clones/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2024-09-21 18:07:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
f2ec6e4806
php-src/NEWS

678 lines
27 KiB
Plaintext
Raw Normal View History

remove BOM from NEWS
2015-07-21 14:36:36 +00:00
PHP NEWS
Please add in any changes/bug fixes you've made - we need to keep a details ChangeLog...
1999-07-22 23:54:54 +00:00
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
PHP-8.3 is now for PHP-8.3.5-dev
2024-02-28 11:46:49 +00:00
?? ??? ????, PHP 8.3.5
[ci skip]
2024-03-05 11:19:59 +00:00
- Core:
. Fixed GH-13569 (GC buffer unnecessarily grows up to GC_MAX_BUF_SIZE when
scanning WeakMaps). (Arnaud)
Fix GH-13612: Corrupted memory in destructor with weak references Inside `zend_object_std_dtor` the weakrefs are notified after the destruction of properties already took place. In this test case, the destructor of an anon class will be invoked due to the property destruction. That class has a weak reference to its parent. This means that the destructor can access parent properties that already have been destroyed, resulting in a UAF. Fix this by notifying the weakrefs at the start of the object's destruction. Closes GH-13613.
2024-03-06 22:14:47 +00:00
. Fixed bug GH-13612 (Corrupted memory in destructor with weak references).
(nielsdos)
[ci skip]
2024-03-05 11:19:59 +00:00
Add ZPP checks in DOMNode::{__sleep,__wakeup} Closes GH-13651.
2024-03-09 13:58:57 +00:00
- DOM:
. Add some missing ZPP checks. (nielsdos)
Fix potential memory leak in XPath evaluation results
2024-03-14 20:08:25 +00:00
. Fix potential memory leak in XPath evaluation results. (nielsdos)
Add ZPP checks in DOMNode::{__sleep,__wakeup} Closes GH-13651.
2024-03-09 13:58:57 +00:00
Fix GH-11086: FPM: config test runs twice in daemonised mode The previous check for STDERR did not work so this fixes it. Closes GH-13357
2024-02-08 16:34:19 +00:00
- FPM:
. Fixed GH-11086 (FPM: config test runs twice in daemonised mode).
(Jakub Zelenka)
Fix GH-12019: ext/gd/config.m4: don't forget GDLIB_CFLAGS in feature tests In commit 85e5635a, a feature test for the various libgd image formats was added. That test however erroneously omits the GDLIB_CFLAGS (from pkg-config) during compilation. This can lead to build failures and therefore false negatives from the test. Here, we add $GDLIB_CFLAGS to $CFLAGS for the duration of the test. Closes GH-12019
2024-03-15 16:52:29 +00:00
- GD:
. Fixed bug GH-12019 (add GDLIB_CFLAGS in feature tests). (Michael Orlitzky)
ext/gettext: dcgettext/dcngettext sigabrt on macOs. the man page states `the locale facet is determined by the category argument, which should be one of the LC_xxx constants defined in the <locale.h> header, excluding LC_ALL`, since the 0.22.5 release, sanity checks had been strenghtened leading to an abort with the Zend/tests/arginfo_zpp_mismatch.phpt test setting the category to 0 which is LC_ALL on macOs. close GH-13555
2024-02-28 22:43:04 +00:00
- Gettext:
[ci skip]
2024-03-05 11:19:59 +00:00
. Fixed sigabrt raised with dcgettext/dcngettext calls with gettext 0.22.5
ext/gettext: dcgettext/dcngettext sigabrt on macOs. the man page states `the locale facet is determined by the category argument, which should be one of the LC_xxx constants defined in the <locale.h> header, excluding LC_ALL`, since the 0.22.5 release, sanity checks had been strenghtened leading to an abort with the Zend/tests/arginfo_zpp_mismatch.phpt test setting the category to 0 which is LC_ALL on macOs. close GH-13555
2024-02-28 22:43:04 +00:00
with category set to LC_ALL. (David Carlier)
NEWS
2024-03-04 12:53:09 +00:00
- MySQLnd:
. Fix GH-13452 (Fixed handshake response [mysqlnd]). (Saki Takamachi)
[ci skip] NEWS
2024-03-11 14:14:28 +00:00
- Opcache:
. Fixed GH-13508 (JITed QM_ASSIGN may be optimized out when op1 is null).
(Arnaud, Dmitry)
Fix GH-13712: Segmentation fault for enabled observers when calling trait method of internal trait when opcache is loaded (#13735) Inherited methods regardless of source must share the original runtime cache. Traits were missed. This adds ZEND_ACC_TRAIT_CLONE to internal functions as well to allow easy distinction of these.
2024-03-18 18:02:42 +00:00
. Fixed GH-13712 (Segmentation fault for enabled observers when calling trait
method of internal trait when opcache is loaded). (Bob)
[ci skip] NEWS
2024-03-11 14:14:28 +00:00
Merge branch 'PHP-8.2' into PHP-8.3 * PHP-8.2: random: Fix unknown `mt_srand()` compatibility for unknown modes (#13544) Removed `REPORT_EXIT_STATUS=no` in libmysql tests Revert "Fix GH-13519: PGSQL_CONNECT_FORCE_RENEW with persistent connections." (#13546)
2024-02-29 17:07:00 +00:00
- Random:
[ci skip] NEWS
2024-03-11 14:14:28 +00:00
. Fixed bug GH-13544 (Pre-PHP 8.2 compatibility for mt_srand with unknown
modes). (timwolla)
random: Initialize the `mode` field when seeding in `php_random_default_status()` (#13690) This is not just an issue due to missing initialization since moving the state struct directly into the module globals. In earlier versions changing the mode to `MT_RAND_PHP` within a single request would also affect the mode for subsequent requests. Original commit message follows: This is a follow-up fix for GH-13579. The issue was detected in the nightly MSAN build. (cherry picked from commit bf0abd1629291c193064a9cb95a2da3565decc38)
2024-03-13 19:13:48 +00:00
. Fixed bug GH-13690 (Global Mt19937 is not properly reset in-between
requests when MT_RAND_PHP is used). (timwolla)
PHP-8.3 is now for PHP-8.3.5-dev
2024-02-28 11:46:49 +00:00
Fix GH-13680: Segfault with session_decode and compilation error It's illegal to return from a bailout because that doesn't restore the original bailout data. Return outside of it. Test by YuanchengJiang Closes GH-13689.
2024-03-12 20:10:53 +00:00
- Session:
. Fixed bug GH-13680 (Segfault with session_decode and compilation error).
(nielsdos)
Fix GH-13531: Unable to resize SplfixedArray after being unserialized in PHP 8.2.15 When unserializing, the cached_resize field was not reset to -1 correctly, causing the setSize() method to think we were inside of a resize operation. Closes GH-13543.
2024-02-27 21:09:06 +00:00
- SPL:
Fix GH-13685: Unexpected null pointer in zend_string.h Regressed in 6fbf81c. There is a missing error check on spl_filesystem_file_read_line(), which means that if the line could not be read (e.g. because we're at the end of the file), it will not set intern->u.file.current_line, which will cause a NULL pointer deref later on. Fix it by adding a check, and reintroducing the silent flag partially to be able to throw an exception like it did in the past. Closes GH-13692.
2024-03-12 20:38:15 +00:00
. Fixed bug GH-13685 (Unexpected null pointer in zend_string.h). (nielsdos)
Fix GH-13531: Unable to resize SplfixedArray after being unserialized in PHP 8.2.15 When unserializing, the cached_resize field was not reset to -1 correctly, causing the setSize() method to think we were inside of a resize operation. Closes GH-13543.
2024-02-27 21:09:06 +00:00
Fix GH-11808: Live filesystem modified by tests (security) There's a test that tries to make /etc world-writable, and asserts that it fails. Although this test is guarded by a root user check, there are situations where you don't need to be root to be able to do this. This may thus have unwanted effects on your live filesystem. The simple solution is to remove that part of the test. It doesn't really add value anyway: we're trying to test the chmod error path, but that exact same error path can be reached with any failure condition that the kernel gives. For example, trying to chmod a non-existent file will trigger the same code path. While at it, also prefix the test path for the non-existent file such that we don't accidentally modify the filesystem. The chroot now has a better root-user check, that will not modify the filesystem. Other root-modifying mkdir tests were removed because they added no value either. Closes GH-13566.
2024-03-01 16:44:14 +00:00
- Standard:
. Fixed bug GH-11808 (Live filesystem modified by tests). (nielsdos)
NEWS
2024-03-04 12:53:09 +00:00
. Fixed GH-13402 (Added validation of `\n` in $additional_headers of mail()).
(SakiTakamachi)
Fix GH-13203: file_put_contents fail on strings over 4GB on Windows Closes GH-13205
2024-01-20 18:38:49 +00:00
. Fixed bug GH-13203 (file_put_contents fail on strings over 4GB on Windows).
(divinity76)
Fix GH-11808: Live filesystem modified by tests (security) There's a test that tries to make /etc world-writable, and asserts that it fails. Although this test is guarded by a root user check, there are situations where you don't need to be root to be able to do this. This may thus have unwanted effects on your live filesystem. The simple solution is to remove that part of the test. It doesn't really add value anyway: we're trying to test the chmod error path, but that exact same error path can be reached with any failure condition that the kernel gives. For example, trying to chmod a non-existent file will trigger the same code path. While at it, also prefix the test path for the non-existent file such that we don't accidentally modify the filesystem. The chroot now has a better root-user check, that will not modify the filesystem. Other root-modifying mkdir tests were removed because they added no value either. Closes GH-13566.
2024-03-01 16:44:14 +00:00
PHP-8.3 is now for PHP-8.3.5-dev
2024-02-28 11:46:49 +00:00
14 Mar 2024, PHP 8.3.4
PHP-8.3 is now for PHP-8.3.4-dev
2024-01-30 20:42:45 +00:00
Workaround ZTS persistent resource crashes (PHP 8.3 and lower) For master (8.4-dev) I merged GH-13381. But that PR changes public API of TSRM, so cannot be used on lower branches. This patch is a safe workaround for the issue, in combination with a pre-existing fix using `ifdef ZTS + if (module_started)` inside pgsql and odbc. The idea is to delay unloading modules until the persistent resources are destroyed. This will keep the destructor code accessible in memory. This is not a proper fix on its own, because we still need the workaround of not accessing globals after module destruction. The proper fix is in master. Closes GH-13388.
2024-02-13 20:55:24 +00:00
- Core:
. Fix ZTS persistent resource crashes on shutdown. (nielsdos)
ext/curl: Fix failing tests due to string changes in libcurl 8.6.0 Upstream libcurl 8.6.0 contains a change[^1] that caused a test failure. This fixes it by updating the test's `EXPECTF` to use a regex to account for both string patterns. [^1]: https://github.com/curl/curl/commit/45cf4755e71f#diff-a8a54563608f8155973318f4ddb61d7328dab512b8ff2b5cc48cc76979d4204cL1683 Closes GH-13293.
2024-01-31 19:03:55 +00:00
- Curl:
. Fix failing tests due to string changes in libcurl 8.6.0. (Ayesh)
PHP-8.2 is now for PHP 8.2.17-dev
2024-01-30 17:43:37 +00:00
Fix unlikely memory leak in case of namespace removal with extremely deep trees
2024-02-05 21:48:00 +00:00
- DOM:
. Fix unlikely memory leak in case of namespace removal with extremely deep
trees. (nielsdos)
Fix reference access in dimensions for DOMNodeList and DOMNodeMap Closes GH-13511.
2024-02-25 21:59:20 +00:00
. Fix reference access in dimensions for DOMNodeList and DOMNodeMap.
