.13.
2021-10-12 19:34:25 +08:00
21 Oct 2021, PHP 8.0.12
Prep for 8.0.12
2021-09-07 23:16:04 +08:00
Fix #81496: CLI server logs wrong request method
2021-10-03 17:21:35 +08:00
- CLI:
. Fixed bug #81496 (Server logs incorrect request method). (lauri)
Fix #81435 Observer current_observed_frame may point to an old (overwritten) frame Ensure current_observed_frame always points to an actually observed frame. This solution has a caveat of being O(stack size), with the worst case occurring if there are a lot of frames between the current and previous observed frames. An O(1) solution would require keeping track of the previous observed frame, which would require some additional frame attached metadata, which is best not attempted in an already released version.
2021-09-13 21:58:58 +08:00
- Core:
. Fixed bug #81435 (Observer current_observed_frame may point to an old
(overwritten) frame). (Bob)
Fix #81380 observer may not be initialized properly
2021-09-28 22:58:18 +08:00
. Fixed bug #81380 (Observer may not be initialized properly). (krakjoe)
Fix #81435 Observer current_observed_frame may point to an old (overwritten) frame Ensure current_observed_frame always points to an actually observed frame. This solution has a caveat of being O(stack size), with the worst case occurring if there are a lot of frames between the current and previous observed frames. An O(1) solution would require keeping track of the previous observed frame, which would require some additional frame attached metadata, which is best not attempted in an already released version.
2021-09-13 21:58:58 +08:00
Fix #81433: DOMElement::setIdAttribute() called twice may remove ID We must only remove the attribute id, if the user requested that. Closes GH-7482.
2021-09-10 15:14:18 +08:00
- DOM:
. Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
(Viktor Volkov)
Prep for 8.0.12
2021-09-07 23:16:04 +08:00
Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined)
2021-09-15 19:48:33 +08:00
- FFI:
. Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not
defined). (Dmitry)
NEWS: Add note for bug #78987 Signed-off-by: Anatol Belski <ab@php.net>
2021-09-19 22:37:33 +08:00
- Fileinfo:
. Fixed bug #78987 (High memory usage during encoding detection). (Anatol)
Fix #61700: FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing It makes no sense to compare IPv6 address ranges as strings; there are too many different representation possibilities. Instead, we change `_php_filter_validate_ipv6()` so that it can calculate the IP address as integer array. We do not rely on `inet_pton()` which may not be available everywhere, at least IPv6 support may not, but rather parse the IP address manually. Finally, we compare the integers. Note that this patch does not fix what we consider as reserved and private, respectively, but merely tries to keep what we had so far. Co-authored-by: Nikita Popov <nikita.ppv@gmail.com> Closes GH-7476.
2021-09-20 22:19:21 +08:00
- Filter:
. Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
(cmb, Nikita)
[ci skip] Fix NEWS Bug #81026 has already been fixed in PHP 7.4.25 and 8.0.12.
2021-10-25 18:48:58 +08:00
- FPM:
. Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege
escalation) (CVE-2021-21703). (Jakub Zelenka)
Fix bug #81472: Support large device major/minor number Latest linux kernel use large number (12 bits for major device, 20 bits for minor device). Current code only supports previous standard (5 chars), which means 8 bits for major and 8 bits for minor device. It will fail if device number is out of that range. So this patch increases device number read from /proc/self/maps file. Closes GH-7512.
2021-09-24 13:33:48 +08:00
- Opcache:
. Fixed bug #81472 (Cannot support large linux major/minor device number when
read /proc/self/maps). (Lin Yang)
Fix bug #81474: Make ReflectionAttribute non-final This backports GH-7520 to PHP 8.0. Closes GH-7545.
2021-10-02 16:50:08 +08:00
- Reflection:
. ReflectionAttribute is no longer final. (sasezaki)
Fix #80663: Recursive SplFixedArray::setSize() may cause double-free We address the `::setSize(0)` case by setting `array->element = NULL` and `array->size = 0` before we destroy the elements. Co-authored-by: Tyson Andre <tyson.andre@uwaterloo.ca> Closes GH-7503.
2021-09-21 22:30:23 +08:00
- SPL:
. Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
(cmb, Nikita, Tyson Andre)
Fix #81477: LimitIterator + SplFileObject regression in 8.0.1 We must not free the read line, if the `READ_AHEAD` flag is set. This also restores the expectations of SplFileObject_next_variation002.phpt. Closes GH-7518.
2021-09-27 19:07:04 +08:00
. Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1). (cmb)
Fix #80663: Recursive SplFixedArray::setSize() may cause double-free We address the `::setSize(0)` case by setting `array->element = NULL` and `array->size = 0` before we destroy the elements. Co-authored-by: Tyson Andre <tyson.andre@uwaterloo.ca> Closes GH-7503.
2021-09-21 22:30:23 +08:00
Fix bug #69751 Change error message of sprintf/printf for missing/invalid position specifier to make it clear that this is talking about the specifier, not the number of arguments passed to the function. Also mention the upper limit of INT_MAX. Closes GH-7515.
2021-09-25 23:43:53 +08:00
- Standard:
. Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo
position specifier). (Aliaksandr Bystry)
Fix #81475: stream_isatty emits warning with attached stream wrapper We must not issue warnings, if `show_err` is false. Closes GH-7513.
2021-09-24 23:16:22 +08:00
- Streams:
. Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
(cmb)
Fix #70962: XML_OPTION_SKIP_WHITE strips embedded whitespace We must never strip embedded whitespace; we only need to skip values when that option is set, and make sure that we keep BC regarding the different behavior for "cdata" and "complete" elements (for the former, the whole element is skipped; for the latter only the "value" key). We also fix erroneous `int` types which should actually be `size_t`. Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de> Closes GH-7493.
2021-09-16 01:50:16 +08:00
- XML:
. Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
(Aliaksandr Bystry, cmb)
Fix #81490: ZipArchive::extractTo() may leak memory We always need to free the CWD state. Closes GH-7536.
2021-09-30 20:15:41 +08:00
- Zip:
. Fixed bug #81490 (ZipArchive::extractTo() may leak memory). (cmb, Remi)
Fix #77978: Dirname ending in colon unzips to wrong dir When making the relative path, we must not stop on a `:\` sequence in the middle of the filename. This is only significant on Windows as it may indicate an absolute filename, but this is already checked at the beginning of the function. Note that the bug and this patch affects all systems. However, on Windows the file is no longer extracted at all, since Windows NTSF does not allow filenames containing colons. Closes GH-7528.
2021-09-29 18:09:13 +08:00
. Fixed bug #77978 (Dirname ending in colon unzips to wrong dir). (cmb)
Fix #81490: ZipArchive::extractTo() may leak memory We always need to free the CWD state. Closes GH-7536.
2021-09-30 20:15:41 +08:00
Prep for 8.0.12
2021-09-07 23:16:04 +08:00
23 Sep 2021, PHP 8.0.11
Prepare for PHP 8.0.11
2021-08-10 17:46:56 +08:00
Fix #81302: Stream position after stream filter removed When flushing the stream filters actually causes data to be written to the stream, we need to update its position, because that is not done by the streams' write methods. Closes GH-7354.
2021-08-10 17:55:18 +08:00
- Core:
. Fixed bug #81302 (Stream position after stream filter removed). (cmb)
Fix #81346: Non-seekable streams don't update position after write The stream position is not related to the buffer, and needs to be updated for non-seekable streams as well. The erroneous condition around the position update is a relict of an old commit[1]. The unexpected test expectation is due to bug #81345. [1] <https://github.com/php/php-src/commit/088e2692c3d1e680fd3d9306c4adb417e761acff> Closes GH-7356.
2021-08-10 21:37:39 +08:00
. Fixed bug #81346 (Non-seekable streams don't update position after write).
(cmb)
Fix #73122: Integer Overflow when concatenating strings We must avoid integer overflows in memory allocations, so we introduce an additional check in the VM, and bail out in the rare case of an overflow. Closes GH-7381.
2021-08-17 22:56:52 +08:00
. Fixed bug #73122 (Integer Overflow when concatenating strings). (cmb)
Prepare for PHP 8.0.11
2021-08-10 17:46:56 +08:00
Fix #53580: During resize gdImageCopyResampled cause colors change We port the upstream fix[1], and also revert commit a3383ac3d7[2] which is now obsolete, and also not part of libgd. Especially the change to gd.png.c was at best a half-baked optimization. [1] <https://github.com/libgd/libgd/commit/a24e96f01989bf9ca05a08d33862a08d6f4c4ed6> [2] <https://github.com/php/php-src/commit/a3383ac3d7e21e54b1d7d89f308088d0692abc9f> Closes GH-7402.
2021-08-25 21:36:24 +08:00
-GD:
. Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
(cmb)
Fixed bug #81353 A user-defined error handler should not be invoked for preload warnings. We are in a partially shut-down state at that point.
2021-08-16 21:02:24 +08:00
- Opcache:
. Fixed bug #81353 (segfault with preloading and statically bound closure).
(Nikita)
Fix #81407: shmop_open won't attach and causes php to crash We need to allocate buffers for the file mapping names which are large enough for all potential keys (`key_t` is defined as `int` on Windows). Regarding the test: it's probably never a good idea to use hard-coded keys (should always use `ftok()` instead), but to reliably reproduce this Windows specific issue we need to, and it shouldn't be an issue on that OS. Closes GH-7448.
2021-09-02 22:15:29 +08:00
- Shmop:
. Fixed bug #81407 (shmop_open won't attach and causes php to crash). (cmb)
Fix #71542: disk_total_space does not work with relative paths For ZTS builds, we need to expand the path given to `disk_free_space()` and `disk_total_space()` to properly support the VCWD. Closes GH-7377.
2021-08-16 21:43:36 +08:00
- Standard:
. Fixed bug #71542 (disk_total_space does not work with relative paths). (cmb)
Fix #81400: Unterminated string in dns_get_record() results If we assemble a zend_string manually, we need to end it with a NUL byte ourselves. We also fix the size calculation for that zend_string; there is no need for the extra byte for each part, and we don't have to multiply by two, since we're using DnsQuery_A(), not DnsQuery_W () (in which case we would have to do the character set conversion, anyway). This avoids over-allocation, and the need to explicitly set the string length. Finally, we use the proper access macro for zend_strings. Closes GH-7427.
2021-08-30 22:17:17 +08:00
. Fixed bug #81400 (Unterminated string in dns_get_record() results). (cmb)
Fix #71542: disk_total_space does not work with relative paths For ZTS builds, we need to expand the path given to `disk_free_space()` and `disk_total_space()` to properly support the VCWD. Closes GH-7377.
2021-08-16 21:43:36 +08:00
Fix #78819: Heap Overflow in msg_send We need to use the proper type. Closes GH-7386.
2021-08-18 20:12:10 +08:00
- SysVMsg:
. Fixed bug #78819 (Heap Overflow in msg_send). (cmb)
Fix #81351: xml_parse may fail, but has no error code The fix for bug #73151[1] cured the symptoms, but not the root cause, namely xmlParse() must not be called recursively. Since that bugfix also messed up the error handling, we basically revert it (but also simplify the return), and then prevent calling the parser recursively. [1] <https://github.com/php/php-src/pull/2166/commits/f2a8a8c068995a5d780882c556cedd53bce3827d> Co-authored-by: Nikita Popov <nikita.ppv@gmail.com> Closes GH-7363.
2021-08-13 22:09:11 +08:00
- XML:
. Fixed bug #81351 (xml_parse may fail, but has no error code). (cmb, Nikita)
NEWS + bump zip version
2021-09-01 21:51:24 +08:00
- Zip:
. Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword). (Remi)
[ci skip] Add missing NEWS entry
2021-09-21 17:21:26 +08:00
. Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
[ci skip] Add missing CVE to NEWS
2021-09-21 19:02:42 +08:00
(CVE-2021-21706) (cmb)
NEWS + bump zip version
2021-09-01 21:51:24 +08:00
Prepare for PHP 8.0.11
2021-08-10 17:46:56 +08:00
26 Aug 2021, PHP 8.0.10
Bump to 8.0.10
2021-07-13 22:10:35 +08:00
Fix #72595: php_output_handler_append illegal write access We must make sure that `handler->buffer.size + grow_max` does not overflow, so we're using `safe_erealloc()` instead. Closes GH-7241.
2021-07-14 23:55:15 +08:00
- Core:
. Fixed bug #72595 (php_output_handler_append illegal write access). (cmb)
Fix bug #66719 While parent:: should inherit the called scope, it should only do so if it is compatible. If there is no called scope, or it is not a subtype of the scope, we should fall back to the scope.
2021-07-23 17:17:29 +08:00
. Fixed bug #66719 (Weird behaviour when using get_called_class() with
call_user_func()). (Nikita)
Fix #81305: Built-in Webserver Drops Requests With "Upgrade" Header While our HTTP parser supports upgrade requests, the code using it does not. Since upgrade requests are only valid for HTTP/1.1 and we neither support any higher version, nor HTTPS yet, we do not exit early in case of such requests, i.e. we ignore them, what is allowed by the specs. We keep the supporting code in case we can meaningfully support upgrade requests in the future. Closes GH-7316.
2021-07-29 18:19:35 +08:00
. Fixed bug #81305 (Built-in Webserver Drops Requests With "Upgrade" Header).
(cmb)
Fix #72595: php_output_handler_append illegal write access We must make sure that `handler->buffer.size + grow_max` does not overflow, so we're using `safe_erealloc()` instead. Closes GH-7241.
2021-07-14 23:55:15 +08:00
Fix #78238: BCMath returns "-0" There is no negative zero in the decimal system, so we must suppress the sign. Closes GH-7250.
2021-07-16 20:49:25 +08:00
- BCMath:
. Fixed bug #78238 (BCMath returns "-0"). (cmb)
Fix #80849: HTTP Status header truncation While truncating the contents of a header is okay, we must never omit the trailing CRLF. Closes GH-7238.
