BcMath
Core
- Fixed bug OSS-Fuzz #382922236 (Duplicate dynamic properties in hooked object iterator properties table).
- Fixed unstable get_iterator pointer for hooked classes in shm on Windows.
- Fixed bug GH-17106 (ZEND_MATCH_ERROR misoptimization).
- Fixed bug GH-17162 (zend_array_try_init() with dtor can cause engine UAF).
- Fixed bug GH-17101 (AST->string does not reproduce constructor property promotion correctly).
- Fixed bug GH-17200 (Incorrect dynamic prop offset in hooked prop iterator).
- Fixed bug GH-17216 (Trampoline crash on error).
DBA
- Skip test if inifile is disabled.
DOM
Embed
- Make build command for program using embed portable.
FFI
Fileinfo
- Fixed bug GH-17039 (PHP 8.4: Incorrect MIME content type).
FPM
GD
- Fixed bug GH-16255 (Unexpected nan value in ext/gd/libgd/gd_filter.c).
- Ported fix for libgd bug 276 (Sometimes pixels are missing when storing images as BMPs).
Gettext
- Fixed bug GH-17202 (Segmentation fault ext/gettext/gettext.c bindtextdomain()).
Iconv
- Fixed bug GH-17047 (UAF on iconv filter failure).
LDAP
- Fixed bug GH-17280 (ldap_search() fails when $attributes array has holes).
LibXML
- Fixed bug GH-17223 (Memory leak in libxml encoding handling).
MBString
- Fixed bug GH-17112 (Macro redefinitions).
Opcache
- opcache_get_configuration() properly reports jit_prof_threshold.
- Fixed bug GH-17140 (Assertion failure in JIT trace exit with ZEND_FETCH_DIM_FUNC_ARG).
- Fixed bug GH-17151 (Incorrect RC inference of op1 of FETCH_OBJ and INIT_METHOD_CALL).
- Fixed bug GH-17246 (GC during SCCP causes segfault).
- Fixed bug GH-17257 (UBSAN warning in ext/opcache/jit/zend_jit_vm_helpers.c).
PCNTL
- Fix memory leak in cleanup code of pcntl_exec() when a non stringable value is encountered past the first entry.
PgSql
- Fixed bug GH-17158 (pg_fetch_result Shows Incorrect ArgumentCountError Message when Called With 1 Argument).
- Fixed further ArgumentCountError for calls with flexible number of arguments.
Phar
- Fixed bug GH-17137 (Segmentation fault ext/phar/phar.c).
SimpleXML
Sockets
- Fixed bug GH-16276 (socket_strerror overflow handling with INT_MIN).
- Fixed overflow on SO_LINGER values setting, strengthening values check on SO_SNDTIMEO/SO_RCVTIMEO for socket_set_option().
SPL
Streams
Windows
- Hardened proc_open() against cmd.exe hijacking.
XML
- Fixed bug GH-1718 (unreachable program point in zend_hash).