(nielsdos)
Fix unlikely memory leak in case of namespace removal with extremely deep trees
2024-02-05 21:48:00 +00:00
Fix GH-13344: finfo::buffer(): Failed identify data 0:(null) Credits to ranvis for finding the upstream commit that fixes the issue. This backports https://github.com/file/file/commit/029b82459eff7074425cfcbda7c3ce07bb9ce32d Closes GH-13370.
2024-02-11 00:02:57 +00:00
- Fileinfo:
. Fixed bug GH-13344 (finfo::buffer(): Failed identify data 0:(null),
backport). (nielsdos)
Fix bug #75712: getenv in php-fpm should not read $_ENV, $_SERVER Closes GH-13195
2024-01-19 14:41:46 +00:00
- FPM:
. Fixed bug #75712 (getenv in php-fpm should not read $_ENV, $_SERVER).
(Jakub Zelenka)
Fix detection of image formats in system gd library - Use gdFontCacheShutdown() to detect freetype Currently we look for gdImageStringFT() to determine whether or not gd has freetype support... but that function always exists. This leads PHP to believe that gd has freetype support when it does not, and can lead to build failures. The gdFontCacheShutdown() function, on the other hand, is only present when gd was built with freetype support. Let's use that instead. - Fix GD image format detection We currently check for, say, AVIF support by attempting to link a program that calls libgd's gdImageCreateFromAvif() function. But perversely, that function always exists in libgd; moreover when AVIF support is missing it emits a warning and returns normally. Thus our straightforward link test becomes not so straightforward. This commit adds a new macro PHP_GD_CHECK_FORMAT that compiles, links, and runs a test program instead. The test program overrides that "emit a warning" handler so that the program actually fails if the format we're looking for is not supported. This fixes detection of AVIF and the other formats we check for in an external libgd. - ext/gd/tests/bug77391.phpt: skip if gd lacks BMP support I don't actually know how to remove BMP support from libgd, but PHP has a ./configure test for it, so we should probably treat it as optional. Closes GH-12019
2024-02-26 12:59:21 +00:00
- GD:
. Fixed bug GH-12019 (detection of image formats in system gd library).
(Michael Orlitzky)
Fixed not to set CR_MALFORMED_PACKET to error if CR_SERVER_GONE_ERROR is already set Closes GH-11951.
2024-02-10 01:26:52 +00:00
- MySQLnd:
. Fixed bug GH-11950 ([mysqlnd] Fixed not to set CR_MALFORMED_PACKET to error
if CR_SERVER_GONE_ERROR is already set). (Saki Takamachi)
Merge branch 'PHP-8.2' into PHP-8.3 * PHP-8.2: ext/pdo: Fix various PDORow bugs
2024-02-27 15:31:48 +00:00
- PDO:
. Fix various PDORow bugs. (Girgias)
Fix GH-13354: ext/pgsql: pg_execute, pg_send_query_params and_send_execute null value by reference. For these, when passing null values by refence, queries return erroneous values unlike pg_query_params behaving as expected. close GH-13355.
2024-02-08 18:16:57 +00:00
- PGSQL:
. Fixed bug GH-13354 (pg_execute/pg_send_query_params/pg_send_execute
with null value passed by reference). (George Barbarosie)
Merge branch 'PHP-8.2' into PHP-8.3 * PHP-8.2: Fix GH-13531: Unable to resize SplfixedArray after being unserialized in PHP 8.2.15
2024-02-27 22:05:26 +00:00
- SPL:
. Fixed bug GH-13531 (Unable to resize SplfixedArray after being unserialized
in PHP 8.2.15). (nielsdos)
Fix instable array during in-place modification in uksort The array isn't just observable if the array has RCn, but also if it is inside a reference that is RCn. By-ref parameters are always RCn and as such always observable. Fixes GH-13279 Closes GH-13285
2024-01-31 12:15:49 +00:00
- Standard:
. Fixed bug GH-13279 (Instable array during in-place modification in uksort).
(ilutov)
Fix NEWS entry for GH-13315. Close GH-13325
2024-02-04 16:17:36 +00:00
. Fixed array key as hash to string (case insensitive) comparison typo
for the second operand buffer size (albeit unused for now). (A. Slepykh)
PHP-8.3 is now for PHP-8.3.3-dev
2024-01-02 15:50:36 +00:00
Merge branch 'PHP-8.2' into PHP-8.3 * PHP-8.2: Fix GH-13517: Multiple test failures when building with --with-expat
2024-02-27 20:49:39 +00:00
- XML:
. Fixed bug GH-13517 (Multiple test failures when building with
--with-expat). (nielsdos)
[ci skip] Fix NEWS date again
2024-02-05 21:55:52 +00:00
15 Feb 2024, PHP 8.3.3
Fix unlikely memory leak in case of namespace removal with extremely deep trees
2024-02-05 21:48:00 +00:00
[ci skip] NEWS
2024-01-05 18:46:27 +00:00
- Core:
. Fixed timer leak in zend-max-execution-timers builds. (withinboredom)
Set libtool tag per command instead of global one Global --tag=CC defined in configure.ac is not correct in all cases. For example linking objects that were compiled from C++ sources needs to be done with C++ compiler, however for link mode libtool will prefer compiler indicated with --tag. Fixes GH-12349
2024-01-10 08:06:41 +00:00
. Fixed bug GH-12349 (linking failure on ARM with mold). (Jan Palus)
Fix GH-13097: Anonymous class reference in trigger_error / thrown Exception Closes GH-13153.
2024-01-15 19:21:30 +00:00
. Fixed bug GH-13097 (Anonymous class reference in trigger_error / thrown
Exception). (nielsdos)
Fix GH-13177: PHP 8.3.2: final private constructor not allowed when used in trait zend_compile has an exception to this rule for constructors using `zend_is_constructor`, which compares the function name to `__construct`. Sadly, `zend_is_constructor` is not a public API, but we can just do the string compare ourselves. Closes GH-13179.
2024-01-17 16:13:35 +00:00
. Fixed bug GH-13177 (PHP 8.3.2: final private constructor not allowed
when used in trait). (nielsdos)
NEWS
2024-01-22 09:59:34 +00:00
. Fixed bug GH-13215 (GCC 14 build failure). (Remi)
Fix GH-13094: range(9.9, '0') causes segmentation fault `start_type + end_type < 2*IS_STRING` is not right, in this test case the types are start_type==5 (IS_DOUBLE), end_type==7 (IS_ARRAY). The IS_ARRAY type is a sentinel to disambiguate single-byte strings. The path must be taken when one of the types is not a string nor a single-byte string. Therefore, use < IS_STRING with an OR condition. Closes GH-13105.
2024-01-09 19:13:22 +00:00
Fix missing error check in curl_multi_init() Closes GH-13157.
2024-01-15 21:11:47 +00:00
- Curl:
. Fix missing error check in curl_multi_init(). (divinity76)
Fix GH-12996: Incorrect SCRIPT_NAME with Apache ProxyPassMatch when plus in path Closes GH-13072
2024-01-04 14:51:20 +00:00
- FPM:
. Fixed bug GH-12996 (Incorrect SCRIPT_NAME with Apache ProxyPassMatch when
plus in path). (Jakub Zelenka)
Fix GH-10344: imagettfbbox(): Could not find/open font UNC path libgd uses an incorrect absolute path check in gdft.c. It checks if either the path starts with a '/' (only valid on Posix btw), or whether it contains something of the form C:\ or C:/. However, this overlooks the possibility of using UNC paths on Windows. As we already do PHP-specific stuff with VCWD_ macros, use IS_ABSOLUTE_PATH to check for an absolute path which will take into account UNC paths as well. Closes GH-13241.
2024-01-24 21:12:49 +00:00
- GD:
. Fixed bug GH-10344 (imagettfbbox(): Could not find/open font UNC path).
(nielsdos)
Fix GH-10614: imagerotate will turn the picture all black, when rotated 90 This is a backport of the upstream libgd PR that was recently committed [1]. [1] https://github.com/libgd/libgd/pull/862 Closes GH-13246.
2024-01-25 22:30:23 +00:00
. Fixed bug GH-10614 (imagerotate will turn the picture all black, when
rotated 90). (nielsdos)
Fix GH-10344: imagettfbbox(): Could not find/open font UNC path libgd uses an incorrect absolute path check in gdft.c. It checks if either the path starts with a '/' (only valid on Posix btw), or whether it contains something of the form C:\ or C:/. However, this overlooks the possibility of using UNC paths on Windows. As we already do PHP-specific stuff with VCWD_ macros, use IS_ABSOLUTE_PATH to check for an absolute path which will take into account UNC paths as well. Closes GH-13241.
2024-01-24 21:12:49 +00:00
Fix crashes with entity references and predefined entities Closes GH-13004.
2023-12-22 22:24:34 +00:00
- LibXML:
. Fix crashes with entity references and predefined entities. (nielsdos)
Fix GH-12107: When running a stored procedure (that returns a result set) twice, PHP crashes Closes GH-12771.
2023-11-24 13:47:34 +00:00
- MySQLnd:
. Fixed bug GH-12107 (When running a stored procedure (that returns a result
set) twice, PHP crashes). (nielsdos)
strtok is not comptime() Fixes GH-13145 Closes GH-13148
2024-01-14 17:10:05 +00:00
- Opcache:
. Fixed bug GH-13145 (strtok() is not comptime). (ilutov)
Fix range inference since "proper-range-semantics" RFC * Arrays returned from range are never empty * When step is a double value representable by a long, it is coerced implicitly. As such, passing a double step no longer guarantees that the result is a non-int array. Closes GH-13166
2024-01-16 18:54:18 +00:00
. Fixed type inference of range(). (ilutov)
Fix GH-13232: Segmentation fault will be reported when JIT is off but JIT_debug is still on Closes GH-13234.
2024-01-23 18:59:40 +00:00
. Fixed bug GH-13232 (Segmentation fault will be reported when JIT is off but
JIT_debug is still on). (nielsdos)
strtok is not comptime() Fixes GH-13145 Closes GH-13148
2024-01-14 17:10:05 +00:00
ext/openssl: fix libressl build. Close GH-12919
2023-12-10 03:37:13 +00:00
- OpenSSL:
. Fixed LibreSSL undefined reference when OPENSSL_NO_ENGINE not set.
(David Carlier).
Fix GH-13119 (#13125) Fixed an issue where pdo_firebird float and double type values were wrong. Changed from using `%F` format with `zend_strpprintf` to using `%H` format with `zend_strpprintf_unchecked`. Fixes GH-13119 Closes GH-13125
2024-01-13 15:30:21 +00:00
- PDO_Firebird:
. Fix GH-13119 (Changed to convert float and double values ​​into strings using
`H` format). (SakiTakamachi)
Fix #71465: PHAR doesn't know about litespeed We should perhaps look into a generic system to ask the SAPI whether a feature should be supported or not. Or, we should look into making a denylist instead of an allowlist. Anyway, let's not try doing anything fancy on stable branches. Closes GH-13070.
2024-01-03 19:23:56 +00:00
- Phar:
. Fixed bug #71465 (PHAR doesn't know about litespeed). (nielsdos)
Fix GH-13037: PharData incorrectly extracts zip file The code currently assumes that the extra field length of the central directory entry and the local entry are the same, but that's not the case. For example, the "Extended Timestamp extra field" differs in size for local vs central directory entries. This causes the file contents offset to be incorrect because it is based on the central directory length instead of the local entry length. Fix it by reading the local entry and getting the size from there as well as checking consistency for the file name length. Closes GH-13045.