2021-07-15 23:50:44 +08:00
- CGI:
. Fixed bug #80849 (HTTP Status header truncation). (cmb)
Upgrade timelib to version 2020.03
2021-08-08 19:11:18 +08:00
- Date:
. Fixed bug #64975 (Error parsing when AM/PM not at the end). (Derick)
. Fixed bug #78984 (DateTimeZone accepting invalid UTC timezones). (Derick)
. Fixed bug #79580 (date_create_from_format misses leap year). (Derick)
. Fixed bug #80409 (DateTime::modify() loses time with 'weekday' parameter).
(Derick)
Fix #51498: imagefilledellipse does not work for large circles We backport the respective upstream fix[1]. [1] <https://github.com/libgd/libgd/commit/ace7fd88dc7571b3aa182f6b2604292f8461a819> Closes GH-7329.
2021-08-02 17:05:57 +08:00
- GD:
. Fixed bug #51498 (imagefilledellipse does not work for large circles). (cmb)
Fix #74544: Integer overflow in mysqli_real_escape_string() The patch has been provided by @johannes. Closes GH-7353.
2021-08-09 18:48:21 +08:00
- MySQLi:
. Fixed bug #74544 (Integer overflow in mysqli_real_escape_string()). (cmb,
johannes)
Fixed bug #81225 (Wrong result with pow operator with JIT enabled)
2021-07-19 15:39:52 +08:00
- Opcache:
. Fixed bug #81225 (Wrong result with pow operator with JIT enabled).
(Dmitry)
Fixed bug #81249 (Intermittent property assignment failure with JIT enabled)
2021-07-19 17:11:09 +08:00
. Fixed bug #81249 (Intermittent property assignment failure with JIT
enabled). (Dmitry)
Fix #81206: Multiple PHP processes crash with JIT enabled We need to avoid resetting the JIT for all SAPIs, but we need to initialize the JIT handlers even when only reattaching on Windows. Closes GH-7208.
2021-07-17 19:27:45 +08:00
. Fixed bug #81206 (Multiple PHP processes crash with JIT enabled). (cmb,
Nikita)
Fix bug #81272: Fix func info for functions returning EMPTY_ARRAY The empty array has refcount > 1, so we should indicate this in func info. In most cases this renders the func info redundant, so drop it entirely.
2021-07-20 20:23:48 +08:00
. Fixed bug #81272 (Segfault in var[] after array_slice with JIT). (Nikita)
Fixed Bug #81255 (Memory leak in PHPUnit with functional JIT)
2021-07-21 03:14:32 +08:00
. Fixed Bug #81255 (Memory leak in PHPUnit with functional JIT). (Dmitry)
Fixed Bug #80959 (infinite loop in building cfg during JIT compilation)
2021-07-21 19:32:44 +08:00
. Fixed Bug #80959 (infinite loop in building cfg during JIT compilation)
(Nikita, Dmitry)
Fixed bug #81226 (Integer overflow behavior is different with JIT enabled)
2021-07-22 00:28:43 +08:00
. Fixed bug #81226 (Integer overflow behavior is different with JIT
enabled). (Dmitry)
Fixed bug #81225 (Wrong result with pow operator with JIT enabled)
2021-07-19 15:39:52 +08:00
Fix #81327: Error build openssl extension on php 7.4.22 The recent fix for bug 52093 is not compatible with LibreSSL ≥ 2.7.0, which we recognize as mostly OpenSSL 1.1.0 compatible, but they still do not support `ASN1_INTEGER_set_int64()`. Closes GH-7339.
2021-08-04 21:15:26 +08:00
- OpenSSL:
. Fixed bug #81327 (Error build openssl extension on php 7.4.22). (cmb)
Fix #81252: PDO_ODBC doesn't account for SQL_NO_TOTAL If `P->len` is negative (not only when it is `SQL_NULL_DATA`), we must not go on, because the following code can't deal with that. This means that the output parameter will be set to `NULL` without any indication what went wrong, but it's still better than crashing. Closes GH-7295.
2021-07-21 21:13:15 +08:00
- PDO_ODBC:
. Fixed bug #81252 (PDO_ODBC doesn't account for SQL_NO_TOTAL). (cmb)
Fix #81283: shmop can't read beyond 2147483647 bytes `start`, `count` and `shmop->size` are `zend_long`, so we must not restrict to `INT_MAX`. Closes GH-7301.
2021-07-23 18:43:03 +08:00
- Shmop:
. Fixed bug #81283 (shmop can't read beyond 2147483647 bytes). (cmb, Nikita)
NEWS
2021-08-03 18:07:46 +08:00
- SimpleXML:
. Fixed bug #81325 (Segfault in zif_simplexml_import_dom). (remi)
Fix #72146: Integer overflow on substr_replace Adding two `zend_long`s may overflow, and casting `size_t` to `zend_long` may truncate; we can avoid this here by enforcing unsigned arithmetic. Closes GH-7240.
2021-07-14 23:20:51 +08:00
- Standard:
. Fixed bug #72146 (Integer overflow on substr_replace). (cmb)
Fix bug #81265: getimagesize returns 0 for 256px ICO images Set ICO height/width to 256 if 0.
2021-07-16 09:03:04 +08:00
. Fixed bug #81265 (getimagesize returns 0 for 256px ICO images).
(George Dietrich)
Fix #74960: Heap buffer overflow via str_repeat Trying to allocate a `zend_string` with a length only slighty smaller than `SIZE_MAX` causes an integer overflow, so callers may need to check that explicitly. To make that easy in a portable way, we introduce `ZSTR_MAX_LEN`. Closes GH-7294.
2021-07-21 19:55:13 +08:00
. Fixed bug #74960 (Heap buffer overflow via str_repeat). (cmb, Dmitry)
Bump to 8.0.10
2021-07-13 22:10:35 +08:00
Fix #81294: Segfault when removing a filter We need to call the proper method. Closes GH-7308.
2021-07-26 20:12:02 +08:00
- Streams:
. Fixed bug #81294 (Segfault when removing a filter). (cmb)
Bump to 8.0.10
2021-07-13 22:10:35 +08:00
29 Jul 2021, PHP 8.0.9
Prepare for PHP 8.0.9
2021-06-15 15:19:13 +08:00
Fix #81145: copy() and stream_copy_to_stream() fail for +4GB files When mapping the file, we need to pass the proper `dwFileOffsetHigh` instead of `0`. Co-authored-by: Nikita Popov <nikita.ppv@gmail.com> Closes GH-7158.
2021-06-17 17:37:51 +08:00
- Core:
. Fixed bug #81145 (copy() and stream_copy_to_stream() fail for +4GB files).
(cmb, Nikita)
Fix bug #81163 indirect vars in __sleep
2021-06-18 17:01:54 +08:00
. Fixed bug #81163 (incorrect handling of indirect vars in __sleep).
(krakjoe)
Merge branch 'PHP-7.4' into PHP-8.0 * PHP-7.4: Fix bug #80728: Don't reset the timeout on ini deactivate
2021-06-29 22:37:09 +08:00
. Fixed bug #81159 (Object to int warning when using an object as a string
offset). (girgias)
Fix bug #80728: Don't reset the timeout on ini deactivate When the time limit for a script is changed, when the script ends, its INI value will be reset. This calls the event handler for the timeout change, which will unset then reset the timeout. However, this is done even if the script is done executing, and say, the CGI or CLI web server process is idle. This is probably incorrect, but isn't a problem on most platforms, because PHP uses a timer that only ticks when the process is active (that is, executing code). Since when it's idle, it's blocking on listen/read, it won't tick because nothing executes. However, on platforms where only the real-time timer is supported, (Cygwin/PASE) it ticks regardless of if PHP is even executing. This means that the idle processes are subject to timeouts from the INI reset on script end. This makes it so the timer is never set if the state is deactivating. Testing with the CLI web server indicates the timer no longer spuriously activates under PASE. Closes GH-6683.
2021-02-13 02:16:56 +08:00
. Fixed bug #80728 (PHP built-in web server resets timeout when it can kill
the process). (Calvin Buckley)
Fix #73630: Built-in Weberver - overwrite $_SERVER['request_uri'] The built-in Webserver's `on_path`, `on_query_string` and `on_url` callbacks may be called multiple times from the parser; we must not simply replace the old values, but need to concatenate the new values instead. This appears to be tricky for `on_path` due to the path normalization, so we fail if the function is called again. The built-in Webserver logs errors during request parsing to stderr, but this is ignored by the php_cli_server framework, and apparently the Webserver does not send a resonse at all in such cases (instead of an 4xx). Thus we can only check that a request with an overly long path fails. Closes GH-7207.
2021-06-30 19:46:43 +08:00
. Fixed bug #73630 (Built-in Weberver - overwrite $_SERVER['request_uri']).
(cmb)
Fixed bug #80173 The analysis in the bug report wasn't correct (at least not in this case -- there may still be a more general problem here), the issue was that write_property returned the original variable_ptr rather than the zend_assign_to_variable() return value, which will DEREF the variable before overwriting it.
2021-07-02 16:05:57 +08:00
. Fixed bug #80173 (Using return value of zend_assign_to_variable() is not
safe). (Nikita)
Fix #73226: --r[fcez] always return zero exit code This makes the behavior consistent with `--ri`, and is likely useful for scripting. Closes GH-7221.
2021-07-07 22:18:21 +08:00
. Fixed bug #73226 (--r[fcez] always return zero exit code). (cmb)
Fix #81145: copy() and stream_copy_to_stream() fail for +4GB files When mapping the file, we need to pass the proper `dwFileOffsetHigh` instead of `0`. Co-authored-by: Nikita Popov <nikita.ppv@gmail.com> Closes GH-7158.
2021-06-17 17:37:51 +08:00
Fix #72809: Locale::lookup() wrong result with canonicalize option Canonicalization converts the locale to ICU format[1]. However, the lookup described in RFC 4647, section 3.4, is about POSIX format. To make that lookup work for ICU format, we also need to cater to keyword separators. The results are somewhat unexpected, but apparently canonical lookup is explicitly supposed to return canonical language tags[2]. [1] <https://unicode-org.github.io/icu/userguide/locale/#canonicalization> [2] <https://github.com/php/php-src/blob/php-7.4.20/ext/intl/locale/locale_methods.c#L1504> Closes GH-7151.
2021-06-14 21:01:42 +08:00
- Intl:
. Fixed bug #72809 (Locale::lookup() wrong result with canonicalize option).
(cmb)
Fix #68471: IntlDateFormatter fails for "GMT+00:00" timezone GMT+00:00 is recognized by ICU, and is normalized to GMT. There are no issues when GMT+00:00 is passed to `IntlTimeZone::createTimeZone()`, but passing it to IntlDateFormatter::__construct() causes a failure, since there is an additional check regarding the validity. While checking the validity of the result of `TimeZone::createTimeZone()`[1] is a good idea, comparing the IDs is overly restrictive. Instead we just check that the timezone is supported by ICU. [1] <https://unicode-org.github.io/icu-docs/apidoc/dev/icu4c/classicu_1_1TimeZone.html#a35da0507b62754ffe5d8d59c19775cdb> Closes GH-7190.
2021-06-24 00:19:31 +08:00
. Fixed bug #68471 (IntlDateFormatter fails for "GMT+00:00" timezone). (cmb)
Fix #74264: grapheme_strrpos() broken for negative offsets We must not assume that `usearch_last()` gives the proper result for negative offsets. Instead we'd need to continue to search backwards (`usearch_previous`) until we find a proper match. However, apparently searching backwards is broken, so we work around by searching forward from the start of the string until we pass the `offset_pos`, and then use the previous result. Closes GH-7189.
2021-07-05 22:04:14 +08:00
. Fixed bug #74264 (grapheme_strrpos() broken for negative offsets). (cmb)
Prepare for 7.4.22
2021-06-16 02:52:02 +08:00
Fix #52093: openssl_csr_sign truncates $serial We use `ASN1_INTEGER_set_int64()` if supported[1], to avoid the truncation of the integer. [1] <https://www.openssl.org/docs/man1.1.0/man3/ASN1_INTEGER_set_int64.html#HISTORY> Closes GH-7209.
2021-07-01 17:47:46 +08:00
- OpenSSL:
. Fixed bug #52093 (openssl_csr_sign truncates $serial). (cmb)
NEWS: Add bug #81101 note [ci skip] Signed-off-by: Anatol Belski <ab@php.net>
2021-06-19 22:54:11 +08:00
- PCRE:
. Fixed bug #81101 (PCRE2 10.37 shows unexpected result). (Anatol)
Fix #81243: Too much memory is allocated for preg_replace() Trimming a potentially over-allocated string appears to be reasonable, so we drop the condition altogether. We also re-allocate twice the size needed in the first place, and not roughly tripple the size. Closes GH-7231.
2021-07-12 22:35:35 +08:00
. Fixed bug #81243 (Too much memory is allocated for preg_replace()). (cmb)
NEWS: Add bug #81101 note [ci skip] Signed-off-by: Anatol Belski <ab@php.net>
2021-06-19 22:54:11 +08:00
Fixed bug #81208 The number of populated positional arguments is argc. i may also include named args and thus try to dtor uninitialized zvals.
2021-07-01 19:36:57 +08:00
- Reflection:
. Fixed bug #81208 (Segmentation fault while create newInstance from
attribute). (Nikita)
Fix #81223: flock() only locks first byte of file `flock()` should lock the whole file, like on other systems which use mandatory locking. We cannot use `0` like for `flck.l_len`, so we use the largest number, what is valid according to the documentation: <https://docs.microsoft.com/en-us/windows/win32/api/fileapi/nf-fileapi-lockfileex#remarks>. Closes GH-7216.
2021-07-05 23:14:32 +08:00
- Standard:
. Fixed bug #81223 (flock() only locks first byte of file). (cmb)
Prepare for PHP 8.0.9
2021-06-15 15:19:13 +08:00
17 Jun 2021, PHP 8.0.8
Prep for 8.0.8
2021-05-20 03:18:56 +08:00
Fix #81076 Invalid implicit binds cause incorrect count in static vars of closure debug info
2021-05-24 13:26:56 +08:00
- Core:
. Fixed bug #81076 (incorrect debug info on Closures with implicit binds).