2023-12-28 21:41:32 +00:00
. Fixed bug GH-13037 (PharData incorrectly extracts zip file). (nielsdos)
PHP-8.3 is now for PHP-8.3.3-dev
2024-01-02 15:50:36 +00:00
random/standard: Correctly handle broken engines in php_array_pick_keys (#13138)
2024-01-14 12:01:29 +00:00
- Random:
. Fixed bug GH-13138 (Randomizer::pickArrayKeys() does not detect broken
engines). (timwolla)
Fix GH-12504: Corrupted session written when there's a fatal error in autoloader For details and reasoning, see [1] and following. [1] https://github.com/php/php-src/issues/12504#issuecomment-1790870399 Closes GH-13207.
2024-01-20 22:04:33 +00:00
- Session:
. Fixed bug GH-12504 (Corrupted session written when there's a fatal error
in autoloader). (nielsdos)
Fix GH-13094: range(9.9, '0') causes segmentation fault `start_type + end_type < 2*IS_STRING` is not right, in this test case the types are start_type==5 (IS_DOUBLE), end_type==7 (IS_ARRAY). The IS_ARRAY type is a sentinel to disambiguate single-byte strings. The path must be taken when one of the types is not a string nor a single-byte string. Therefore, use < IS_STRING with an OR condition. Closes GH-13105.
2024-01-09 19:13:22 +00:00
- Standard:
. Fixed bug GH-13094 (range(9.9, '0') causes segmentation fault). (nielsdos)
Fix GH-13071: Copying large files using mmap-able source streams may exhaust available memory and fail Commit 5cbe5a538c disabled chunking for all writes to streams. However, user streams have a callback where code is executed on data that is subject to the memory limit. Therefore, when using large writes or stream_copy_to_stream/copy the memory limit can easily be hit with large enough data. To solve this, we reintroduce chunking for userspace streams. Users have control over the chunk size, which is neat because they can improve the performance by setting the chunk size if that turns out to be a bottleneck. In an ideal world, we add an option so we can "ask" the stream whether it "prefers" chunked writes, similar to how we have php_stream_mmap_supported & friends. However, that cannot be done on stable branches. Closes GH-13136.
2024-01-12 23:28:57 +00:00
- Streams:
. Fixed bug GH-13071 (Copying large files using mmap-able source streams may
exhaust available memory and fail). (nielsdos)
PHP-8.3 is now for PHP-8.3.3-dev
2024-01-02 15:50:36 +00:00
18 Jan 2024, PHP 8.3.2
PHP-8.3 is now for PHP 8.3.2-dev
2023-12-05 15:56:55 +00:00
Fix GH-12953: SSA integrity verification failed when loading composer classmaps with more than 11k elements This is a false positive. The cycle detection code stops at 10.000 iterations. Instead of stopping at a fixed amount, make it more robust by implementing Floyd's cycle detection algorithm. Closes GH-12954.
2023-12-14 19:32:12 +00:00
- Core:
. Fixed bug GH-12953 (false positive SSA integrity verification failed when
loading composer classmaps with more than 11k elements). (nielsdos)
[ci skip] Fixes in NEWS
2023-12-27 22:26:37 +00:00
. Fixed bug GH-12999 (zend_strnlen build when strnlen is unsupported).
(rainerjung)
. Fixed bug GH-12966 (missing cross-compiling 3rd argument so Autoconf
doesn't emit warnings). (Peter Kokot)
. Fixed bug GH-12854 (8.3 - as final trait-used method does not correctly
report visibility in Reflection). (nielsdos)
Fix GH-12953: SSA integrity verification failed when loading composer classmaps with more than 11k elements This is a false positive. The cycle detection code stops at 10.000 iterations. Instead of stopping at a fixed amount, make it more robust by implementing Floyd's cycle detection algorithm. Closes GH-12954.
2023-12-14 19:32:12 +00:00
Fix max_execution_time with cli-server router script When the cli-server specifies a router script, we run it using zend_execute_scripts instead of php_execute_script, because the former preserves the return value of the script. However, php_execute_script also starts resets the execution timer with the value from max_execution_time. If the timer has previously been initialized with max_input_time, it will never be reset, and thus trigger at the incorrect time. Closes GH-12886
2023-12-06 18:57:35 +00:00
- Cli:
. Fix incorrect timeout in built-in web server when using router script and
max_input_time. (ilutov)
[ci skip] NEWS
2023-12-08 16:19:17 +00:00
- DOM:
. Fixed bug GH-12870 (Creating an xmlns attribute results in a DOMException).
(nielsdos)
Fix crash when toggleAttribute() is used without a document
2023-12-22 20:12:59 +00:00
. Fix crash when toggleAttribute() is used without a document. (nielsdos)
Fix crash in adoptNode with attribute references I forgot to also update the document reference of attributes, so when there is no document reference anymore from a variable, but still an attribute, this can crash. Fix it by also updating the document references for attributes. Closes GH-13002.
2023-12-22 21:03:36 +00:00
. Fix crash in adoptNode with attribute references. (nielsdos)
Fix GH-13012: DOMNode::isEqualNode() is incorrect when attribute order is different Attributes (and namespace declarations) have to be compared in an unordered way. Closes GH-13017.
2023-12-24 12:21:06 +00:00
. Fixed bug GH-13012 (DOMNode::isEqualNode() is incorrect when attribute
order is different). (nielsdos)
[ci skip] NEWS
2023-12-08 16:19:17 +00:00
Fix GH-9698: stream_wrapper_register crashes with FFI\CData provided as class Closes GH-12926
2023-12-10 22:30:04 +00:00
- FFI:
. Fixed bug GH-9698 (stream_wrapper_register crashes with FFI\CData).
(Jakub Zelenka)
Fix GH-12905: FFI::new interacts badly with observers Because these functions are copied and not properly registered (which we can't), the observer code doesn't add the temporaries on startup. Add them via a callback during startup. Closes GH-12906.
2023-12-08 16:44:03 +00:00
. Fixed bug GH-12905 (FFI::new interacts badly with observers). (nielsdos)
Fix GH-9698: stream_wrapper_register crashes with FFI\CData provided as class Closes GH-12926
2023-12-10 22:30:04 +00:00
ext/gd: Fix GH-13082 Issue occur when compiling with recent clang releases (> 13) and with the '-Os' optimisation level, after using `imageloadfont` which returns a proper GdFont class leads to a subtle bug when attempting to use via the imagefont* function.
2024-01-09 20:40:22 +00:00
- GD:
. Fixed GH-13082 undefined behavior with GdFont instances handling with
imageload* and imagechar*. (David Carlier)
GH-12943 ext/intl accept C as acceptable locale argument. Close GH-12955
2023-12-15 06:03:19 +00:00
- Intl:
. Fixed GH-12943 (IntlDateFormatter::__construct accepts 'C' as valid locale).
(David Carlier)
Fix GH-12936: hash() function hangs endlessly if using sha512 on strings >= 4GiB There's two problems: - Some loops used `unsigned int` instead of `size_t`. - The 2*N-bit addition that is emulated using 2 N bit numbers has a bug: it first truncated the number to 32/64 bit and only then shifted. This resulted in the wrong length info stored inside the resulting hash. Closes GH-12937.
2023-12-11 22:40:26 +00:00
- Hash:
. Fixed bug GH-12936 (hash() function hangs endlessly if using sha512 on
strings >= 4GiB). (nielsdos)
Retroactively add NEWS entry for ec348a12 Thanks to Kalle Sommer Nielsen for suggesting that the change in ec348a12 should have been called out in NEWS.
2024-01-28 18:39:17 +00:00
- MBString:
. When operating on a string with invalid encoding, mb_substr (as well
as mb_strstr and its variants) defines character indices in the same
way as other mbstring functions such as mb_strpos. (Alex Dowad)
Fix GH-12974: Apache crashes on shutdown when using pg_pconnect() On ZTS, the global variables are stored in dynamically allocated memory. When the module gets shut down this memory is released. After the module is shut down, only then are the persistent resources cleared. Normally this isn't an issue, but pgsql and odbc refer to the globals to modify some counters, after the globals have been freed. Fix this by guarding the modification. Closes GH-13032.
2023-12-26 22:47:45 +00:00
- ODBC:
. Fix crash on Apache shutdown with persistent connections. (nielsdos)
Fix zend_jit_undefined_long_key overwriting dim when dim == result Fixes oss-fuzz #64727 Closes GH-12900
2023-12-08 11:56:30 +00:00
- Opcache:
. Fixed oss-fuzz #64727 (JIT undefined array key warning may overwrite DIM
with NULL when DIM is the same var as result). (ilutov)
Fix SELinux mprotect execheap error due to mem adjacent to heap It seems SELinux has a bug where memory directly adjacent to the heap is interpreted as heap memory. Dodge this issue by leaving some space between the heap and memory suggested by find_prefered_mmap_base. See GH-12932 See https://bugzilla.kernel.org/show_bug.cgi?id=218258 Closes GH-12942
2023-12-12 14:17:37 +00:00
. Added workaround for SELinux mprotect execheap issue.
See https://bugzilla.kernel.org/show_bug.cgi?id=218258. (ilutov)
Fix zend_jit_undefined_long_key overwriting dim when dim == result Fixes oss-fuzz #64727 Closes GH-12900
2023-12-08 11:56:30 +00:00
Fix GH-12987: openssl_csr_sign might leak new cert on error Closes GH-12988
2023-12-21 16:42:09 +00:00
- OpenSSL:
. Fixed bug GH-12987 (openssl_csr_sign might leak new cert on error).
(Jakub Zelenka)
Fix GH-12969: Fixed PDO::getAttribute() to get PDO::ATTR_STRINGIFY_FETCHES Partial backport of GH-12793. Closes GH-12970.
2023-12-18 15:22:49 +00:00
- PDO:
. Fix GH-12969 (Fixed PDO::getAttribute() to get PDO::ATTR_STRINGIFY_FETCHES).
(SakiTakamachi)
Fix GH-12767: Fixed to be able to change autocommit mode using setAttribute Signed-off-by: Gina Peter Banyard <girgias@php.net>
2023-11-25 12:22:50 +00:00
- PDO_ODBC:
. Fixed bug GH-12767 (Unable to turn on autocommit mode with setAttribute()).
(SakiTakamachi)
ext/pgsql: pgsql.allow_persistent, no need to use such large type for boolean state. also ext/odbc, simplifying odd comparison with non persistent connections. Close GH-12976
2023-12-19 17:42:52 +00:00
- PGSQL:
. Fixed auto_reset_persistent handling and allow_persistent type. (David Carlier)
Fix GH-12974: Apache crashes on shutdown when using pg_pconnect() On ZTS, the global variables are stored in dynamically allocated memory. When the module gets shut down this memory is released. After the module is shut down, only then are the persistent resources cleared. Normally this isn't an issue, but pgsql and odbc refer to the globals to modify some counters, after the globals have been freed. Fix this by guarding the modification. Closes GH-13032.
2023-12-26 22:47:45 +00:00
. Fixed bug GH-12974 (Apache crashes on shutdown when using pg_pconnect()).
(nielsdos)
ext/pgsql: pgsql.allow_persistent, no need to use such large type for boolean state. also ext/odbc, simplifying odd comparison with non persistent connections. Close GH-12976
2023-12-19 17:42:52 +00:00
Fix #77432: Segmentation fault on including phar file phar_get_pharfp() can return NULL. In this case this is because the stream gets closed by the include code in the engine. However, the phar entry is still cached, so when the next include happens the engine tries to read from a closed (and nullified) stream. Use the same fix as in phar_open_entry_fp(): take into account that the phar_get_pharfp() can return NULL and in that case reopen the phar archive. Closes GH-13056.
2023-12-30 22:49:28 +00:00
- Phar:
. Fixed bug #77432 (Segmentation fault on including phar file). (nielsdos)
Fix GH-12962: Double free of init_file in phpdbg_prompt.c See GH-12962 for analysis. Closes GH-12963.
2023-12-17 00:35:15 +00:00
- PHPDBG:
. Fixed bug GH-12962 (Double free of init_file in phpdbg_prompt.c). (nielsdos)
Fix getting the address of an uninitialized property of a SimpleXMLElement resulting in a crash Closes GH-12945.
2023-12-12 19:33:23 +00:00
- SimpleXML:
. Fix getting the address of an uninitialized property of a SimpleXMLElement
resulting in a crash. (nielsdos)
Fix GH-12929: SimpleXMLElement with stream_wrapper_register can segfault Move SimpleXML invalidation code after node checks This is safe, i.e. the tree hasn't been modified yet, because either we didn't call a libxml modification function yet, or xmlNewChild is called with a NULL pointer, which makes it bail out and return NULL. Closes GH-12947.
2023-12-12 20:05:58 +00:00
. Fixed bug GH-12929 (SimpleXMLElement with stream_wrapper_register can
segfault). (nielsdos)
Fix getting the address of an uninitialized property of a SimpleXMLElement resulting in a crash Closes GH-12945.
2023-12-12 19:33:23 +00:00
Fix GH-12980: tidynode.props.attribute is missing "Boolean Attributes" and empty attributes Closes GH-12993.
2023-12-21 16:37:05 +00:00
- Tidy:
. Fixed bug GH-12980 (tidynode.props.attribute is missing
"Boolean Attributes" and empty attributes). (nielsdos)
PHP-8.3 is now for PHP 8.3.2-dev
2023-12-05 15:56:55 +00:00
07 Dec 2023, PHP 8.3.1RC1
PHP 8.3 is now 8.3.1-dev
2023-11-21 14:54:52 +00:00
Fix use-after-free of name in var-var with malicious error handler Fixes oss-fuzz #54325 Closes GH-12732
2023-11-20 10:56:06 +00:00
- Core:
Add NEWS entry for GH-12768
2023-11-24 23:57:22 +00:00
. Fixed bug GH-12758 / GH-12768 (Invalid opline in OOM handlers within
ZEND_FUNC_GET_ARGS and ZEND_BIND_STATIC). (Florian Engelhardt)
Add missing NULL checks for spl autoload table Closes GH-12840.
2023-11-30 19:27:07 +00:00
. Fix various missing NULL checks. (nielsdos, dstogov)
Fix leak of call->extra_named_params on internal __call Fixes GH-12835 Closes GH-12836
2023-11-30 12:41:07 +00:00
. Fixed bug GH-12835 (Leak of call->extra_named_params on internal __call).
(ilutov)
Fix GH-12826: Weird pointers issue in nested loops This regressed in cd53ce838a. The loop with `zend_hash_iterators_update` hangs forever because `iter_pos` can't advance to idx. This is because the `zend_hash_iterators_lower_pos` upper bound is `target->nNumUsed`, but that is set to `source->nNumOfElements`. That means that if there are holes in the array, we still loop over all the buckets but the number of bucket slots will not match. Fix it by changing the assignment. Closes GH-12831.
2023-11-29 19:35:13 +00:00
. Fixed bug GH-12826 (Weird pointers issue in nested loops). (nielsdos)
Fix use-after-free of name in var-var with malicious error handler Fixes oss-fuzz #54325 Closes GH-12732
2023-11-20 10:56:06 +00:00
Fix bug GH-12705: Segmentation fault in fpm_status_export_to_zval Closes GH-12706
2023-11-17 16:32:23 +00:00
- FPM:
. Fixed bug GH-12705 (Segmentation fault in fpm_status_export_to_zval).
(Patrick Prasse)
Fix GH-12635: Test bug69398.phpt fails with ICU 74.1 ICU 74.1 contains new locale data that breaks the test. Split the test based on the version number to resolve the issue. Closes GH-12653.
2023-11-11 13:15:23 +00:00
Fix GH-9348: FTP & SSL session reuse The issue referenced here doesn't contain a reproducer, but I recently received an email of a user with the exact same problem. I was able to recreate the scenario locally using vsftpd and setting `require_ssl_reuse=YES` in the vsftpd configuration. It turns out that our session resumption code is broken. It only works a single time: the first time a data connection opens. Subsequent data connections fail to reuse the session. This is because on every data connection a new session is negotiated, but the current code always tries to reuse the (stale) session of the control connection. To fix this, we use SSL_CTX_sess_set_new_cb() to setup a callback that gets called every time a new session is negotiated. We take a strong reference using SSL_get1_session() and store it in the ftpbuf_t struct. Every time we open a data connection we'll take that session. This works because every control connection has at most a single associated data connection. Also disable internal session caching storage to not fill the cache up with useless sessions. There is no phpt for this because PHP does not support enforcing SSL session reuse. It is however testable manually by setting up vsftpd and setting the `require_ssl_reuse=YES` function from before. Closes GH-12851.
2023-12-02 15:20:15 +00:00
- FTP:
. Fixed bug GH-9348 (FTP & SSL session reuse). (nielsdos)
Fix GH-12635: Test bug69398.phpt fails with ICU 74.1 ICU 74.1 contains new locale data that breaks the test. Split the test based on the version number to resolve the issue. Closes GH-12653.
2023-11-11 13:15:23 +00:00
Fix GH-12702: libxml2 2.12.0 issue building from src Fixes GH-12702. Co-authored-by: nono303 <github@nono303.net>
2023-11-17 18:45:40 +00:00
- LibXML:
Test fixes for libxml2 2.12.0
2023-11-29 19:49:29 +00:00
. Fixed test failures for libxml2 2.12.0. (nielsdos)
Fix GH-12702: libxml2 2.12.0 issue building from src Fixes GH-12702. Co-authored-by: nono303 <github@nono303.net>
2023-11-17 18:45:40 +00:00
Avoid using uninitialised struct Closes GH-12046.
2023-08-25 15:43:01 +00:00
- MySQLnd:
. Avoid using uninitialised struct. (mikhainin)
Fix GH-12791: Possible dereference of NULL in MySQLnd debug code Closes GH-12794.
2023-11-27 12:25:11 +00:00
. Fixed bug GH-12791 (Possible dereference of NULL in MySQLnd debug code).
(nielsdos)
Avoid using uninitialised struct Closes GH-12046.
2023-08-25 15:43:01 +00:00
jit: fixed "Uninitialized string offset" warning being emitted at the same time as invalid offset Error
2023-11-27 16:04:41 +00:00
- Opcache:
. Fixed JIT bug (Function JIT emits "Uninitialized string offset" warning
at the same time as invalid offset Error). (Girgias)
jit: fixed JIT "Attempt to assign property of non-object" warning emitted at the same time as Error is being thrown
2023-11-27 16:19:35 +00:00
. Fixed JIT bug (JIT emits "Attempt to assign property of non-object"
warning at the same time as Error is being thrown). (Girgias)
jit: fixed "Uninitialized string offset" warning being emitted at the same time as invalid offset Error
2023-11-27 16:04:41 +00:00
Fix the default value of $fetchMode in PDO::pgsqlGetNotify()
2023-12-03 07:59:21 +00:00
- PDO PGSQL:
. Fixed the default value of $fetchMode in PDO::pgsqlGetNotify() (kocsismate)
Fix GH-12838: [SOAP] Temporary WSDL cache files not being deleted If there are two users that can execute the script that caches a WSDL, but the script is owned by a single user, then the caching code will name the cached file with the file owner username and a hash of the uri. When one of the two tries to rename the file created by the other process, this does not work because it has no permission to do so. This then leaves temporary files floating in the temp directory. To fix the immediate problem, unlink the file after rename has failed. On the long term, this has to be fixed by taking the username of the process instead of the username of the file owner. Closes GH-12841.
2023-11-30 19:43:50 +00:00
- SOAP:
. Fixed bug GH-12838 ([SOAP] Temporary WSDL cache files not being deleted).
(nielsdos)
ext/standard: Fix GH-9316 http_build_query() default null argument for is implicitly coerced to string Closes GH-9316
2023-11-22 04:09:40 +00:00
- Standard
Mention correct bug number I'm tired
2023-11-22 04:14:37 +00:00
. Fixed GH-12745 (http_build_query() default null argument for $arg_separator
ext/standard: Fix GH-9316 http_build_query() default null argument for is implicitly coerced to string Closes GH-9316
2023-11-22 04:09:40 +00:00
is implicitly coerced to string). (Girgias)
PHP 8.3 is now 8.3.1-dev
2023-11-21 14:54:52 +00:00
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
23 Nov 2023, PHP 8.3.0
Update news for PHP 8.3.0 GA
2023-11-07 20:13:42 +00:00
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
- Bcmath
. Fixed GH-11761 (removing trailing zeros from numbers) (jorgsowa)
[ci skip] Update NEWS for PHP 8.2.0 RC1
2022-08-16 15:39:53 +00:00
socket module add SO_ATTACH_REUSEPORT_CPBF for Linux. to be used in conjunction with SO_REUSPORT, giving a greater control over how we bind a socket instead of the round robin workflow, we do instead attach to the processor id as : - we assign the processor_id to A in the BPF filter. - then returns A. in other words, a more modern version of SO_INCOMING_CPU (ie can have a per worker notion we do not use here). Closes #8062
2022-02-08 18:28:24 +00:00
- CLI:
. Added pdeathsig to builtin server to terminate workers when the master
process is killed. (ilutov)
Fix GH-11104: STDIN/STDOUT/STDERR is not available for CLI without a script I found no reason why this is done this way. Of course this will allow users to do stupid stuff like `fclose(STDOUT);` etc. but if they type in that code they clearly know what they're doing... Close GH-11169.
2023-04-30 21:33:41 +00:00
. Fixed bug GH-11104 (STDIN/STDOUT/STDERR is not available for CLI without
a script). (nielsdos)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Implement GH-10024 (support linting multiple files at once using php -l).
(nielsdos)
socket module add SO_ATTACH_REUSEPORT_CPBF for Linux. to be used in conjunction with SO_REUSPORT, giving a greater control over how we bind a socket instead of the round robin workflow, we do instead attach to the processor id as : - we assign the processor_id to A in the BPF filter. - then returns A. in other words, a more modern version of SO_INCOMING_CPU (ie can have a per worker notion we do not use here). Closes #8062
2022-02-08 18:28:24 +00:00
Improve magic __get and property type inconsistency error message Fixes GH-9388 Closes GH-9436
2022-08-26 14:33:47 +00:00
- Core:
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Fix GH-11388 (Allow "final" modifier when importing a method from a trait).
(nielsdos)
. Fixed bug GH-11406 (segfault with unpacking and magic method closure).
(nielsdos)
Improve magic __get and property type inconsistency error message Fixes GH-9388 Closes GH-9436
2022-08-26 14:33:47 +00:00
. Fixed bug GH-9388 (Improve unset property and __get type incompatibility
error message). (ilutov)
Set SA_ONSTACK in zend_sigaction (#9597)
2022-09-26 21:02:56 +00:00
. SA_ONSTACK is now set for signal handlers to be friendlier to other
in-process code such as Go's cgo. (Kévin Dunglas)
Set SA_ONSTACK too when zend signals are disabled and in pcntl Closes GH-9758.