(krakjoe)
Fix bug #81068: Fix possible use-after-free in realpath_cache_clean() If ZTS is enabled, this can cause cwd_globals_ctor() to be called multiple times, each with a freshly allocated virtual_cwd_globals instance. At shutdown time however, cwd_globals_dtor() will call realpath_cache_clean(), which then possibly cleans up the same realpath_cache instance more than once. Using AddressSanitzer, this shows up as a heap use-after-free. To avoid this, add a helper function to do the actual work on one instance of a realpath_cache, and call it both from cwd_globals_dtor() and realpath_cache_clean(). The former uses the virtual_cwd_globals parameter passed in via the destructor, the latter uses the CWDG() macro.
2021-05-22 02:35:54 +08:00
. Fixed bug #81068 (Double free in realpath_cache_clean()). (Dimitry Andric)
Fix #76359: open_basedir bypass through adding ".." We explicitly forbid adding paths with a leading `..` to `open_basedir` at runtime. Closes GH-7024.
2021-05-21 21:00:41 +08:00
. Fixed bug #76359 (open_basedir bypass through adding ".."). (cmb)
Fixed bug #81090 For concatenation, the in-place variant can be much more efficient, because it will reallocate the string in-place. Special-case the typed property compound assignment code for the case where we concatenate to a string, in which case we know that the result will also be a string, and we don't need the type check anyway.
2021-05-31 18:31:56 +08:00
. Fixed bug #81090 (Typed property performance degradation with .= operator).
(Nikita)
Fixed bug #81070 When the memory limit is reduced using an `ini_set("memory_limit", ..)` below the currently allocated memory, the out-of-memory check overflowed. Instead of implementing additional checks during allocation, `zend_set_memory_limit()` now validates the new memory limit. When below the current memory usage the ini_set call will fail and throw a warning. This is part of GH-7040.
2021-05-31 01:30:24 +08:00
. Fixed bug #81070 (Integer underflow in memory limit comparison).
(Peter van Dommelen)
[ci skip] Fix missing NEWS
2021-10-04 11:48:03 +08:00
. Fixed bug #81122: SSRF bypass in FILTER_VALIDATE_URL. (CVE-2021-21705) (cmb)
Fix #81076 Invalid implicit binds cause incorrect count in static vars of closure debug info
2021-05-24 13:26:56 +08:00
Fix #81092: fflush before stream_filter_remove corrupts stream When doing a non finishing flush, BZ2_bzCompress() returns BZ_FLUSH_OK (not BZ_FINISH_OK) what requires us to do further flushes right away. We also refactor the while-loop as do-loop. Closes GH-7113.
2021-06-07 21:57:25 +08:00
- Bzip2:
. Fixed bug #81092 (fflush before stream_filter_remove corrupts stream).
(cmb)
Fixed bug #80197 Use "libmagic/magic.h" rather than <magic.h> to make sure that we use the bundled libmagic, even if there is a system libmagic on the include path.
2021-06-14 16:56:53 +08:00
- Fileinfo:
. Fixed bug #80197 (implicit declaration of function 'magic_stream' is
invalid). (Nikita)
Fix bug #81119 The implementation for functions and operators is shared. However, we should not be generating argument errors for operators.
2021-06-10 20:45:24 +08:00
- GMP:
. Fixed bug #81119 (GMP operators throw errors with wrong parameter names).
(Nikita)
[ci skip] Fix missing NEWS
2021-10-04 11:48:03 +08:00
- MySQLnd:
. Fixed bug #80761 (PDO uses too much memory). (Nikita)
Fixed bug #81088 error in regression test for oci_fetch_object() and oci_fetch_array() Closes GH-7072
2021-05-28 23:53:32 +08:00
- OCI8:
. Fixed bug #81088 (error in regression test for oci_fetch_object() and
oci_fetch_array()). (Máté)
Fixed bug #80968 (JIT segfault with return from required file)
2021-05-20 21:45:24 +08:00
- Opcache:
Fixed bug #81051 (Broken property type handling after incrementing reference)
2021-05-27 20:22:34 +08:00
. Fixed bug #81051 (Broken property type handling after incrementing
reference). (Dmitry)
Fixed bug #80968 (JIT segfault with return from required file)
2021-05-20 21:45:24 +08:00
. Fixed bug #80968 (JIT segfault with return from required file). (Dmitry)
Fix #76694: native Windows cert verification uses CN as sever name This is not guaranteed to work, since the actual server name may only be given as SAN. Since we're doing the peer verification later anyway (using the respective context options as appropriate), there is no need to even supply a server name when verifying against the Windows cert store. Closes GH-7060.
2021-05-27 18:03:19 +08:00
- OpenSSL:
. Fixed bug #76694 (native Windows cert verification uses CN as sever name).
(cmb)
[ci skip] Fix missing NEWS
2021-10-04 11:48:03 +08:00
- PDO_Firebird:
. Fixed bug #76448: Stack buffer overflow in firebird_info_cb.
(CVE-2021-21704) (cmb)
. Fixed bug #76449: SIGSEGV in firebird_handle_doer. (CVE-2021-21704) (cmb)
. Fixed bug #76450: SIGSEGV in firebird_stmt_execute. (CVE-2021-21704) (cmb)
. Fixed bug #76452: Crash while parsing blob data in firebird_fetch_blob.
(CVE-2021-21704) (cmb)
Fixed bug #80761 When row data split across multiple packets, allocate a temporary buffer that can be reallocated, and only copy into the row buffer pool arena once we know the final size. This avoids quadratic memory usage for very large results. (cherry picked from commit 1fc4c89214c82fabbf997da58051a385d8fe50ab)
2021-02-23 18:14:51 +08:00
fix bug #72998 the function fn_complete in libedit null checks matches[2]
2021-05-22 22:50:00 +08:00
- readline:
. Fixed bug #72998 (invalid read in readline completion). (krakjoe)
Prep for 8.0.8
2021-05-20 03:18:56 +08:00
- Standard:
. Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string conversion").
(cmb)
Fix #77627 method_exists on Closure::__invoke
2021-05-22 17:06:45 +08:00
. Fixed bug #77627 (method_exists on Closure::__invoke inconsistency).
(krakjoe)
Prep for 8.0.8
2021-05-20 03:18:56 +08:00
Fix #81120: PGO data for main PHP DLL are not used We need to look for the right file. To avoid total confusion, we also rename the variables; however, the right solution would have been to drop the version suffixes, since they don't help (major + minor maybe, but not major only).
2021-06-11 04:53:53 +08:00
- Windows:
. Fixed bug #81120 (PGO data for main PHP DLL are not used). (cmb)
Prep for 8.0.8
2021-05-20 03:18:56 +08:00
03 Jun 2021, PHP 8.0.7
8.0.6 is the next version
2021-04-13 18:36:52 +08:00
Fixed bug #80929 The function name should be kept if Closure was created from the function which is marked as ZEND_ACC_CALL_VIA_TRAMPOLINE, because it is not a one-time thing and it may be called multiple times. Closes GH-6867.
2021-04-15 11:40:34 +08:00
- Core:
Fix #80960: opendir() warning wrong info when failed on Windows Firstly, we must not forget to set appropriate error codes for "manual" checks in `virtual_file_ex()`. Secondly, we must not call `php_error_docref2()` for warnings regarding unary functions; thus, we introduce `php_win32_docref1_from_error()`. Closes GH-6872.
2021-04-19 19:47:25 +08:00
. Fixed bug #80960 (opendir() warning wrong info when failed on Windows).
(cmb)
Fix #67792: HTTP Authorization schemes are treated as case-sensitive We use `zend_binary_strncasecmp()` to avoid any locale issues, and refactor. We also add a test case for Digest authentication. Closes GH-6900.
2021-04-23 21:28:11 +08:00
. Fixed bug #67792 (HTTP Authorization schemes are treated as case-sensitive).
(cmb)
Fix typo in NEWS
2021-04-26 21:02:13 +08:00
. Fixed bug #80972 (Memory exhaustion on invalid string offset). (girgias)
Fixed bug #80929 The function name should be kept if Closure was created from the function which is marked as ZEND_ACC_CALL_VIA_TRAMPOLINE, because it is not a one-time thing and it may be called multiple times. Closes GH-6867.
2021-04-15 11:40:34 +08:00
php-fpm: fix Solaris port events.mechanism Bug #65800 Fix by: rainer.jung@kippdata.de
2021-05-10 16:54:43 +08:00
- FPM:
. Fixed bug #65800 (Events port mechanism). (psumbera)
Fix #80901: Info leak in ftp extension We ensure that inbuf is NUL terminated on `ftp_readline()` failure. Closes GH-6894.
2021-04-22 19:22:18 +08:00
- FTP:
. Fixed bug #80901 (Info leak in ftp extension). (cmb)
Fix #79100: Wrong FTP error messages First we need to properly clear the `inbuf`, what is an amendment to commit d2881adcbc[1]. Then we need to report `php_pollfd_for_ms()` failures right away; just setting `errno` does not really help, since at least in some cases it would have been overwritten before we actually could check it. We use `php_socket_strerror()` to get a proper error message, and define `ETIMEDOUT` to the proper value on Windows; otherwise we catch the definition in errno.h, which is not compatible with WinSock. The proper solution for this issue would likely be to include something like ext/sockets/windows_common.h. Finally, we ensure that we only report warnings using `inbuf`, if it is not empty. [1] <http://git.php.net/?p=php-src.git;a=commit;h=d2881adcbc9be60de7e7d45a3316b0e11b7eb1e8>. Closes GH-6718.
2021-04-23 00:31:47 +08:00
. Fixed bug #79100 (Wrong FTP error messages). (cmb)
Fix #80901: Info leak in ftp extension We ensure that inbuf is NUL terminated on `ftp_readline()` failure. Closes GH-6894.
2021-04-22 19:22:18 +08:00
Fix #81032: GD install is affected by external libgd installation This PR replaces the bundled libgd includes from #include <foo.h> with #include "foo.h" for gd-related headers to avoid including headers that may be available in system directories instead of the expected local headers. Closes GH-6975.
2021-05-12 19:36:43 +08:00
- GD:
. Fixed bug #81032 (GD install is affected by external libgd installation).
(Flavio Heleno, cmb)
Fixed bug #81019 Before the zval -> zend_object migration, this code used macros like FORMATTER_METHOD_FETCH_OBJECT_NO_CHECK, which internally clear the error. Now that they are no longer used, we need to manually clear the error.
2021-05-17 22:31:58 +08:00
- Intl:
. Fixed bug #81019 (Unable to clone NumberFormatter after failed parse()).
(Nikita)
Fix #81011: mb_convert_encoding removes references from arrays We need to dereference references. Closes GH-6938.
2021-05-04 21:36:05 +08:00
- MBString:
. Fixed bug #81011 (mb_convert_encoding removes references from arrays). (cmb)
Fix #80460: ODBC doesn't account for SQL_NO_TOTAL indicator The `StrLen_or_IndPtr` parameter usually may be `SQL_NO_TOTAL`; we need to cater to that possibility to avoid working with negative string lengths and other issues. A noteable exemption are calls to `SQLGetData()` which return `SQL_SUCCESS`; in that case `SQL_NO_TOTAL` can not occur. Closes GH-6809.
2021-03-26 22:13:24 +08:00
- ODBC:
. Fixed bug #80460 (ODBC doesn't account for SQL_NO_TOTAL indicator). (cmb)
Fixed bug #81007 Backport a change from the master branch. We usually test 32-bit using -m32 from an x86-64 host, probably nobody tried using an actual 32-bit host.
2021-05-05 22:51:55 +08:00
- Opcache:
. Fixed bug #81007 (JIT "not supported" on 32-bit x86 -- build problem?).
(Nikita)
Merge branch 'PHP-7.4' into PHP-8.0 * PHP-7.4: Fixed bug #81015
2021-05-06 16:46:18 +08:00
. Fixed bug #81015 (Opcache optimization assumes wrong part of ternary
operator in if-condition). (Nikita)
Fixed bug #81046 Literal compaction was incorrectly assuming that literals with the same base literal and the same number of related literals would be equal. Maybe that was the case historically, but at least it isn't true in PHP 8, where FETCH_CONSTANT and INIT_METHOD have distinct literals at the second position. Fix this by making the cache key a concatenation of all literals, rather than just the base literal. We still distinguish the number of related literals based on a bias added to the string hash.
2021-05-17 21:43:31 +08:00
. Fixed bug #81046 (Literal compaction merges non-equal related literals).
(Nikita)
Fixed bug #81007 Backport a change from the master branch. We usually test 32-bit using -m32 from an x86-64 host, probably nobody tried using an actual 32-bit host.
2021-05-05 22:51:55 +08:00
Fixed bug #81037 PDO discards error message text from prepared statement
2021-05-13 20:50:32 +08:00
- PDO_MySQL:
Fixed bug #81088 error in regression test for oci_fetch_object() and oci_fetch_array() Closes GH-7072
2021-05-28 23:53:32 +08:00
. Fixed bug #81037 (PDO discards error message text from prepared
Fix NEWS
2021-05-14 19:33:32 +08:00
statement). (Kamil Tekiela)
Fixed bug #81037 PDO discards error message text from prepared statement
2021-05-13 20:50:32 +08:00
Fix #44643: bound parameters ignore explicit type definitions If `SQLDescribeParam()` fails for a parameter, we must not assume `SQL_LONGVARCHAR` for any param which is not `PDO_PARAM_LOB`. At least mapping `PDO_PARAM_INT` to `SQL_INTEGER` should be safe, and not introduce a BC break. Closes GH-6973.
2021-05-11 20:40:00 +08:00
- PDO_ODBC:
. Fixed bug #44643 (bound parameters ignore explicit type definitions). (cmb)
Fix php_pgsql_fd_cast() wrt. php_stream_can_cast() `php_stream_can_cast()` forwards to `_php_stream_cast()` with `ret` set to `NULL`. `php_pgsql_fd_cast()` needs to cater to that, because otherwise the stream would report that it is not castable. This *might* fix https://bugs.php.net/73903. Closes GH-6888.
2021-04-20 21:51:47 +08:00
- pgsql:
. Fixed php_pgsql_fd_cast() wrt. php_stream_can_cast(). (cmb)
Fix #80933: SplFileObject::DROP_NEW_LINE is broken for NUL and CR `buf` may contain NUL bytes, so we must not use `strcspn()` but rather a binary safe variant. However, we also must not detect a stray CR as line ending, and since we only need to check line endings at the end of the buffer, we can nicely optimize. Co-authored-by: Nikita Popov <nikita.ppv@gmail.com> Closes GH-6836.
2021-04-13 18:35:10 +08:00
- SPL:
. Fixed bug #80933 (SplFileObject::DROP_NEW_LINE is broken for NUL and CR).
(cmb, Nikita)
Prepare for 7.4.19
2021-04-13 18:34:40 +08:00
Fix #73246: XMLReader: encoding length not checked libxml2 expects the passed encoding to be NUL terminated, so we reject strings with NUL bytes right away. Closes GH-6899.
2021-04-22 17:46:16 +08:00
- XMLReader:
. Fixed bug #73246 (XMLReader: encoding length not checked). (cmb)
Fix #80863: ZipArchive::extractTo() ignores references We need to cater to references, when traversing the files to extract. While we're at it, we move the `zval_file` declaration into a narrower scope. Closes GH-6959.
2021-05-08 00:18:06 +08:00
- Zip:
. Fixed bug #80863 (ZipArchive::extractTo() ignores references). (cmb)
Reset for 8.0.7
2021-05-05 01:17:20 +08:00
06 May 2021, PHP 8.0.6
- PDO_pgsql:
. Revert "Fixed bug #80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR)"
from PHP 8.0.5.
8.0.6 is the next version
2021-04-13 18:36:52 +08:00
29 Apr 2021, PHP 8.0.5
8.0.5 is next We also move the NEWS entry for bug 80847 to the proper version.
2021-03-17 19:12:01 +08:00
Changed PowerPC CPU registers used by Zend VM to work around GCC bug. Old registers (r28/r29) might be clobbered by _restgpr routine used for return from C function compiled with -Os.
2021-03-31 18:10:21 +08:00
- Core:
. Changed PowerPC CPU registers used by Zend VM to work around GCC bug.
Old registers (r28/r29) might be clobbered by _restgpr routine used for
return from C function compiled with -Os. (Dmitry)
Fix #66783: UAF when appending DOMDocument to element According to the DOM standard, elements may only contain element, text, processing instruction and comment nodes[1]. It is also specified that a HierarchyRequestError should be thrown if a document is to be inserted[2]. We follow that standard, and prevent the use-after-free this way. [1] <https://dom.spec.whatwg.org/#node-trees> [2] <https://dom.spec.whatwg.org/#mutation-algorithms> Closes GH-6765.
2021-03-15 17:26:50 +08:00
- DOM:
. Fixed bug #66783 (UAF when appending DOMDocument to element). (cmb)
NEWS for 7.4.18
2021-03-16 17:40:05 +08:00
8.0.5 is next We also move the NEWS entry for bug 80847 to the proper version.
2021-03-17 19:12:01 +08:00
- FFI:
. Fixed bug #80847 (CData structs with fields of type struct can't be passed
as C function argument). (Nickolas Daniel da Silva, Dmitry)
Fix NEWS entry position for the latest FPM fix
2021-03-22 02:58:57 +08:00
- FPM:
. Fixed bug #80024 (Duplication of info about inherited socket after pool
removing). (Jakub Zelenka)
Fix #80880: SSL_read on shutdown, ftp/proc_open When `SSL_read()` after `SSL_shutdown()` fails with `SSL_ERROR_SYSCALL`, we should not warn about this, because it is likely caused by the peer having closed the connection without having sent a close_notify shutdown alert. Signed-off-by: Christoph M. Becker <cmbecker69@gmx.de> Closes GH-6803.
2021-04-06 18:44:42 +08:00
- FTP:
. Fixed bug #80880 (SSL_read on shutdown, ftp/proc_open). (cmb, Jakub
Zelenka)
Add missing NEWS entry for #80710
2021-04-27 19:38:39 +08:00
- Imap:
. Fixed bug #80710 (imap_mail_compose() header injection). (cmb, Stas)
7.3.28 is next
2021-02-03 00:01:55 +08:00
Fix #73533: Invalid memory access in php_libxml_xmlCheckUTF8 A string passed to `php_libxml_xmlCheckUTF8()` may be longer than 1<<31-1 bytes, so we're better using a `size_t`. Closes GH-6802.
2021-03-23 23:13:57 +08:00
- LibXML:
. Fixed bug #73533 (Invalid memory access in php_libxml_xmlCheckUTF8). (cmb)
Fixed bug #80839 (PHP problem with JIT)
2021-03-17 21:55:09 +08:00
- Opcache:
. Fixed bug #80839 (PHP problem with JIT). (Dmitry)
Fixed bug #80861 (erronous array key overflow in 2D array with JIT)
2021-03-18 03:59:59 +08:00
. Fixed bug #80861 (erronous array key overflow in 2D array with JIT).
(Dmitry)
Fixed bug #80839 (PHP problem with JIT)
2021-03-17 21:55:09 +08:00
Fix #79812: Potential integer overflow in pcntl_exec() We use the proper type, and make sure that no overflow can occur by using `safe_emalloc()` (we can assume that neither string length is `SIZE_MAX`). Closes GH-6845.
2021-04-09 19:09:21 +08:00
- Pcntl:
. Fixed bug #79812 (Potential integer overflow in pcntl_exec()). (cmb)
Fix #80783: PDO ODBC truncates BLOB records at every 256th byte It is not guaranteed, that the driver inserts only a single NUL byte at the end of the buffer. Apparently, there is no way to find out the actual data length in the buffer after calling `SQLGetData()`, so we adjust after the next `SQLGetData()` call. We also prevent PDO::ODBC_ATTR_ASSUME_UTF8 from fetching garbage, by fetching all chunks with the same C type. Closes GH-6716.
2021-02-25 21:38:42 +08:00
- PDO_ODBC:
. Fixed bug #80783 (PDO ODBC truncates BLOB records at every 256th byte).
(cmb)
Fix #80892: PDO::PARAM_INT is treated the same as PDO::PARAM_STR
2021-04-12 14:03:07 +08:00
- PDO_pgsql:
. Fixed bug #80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR).
(Matteo)
Fix #80889: Cannot set save handler when save_handler is invalid There is no need to require a (valid) save_handler to be set, when a user handler is supposed to be set. We just have to make sure, that no user handler is already set in this case. Closes GH-6788.
2021-03-19 21:47:49 +08:00
- Session:
. Fixed bug #80889 (Cannot set save handler when save_handler is invalid).
(cmb)
Fix #69668: SOAP special XML characters in namespace URIs not encoded `xmlNewNs()` does not XML encode the passed `href`, so we need to do that manually. Closes GH-6804. Signed-off-by: Christoph M. Becker <cmbecker69@gmx.de>
2021-03-24 23:26:52 +08:00
- SOAP:
. Fixed bug #69668 (SOAP special XML characters in namespace URIs not
encoded). (cmb)
Handle reference zvals when outputting superglobals in phpinfo() Fixes <https://bugs.php.net/80915>. Closes GH-80915. Signed-off-by: Christoph M. Becker <cmbecker69@gmx.de>
2021-03-30 02:55:57 +08:00
- Standard:
. Fixed bug #80915 (Taking a reference to $_SERVER hides its values from
phpinfo()). (Rowan Tommins)
Remove the "getdir" function which was introduced accidentally The actual name of this function is dir(), but ever since it was introduced in PHP 3, its internal name was "getdir", leading to it being mistaken for an alias. This went unnoticed until the switch to stubs for generating arginfo, at which point getdir() became a real but undocumented function. Fixes bug #80914. Closes GH-6855.
2021-04-12 00:54:41 +08:00
. Fixed bug #80914 ('getdir' accidentally defined as an alias of 'dir').
(Rowan Tommins)
Handle reference zvals when outputting superglobals in phpinfo() Fixes <https://bugs.php.net/80915>. Closes GH-80915. Signed-off-by: Christoph M. Becker <cmbecker69@gmx.de>
2021-03-30 02:55:57 +08:00
8.0.5 is next We also move the NEWS entry for bug 80847 to the proper version.
2021-03-17 19:12:01 +08:00
01 Apr 2021, PHP 8.0.4
PHP-7.4 is now 7.4.17-dev
2021-02-16 19:26:47 +08:00
Fixed bug #80781 zend_find_array_dim_slow() may throw, make sure to handle this. This backports the code we already use for this on PHP-8.0, and also backports an exception check that makes this easier to catch.
2021-02-22 16:33:23 +08:00
- Core:
Fix #75776: Flushing streams with compression filter is broken First, the `bzip2.compress` filter has the same issue as `zlib.deflate` so we port the respective fix[1] to ext/bz2. Second, there is still an issue, if a stream with an attached compression filter is flushed before it is closed, without any writes in between. In that case, the compression is never finalized. We fix this by enforcing a `_php_stream_flush()` with the `closing` flag set in `_php_stream_free()`, whenever a write filter is attached. This call is superfluous for most write filters, but does not hurt, even when it is unnecessary. [1] <http://git.php.net/?p=php-src.git;a=commit;h=20e75329f2adb11dd231852c061926d0e4080929> Closes GH-6703.
2021-02-17 02:36:37 +08:00
. Fixed bug #75776 (Flushing streams with compression filter is broken). (cmb)
Fixed bug #80811 When filling in defaults for skipped params, make sure that reference parameters get the expected reference wrapper.
2021-03-01 22:01:09 +08:00
. Fixed bug #80811 (Function exec without $output but with $restult_code
parameter crashes). (Nikita)
Fixed bug #80814 (threaded mod_php won't load on FreeBSD: No space available for static Thread Local Storage)
2021-03-10 21:03:47 +08:00
. Fixed bug #80814 (threaded mod_php won't load on FreeBSD: No space
available for static Thread Local Storage). (Dmitry)
Fixed bug #80781 zend_find_array_dim_slow() may throw, make sure to handle this. This backports the code we already use for this on PHP-8.0, and also backports an exception check that makes this easier to catch.
2021-02-22 16:33:23 +08:00
Fix #80817: dba_popen() may cause segfault during RSHUTDOWN We need to close persistent streams with the proper flag.
2021-03-02 01:14:26 +08:00
- Dba:
. Fixed bug #80817 (dba_popen() may cause segfault during RSHUTDOWN). (cmb)
Fix Bug #80800 imap_open() fails when the flags parameter includes CL_EXPUNGE This also affected imap_reopen(). Add a supplementary test that the CL_EXPUNGE flag does have the intended effect. Closes GH-6732
2021-02-26 11:03:38 +08:00
- IMAP:
. Fixed bug #80800 (imap_open() fails when the flags parameter includes
CL_EXPUNGE). (girgias)
Fix #80763: msgfmt_format() does not accept DateTime references `intl_zval_to_millis()` needs to cater to references. Closes GH-6707.
2021-02-17 21:05:28 +08:00
- Intl:
. Fixed bug #80763 (msgfmt_format() does not accept DateTime references).
(cmb)
Fix #51903: simplexml_load_file() doesn't use HTTP headers The `encoding` attribute of the XML declaration is optional; it is good practice to use external encoding information where available if it is missing. Thus, we check for `charset` info of `Content-Type` headers, and see whether the encoding is supported. We cater to trailing parameters and quoted-strings, but not to escaped backslashes and quotes in quoted-strings, since no known character encoding contains these anyway. Co-authored-by: Michael Wallner <mike@php.net> Closes GH-6747.
2021-03-04 02:23:39 +08:00
- Libxml:
. Fixed bug #51903 (simplexml_load_file() doesn't use HTTP headers). (cmb)
Handle incomplete result set metadata more gracefully Rather than segfaulting because sname is missing lateron, report a FAIL here. As this indicates a server bug, the errors is reported as an out of band warning, rather than a client error. This fixes the PHP side of bug #80713.
2021-02-16 22:26:31 +08:00
- MySQLnd:
Fix bug #80837 The error needs to be reported on the statement, not the connection.
2021-03-06 05:45:27 +08:00
. Fixed bug #80837 (Calling stmt_store_result after fetch doesn't throw an
error). (Kamil Tekiela)
PHP-7.4 is now 7.4.17-dev
2021-02-16 19:26:47 +08:00
Fixed bug #80786 Don't use r0 as temporary register in math_double_long if it is already used for a memory result. This was already done in one branch, but not the other.
2021-02-23 17:17:30 +08:00
- Opcache:
. Fixed bug #80786 (PHP crash using JIT). (Nikita)
Fixed bug #80782 (DASM_S_RANGE_VREG on PHP_INT_MIN-1)
2021-02-24 17:20:20 +08:00
. Fixed bug #80782 (DASM_S_RANGE_VREG on PHP_INT_MIN-1). (Dmitry)
Fixed bug #80786 Don't use r0 as temporary register in math_double_long if it is already used for a memory result. This was already done in one branch, but not the other.
2021-02-23 17:17:30 +08:00
Fix bug #80866 Closes GH-6774.
2021-03-15 20:21:44 +08:00
- PCRE:
. Fixed bug #80866 (preg_split ignores limit flag when pattern with \K has
0-width fullstring match). (Kamil Tekiela)
Fix #80774: session_name() problem with backslash Since we do no longer URL decode cookie names[1], we must not URL encode the session name. We need to prevent broken Set-Cookie headers, by rejecting names which contain invalid characters. [1] <http://git.php.net/?p=php-src.git;a=commit;h=6559fe912661ca5ce5f0eeeb591d928451428ed0> Closes GH-6711.