2022-10-16 10:21:40 +00:00
. SA_ONSTACK is now set when signals are disabled. (Kévin Dunglas)
fix: no-op when signal handlers are called on threads not managed by PHP (#9766)
2022-10-22 09:17:27 +00:00
. Fix GH-9649: Signal handlers now do a no-op instead of crashing when
executed on threads not managed by TSRM. (Kévin Dunglas)
Fiber: add shadow stack support Shadow stack is part of Intel's Control-Flow Enforcement Technology (CET). Whenever a function is called, the return address is pushed onto both the regular stack and the shadow stack. When that function returns, the return addresses are popped off both stacks and compared; if they fail to match, #CP raised. With this commit, we create shadow stack for each fiber context and switch the shadow stack accordingly during fcontext switch. Signed-off-by: Chen, Hu <hu1.chen@intel.com> Closes GH-9283.
2022-07-26 10:52:48 +00:00
. Added shadow stack support for fibers. (Chen Hu)
Fix caching of default params with side-effects Fixes GH-9965 Closes GH-9935
2022-11-11 14:55:03 +00:00
. Fix bug GH-9965 (Fix accidental caching of default arguments with side
effects). (ilutov)
Close GH-10217: Use strlen() for determining the class_name length Closes GH-10231.
2023-01-05 13:24:44 +00:00
. Implement GH-10217 (Use strlen() for determining the class_name length).
(Dennis Buteyn)
Fix lineno for all constant expressions Fixes GH-8821 Closes GH-8855
2022-08-04 12:12:45 +00:00
. Fix bug GH-8821 (Improve line numbers for errors in constant expressions).
(ilutov)
Allow comments between intersection types and by-ref params Fixes GH-10083 Closes GH-10125
2022-12-11 23:23:46 +00:00
. Fix bug GH-10083 (Allow comments between & and parameter). (ilutov)
feat: enable Zend Max Execution Timers by default in 8.3 (#10778)
2023-03-10 15:22:42 +00:00
. Zend Max Execution Timers is now enabled by default for ZTS builds on
Linux. (Kévin Dunglas)
Disallow parent dir components (..) in open_basedir() at runtime Fix GH-10469 Closes GH-10913
2023-03-23 13:35:50 +00:00
. Fix bug GH-10469 (Disallow .. in open_basedir paths set at runtime).
(ilutov)
[skip ci] Add NEWS entry for GH-10168 and GH-10582
2023-04-05 09:24:06 +00:00
. Fix bug GH-10168, GH-10582 (Various segfaults with destructors and VM return
values). (dstogov, nielsdos, ilutov)
Add separate static property through trait if parent already declares it Fixes GH-10935 Closes GH-10937
2023-03-25 17:34:06 +00:00
. Fix bug GH-10935 (Use of trait doesn't redeclare static property if class
has inherited it from its parent). (ilutov)
Fix negative indices on empty array not affecting next chosen index Changed the value of nNextFreeElement in _zend_empty_array from 0 to ZEND_LONG_MIN. Fixes GH-11154 Closes GH-11157
2023-04-28 15:12:31 +00:00
. Fix bug GH-11154 (Negative indices on empty array don't affect next chosen
index). (ColinHDev)
Implement delayed early binding for classes without parents Normally, we add classes without parents (and no interfaces or traits) directly to the class map, early binding the class. However, if the same class has already been registered, we would instead just add a ZEND_DECLARE_CLASS instruction and let the handler throw a duplicate class declaration exception. However, with opcache, if on the next request the files are included in the opposite order, we won't perform early binding. To fix this, create a ZEND_DECLARE_CLASS_DELAYED instruction instead and handle classes without parents accordingly, skipping any linking for classes that are already linked in delayed early binding. Fixes GH-8846
2023-05-10 18:38:33 +00:00
. Fix bug GH-8846 (Implement delayed early binding for classes without
parents). (ilutov)
Fix #97836 and #81705: Segfault / type confusion in concat_function The following sequence of actions was happening which caused a null pointer dereference: 1. debug_backtrace() returns an array 2. The concatenation to $c will transform the array to a string via `zval_get_string_func` for op2 and output a warning. Note that zval op1 is of type string due to the first do-while sequence. 3. The warning of an implicit "array to string conversion" triggers the ob_start callback to run. This code transform $c (==op1) to a long. 4. The code below the 2 do-while sequences assume that both op1 and op2 are strings, but this is no longer the case. A dereference of the string will therefore result in a null pointer dereference. The solution used here is to work with the zend_string directly instead of with the ops. For the tests: Co-authored-by: changochen1@gmail.com Co-authored-by: cmbecker69@gmx.de Co-authored-by: yukik@risec.co.jp Closes GH-10049.
2022-12-04 20:59:18 +00:00
. Fix bug #79836 (Segfault in concat_function). (nielsdos)
. Fix bug #81705 (type confusion/UAF on set_error_handler with concat
operation). (nielsdos)
Let closure created from magic method accept named parameters Implements GH-11348. Closes GH-11364.
2023-06-03 18:15:23 +00:00
. Fix GH-11348 (Closure created from magic method does not accept named
arguments). (nielsdos)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Fix GH-11388 (Allow "final" modifier when importing a method from a trait).
(nielsdos)
. Fixed bug GH-11406 (segfault with unpacking and magic method closure).
(nielsdos)
. Fixed bug GH-11507 (String concatenation performance regression in 8.3).
(nielsdos)
. Fixed GH-11488 (Missing "Optional parameter before required" deprecation on
union null type). (ilutov)
. Implement the #[\Override] attribute RFC. (timwolla)
. Fixed bug GH-11601 (Incorrect handling of unwind and graceful exit
exceptions). (ilutov)
. Added zend_call_stack_get implementation for OpenBSD. (David Carlier)
. Add stack limit check in zend_eval_const_expr(). (Arnaud)
. Expose time spent collecting cycles in gc_status(). (Arnaud)
. Remove WeakMap entries whose key is only reachable through the entry value.
(Arnaud)
. Resolve open_basedir paths on INI update. (ilutov)
. Fixed oss-fuzz #60741 (Leak in open_basedir). (ilutov)
. Fixed segfault during freeing of some incompletely initialized objects due
to OOM error (PDO, SPL, XSL). (ilutov)
. Introduced Zend guard recursion protection to fix __debugInfo issue.
(Jakub Zelenka)
. Fixed oss-fuzz #61712 (assertion failure with error handler during binary
op). (nielsdos)
. Fixed GH-11847 (DTrace enabled build is broken). (Filip Zrůst)
. Fixed OSS Fuzz #61865 (Undef variable in ++/-- for declared property
that is unset in error handler). (Girgias)
. Fixed warning emitted when checking if a user stream is castable. (Girgias)
. Fixed bug GH-12123 (Compile error on MacOS with C++ extension when using
ZEND_BEGIN_ARG_WITH_RETURN_TYPE_INFO_EX). (kocsismate)
. Fixed bug GH-12189 (#[Override] attribute in trait does not check for
parent class implementations). (timwolla)
. Fixed OSS Fuzz #62294 (Unsetting variable after ++/-- on string variable
warning). (Girgias)
. Fixed buffer underflow when compiling memoized expression. (ilutov)
. Fixed oss-fuzz #63802 (OP1 leak in error path of post inc/dec). (ilutov)
- Curl:
. Added Curl options and constants up to (including) version 7.87.
(nielsdos, adoy)
Improve magic __get and property type inconsistency error message Fixes GH-9388 Closes GH-9436
2022-08-26 14:33:47 +00:00
Implement More Appropriate Date/Time Exceptions RFC
2023-01-06 15:31:16 +00:00
- Date:
. Implement More Appropriate Date/Time Exceptions RFC. (Derick)
Implement iteration cache, item cache and length cache for node list iteration (#11330) * Implement iteration cache, item cache and length cache for node list iteration The current implementation follows the spec requirement that the list must be "live". This means that changes in the document must be reflected in the existing node lists without requiring the user to refetch the node list. The consequence is that getting any item, or the length of the list, always starts searching from the root element of the node list. This results in O(n) time to get any item or the length. If there's a for loop over the node list, this means the iterations will take O(n²) time in total. This causes real-world performance issues with potential for downtime (see GH-11308 and its references for details). We fix this by introducing a caching strategy. We cache the last iterated object in the iterator, the last requested item in the node list, and the last length computation. To invalidate the cache, we simply count the number of modifications made to the containing document. If the modification number does not match what the number was during caching, we know the document has been modified and the cache is invalid. If this ever overflows, we saturate the modification number and don't do any caching anymore. Note that we don't check for overflow on 64-bit systems because it would take hundreds of years to overflow. Fixes GH-11308.
2023-06-02 22:13:14 +00:00
- DOM:
Changelog notes for DOMAttr value and nodeValue properties
2022-12-22 01:34:51 +00:00
. Fix bug GH-8388 (DOMAttr unescapes character reference). (Tim Starling)
Implement iteration cache, item cache and length cache for node list iteration (#11330) * Implement iteration cache, item cache and length cache for node list iteration The current implementation follows the spec requirement that the list must be "live". This means that changes in the document must be reflected in the existing node lists without requiring the user to refetch the node list. The consequence is that getting any item, or the length of the list, always starts searching from the root element of the node list. This results in O(n) time to get any item or the length. If there's a for loop over the node list, this means the iterations will take O(n²) time in total. This causes real-world performance issues with potential for downtime (see GH-11308 and its references for details). We fix this by introducing a caching strategy. We cache the last iterated object in the iterator, the last requested item in the node list, and the last length computation. To invalidate the cache, we simply count the number of modifications made to the containing document. If the modification number does not match what the number was during caching, we know the document has been modified and the cache is invalid. If this ever overflows, we saturate the modification number and don't do any caching anymore. Note that we don't check for overflow on 64-bit systems because it would take hundreds of years to overflow. Fixes GH-11308.
2023-06-02 22:13:14 +00:00
. Fix bug GH-11308 (getElementsByTagName() is O(N^2)). (nielsdos)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Fix #79700 (wrong use of libxml oldNs leads to performance problem).
(nielsdos)
. Fix #77894 (DOMNode::C14N() very slow on generated DOMDocuments even after
normalisation). (nielsdos)
. Revert changes to DOMAttr::$value and DOMAttr::$nodeValue expansion.
(nielsdos)
. Fixed bug GH-11500 (Namespace reuse in createElementNS() generates wrong
output). (nielsdos)
. Implemented DOMDocument::adoptNode(). Previously this always threw a
"not yet implemented" exception. (nielsdos)
. Fixed bug GH-9628 (Implicitly removing nodes from \DOMDocument breaks
existing references). (nielsdos)
. Added DOMNode::contains() and DOMNameSpaceNode::contains(). (nielsdos)
. Added DOMElement::getAttributeNames(). (nielsdos)
. Added DOMNode::getRootNode(). (nielsdos)
. Added DOMElement::className and DOMElement::id. (nielsdos)
. Added DOMParentNode::replaceChildren(). (nielsdos)
. Added DOMNode::isConnected and DOMNameSpaceNode::isConnected. (nielsdos)
. Added DOMNode::parentElement and DOMNameSpaceNode::parentElement.
(nielsdos)
. Added DOMNode::isEqualNode(). (nielsdos)
. Added DOMElement::insertAdjacentElement() and
DOMElement::insertAdjacentText(). (nielsdos)
. Added DOMElement::toggleAttribute(). (nielsdos)
. Fixed bug GH-11792 (LIBXML_NOXMLDECL is not implemented or broken).