2021-02-19 20:14:26 +08:00
- Session:
. Fixed bug #80774 (session_name() problem with backslash). (cmb)
Fix #80771: phpinfo(INFO_CREDITS) displays nothing in CLI There is no good reason not to show the credits in text based SAPIs, except for brevity. Thus, we suppress the credits from `php -i`. Closes GH-6710.
2021-02-22 19:24:15 +08:00
- Standard:
. Fixed bug #80771 (phpinfo(INFO_CREDITS) displays nothing in CLI). (cmb)
Fix #78719: http wrapper silently ignores long Location headers When opening HTTP streams, and reading the headers, we currently discard header lines longer than `HTTP_HEADER_BLOCK_SIZE` (1024 bytes). While this is not generally forbidden by RFC 7230, section 3.2.5, it is not generally allowed either, since that may change the "message framing or response semantics". We thus fix this by allowing arbitrarily long header lines. Closes GH-6720.
2021-02-23 22:32:54 +08:00
. Fixed bug #78719 (http wrapper silently ignores long Location headers).
(cmb)
Fix #80838: HTTP wrapper waits for HTTP 1 response after HTTP 101 Don't wait for further responses after a HTTP 101 (Switching Protocols) response Closes GH-6730.
2021-03-06 07:59:45 +08:00
. Fixed bug #80838 (HTTP wrapper waits for HTTP 1 response after HTTP 101).
(manuelm)
Fix #80771: phpinfo(INFO_CREDITS) displays nothing in CLI There is no good reason not to show the credits in text based SAPIs, except for brevity. Thus, we suppress the credits from `php -i`. Closes GH-6710.
2021-02-22 19:24:15 +08:00
Fix #80825: ZipArchive::isCompressionMethodSupported does not exist `HAVE_METHOD_SUPPORTED` should have been defined after we updated to libzip 1.7.1 months ago.
2021-03-04 05:56:42 +08:00
- Zip:
. Fixed bug #80825 (ZipArchive::isCompressionMethodSupported does not exist).
(cmb)
Merge branch 'PHP-7.4' into PHP-8.0 * PHP-7.4: Fix #80763: msgfmt_format() does not accept DateTime references
2021-02-18 00:28:22 +08:00
18 Feb 2021, PHP 8.0.3
Next is 8.0.3
2021-01-20 00:00:48 +08:00
Fix #80706: mail(): Headers after Bcc headers may be ignored We need to handle the case where a CRLF after a Bcc header is not the beginning of a folding marker, because in that case the Bcc header was not the last "thing". Closes GH-6666.
2021-02-05 00:43:53 +08:00
- Core:
. Fixed #80706 (mail(): Headers after Bcc headers may be ignored). (cmb)
Fixed bug #80600
2021-02-13 00:16:48 +08:00
- DOM:
. Fixed bug #80600 (DOMChildNode::remove() doesn't work on CharacterData
nodes). (beberlei)
Fix #53251: bindtextdomain with null dir doesn't return old value Apparently, users expect `bindtextdomain` and `bind_textdomain_codeset` with `null` as second argument to work like their C counterparts, namely to return the previously set value. Thus, we support that. Closes GH-6631.
2021-01-22 20:08:51 +08:00
- Gettext:
. Fixed bug #53251 (bindtextdomain with null dir doesn't return old value).
(cmb)
Fix #78680: mysqlnd pam plugin missing terminating null The PAM service requires the terminating null to be part of the communication. Tested with MariaDB-10.4(pam) and Percona Server 5.7.32(auth_pam_compat). Also changed MySQL Enterprise test to the server side plugin, authentication_pam as opposed to the client plugin mysql_clear_password. Add additional check for pamtest user and pam service file as all are required for the test. More importantly, test result should actually succeed. Thanks Geoff Montee for bug report. Closes GH-78680.
2021-02-05 13:54:08 +08:00
- MySQLnd:
. Fixed bug #78680 (mysqlnd's mysql_clear_password does not transmit
null-terminated password). (Daniel Black)
Merge branch 'PHP-7.4' into PHP-8.0 * PHP-7.4: Handle incomplete result set metadata more gracefully
2021-02-16 22:34:29 +08:00
. Fixed bug #80713 (SegFault when disabling ATTR_EMULATE_PREPARES and
MySQL 8.0). (Nikita)
Fix #78680: mysqlnd pam plugin missing terminating null The PAM service requires the terminating null to be part of the communication. Tested with MariaDB-10.4(pam) and Percona Server 5.7.32(auth_pam_compat). Also changed MySQL Enterprise test to the server side plugin, authentication_pam as opposed to the client plugin mysql_clear_password. Add additional check for pamtest user and pam service file as all are required for the test. More importantly, test result should actually succeed. Thanks Geoff Montee for bug report. Closes GH-78680.
2021-02-05 13:54:08 +08:00
Fix #74779: x() and y() truncating floats to integers We must not use the locale dependent `atof()`, but instead use the (hopefully) locale independent `zend_strtod()`, when converting string representations of floating point numbers which are sent by the server. Closes GH-6665.
2021-02-04 21:43:17 +08:00
- MySQLi:
. Fixed bug #74779 (x() and y() truncating floats to integers). (cmb)
Fixed bug #80634 (write_property handler of internal classes is skipped on preloaded JITted code)
2021-01-20 16:03:37 +08:00
- Opcache:
. Fixed bug #80634 (write_property handler of internal classes is skipped on
preloaded JITted code). (Dmitry)
NEWS
2021-01-28 23:26:46 +08:00
. Fixed bug #80682 (opcache doesn't honour pcre.jit option). (Remi)
Fixed bug #80742 (Opcache JIT makes some boolean logic unexpectedly be true)
2021-02-17 01:02:12 +08:00
. Fixed bug #80742 (Opcache JIT makes some boolean logic unexpectedly be
true). (Dmitry)
Fixed bug #80745 (JIT produces Assert failure and UNKNOWN:0 var_dumps in code involving bitshifts)
2021-02-17 16:51:13 +08:00
. Fixed bug #80745 (JIT produces Assert failure and UNKNOWN:0 var_dumps in
code involving bitshifts). (Dmitry)
NEWS
2021-01-28 23:26:46 +08:00
Fixed bug #80747 If RSA key generation fails, actually report that failure.
2021-02-15 22:33:42 +08:00
- OpenSSL:
. Fixed bug #80747 (Providing RSA key size < 512 generates key that crash
PHP). (Nikita)
Fix #75850: Unclear error message wrt. __halt_compiler() w/o semicolon We add the failure reason to the error message. Closes GH-6638.
2021-01-26 00:12:48 +08:00
- Phar:
. Fixed bug #75850 (Unclear error message wrt. __halt_compiler() w/o
semicolon) (cmb)
Fix #70091: Phar does not mark UTF-8 filenames in ZIP archives The default encoding of filenames in a ZIP archive is IBM Code Page 437. Phar, however, only supports UTF-8 filenames. Therefore we have to mark filenames as being stored in UTF-8 by setting the general purpose bit 11 (the language encoding flag). The effect of not setting this bit for non ASCII filenames can be seen in popular tools like 7-Zip and UnZip, but not when extracting the archives via ext/phar (which is agnostic to the filename encoding), or via ext/zip (which guesses the encoding). Thus we add a somewhat brittle low-level test case. Closes GH-6630.
2021-01-26 23:50:04 +08:00
. Fixed bug #70091 (Phar does not mark UTF-8 filenames in ZIP archives). (cmb)
Fix #53467: Phar cannot compress large archives When Phars are flushed, a new temporary file is created for each entry which should be compressed, and the `compressed_filesize` is retrieved. Afterwards, the Phar manifest is written, and only after that the files are copied to the actual Phar. So for each such entry there is an open temp file, what easily exceeds the limit. Therefore, we use a single temporary file for all entries, and store the start offset in the otherwise unused `header_offset` member. We ensure that the `cfp` members are properly set to NULL even if flushing fails, to avoid use after free scenarios. This solution is based on a suggestion by @lserni[1]. Closes GH-6643. [1] <https://github.com/box-project/box2/issues/80#issuecomment-77147371>
2021-01-27 00:46:32 +08:00
. Fixed bug #53467 (Phar cannot compress large archives). (cmb, lserni)
Fix #75850: Unclear error message wrt. __halt_compiler() w/o semicolon We add the failure reason to the error message. Closes GH-6638.
2021-01-26 00:12:48 +08:00
Fixed bug #80723 This fixes the issue just for the Socket class. Presumably we'll want to do the same for other "resource" objects.
2021-02-16 19:32:43 +08:00
- Socket:
. Fixed bug #80723 (Different sockets compare as equal (regression in 8.0)).
(Nikita)
Fixed bug #80719
2021-02-11 23:12:06 +08:00
- SPL:
. Fixed bug#80719 (Iterating after failed ArrayObject::setIteratorClass()
causes Segmentation fault). (Nikita)
Fix #80654: file_get_contents() maxlen fails above (2**31)-1 bytes We remove the arbitrary restriction to `INT_MAX`; it is superfluous on 32bit systems where `ZEND_LONG_MAX == INT_MAX` anyway, and not useful on 64bit systems, where larger files should be readable, if the `memory_limit` is large enough. Closes GH-6648.
2021-01-29 00:00:16 +08:00
- Standard:
. Fixed bug #80654 (file_get_contents() maxlen fails above (2**31)-1 bytes).
(cmb)
Fixed bug #80718
2021-02-11 23:49:39 +08:00
. Fixed bug #80718 (ext/standard/dl.c fallback code path with syntax error).
(Nikita)
Fix #80654: file_get_contents() maxlen fails above (2**31)-1 bytes We remove the arbitrary restriction to `INT_MAX`; it is superfluous on 32bit systems where `ZEND_LONG_MAX == INT_MAX` anyway, and not useful on 64bit systems, where larger files should be readable, if the `memory_limit` is large enough. Closes GH-6648.
2021-01-29 00:00:16 +08:00
Next is 8.0.3
2021-01-20 00:00:48 +08:00
21 Jan 2021, PHP 8.0.2
Next is 8.0.2
2020-12-15 21:30:55 +08:00
Fix bug #80523 Don't truncate the file length to unsigned int... I have no idea whether that fully fixes the problem because the process gets OOM killed before finishing, but at least the immediate parse error is gone now.
2020-12-16 17:16:50 +08:00
- Core:
. Fixed bug #80523 (bogus parse error on >4GB source code). (Nikita)
Fix #80384: limit read buffer size In the case of a stream with no filters, php_stream_fill_read_buffer only reads stream->chunk_size into the read buffer. If the stream has filters attached, it could unnecessarily buffer a large amount of data. With this change, php_stream_fill_read_buffer only proceeds until either the requested size or stream->chunk_size is available in the read buffer. Co-authored-by: Christoph M. Becker <cmbecker69@gmx.de> Closes GH-6444.
2020-12-02 07:40:16 +08:00
. Fixed bug #80384 (filter buffers entire read until file closed). (Adam
Seitz, cmb)
Fixed bug #80596: Fix anonymous class union typehint errors Cut off part after null byte when resolving the class name, to avoid cutting off a larger part lateron. Closes GH-6601.
2021-01-13 17:43:54 +08:00
. Fixed bug #80596 (Invalid union type TypeError in anonymous classes).
(Daniil Gentili)
Fixed bug #80617: Type narrowing warning in ZEND_TYPE_INIT_CODE
2021-01-14 17:08:22 +08:00
. Fixed bug #80617 (GCC throws warning about type narrowing in
ZEND_TYPE_INIT_CODE). (Nikita)
Next is 8.0.2
2020-12-15 21:30:55 +08:00
Fixed bug #80545 This converts the remaining "non well-formed" warnings in bcmath to ValueErrors, in line with the other warning promotions that have been performed in this extension. Closes GH-80545.
2020-12-28 04:15:06 +08:00
- BCMath:
. Fixed bug #80545 (bcadd('a', 'a') doesn't throw an exception).
(Jens de Nies)
Fix #80595: Resetting POSTFIELDS to empty array breaks request This is mainly to work around https://github.com/curl/curl/issues/6455, but not building the mime structure for empty hashtables is a general performance optimization, so we do not restrict it to affected cURL versions (7.56.0 to 7.75.0). The minor change to bug79033.phpt is unexpected, but should not matter in practice. Closes GH-6606.
2021-01-15 21:01:40 +08:00
- Curl:
. Fixed bug #80595 (Resetting POSTFIELDS to empty array breaks request). (cmb)
Fixed bug #80376 (last day of the month causes runway cpu usage)
2020-12-21 18:30:40 +08:00
- Date:
Fixed bug #80376 (last day of the month causes runway cpu usage)
2020-12-21 18:31:41 +08:00
. Fixed bug #80376 (last day of the month causes runway cpu usage). (Derick)
Fix bug #80537 This is an unavoidable breaking change to both the type and parameter name. The assertion that was supposed to prevent this was overly lax and accepted any object type for string parameters.
2020-12-21 17:21:08 +08:00
- DOM:
. Fixed bug #80537 (Wrong parameter type in DOMElement::removeAttributeNode
stub). (Nikita)
Fix bug #80584: 0x and 0X are considered valid hex numbers by filter_var() Closes GH-6573
2021-01-04 22:24:53 +08:00
- Filter:
. Fixed bug #80584 (0x and 0X are considered valid hex numbers by
filter_var()). (girgias)
[ci skip] Add forgotten NEWS entry (bug 80560)
2021-01-05 01:17:31 +08:00
- GMP:
. Fixed bug #80560 (Strings containing only a base prefix return 0 object).
(girgias)
Fixed bug #80644: ResourceBundle::get() doesn't reset error state
2021-01-19 22:20:01 +08:00
- Intl:
. Fixed bug #80644 (Missing resource causes subsequent get() calls to fail).
(Nikita)
Fixed bug #67983 We need to check the BIT case first, otherwise it will get skipped in INT_AND_FLOAT_NATIVE mode.
2020-12-16 17:52:27 +08:00
- MySQLi:
. Fixed bug #67983 (mysqlnd with MYSQLI_OPT_INT_AND_FLOAT_NATIVE fails to
interpret bit columns). (Nikita)
MySQLnd: Support cursors in store/get result This fixes two related issues: 1. When a PS with cursor is used in store_result/get_result, perform a COM_FETCH with maximum number of rows rather than silently switching to an unbuffered result set (in the case of store_result) or erroring (in the case of get_result). In the future, we might want to make get_result unbuffered for PS with cursors, as using cursors with buffered result sets doesn't really make sense. Unlike store_result, get_result isn't very explicit about what kind of result set is desired. 2. If the client did not request a cursor, but the server reports that a cursor exists, ignore this and treat the PS as if it has no cursor (i.e. to not use COM_FETCH). It appears to be a server side bug that a cursor used inside an SP will be reported to the client, even though the client cannot use the cursor. Fixes bug #64638, bug #72862, bug #77935. Closes GH-6518.
2020-12-16 19:12:06 +08:00
. Fixed bug #64638 (Fetching resultsets from stored procedure with cursor
fails). (Nikita)
. Fixed bug #72862 (segfault using prepared statements on stored procedures
that use a cursor). (Nikita)
. Fixed bug #77935 (Crash in mysqlnd_fetch_stmt_row_cursor when calling an SP
with a cursor). (Nikita)
Fixed bug #67983 We need to check the BIT case first, otherwise it will get skipped in INT_AND_FLOAT_NATIVE mode.
2020-12-16 17:52:27 +08:00
Fix #80592: all floats are the same in ODBC parameters We must not release the strings until we are done with them. Closes GH-6579.
2021-01-06 07:22:53 +08:00
- ODBC:
. Fixed bug #80592 (all floats are the same in ODBC parameters). (cmb)
Fixed bug #80422 (php_opcache.dll crashes when using Apache 2.4 with JIT)
2021-01-14 13:16:27 +08:00
- Opcache:
. Fixed bug #80422 (php_opcache.dll crashes when using Apache 2.4 with JIT).
(Dmitry)
Fix #80521: Parameters with underscores no longer recognized We have to use the proper value for the bitmask.
2020-12-17 03:02:45 +08:00
- PDO_Firebird:
. Fixed bug #80521 (Parameters with underscores no longer recognized). (cmb,
Simonov Denis)
Fix #76929: zip-based phar does not respect phar.require_hash Based on the patch provided by david at bamsoftware. Closes GH-6517.
2020-12-16 19:35:38 +08:00
- Phar:
. Fixed bug #76929 (zip-based phar does not respect phar.require_hash).
(david at bamsoftware, cmb)
Fix #77565: Incorrect locator detection in ZIP-based phars We must not assume that the first end of central dir signature in a ZIP archive actually designates the end of central directory record, since the data in the archive may contain arbitrary byte patterns. Thus, we better search from the end of the data, what is also slightly more efficient. There is, however, no way to detect the end of central directory signature by searching from the end of the ZIP archive with absolute certainty, since the signature could be part of the trailing comment. To mitigate, we check that the comment length fits to the found position, but that might still not be the correct position in rare cases. Closes GH-6507.
2021-01-05 22:52:38 +08:00
. Fixed bug #77565 (Incorrect locator detection in ZIP-based phars). (cmb)
Fix #69279: Compressed ZIP Phar extractTo() creates garbage files When extracting compressed files from an uncompressed Phar, we must not use the direct file pointer, but rather get an uncompressed file pointer. We also add a test to show that deflated and stored entries are properly extracted. This also fixes #79912, which appears to be a duplicate of #69279. Co-authored-by: Anna Filina <afilina@gmail.com> Closes GH-6599.
2020-12-19 01:05:52 +08:00
. Fixed bug #69279 (Compressed ZIP Phar extractTo() creates garbage files).
(cmb)
Fix #77565: Incorrect locator detection in ZIP-based phars We must not assume that the first end of central dir signature in a ZIP archive actually designates the end of central directory record, since the data in the archive may contain arbitrary byte patterns. Thus, we better search from the end of the data, what is also slightly more efficient. There is, however, no way to detect the end of central directory signature by searching from the end of the ZIP archive with absolute certainty, since the signature could be part of the trailing comment. To mitigate, we check that the comment length fits to the found position, but that might still not be the correct position in rare cases. Closes GH-6507.
2021-01-05 22:52:38 +08:00
Revert fix for bug 76813 and re2c version bump CentOS 7 ships with re2c 0.13.5 by default, so we should not have bumped the required re2c version to 0.13.7. However, 0.13.5 does not support default rules, so we cannot use them to fix bug 76813. This reverts commit 420184ad529443182c9a348a55b1c9216005c613 and 5e15c9c41f8318a8392c2e2c78544f218736549c. Closes GH-6593.
2021-01-11 20:10:47 +08:00
- Phpdbg:
. Reverted fix for bug #76813 (Access violation near NULL on source operand).
(cmb)
Fix #76929: zip-based phar does not respect phar.require_hash Based on the patch provided by david at bamsoftware. Closes GH-6517.
2020-12-16 19:35:38 +08:00
Next is 8.0.2
2020-12-15 21:30:55 +08:00
07 Jan 2021, PHP 8.0.1
Update NEWS for 8.0.0
2020-11-18 00:34:55 +08:00
Fix #74558: Can't rebind closure returned by Closure::fromCallable() Failure to rebind such closures is not necessarily related to them being created by `ReflectionFunctionAbstract::getClosure()`, so we fix the error message. Closes GH-6424.
2020-11-12 22:37:51 +08:00
- Core:
Fix #80345: PHPIZE configuration has outdated PHP_RELEASE_VERSION We must not redefine the version "constants" for phpize builds, because these have already generated in phpize.js, from where we pass these variables forward to configure.js. We also add `PHP_EXTRA_VERSION` and `PHP_VERSION_STRING` to the files for completeness. Closes GH-6419.
2020-11-10 20:51:40 +08:00
. Fixed bug #80345 (PHPIZE configuration has outdated PHP_RELEASE_VERSION).
(cmb)
Fix #72964: White space not unfolded for CC/Bcc headers `\r\n` does only terminate a header, if not followed by `\t` or ` `. We have to cater to that when determining the end position of the respective headers. Closes GH-6420.
2020-11-10 23:13:54 +08:00
. Fixed bug #72964 (White space not unfolded for CC/Bcc headers). (cmb)
Fixed bug #80391 Iterable was not considered a subtype of array|object, and thus also not a subtype of mixed.
2020-11-24 17:09:28 +08:00
. Fixed bug #80391 (Iterable not covariant to mixed). (Nikita)
Fixed bug #80393 Handle macos versions that don't start with 10.* in libtool. Patch by kir dot morozov at gmail dot com.
2020-11-24 22:26:40 +08:00
. Fixed bug #80393 (Build of PHP extension fails due to configuration gap
with libtool). (kir dot morozov at gmail dot com)
Fix #77069: stream filter loses final block of data Reading from a stream may return greater than zero, but nonetheless the stream's EOF flag may have been set. We have to cater to this condition by setting the close flag for filters. We also have to cater to that change in the zlib.inflate filter: If `inflate()` is called with flush mode `Z_FINISH`, but the output buffer is not large enough to inflate all available data, it fails with `Z_BUF_ERROR`. However, `Z_BUF_ERROR` is not fatal; in fact, the zlib manual states: "If deflate returns with Z_OK or Z_BUF_ERROR, this function must be called again with Z_FINISH and more output space (updated avail_out) but no more input data, until it returns with Z_STREAM_END or an error." Hence, we do so. Closes GH-6001.
2020-09-22 22:02:01 +08:00
. Fixed bug #77069 (stream filter loses final block of data). (cmb)
Update NEWS for 8.0.0
2020-11-18 00:34:55 +08:00
Fix #77961: finfo_open crafted magic parsing SIGABRT libmagic may abort the running process, which is not desirable for PHP; we raise a fatal error instead. Closes GH-6437.
2020-11-24 00:12:46 +08:00
- Fileinfo:
. Fixed bug #77961 (finfo_open crafted magic parsing SIGABRT). (cmb)
Fix bug #69625: FPM returns 200 status on request without SCRIPT_FILENAME
2020-11-29 05:27:53 +08:00
- FPM:
. Fixed bug #69625 (FPM returns 200 status on request without
SCRIPT_FILENAME env). (Jakub Zelenka)
Fix Bug #80438: imap_msgno() incorrectly warns and return false on valid UIDs in PHP 8.0.0 Checking for a valid Unique ID (UID) cannot use the convenience macro as they might be larger than the message number which has for maximum value the total number of current messages available in the mailbox.
2020-11-30 12:48:17 +08:00
- IMAP
. Fixed bug #80438 (imap_msgno() incorrectly warns and return false on valid UIDs in PHP 8.0.0). (girgias)
Standardize behaviour for int message number between functions
2020-12-01 09:43:17 +08:00
. Fix a regression with valid UIDs in imap_savebody() (girgias)
. Make warnings for invalid message numbers/UIDs between functions consistent (girgias)
Fix Bug #80438: imap_msgno() incorrectly warns and return false on valid UIDs in PHP 8.0.0 Checking for a valid Unique ID (UID) cannot use the convenience macro as they might be larger than the message number which has for maximum value the total number of current messages available in the mailbox.
2020-11-30 12:48:17 +08:00
Fixed bug #80425 Rename the methods in MessageFormatAdapter to make sure they don't clash with anything defined by icu itself, which may be a problem if icu is linked statically.
2020-11-27 17:02:00 +08:00
- Intl:
. Fixed bug #80425 (MessageFormatAdapter::getArgTypeList redefined). (Nikita)
Retrofit NEWS
2020-12-21 12:07:40 +08:00
- OCI8
. Create Windows DLLs for Oracle Client 19c. (cmb)
Fixed bug #80404 For a division like [1..1]/[2..2] produce [0..1] as a result, which would be the integer envelope of the floating-point result. The implementation is pretty ugly (we're now taking min/max across eight values...) but I couldn't come up with a more elegant way to handle this that doesn't make things a lot more complex (the division sign handling is the annoying issue here).
2020-11-24 18:31:53 +08:00
- Opcache:
. Fixed bug #80404 (Incorrect range inference result when division results
in float). (Nikita)
Fixed bug #80377 Make sure the $PHP_THREAD_SAFETY variable is always available when configuring extensions. It was previously available for phpized extensions, but for in-tree builds it was being set too late. Then, use $PHP_THREAD_SAFETY instead of $enable_zts to check for ZTS in bundled extensions, which makes sure these checks also work for phpize builds.
2020-11-24 22:52:41 +08:00
. Fixed bug #80377 (Opcache misses executor_globals). (Nikita)
Merge branch 'PHP-7.4' into PHP-8.0 * PHP-7.4: Fixed bug #80368
2020-11-27 17:58:04 +08:00
. Fixed bug #80433 (Unable to disable the use of the AVX command when using
Fixed bug #80433 Use ZEND_STRTOL to allow leading zeros in opcache.jit option.
2020-11-27 17:51:57 +08:00
JIT). (Nikita)
Fixed bug #80447 (Strange out of memory error when running with JIT)
2020-12-01 21:46:41 +08:00
. Fixed bug #80447 (Strange out of memory error when running with JIT).
(Dmitry)
Fixed bug #80480 (Segmentation fault with JIT enabled)
2020-12-07 18:28:37 +08:00
. Fixed bug #80480 (Segmentation fault with JIT enabled). (Dmitry)
Fixed bug #80506 (Immediate SIGSEGV upon ini_set("opcache.jit_debug", 1))
2020-12-14 20:28:03 +08:00
. Fixed bug #80506 (Immediate SIGSEGV upon ini_set("opcache.jit_debug", 1)).
(Dmitry)
Fixed bug #80404 For a division like [1..1]/[2..2] produce [0..1] as a result, which would be the integer envelope of the floating-point result. The implementation is pretty ugly (we're now taking min/max across eight values...) but I couldn't come up with a more elegant way to handle this that doesn't make things a lot more complex (the division sign handling is the annoying issue here).
2020-11-24 18:31:53 +08:00
Fixed bug #80368 We assume that usually LibreSSL supports everything OpenSSL 1.1 does. In this instance, this is not the case.
2020-11-27 17:57:19 +08:00
- OpenSSL:
. Fixed bug #80368 (OpenSSL extension fails to build against LibreSSL due to
lack of OCB support). (Nikita)
Fixed bug #80458 If there is no result set (e.g. for upsert queries), still allow fetching to occur without error, i.e. treat it the same way as an empty result set. This normalizes behavior between native and emulated prepared statements and addresses a regression in PHP 7.4.13.
2020-12-03 05:24:20 +08:00
- PDO MySQL:
. Fixed bug #80458 (PDOStatement::fetchAll() throws for upsert queries).
(Kamil Tekiela)
Fixed bug #63185
2020-12-08 18:30:54 +08:00
. Fixed bug #63185 (nextRowset() ignores MySQL errors with native prepared
statements). (Nikita)
Fixed bug #78154 Handle errors during next_result in exec.
2020-12-09 19:46:47 +08:00
. Fixed bug #78152 (PDO::exec() - Bad error handling with multiple commands).
(Nikita)
Fixed bug #66878 Keep track of whether we have fully consumed all result sets, either using nextRowset() calls or closeCursor() and skip the attempt to consume remaining results sets during destruction in that case. Especiall if closeCursor() has been used, we really shouldn't have this sort of cross-statement inference.
2020-12-09 23:30:01 +08:00
. Fixed bug #66878 (Multiple rowsets not returned unless PDO statement object
is unset()). (Nikita)
Fixed bug #70066 If we fall back to emulated prepared statements, destroy S->stmt, so the code doesn't get confused about which mode we're in.
2020-12-10 00:24:30 +08:00
. Fixed bug #70066 (Unexpected "Cannot execute queries while other unbuffered
queries"). (Nikita)
Fixed bug #71145 Consume any additional result sets when running INIT_COMMAND.