(nielsdos)
. adoptNode now respects the strict error checking property. (nielsdos)
. Align DOMChildNode parent checks with spec. (nielsdos)
. Fixed bug #80927 (Removing documentElement after creating attribute node:
possible use-after-free). (nielsdos)
. Fix various namespace prefix conflict resolution bugs. (nielsdos)
. Fix calling createAttributeNS() without prefix causing the default
namespace of the element to change. (nielsdos)
. Fixed GH-11952 (Confusing warning when blocking entity loading via
libxml_set_external_entity_loader). (nielsdos)
. Fix broken cache invalidation with deallocated and reallocated document
node. (nielsdos)
. Fix compile error when php_libxml.h header is included in C++.
(Remi, nielsdos)
. Fixed bug #47531 (No way of removing redundant xmlns: declarations).
(nielsdos)
Implement iteration cache, item cache and length cache for node list iteration (#11330) * Implement iteration cache, item cache and length cache for node list iteration The current implementation follows the spec requirement that the list must be "live". This means that changes in the document must be reflected in the existing node lists without requiring the user to refetch the node list. The consequence is that getting any item, or the length of the list, always starts searching from the root element of the node list. This results in O(n) time to get any item or the length. If there's a for loop over the node list, this means the iterations will take O(n²) time in total. This causes real-world performance issues with potential for downtime (see GH-11308 and its references for details). We fix this by introducing a caching strategy. We cache the last iterated object in the iterator, the last requested item in the node list, and the last length computation. To invalidate the cache, we simply count the number of modifications made to the containing document. If the modification number does not match what the number was during caching, we know the document has been modified and the cache is invalid. If this ever overflows, we saturate the modification number and don't do any caching anymore. Note that we don't check for overflow on 64-bit systems because it would take hundreds of years to overflow. Fixes GH-11308.
2023-06-02 22:13:14 +00:00
Remove duplicated length check in exif and remove always false condition from exif The latter condition will never trigger because otherwise the do-while loop wouldn't have exited. Close GH-10402
2023-01-21 14:35:15 +00:00
- Exif:
. Removed unneeded codepaths in exif_process_TIFF_in_JPEG(). (nielsdos)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
- FFI:
. Implement GH-11934 (Allow to pass CData into struct and/or union fields).
(nielsdos, KapitanOczywisty)
NEWS: Add libmagic upgrade note Signed-off-by: Anatol Belski <ab@php.net>
2022-10-02 20:26:17 +00:00
- Fileinfo:
. Upgrade bundled libmagic to 5.43. (Anatol)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Fix GH-11408 (Unable to build PHP 8.3.0 alpha 1 / fileinfo extension).
(nielsdos)
NEWS: Add libmagic upgrade note Signed-off-by: Anatol Belski <ab@php.net>
2022-10-02 20:26:17 +00:00
Match FPM status pool's expose_php with parent If an installed php.ini turns expose_php on/off, and an FPM pool overrides that with php_flag[expose_php]=off/on, a status pool created with pm.status_listen in a pool config will have its expose_php reflect the php.ini value, and not the pool config's override. This change looks for an override set in php_flag/php_value/php_admin_flag/php_admin_value and carries that through.
2022-09-08 16:19:34 +00:00
- FPM:
. The status.listen shared pool now uses the same php_values (including
expose_php) and php_admin_value as the pool it is shared with. (dwxh)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Added warning to log when fpm socket was not registered on the expected
path. (Joshua Behrens, Jakub Zelenka)
. Fixed bug #76067 (system() function call leaks php-fpm listening sockets).
(Mikhail Galanin, Jakub Zelenka)
. Fixed GH-12077 (PHP 8.3.0RC1 borked socket-close-on-exec.phpt).
(Jakub Zelenka)
Match FPM status pool's expose_php with parent If an installed php.ini turns expose_php on/off, and an FPM pool overrides that with php_flag[expose_php]=off/on, a status pool created with pm.status_listen in a pool config will have its expose_php reflect the php.ini value, and not the pool config's override. This change looks for an override set in php_flag/php_value/php_admin_flag/php_admin_value and carries that through.
2022-09-08 16:19:34 +00:00
[ci skip] Order NEWS sections alphabetically
2022-11-08 22:47:30 +00:00
- GD:
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Removed imagerotate "ignore_transparent" argument since it has no effect.
(David Carlier)
[ci skip] Order NEWS sections alphabetically
2022-11-08 22:47:30 +00:00
intl extension: msgfmt_set_pattern add pattern format error informations.
2022-11-27 10:24:25 +00:00
- Intl:
intl extension, follow up on #10006 for numfmt_set_pattern Closes GH-10073.
2022-12-09 16:56:43 +00:00
. Added pattern format error infos for numfmt_set_pattern. (David Carlier)
Fix GH-10727: Spoofchecker constant updates. - Adding MIXED_NUMBERS from ICU 58. - Adding HIDDEN_OVERLAY from ICU 62. Closes GH-10730.
2023-02-28 12:08:01 +00:00
. Added MIXED_NUMBERS and HIDDEN_OVERLAY constants for
the Spoofchecker's class. (David Carlier)
ext/intl: dateformatter settimezone changes on success, returning true like setcalendar. Closes GH-10790
2023-03-05 20:54:34 +00:00
. Updated datefmt_set_timezone/IntlDateformatter::setTimezone returns type.
(David Carlier).
ext/intl: breakiterator::setText returns false on failure. Close GH-10820
2023-03-09 23:28:11 +00:00
. Updated IntlBreakInterator::setText return type. (David Carlier)
ext/intl IntlChar::enumCharNames changes the signature to void. Close GH-10904
2023-03-21 20:40:53 +00:00
. Updated IntlChar::enumCharNames return type. (David Carlier)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Removed the BC break on IntlDateFormatter::construct which threw an
exception with an invalid locale. (David Carlier)
intl extension: msgfmt_set_pattern add pattern format error informations.
2022-11-27 10:24:25 +00:00
[skip ci] Add NEWS entry for json_validate()
2022-10-08 13:45:59 +00:00
- JSON:
[ci skip] Fix json_validate() formatting in NEWS It is expected that each entry ends with a `.`. I've removed the RFC link here, as NEWS entries do not contain links, when looking at the past branches. The RFC link is available in UPGRADING since the previous commit.
2022-12-09 16:56:28 +00:00
. Added json_validate(). (Juan Morales)
[skip ci] Add NEWS entry for json_validate()
2022-10-08 13:45:59 +00:00
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
- LDAP:
. Deprecate calling ldap_connect() with separate hostname and port.
(heiglandreas)
- LibXML:
. Fix compile error with -Werror=incompatible-function-pointer-types and
old libxml2. (nielsdos)
Improve mb_detect_encoding's recognition of Turkish text Add 4 codepoints commonly used to write Turkish text to our table of 'commonly used' Unicode codepoints. These are: • U+011F LATIN SMALL LETTER G WITH BREVE • U+0130 LATIN CAPITAL LETTER I WITH DOT ABOVE • U+0131 LATIN SMALL LETTER DOTLESS I • U+015F LATIN SMALL LETTER S WITH CEDILLA
2022-12-29 20:50:13 +00:00
- MBString:
mb_decode_mimeheader obeys RFC 2047 regarding underscores and QPrint encoding
2023-02-17 11:57:42 +00:00
. mb_detect_encoding is better able to identify the correct encoding for
Turkish text. (Alex Dowad)
Implement mb_detect_encoding using fast text conversion filters Regarding the optional 3rd `strict` argument to mb_detect_encoding, the documentation states: Controls the behaviour when string is not valid in any of the listed encodings. If strict is set to false, the closest matching encoding will be returned; if strict is set to true, false will be returned. (Ref: https://www.php.net/manual/en/function.mb-detect-encoding.php) Because of bugs in the implementation, mb_detect_encoding did not always behave according to this description when `strict` was false. For example: <?php echo var_export(mb_detect_encoding("\xc0\x00", "UTF-8", false)); // Before this commit, prints: false // After this commit, prints: 'UTF-8' Because `strict` is false in the above example, mb_detect_encoding should return the 'closest matching encoding', which is UTF-8, since that is the only candidate encoding. (Incidentally, this example shows that using mb_detect_encoding with a single candidate encoding in non-strict mode is useless.) The new implementation fixes this bug. It also fixes another problem with the old implementation as regards non-strict detection mode: The old implementation would stop processing of the input string using a particular candidate encoding as soon as it saw an error in that encoding, even in non-strict mode. This means that it could not really detect the 'closest matching encoding'; rather, what it would return in non-strict mode was 'the encoding in which the first decoding error is furthest from the beginning of the input string'. In non-strict mode, the new implementation continues trying to process the input string to its end even after seeing an error. This makes it possible to determine in which candidate encoding the string has the smallest number of errors, i.e. the 'closest matching encoding'. Rejecting candidate encodings as soon as it saw an error gave the old implementation a marked performance advantage in non-strict mode; however, the new implementation still beats it in most cases. Here are a few sample microbenchmark results: UTF-8, ~100 codepoints, strict mode Old: 0.080s (100,000 calls) New: 0.026s (" " ) UTF-8, ~100 codepoints, non-strict mode Old: 0.079s (100,000 calls) New: 0.033s (" " ) UTF-8, ~10000 codepoints, strict mode Old: 6.708s (60,000 calls) New: 1.383s (" " ) UTF-8, ~10000 codepoints, non-strict mode Old: 6.705s (60,000 calls) New: 3.044s (" " ) Notice that the old implementation had almost identical performance between strict and non-strict mode, while the new suffers a significant performance penalty for non-strict detection. This is the cost of implementing the behavior specified in the documentation. A couple more sample results: SJIS, ~10000 codepoints, strict mode Old: 4.563s New: 1.084s SJIS, ~10000 codepoints, non-strict mode Old: 4.569s New: 2.863s This is the only case I found where the new implementation loses: UTF-16LE, ~10000 codepoints, non-strict mode Old: 1.514s New: 2.813s The reason is because the test strings happened to be invalid right from the first few bytes for all the candidate encodings except for UTF-16LE; so the old implementation would immediately reject all those encodings and only process the entire string in UTF-16LE. I believe mb_detect_encoding could be made much faster if we identified good criteria for when to reject candidate encodings before reaching the end of the input string.
2022-07-20 06:53:04 +00:00
. mb_detect_encoding's "non-strict" mode now behaves as described in the
Add more details to NEWS on mb_detect_encoding; also include in UPGRADING
2023-04-10 17:43:05 +00:00
documentation. Previously, it would return false if the same byte
(for example, the first byte) of the input string was invalid in all
candidate encodings. More generally, it would eliminate candidate
encodings from consideration when an invalid byte was seen, and if the
same input byte eliminated all remaining encodings still under
consideration, it would return false. On the other hand, if all candidate
encodings but one were eliminated from consideration, it would return the
last remaining one without regard for how many encoding errors might be
encountered later in the string. This is different from the behavior
described in the documentation, which says: "If strict is set to false,
the closest matching encoding will be returned." (Alex Dowad)
Implement Unicode conditional casing rules for Greek letter sigma The capital Greek letter sigma (Σ) should be lowercased as σ except when it appears at the end of a word; in that case, it should be lowercased as the special form ς. This rule is included in the Unicode data file SpecialCasing.txt. The condition for applying the rule is called "Final_Sigma" and is defined in Unicode technical report 21. The rule is: • For the special casing form to apply, the capital letter sigma must be preceded by 0 or more "case-ignorable" characters, preceded by at least 1 "cased" character. • Further, capital sigma must NOT be followed by 0 or more case-ignorable characters and then at least 1 cased character. "Case-ignorable" characters include certain punctuation marks, like the apostrophe, as well as various accent marks. There are actually close to 500 different case-ignorable characters, including accent marks from Cyrillic, Hebrew, Armenian, Arabic, Syriac, Bengali, Gujarati, Telugu, Tibetan, and many other alphabets. This category also includes zero-width spaces, codepoints which indicate RTL/LTR text direction, certain musical symbols, etc. Since the rule involves scanning over "0 or more" of such case-ignorable characters, it may be necessary to scan arbitrarily far to the left and right of capital sigma to determine whether the special lowercase form should be used or not. However, since we are trying to be both memory-efficient and CPU-efficient, this implementation limits how far to the left we will scan. Generally, we scan up to 63 characters to the left looking for a "cased" character, but not more. When scanning to the right, we go up to the end of the string if necessary, even if it means scanning over thousands of characters. Anyways, it is almost impossible to imagine that natural text will include "words" with more than 63 successive apostrophes (for example) followed by a capital sigma. Closes GH-8096.