2020-12-10 17:28:10 +08:00
. Fixed bug #71145 (Multiple statements in init command triggers unbuffered
query error). (Nikita)
Fixed bug #76815 When we receive an error while reading a result set, we should assume that no more result sets are available. libmysqlclient implements the same behavior.
2020-12-10 18:21:06 +08:00
. Fixed bug #76815 (PDOStatement cannot be GCed/closeCursor-ed when a
PROCEDURE resultset SIGNAL). (Nikita)
Fixed bug #79872 by improving error message The actual behavior here is correct, but the previous error message was misleading, as neither fetchAll() nor buffered queries would help in this situation. Instead it is necessary to consume all rowsets, which can be done by either unsetting the statement or calling closeCursor().
2020-12-10 18:46:29 +08:00
. Fixed bug #79872 (Can't execute query with pending result sets). (Nikita)
Fixed bug #79131 When a driver reports an error during EVT_ALLOC (and some over EVTs), make sure we handle it as usual, i.e. warn or throw. This requires some adjustments in PDO PgSQL to stop manually doing this through an impl error. Unfortunately the PDO PgSQL error messages regress because of this, as they now include a completely arbitrary error code. There doesn't seem to be an ability to skip it right now.
2020-12-10 22:51:17 +08:00
. Fixed bug #79131 (PDO does not throw an exception when parameter values are
missing). (Nikita)
Fixed bug #72368 Generate a param count mismatch error even if the query contains no placeholders. Additionally we shouldn't HANDLE errors from pdo_parse_params, which are always reported via raise_impl_error. Doing so results in duplicate error messages.
2020-12-10 23:52:17 +08:00
. Fixed bug #72368 (PdoStatement->execute() fails but does not throw an
exception). (Nikita)
Fixed bug #62889 Our minimum libmysqlclient version requirement is high enough that we don't need to check for MYSQL_OPT_LOCAL_INFILE support. However, the mysql_get_option() function seems to only be available since 5.7 (though it's really hard to find any definitie information on when MySQL introduced certain functions or changes...) so we need to store the value of the flag locally to make it available through getAttribute().
2020-12-11 18:20:33 +08:00
. Fixed bug #62889 (LOAD DATA INFILE broken). (Nikita)
Fixed bug #67004 Repeated execute() with native PS failed to release the previous result set on libmysqlclient. Move freeing the result set into a common location.
2020-12-11 19:43:19 +08:00
. Fixed bug #67004 (Executing PDOStatement::fetch() more than once prevents
releasing resultset). (Nikita)
Fixed bug #79132 Following cmb's suggestion and replacing the counter with a check against the bound_params HT, which ensures that both cannot go out of sync.
2020-12-11 23:35:03 +08:00
. Fixed bug #79132 (PDO re-uses parameter values from earlier calls to
execute()). (Nikita)
Fixed bug #80458 If there is no result set (e.g. for upsert queries), still allow fetching to occur without error, i.e. treat it the same way as an empty result set. This normalizes behavior between native and emulated prepared statements and addresses a regression in PHP 7.4.13.
2020-12-03 05:24:20 +08:00
Fix #73809: Phar Zip parse crash - mmap fail Phar signatures practically are of limited size; for the MD5 and SHA hashes the size is fixed (at most 64 bytes for SHA512); for OpenSSL public keys there is no size limit in theory, but "64 KiB ought to be good enough for anybody". So we check for that limit, to avoid fatal errors due to out of memory conditions. Since it is neither possible to have the signature compressed in the ZIP archive, nor is it possible to manually add a signature via Phar, we use ZipArchive to create a suitable archive for the test on the fly. Closes GH-6474.
2020-12-01 21:20:39 +08:00
- Phar:
. Fixed bug #73809 (Phar Zip parse crash - mmap fail). (cmb)
Merge branch 'PHP-7.4' into PHP-8.0 * PHP-7.4: Fix #77322: PharData::addEmptyDir('/') Possible integer overflow
2020-12-15 18:45:35 +08:00
. Fixed bug #75102 (`PharData` says invalid checksum for valid tar). (cmb)
. Fixed bug #77322 (PharData::addEmptyDir('/') Possible integer overflow).
(cmb)
Fix #73809: Phar Zip parse crash - mmap fail Phar signatures practically are of limited size; for the MD5 and SHA hashes the size is fixed (at most 64 bytes for SHA512); for OpenSSL public keys there is no size limit in theory, but "64 KiB ought to be good enough for anybody". So we check for that limit, to avoid fatal errors due to out of memory conditions. Since it is neither possible to have the signature compressed in the ZIP archive, nor is it possible to manually add a signature via Phar, we use ZipArchive to create a suitable archive for the test on the fly. Closes GH-6474.
2020-12-01 21:20:39 +08:00
Fix #76813: Access violation near NULL on source operand We avoid `YYCURSOR` becoming `NULL` by initializing `YYMARKER`, and add a default rule for `<NORMAL>` where we catch unexpected input. We also fix the only superficially related issue regarding empty input followed by `T_SEPARATOR` and command, which caused another segfault. Closes GH-6464.
2020-11-28 20:47:37 +08:00
- Phpdbg:
. Fixed bug #76813 (Access violation near NULL on source operand). (cmb)
Fix #62004: SplFileObject: fgets after seek returns wrong line As it is, `::seek(0)` sets the file pointer to the beginning of the file, but `::seek($n)` where `$n > 0` sets the file pointer to the beginning of the following line, having line `$n` already read into the line buffer. This is pretty inconsistent; we fix it by always seeking to the beginning of the line. We also add a test case for the duplicate bug #46569. Closes GH-6434.
2020-11-18 20:41:21 +08:00
- SPL:
. Fixed #62004 (SplFileObject: fgets after seek returns wrong line). (cmb)
Fix #80366: Return Value of zend_fstat() not Checked In the somewhat unlikely case that `zend_fstat()` fails, we must not proceed executing the function, but return `false` instead. Patch based on the patch contributed by sagpant at microsoft dot com. Closes GH-6432.
2020-11-17 21:42:22 +08:00
- Standard:
Fixed bug #80600
2021-02-13 00:16:48 +08:00
. Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo).
[ci skip] Update NEWS
2021-01-04 17:47:47 +08:00
(CVE-2020-7071) (cmb)
Fix #80366: Return Value of zend_fstat() not Checked In the somewhat unlikely case that `zend_fstat()` fails, we must not proceed executing the function, but return `false` instead. Patch based on the patch contributed by sagpant at microsoft dot com. Closes GH-6432.
2020-11-17 21:42:22 +08:00
. Fixed bug #80366 (Return Value of zend_fstat() not Checked). (sagpant, cmb)
Fix #77594: ob_tidyhandler is never reset We reset to original INI value on request shutdown. Closes GH-6425.
2020-11-14 22:03:58 +08:00
- Tidy:
. Fixed bug #77594 (ob_tidyhandler is never reset). (cmb)
Fixed bug #80462
2020-12-02 17:19:32 +08:00
- Tokenizer:
. Fixed bug #80462 (Nullsafe operator tokenize with TOKEN_PARSE flag fails).
(Nikita)
Rename XmlParser to XMLParser for consistency with XMLWriter/XMLReader
2020-11-24 21:51:51 +08:00
- XML:
. XmlParser opaque object renamed to XMLParser for consistency with other XML objects. (girgias)
Fix #48725: Support for flushing in zlib stream When `php_zlib_deflate_filter()` is called with `PSFS_FLAG_FLUSH_INC` but without new buckets being available (e.g. because a user calls `rewind()` after writing to the stream), we have to make sure that any pending data are flushed. This could basically be done like in the attached patch[1], but that could cause unnessary flushes, which can be harmful for compression, and adds unnecessary flush markers to the stream. Thus, we use the `php_zlib_filter_data.finished` field, which has not been used for `zlib.deflate` filters, and properly keep track of the need to flush. [1] <https://bugs.php.net/patch-display.php?bug_id=48725&patch=zlib-filter-flush-fix.patch&revision=latest> Closes GH-6019.
2020-08-20 00:19:08 +08:00
- Zlib:
. Fixed #48725 (Support for flushing in zlib stream). (cmb)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
26 Nov 2020, PHP 8.0.0
Update NEWS for 8.0.0
2020-11-10 19:02:35 +08:00
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
- BZ2:
. Fixed bug #71263 (fread() does not report bzip2.decompress errors). (cmb)
Update NEWS for 8.0.0RC1
2020-09-16 02:38:15 +08:00
Support ephemeral ports in debug server
2020-09-15 04:08:39 +08:00
- CLI:
. Allow debug server binding to an ephemeral port via `-S localhost:0`. (Sara)
Fix #64937: Firebird PDO preprocessing sql This patch fixes some problems with preprocessing SQL queries. * The new algorithm takes into account single-line and multi-line comments and ignores the ":" and "?" Parameter markers in them. * The algorithm allows the EXECUTE BLOCK statement to be processed correctly. For this statement, it is necessary to search for parameter markers between EXECUTE BLOCK and AS, the rest should be left as is. The SQL preprocessing code has been ported from Firebird to handle EXECUTE STATEMENT. Closes GH-4920.
2019-12-19 03:42:07 +08:00
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
- COM:
. Fixed bug #55847 (DOTNET .NET 4.0 GAC new location). (cmb)
. Fixed bug #62474 (com_event_sink crashes on certain arguments). (cmb)
Update NEWS for 8.0.0beta3
2020-08-18 22:03:56 +08:00
Fix #80007: Potential type confusion in unixtojd() parameter parsing Also it fixes test on 32-bit armv7 and x86 - Test unixtojd() function : error conditions [ext/calendar/tests/unixtojd_error1.phpt] Closes GH-6033
2020-08-22 07:44:48 +08:00
- Calendar:
. Fixed bug #80007 (Potential type confusion in unixtojd() parameter parsing).
(Andy Postnikov)
Prepare for 7.4.11
2020-08-18 15:06:20 +08:00
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- Core:
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #36365 (scandir duplicates file name at every 65535th file).
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
(cmb)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #49555 (Fatal error "Function must be a string" message should be
renamed). (Nikita)
. Fixed bug #62294 (register_shutdown_function() does not correctly handle
exit code). (Nikita)
. Fixed bug #62609 (Allow implementing Traversable on abstract classes).
Fixed bug #77561 Unconditionally strip shebang lines when using the CLI SAPI, independently of whether they occur in the primary or non-primary script. It's unlikely that someone intentionally wants to print that shebang line when including a script, and this regularly causes issues when scripts are used in multiple contexts, e.g. for direct invocation and as a phar bootstrap.
2020-08-10 16:38:33 +08:00
(Nikita)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #65274 (Enhance undefined class constant error with class name).
Fixed bug #79948 Make sure we don't execute further scripts if one of them encountered an exit exception. Also make sure that we free file handles that end up unused due to an early abort in php_execute_scripts(), which turned up as an issue in the added test case. Finally, make use of EG(exit_status) in the places where we zend_eval_string_ex, instead of unconditionally assigning exit code 254. If an error occurs, the error handler will already set exit status 255.
2020-08-10 16:28:13 +08:00
(Nikita)
Fixed bug #65275 Make EG(exit_status) the single source of truth for the exit status, instead of having two variables that we cannot really keep synchronized.
2020-08-10 18:39:19 +08:00
. Fixed bug #65275 (Calling exit() in a shutdown function does not change the
exit value in CLI). (Nikita)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #69084 (Unclear error message when not implementing a renamed
abstract trait function). (Nikita)
. Fixed bug #70839 (Converting optional argument to variadic forbidden by LSP
checks). (Nikita)
. Fixed bug #74558 (Can't rebind closure returned by Closure::fromCallable()).
(cmb)
. Fixed bug #77561 (Shebang line not stripped for non-primary script).
(Nikita)
. Fixed bug #77619 (Wrong reflection on MultipleIterator::__construct).
(Fabien Villepinte)
. Fixed bug #77966 (Cannot alias a method named "namespace"). (Nikita)
. Fixed bug #78236 (convert error on receiving variables when duplicate [).
(cmb)
Fix bug #78770 Refactor the zend_is_callable implementation to check callability at a particular frame (this is an implementation detail for now, but could be exposed in the API if useful). Pick the first parent user frame as the one to check.
2020-08-14 16:22:42 +08:00
. Fixed bug #78770 (Incorrect callability check inside internal methods).
(Nikita)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #79108 (Referencing argument in a function makes it a reference
in the stack trace). (Nikita)
. Fixed bug #79368 ("Unexpected end of file" is not an acceptable error
message). (Alex Dowad)
. Fixed bug #79462 (method_exists and property_exists incoherent behavior).
(cmb)
. Fixed bug #79467 (data:// wrappers are writable). (cmb)
. Fixed bug #79521 (Check __set_state structure). (carusogabriel)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed bug #79790 ("Illegal offset type" exception during AST evaluation
not handled properly). (Nikita)
. Fixed bug #79791 (Assertion failure when unsetting variable during binary
op). (Nikita)
. Fixed bug #79828 (Segfault when trying to access non-existing variable).
(Nikita)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #79841 (Syntax error in configure / unescaped "[]" in php.m4).
(Nikita)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed bug #79852 (count(DOMNodeList) doesn't match
count(IteratorIterator(DOMNodeList))). (Nikita)
. Fixed bug #79867 (Promoted untyped properties should get null default
value). (Nikita)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #79897 (Promoted constructor params with attribs cause crash).
(Deus Kane)
. Fixed bug #79927 (Generator doesn't throw exception after multiple yield
from iterable). (Nikita)
. Fixed bug #79946 (Build fails due to undeclared UINT32_C). (Nikita)
. Fixed bug #79948 (Exit in auto-prepended file does not abort PHP execution).
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
(Nikita)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #80045 (memleak after two set_exception_handler calls with
__call). (Nikita)
. Fixed bug #80096 (Segmentation fault with named arguments in nested call).
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
(Nikita)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #80109 (Cannot skip arguments when extended debug is enabled).