2023-01-07 18:27:59 +00:00
. mb_strtolower, mb_strtotitle, and mb_convert_case implement conditional
casing rules for the Greek letter sigma. For mb_convert_case, conditional
casing only applies to MB_CASE_LOWER and MB_CASE_TITLE modes, not to
MB_CASE_LOWER_SIMPLE and MB_CASE_TITLE_SIMPLE. (Alex Dowad)
mb_detect_encoding is more accurate on strings with UTF-8/16 BOM Thanks to the GitHub user 'titanz35' for pointing out that the new implementation of mb_detect_encoding had poor detection accuracy on UTF-8 and UTF-16 strings with a byte-order mark.
2023-01-12 16:10:04 +00:00
. mb_detect_encoding is better able to identify UTF-8 and UTF-16 strings
with a byte-order mark. (Alex Dowad)
mb_decode_mimeheader obeys RFC 2047 regarding underscores and QPrint encoding
2023-02-17 11:57:42 +00:00
. mb_decode_mimeheader interprets underscores in QPrint-encoded MIME
encoded words as required by RFC 2047; they are converted to spaces.
Underscores must be encoded as "=5F" in such MIME encoded words.
(Alex Dowad)
Update NEWS and UPGRADING to reflect changes in 0ce755be26
2023-03-16 02:25:38 +00:00
. mb_encode_mimeheader no longer drops NUL (zero) bytes when
QPrint-encoding the input string. This previously caused strings in
certain text encodings, especially UTF-16 and UTF-32, to be
corrupted by mb_encode_mimeheader. (Alex Dowad)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Implement mb_str_pad() RFC. (nielsdos)
. Fixed bug GH-11514 (PHP 8.3 build fails with --enable-mbstring enabled).
(nielsdos)
. Fix use-after-free of mb_list_encodings() return value. (ilutov)
. Fixed bug GH-11992 (utf_encodings.phpt fails on Windows 32-bit). (nielsdos)
Improve mb_detect_encoding's recognition of Turkish text Add 4 codepoints commonly used to write Turkish text to our table of 'commonly used' Unicode codepoints. These are: • U+011F LATIN SMALL LETTER G WITH BREVE • U+0130 LATIN CAPITAL LETTER I WITH DOT ABOVE • U+0131 LATIN SMALL LETTER DOTLESS I • U+015F LATIN SMALL LETTER S WITH CEDILLA
2022-12-29 20:50:13 +00:00
ext/mysqli/pgsql: mysqli_fetch_object/pgsql_fetch_object raises ValueError on constructor args error. Closes GH-10832.
2023-03-11 22:29:36 +00:00
- mysqli:
. mysqli_fetch_object raises a ValueError instead of an Exception.
(David Carlier)
Add "Start time", "Last restart time" and "Last force restart time" to phpinfo() for opcache. Closes GH-9475.
2022-09-02 16:29:56 +00:00
- Opcache:
. Added start, restart and force restart time to opcache's
[ci skip] Fix formatting of wrapped entries in NEWS
2022-10-08 13:56:29 +00:00
phpinfo section. (Mikhail Galanin)
. Fix GH-9139: Allow FFI in opcache.preload when opcache.preload_user=root.
(Arnaud, Kapitan Oczywisty)
. Made opcache.preload_user always optional in the cli and phpdbg SAPIs.
(Arnaud)
opcache fixing w/x pages creation on freebsd 13.1 and above. By default, the system allows these but admin can disable them system wide. However the procctl api permits to control it per process. Closes GH-9896.
2022-11-05 16:50:27 +00:00
. Allows W/X bits on page creation on FreeBSD despite system settings.
(David Carlier)
ext/opcache/zend_shared_alloc: use memfd for locking if available A memfd is a virtual file that has no reachable path, therefore does not clobber any filesystem. It is deleted automatically as soon as the last handle gets closed. The feature is available since Linux kernel 3.17. Closes GH-10589.
2023-02-14 16:54:04 +00:00
. Added memfd api usage, on Linux, for zend_shared_alloc_create_lock()
to create an abstract anonymous file for the opcache's lock. (Max Kellermann)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Avoid resetting JIT counter handlers from multiple processes/threads.
(ilutov)
. Fixed COPY_TMP type inference for references. (ilutov)
[ci skip] NEWS
2022-09-09 09:04:38 +00:00
Add PKCS7_NOOLDMIMETYPE and OPENSSL_CMS_OLDMIMETYPE PKCS7_NOOLDMIMETYPE to use Content-Type application/pkcs7-mime OPENSSL_CMS_OLDMIMETYPE to use Content-Type application/x-pkcs7-mime SMIME_write_PKCS7 and SMIME_write_CMS are using SMIME_write_ASN1_ex. The Content-Type application/x-pkcs7-mime is generated with the flag SMIME_OLDMIME (0x400).[^1] SMIME_write_PKCS7 set SMIME_OLDMIME by default.[^2] SMIME_write_CMS does not.[^3] I picked OPENSSL_CMS_OLDMIMETYPE over OPENSSL_CMS_NOOLDMIMETYPE because that's what the flag actually does. [^1]: https://github.com/openssl/openssl/blob/9a2f78e14a67eeaadefc77d05f0778fc9684d26c/crypto/asn1/asn_mime.c#L248-L251 [^2]: https://github.com/openssl/openssl/blob/9a2f78e14a67eeaadefc77d05f0778fc9684d26c/crypto/pkcs7/pk7_mime.c#L41-L43 [^3]: https://github.com/openssl/openssl/blob/9a2f78e14a67eeaadefc77d05f0778fc9684d26c/crypto/cms/cms_io.c#L93 Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2023-02-25 09:22:09 +00:00
- OpenSSL:
. Added OPENSSL_CMS_OLDMIMETYPE and PKCS7_NOOLDMIMETYPE contants to switch
between mime content types. (Daniel Kesselberg)
Fix GH-11054: Reset OpenSSL errors when using a PEM public key The error happens when the PEM contains a public key, as it will be first tried to be parsed as a certificate. The parsing as a certificate fails, which then leads to a corresponding error tracked by PHP with the next call to php_openssl_store_errors(). This change introduces an error marking to be able to reset the stored errors to the state before trying the certificate. Closes GH-11055
2023-04-10 18:12:31 +00:00
. Fixed GH-11054: Reset OpenSSL errors when using a PEM public key.
(Florian Moser)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Added support for additional EC parameters in openssl_pkey_new. (Eno-CN)
Add PKCS7_NOOLDMIMETYPE and OPENSSL_CMS_OLDMIMETYPE PKCS7_NOOLDMIMETYPE to use Content-Type application/pkcs7-mime OPENSSL_CMS_OLDMIMETYPE to use Content-Type application/x-pkcs7-mime SMIME_write_PKCS7 and SMIME_write_CMS are using SMIME_write_ASN1_ex. The Content-Type application/x-pkcs7-mime is generated with the flag SMIME_OLDMIME (0x400).[^1] SMIME_write_PKCS7 set SMIME_OLDMIME by default.[^2] SMIME_write_CMS does not.[^3] I picked OPENSSL_CMS_OLDMIMETYPE over OPENSSL_CMS_NOOLDMIMETYPE because that's what the flag actually does. [^1]: https://github.com/openssl/openssl/blob/9a2f78e14a67eeaadefc77d05f0778fc9684d26c/crypto/asn1/asn_mime.c#L248-L251 [^2]: https://github.com/openssl/openssl/blob/9a2f78e14a67eeaadefc77d05f0778fc9684d26c/crypto/pkcs7/pk7_mime.c#L41-L43 [^3]: https://github.com/openssl/openssl/blob/9a2f78e14a67eeaadefc77d05f0778fc9684d26c/crypto/cms/cms_io.c#L93 Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2023-02-25 09:22:09 +00:00
Set SA_ONSTACK too when zend signals are disabled and in pcntl Closes GH-9758.
2022-10-16 10:21:40 +00:00
- PCNTL:
. SA_ONSTACK is now set for pcntl_signal. (Kévin Dunglas)
Fix GH-9923: Add the `SIGINFO` constant in pcntl for system supporting it. Closes #9938
2022-11-11 19:15:58 +00:00
. Added SIGINFO constant. (David Carlier)
Set SA_ONSTACK too when zend signals are disabled and in pcntl Closes GH-9758.
2022-10-16 10:21:40 +00:00
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
- PCRE:
. Update bundled libpcre2 to 10.42. (nielsdos)
ext/mysqli/pgsql: mysqli_fetch_object/pgsql_fetch_object raises ValueError on constructor args error. Closes GH-10832.
2023-03-11 22:29:36 +00:00
- PGSQL:
. pg_fetch_object raises a ValueError instead of an Exception.
(David Carlier)
ext/pgsql: pg_cancel_query internal update. Removing (obsolete) PGrequestCancel usage in favor of the thread-safe PQcancel/PQfreeCancel pair. Close GH-11081
2023-04-15 13:53:42 +00:00
. pg_cancel use thread safe PQcancel api instead. (David Carlier)
ext/pgsql: pg_trace allow to refine its trace mode via 2 new constants. - PGSQL_TRACE_SUPPRESS_TIMESTAMPS. - PGSQL_TRACE_REGRESS_MODE to have a more verbose and observable output to check possible regressions. Close GH-11041
2023-04-09 10:59:50 +00:00
. pg_trace new PGSQL_TRACE_SUPPRESS_TIMESTAMPS/PGSQL_TRACE_REGRESS_MODE
contants support. (David Carlier)
ext/pgsql adding PGSQL_ERRORS_SQLSTATE constant support. Close GH-11181
2023-05-02 18:05:53 +00:00
. pg_set_error_verbosity adding PGSQL_ERRORS_STATE constant. (David Carlier)
ext/pgsql: php_pgsql_convert converts E_NOTICE to TypeError/ValueError exceptions. Close GH-11238
2023-05-13 15:30:25 +00:00
. pg_convert/pg_insert E_WARNING on type errors had been converted to
ValueError/TypeError exceptions. (David Carlier)
ext/pgsql: adding pg_set_error_context_visibility. another level of context for pg_last_error/pg_result_error() to include or not the context in those. PQSHOW_CONTEXT_ERRORS being the default. Close GH-11395
2023-06-07 20:33:47 +00:00
. Added pg_set_error_context_visibility to set the context's visibility
within the error messages. (David Carlier)
ext/mysqli/pgsql: mysqli_fetch_object/pgsql_fetch_object raises ValueError on constructor args error. Closes GH-10832.
2023-03-11 22:29:36 +00:00
Fix GH-10755: Memory leak in phar_rename_archive() In phar_renmae_archive() context, added one reference but immediately destroyed another, so do not need to increase refcount. With removal of refcount++ line, PHP/Zend no longer reports memory leak. Updated bug69958.phpt test file accordingly. Closes GH-10856
2023-03-14 07:48:03 +00:00
- Phar:
. Fix memory leak in phar_rename_archive(). (stkeke)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
- POSIX:
[ci skip] NEWS UPGRADING
2022-09-04 18:52:21 +00:00
. Added posix_sysconf. (David Carlier)
posix adding posix_pathconf. to get configuration variables from a directory/file. Closes GH-10238.