(Nikita)
. Fixed bug #80225 (broken namespace usage in eval code). (Nikita)
. Fixed bug #80258 (Windows Deduplication Enabled, randon permission errors).
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
(cmb)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #80280 (ADD_EXTENSION_DEP() fails for ext/standard and ext/date).
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
(cmb)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #80334 (assert() vs named parameters - confusing error). (Nikita)
Fix bug number
2020-11-27 06:34:35 +08:00
. Fixed bug #80055 (Abstract trait methods returning "self" cannot be
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
fulfilled by traits). (Nikita)
. Fixed faulty generator cleanup with yield from. (Bob)
. Implement #[Attr] Attribute syntax as per final vote in RFC
https://wiki.php.net/rfc/shorter_attribute_syntax_change
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Implemented FR #47074 (phpinfo() reports "On" as 1 for the some
extensions). (cmb)
. Implemented FR #72089 (require() throws fatal error instead of exception).
(Nikita)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Removed the pdo_odbc.db2_instance_name php.ini directive. (Kalle)
. Use SSE2 instructions do locale independent strtolower. (Laruence)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
- Curl:
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Bumped required libcurl version to 7.29.0. (cmb)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #80121 (Null pointer deref if CurlHandle directly instantiated).
(Nikita)
- DOM:
. Add property DOMXPath::$registerNodeNamespaces and constructor argument
that allow global flag to configure query() or evaluate() calls.
. Fixed bug #79968 (DOMChildNode API crash on unattached nodes). (Benjamin)
. Fixed bug #80268 (loadHTML() truncates at NUL bytes). (cmb)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- Date:
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #60302 (DateTime::createFromFormat should new static(), not new
self()). (Derick)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed bug #65547 (Default value for sunrise/sunset zenith still wrong).
(cmb)
. Fixed bug #69044 (discrepancy between time and microtime). (krakjoe)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #80057 (DateTimeImmutable::createFromFormat() does not populate
time). (Derick)
. Implemented FR #79903 (datetime: new format "p", same as "P" but returning
"Z" for UTC). (gharlan)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- Enchant:
. Add LIBENCHANT_VERSION macro.
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Add enchant_dict_add and enchant_dict_is_added functions.
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Deprecate enchant_broker_set_dict_path, enchant_broker_get_dict_path,
enchant_dict_add_to_personal and enchant_dict_is_in_session.
. Use libenchant-2 when available.
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
- FFI:
. Added FFI\CType::getName() method. (chopins)
. Fixed bug #79177 (FFI doesn't handle well PHP exceptions within callback).
(cmb, Dmitry, Nikita)
. Fixed bug #79749 (Converting FFI instances to bool fails). (cmb)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- FPM:
. Add pm.status_listen option. (Jakub Zelenka)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
- Fileinfo:
. Upgrade to libmagic 5.39. (Anatol)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- GD:
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Added imagegetinterpolation(). (cmb)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed bug #55005 (imagepolygon num_points requirement). (cmb)
. Made the $num_points parameter of php_imagepolygon optional. (cmb)
. Removed deprecated image2wbmp(). (cmb)
. Removed deprecated png2wbmp() and jpeg2wbmp(). (cmb)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Replaced gd resources with objects. (Mark Randall)
- IMAP:
. Fixed bug #64076 (imap_sort() does not return FALSE on failure). (cmb)
. Fixed bug #76618 (segfault on imap_reopen). (girgias)
. Fixed bug #80213 (imap_mail_compose() segfaults on certain $bodies). (cmb)
. Fixed bug #80215 (imap_mail_compose() may modify by-val parameters). (cmb)
. Fixed bug #80216 (imap_mail_compose() does not validate types/encodings).
(cmb)
. Fixed bug #80220 (imap_mail_compose() may leak memory). (cmb)
. Fixed bug #80223 (imap_mail_compose() leaks envelope on malformed bodies).
(cmb)
. Fixed bug #80226 (imap_sort() leaks sortpgm memory). (cmb)
. Fixed bug #80239 (imap_rfc822_write_address() leaks memory). (cmb)
. Fixed bug #80242 (imap_mail_compose() segfaults for multipart with rfc822).
(cmb)
. Fixed minor regression caused by fixing bug #80220. (cmb)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- Iconv:
. Dropped support for iconv without proper errno setting. (cmb)
- Intl:
. Removed deprecated INTL_IDNA_VARIANT_2003. (cmb)
- JIT:
. Fixed bug #77857 (Wrong result if executed with JIT). (Laruence)
. Fixed bug #79255 (PHP cannot be compiled with enable JIT).
(Laruence, Dmitry)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #79582 (Crash seen when opcache.jit=1235 and
opcache.jit_debug=2). (Laruence)
. Fixed bug #79743 (Fatal error when assigning to array property
with JIT enabled). (Laruence)
. Fixed bug #79864 (JIT segfault in Symfony OptionsResolver). (Dmitry)
. Fixed bug #79888 (Incorrect execution with JIT enabled). (Dmitry)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- JSON:
. The JSON extension is now an integral part of PHP and cannot be disabled
as per RFC: https://wiki.php.net/rfc/always_enable_json (tandre)
- LDAP:
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed memory leaks. (ptomulik)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Removed deprecated ldap_sort. (mcmic)
- MBString:
. Fixed bug #76999 (mb_regex_set_options() return current options). (cmb)
. Removed the unused $is_hex parameter from mb_decode_numericentity(). (cmb)
- MySQLi:
. Fixed bug #76809 (SSL settings aren't respected when persistent connections
are used). (fabiomsouto)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
- Mysqlnd:
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed #60594 (mysqlnd exposes 160 lines of stats in phpinfo). (PeeHaa)
- OCI8:
. Deprecated old OCI8 function aliases. (Jens de Nies)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Modernized oci_register_taf_callback() callable argument parsing
implementation. (girgias)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Removed obsolete no-op function oci_internal_debug(). (Jens de Nies)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
- ODBC:
. Fixed bug #22986 (odbc_connect() may reuse persistent connection). (cmb)
. Fixed bug #44618 (Fetching may rely on uninitialized data). (cmb)
- Opcache:
. Fixed bug #76535 (Opcache does not replay compile-time warnings). (Nikita)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed bug #78654 (Incorrectly computed opcache checksum on files with
non-ascii characters). (mhagstrand)
. Fixed bug #79665 (ini_get() and opcache_get_configuration() inconsistency).
(cmb)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #80030 (Optimizer segfault with isset on static property with
undef dynamic class name). (Nikita)
. Fixed bug #80175 (PHP8 RC1 - JIT Buffer not working). (cmb)
. Fixed bug #80184 (Complex expression in while / if statements resolves to
false incorrectly). (Nikita)
. Fixed bug #80255 (Opcache bug (bad condition result) in 8.0.0rc1). (Nikita)
. Fixed run-time binding of preloaded dynamically declared function. (Dmitry)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- OpenSSL:
. Added Cryptographic Message Syntax (CMS) support. (Eliot Lear)
- PCRE:
. Don't ignore invalid escape sequences. (sjon)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Updated to PCRE2 10.35. (cmb)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- PDO:
. Changed default PDO error mode to exceptions. (AllenJB)
. Fixed bug #77849 (Disable cloning of PDO handle/connection objects).
(camporter)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
- PDO_Firebird:
. Fixed bug #64937 (Firebird PDO preprocessing sql). (Simonov Denis)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- PDO_OCI:
. Added support for setting and getting the oracle OCI 18c call timeout.
(camporter)
- PDO_PGSQL:
. Bumped required libpq version to 9.1. (cmb)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
- PGSQL:
. Bumped required libpq version to 9.1. (cmb)
- Phpdbg:
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed bug #76596 (phpdbg support for display_errors=stderr). (kabel)
. Fixed bug #76801 (too many open files). (alekitto)
. Fixed bug #77800 (phpdbg segfaults on listing some conditional breakpoints).
(krakjoe)
. Fixed bug #77805 (phpdbg build fails when readline is shared). (krakjoe)
- Reflection:
. Fixed bug #64592 (ReflectionClass::getMethods() returns methods out of
scope). (Nikita)
. Fixed bug #69180 (Reflection does not honor trait conflict resolution /
method aliasing). (Nikita)
. Fixed bug #74939 (Nested traits' aliased methods are lowercased). (Nikita)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #77325 (ReflectionClassConstant::$class returns wrong class when
extending). (Nikita)
. Fixed bug #78697 (ReflectionClass::implementsInterface - inaccurate error
message with traits). (villfa)
. Fixed bug #80190 (ReflectionMethod::getReturnType() does not handle static
as part of union type). (Nikita)
. Fixed bug #80299 (ReflectionFunction->invokeArgs confused in arguments).
(Nikita)
. Fixed bug #80370 (getAttributes segfault on dynamic properties). (Benjamin
Eberlei)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Implement #79628 (Add $filter parameter for ReflectionClass::getConstants
and ReflectionClass::getReflectionConstants) (carusogabriel)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Implement ReflectionProperty::hasDefaultValue and
Reflection::getDefaultValue (beberlei)
- SNMP:
. Fixed bug #70461 (disable md5 code when it is not supported in net-snmp).
(Alexander Bergmann, cmb)
- SPL:
. Fixed bug #65006 (spl_autoload_register fails with multiple callables using
self, same method). (Nikita)
. Fixed bug #65387 (Circular references in SPL iterators are not garbage
collected). (Nikita)
. Fixed bug #71236 (Second call of spl_autoload_register() does nothing if it
has no arguments). (Nikita)
. Fixed bug #79987 (Memory leak in SplFileInfo because of missing
zend_restore_error_handling()). (Dmitry)
. SplFixedArray is now IteratorAggregate rather than Iterator. (alexdowad)
- SQLite3:
. Added SQLite3::setAuthorizer() and respective class constants. (bohwaz)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- Session:
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #73529 (session_decode() silently fails on wrong input). (cmb)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed bug #78624 (session_gc return value for user defined session
handlers). (bshaffer)
- Shmop:
. Converted shmop resources to objects. (cmb)
- SimpleXML:
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #63575 (Root elements are not properly cloned). (cmb)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed bug #75245 (Don't set content of elements with only whitespaces).
(eriklundin)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
- Sodium:
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed bug #77646 (sign_detached() strings not terminated). (Frank)
- Standard:
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Don't force rebuild of symbol table, when populating $http_response_header
variable by the HTTP stream wrapper. (Dmitry)
. Fixed bug #47983 (mixed LF and CRLF line endings in mail()). (cmb)
. Fixed bug #64060 (lstat_stat_variation7.phpt fails on certain file systems).
(M. Voelker, cmb)
. Fixed bug #75902 (str_replace should warn when misused with nested arrays).
(Nikita)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed bug #76859 (stream_get_line skips data if used with data-generating
filter). (kkopachev)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #77204 (getimagesize(): Read error! should mention file path).
(peter279k)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed bug #78385 (parse_url() does not include 'query' when question mark
is the last char). (Islam Israfilov)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #79868 (Sorting with array_unique gives unwanted result). (Nikita)
. Fixed bug #80256 (file_get_contents strip first line with chunked encoding
redirect). (Nikita)
. Fixed bug #80266 (parse_url silently drops port number 0). (cmb, Nikita)
. Fixed bug #80290 (Double free when ASSERT_CALLBACK is used with a dynamic
message). (Nikita)
. Implemented FR #78638 (__PHP_Incomplete_Class should be final). (Laruence)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Made quoting of cmd execution functions consistent. (cmb)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
- Tidy:
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Removed the unused $use_include_path parameter from tidy_repair_string().
(cmb)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
- Tokenizer:
. Fixed bug #80328 (PhpToken::getAll() confusing name). (Nikita)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- XML:
. Fixed bug #76874 (xml_parser_free() should never leak memory). (Nikita)
- XMLWriter:
. Changed functions to accept/return XMLWriter objects instead of resources.
(cmb)
. Implemented FR #79344 (xmlwriter_write_attribute_ns: $prefix should be
nullable). (cmb)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Removed return types from XMLWriter stubs. (cmb)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- Zip:
. Add "flags" options to ZipArchive::addGlob and addPattern methods
keeping previous behavior having FL_OVERWRITE by default. (Remi)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Add ZipArchive::EM_UNKNOWN and ZipArchive::EM_TRAD_PKWARE constants. (Remi)
. Add ZipArchive::isCompressionMethodSupported() and
ZipArchive::isEncryptionMethodSupported() method (libzip 1.7.0). (Remi)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Add ZipArchive::replaceFile() method. (Remi)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Add ZipArchive::setCancelCallback method (since libzip 1.6.0). (Remi)
. Add ZipArchive::setMtimeName and ZipArchive::setMtimeIndex methods. (Remi)
. Add ZipArchive::setProgressCallback method (since libzip 1.3.0). (Remi)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Add lastId property to ZipArchive. (Remi)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Add optional "flags" parameter to ZipArchive::addEmptyDir, addFile and
addFromString methods. (Remi)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Fixed bug #50678 (files extracted by ZipArchive class lost their
original modified time). (Remi)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #72374 (remove_path strips first char of filename). (tyage, Remi)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
. Implemented FR #77960 (add compression / encryption options for
ZipArchive::addGlob and ZipArchive::addPattern). (Remi)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. ZipArchive::status and ZipArchive::statusSys properties and
ZipArchive::getStatusString() method stay valid after the archive
is closed. (Remi)
Revert "Prepare for PHP 8.1" This reverts commit 1ab4d0e6b7abb67d5a01ce3327bf973772271fb2. This reverts commit a359635cb1a4df8b5137a506c88c4cb102acac0e.
2020-08-05 04:24:26 +08:00
- Zlib:
. Fixed bug #71417 (fread() does not report zlib.inflate errors). (cmb)
Prepare NEWS file for GA
2020-11-19 22:27:49 +08:00
. Fixed bug #78792 (zlib.output_compression disabled by Content-Type: image/).
(cmb)
Reference in New Issue Copy Permalink