2023-01-05 22:30:04 +00:00
. Added posix_pathconf. (David Carlier)
posix adding posix_fpathconf. follow-up on GH-10238 but with the file descriptor flavor. Close GH-10253
2023-01-07 08:34:56 +00:00
. Added posix_fpathconf. (David Carlier)
[ci skip] NEWS
2023-02-13 19:43:29 +00:00
. Fixed zend_parse_arg_long's bool pointer argument assignment. (Cristian Rodriguez)
ext/posix: proposing posix_eaccess. unlike access, it is not standard but available in enough platforms ; on linux it's euidaccess in reality eaccess being 'just' an alias. key difference is eaccess checks the effective user id instead. Close GH-10917
2023-03-23 19:46:17 +00:00
. Added posix_eaccess. (David Carlier)
[ci skip] NEWS UPGRADING
2022-09-04 18:52:21 +00:00
Add `Randomizer::getBytesFromString()` method (#9664) * Add `Randomizer::getBytesFromAlphabet()` method * Rename `getBytesFromAlphabet` to `getBytesFromString` * [ci skip] Add NEWS/UPGRADING for Randomizer::getBytesFromString() Co-authored-by: Tim Düsterhus <tim@bastelstu.be>
2022-12-09 16:39:13 +00:00
- Random:
. Added Randomizer::getBytesFromString(). (Joshua Rüsweg)
Add Randomizer::nextFloat() and Randomizer::getFloat() (#9679) * random: Add Randomizer::nextFloat() * random: Check that doubles are IEEE-754 in Randomizer::nextFloat() * random: Add Randomizer::nextFloat() tests * random: Add Randomizer::getFloat() implementing the y-section algorithm The algorithm is published in: Drawing Random Floating-Point Numbers from an Interval. Frédéric Goualard, ACM Trans. Model. Comput. Simul., 32:3, 2022. https://doi.org/10.1145/3503512 * random: Implement getFloat_gamma() optimization see https://github.com/php/php-src/pull/9679/files#r994668327 * random: Add Random\IntervalBoundary * random: Split the implementation of γ-section into its own file * random: Add tests for Randomizer::getFloat() * random: Fix γ-section for 32-bit systems * random: Replace check for __STDC_IEC_559__ by compile-time check for DBL_MANT_DIG * random: Drop nextFloat_spacing.phpt * random: Optimize Randomizer::getFloat() implementation * random: Reject non-finite parameters in Randomizer::getFloat() * random: Add NEWS/UPGRADING for Randomizer’s float functionality
2022-12-14 16:48:47 +00:00
. Added Randomizer::nextFloat(), ::getFloat(), and IntervalBoundary. (timwolla)
random netbsd 10 update finally supporting getrandom syscall properly. Close GH-10327.
2023-01-15 12:48:39 +00:00
. Enable getrandom() for NetBSD (from 10.x). (David Carlier)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Deprecate MT_RAND_PHP. (timwolla)
. Fix Randomizer::getFloat() returning incorrect results under
certain circumstances. (timwolla)
Add `Randomizer::getBytesFromString()` method (#9664) * Add `Randomizer::getBytesFromAlphabet()` method * Rename `getBytesFromAlphabet` to `getBytesFromString` * [ci skip] Add NEWS/UPGRADING for Randomizer::getBytesFromString() Co-authored-by: Tim Düsterhus <tim@bastelstu.be>
2022-12-09 16:39:13 +00:00
[ci skip] Order NEWS sections alphabetically
2022-11-08 22:47:30 +00:00
- Reflection:
. Fix GH-9470 (ReflectionMethod constructor should not find private parent
method). (ilutov)
Fix GH-10259 ReflectionClass::getStaticProperties doesn't need null return type (#10418)
2023-01-24 21:26:52 +00:00
. Fix GH-10259 (ReflectionClass::getStaticProperties doesn't need null return
type). (kocsismate)
[ci skip] Order NEWS sections alphabetically
2022-11-08 22:47:30 +00:00
Fix GH-11141: Could not open input file: should be sent to stderr I grepped for php_printf cases in main/ and sapi/ and converted the cases which clearly indicate errors to fprintf(stderr, ...), like suggested in the linked issue. Closes GH-11163.
2023-04-29 19:28:03 +00:00
- SAPI:
. Fixed GH-11141 (Could not open input file: should be sent to stderr).
(nielsdos)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
- Session:
. Fixed bug GH-11529 (Crash after dealing with an Apache request). (nielsdos)
- SimpleXML:
. Fixed bug GH-12192 (SimpleXML infinite loop when getName() is called
within foreach). (nielsdos)
. Fixed bug GH-12208 (SimpleXML infinite loop when a cast is used inside a
foreach). (nielsdos)
. Fixed bug #55098 (SimpleXML iteration produces infinite loop). (nielsdos)
socket module add SO_ATTACH_REUSEPORT_CPBF for Linux. to be used in conjunction with SO_REUSPORT, giving a greater control over how we bind a socket instead of the round robin workflow, we do instead attach to the processor id as : - we assign the processor_id to A in the BPF filter. - then returns A. in other words, a more modern version of SO_INCOMING_CPU (ie can have a per worker notion we do not use here). Closes #8062
2022-02-08 18:28:24 +00:00
- Sockets:
. Added SO_ATTACH_REUSEPORT_CBPF socket option, to give tighter control
[ci skip] Fix formatting of wrapped entries in NEWS
2022-10-08 13:56:29 +00:00
over socket binding for a cpu core. (David Carlier)
SO_ATTACH_REUSEPORT_CBPF filter update. SDK_AD_QUEUE support to attach to a queue. Closes #9690
2022-10-08 01:48:24 +00:00
. Added SKF_AD_QUEUE for cbpf filters. (David Carlier)
socket add socket_atmark support. checks whether the socket belongs to the out-of-band mark, thus allows to be processed accordingly (using the MSG_OOB flag on send/recv). Closes #9846.
2022-10-28 19:08:46 +00:00
. Added socket_atmark if send/recv needs using MSG_OOB. (David Carlier)
sockets adding TCP_QUICKACK constant. having tigher control on ACK delays, difference is the setting is `volatile` as it can be turned off by the kernel if not set explicitally set otherwise on the socket. Closes GH-10145.
2022-12-21 16:31:18 +00:00
. Added TCP_QUICKACK constant, to give tigher control over
ACK delays. (David Carlier)
socket DF flag on UDP socket via IP_MTU_DISCOVER on Linux and IP_DONTFRAGMENT on FreeBSD for path MTU discovery purpose. idea proposal via ml : https://marc.info/?l=php-internals&m=167329288509393&w=2 Close GH-10282
2023-01-10 20:39:19 +00:00
. Added DONTFRAGMENT support for path MTU discovery purpose. (David Carlier)
sockets add AF_DIVERT constant. Allow to bind a socket to a divert port without being concerned by its address. for ipfw filter purpose (SO_USER_COOKIE constant). FreeBSD only. Close GH-10415.
2023-01-22 17:08:28 +00:00
. Added AF_DIVERT for raw socket for divert ports. (David Carlier)
sockets updlite protocol support, with checksum coverage settings. Close GH-10468
2023-01-28 19:44:37 +00:00
. Added SOL_UPDLITE, UDPLITE_RECV_CSCOV and UDPLITE_SEND_CSCOV for updlite
protocol support. (David Carlier)
sockets add SO_RERROR/SO_ZEROIZE/SO_SPLICE net/openbsd's constants. Closes GH-10563.
2023-02-11 07:50:36 +00:00
. Added SO_RERROR, SO_ZEROIZE and SO_SPLICE netbsd and openbsd constants.
Fix GH-10727: Spoofchecker constant updates. - Adding MIXED_NUMBERS from ICU 58. - Adding HIDDEN_OVERLAY from ICU 62. Closes GH-10730.
2023-02-28 12:08:01 +00:00
(David Carlier)
. Added TCP_REPAIR for quietly close a connection. (David Carlier)
ext/sockets adding FreeBSD's SO_REUSEPORT_LB constant. SO_REUSEPORT_LB is, in fact, closer to the classical Linux's SO_REUSEPORT. Close GH-11038
2023-04-08 07:50:40 +00:00
. Added SO_REUSEPORT_LB freebsd constant. (David Carlier)
ext/sockets: addig Linux's IP_BIND_ADDRESS_NO_PORT. Delay ephemeral port number attribution at connect time rather than at bind's one. Close GH-11119.
2023-04-22 16:44:42 +00:00
. Added IP_BIND_ADDRESS_NO_PORT. (David Carlier)
Add ZipArchive::clearError, getStreamIndex and getStreamName methods public function clearError(): void {} public function getStreamIndex(int $index, int $flags = 0) {} public function getStreamName(string $name, int $flags = 0) {} ZipArchive::getStream is kept for BC See https://github.com/pierrejoye/php_zip/issues/20
2021-10-05 14:27:03 +00:00
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
- SPL:
. Fixed GH-11573 (RecursiveDirectoryIterator::hasChildren is slow).
(nielsdos)
Promote unserialize() notices to warning (#9629) * Unserialize: Migrate "Unexpected end of serialized data" to E_WARNING * Unserialize: Migrate "Error at offset %d of %d bytes" to E_WARNING * Unserialize: Migrate "%s is returned from __sleep() multiple times" to E_WARNING * Add NEWS for “Promote unserialize() notices to warning”
2022-11-15 18:36:38 +00:00
- Standard:
[ci skip] Fix typo in `unserialize()` function name in NEWS see dd8de1e726a41fdbca6cbd4348ae63a74830a888
2022-12-14 16:43:43 +00:00
. E_NOTICEs emitted by unserialize() have been promoted to E_WARNING. (timwolla)
RFC: Make unserialize() emit a warning for trailing bytes (#9630)
2023-05-01 17:06:40 +00:00
. unserialize() now emits a new E_WARNING if the input contains unconsumed
bytes. (timwolla)
[ci skip] NEWS
2023-01-14 11:19:35 +00:00
. Make array_pad's $length warning less confusing. (nielsdos)
strtok warns in case the string to split was not set. Close GH-10016.
2022-11-28 20:40:32 +00:00
. E_WARNING emitted by strtok in the caase both arguments are not provided when
starting tokenisation. (David Carlier)
password: Use `php_random_bytes_throw` in `php_password_make_salt` (#10393) The CSPRNG failing should be rare nowadays, but it *might* happen and without this patch it's hard for the user to find out why the salt generation failed: The error message is not actionable. This patch will automatically set the CSPRNG exception to the `$previous` exception of the ValueError that is thrown, allowing the developer to determine the cause of the salt generation failure. Before: Fatal error: Uncaught ValueError: Unable to generate salt in php-src/test3.php:3 Stack trace: #0 php-src/test3.php(3): password_hash(Object(SensitiveParameterValue), '2y') #1 {main} thrown in php-src/test3.php on line 3 After: Fatal error: Uncaught Random\RandomException: Cannot open /dev/urandom: No such file or directory in php-src/test3.php:3 Stack trace: #0 php-src/test3.php(3): password_hash(Object(SensitiveParameterValue), '2y') #1 {main} Next ValueError: Unable to generate salt in php-src/test3.php:3 Stack trace: #0 php-src/test3.php(3): password_hash(Object(SensitiveParameterValue), '2y') #1 {main} thrown in php-src/test3.php on line 3
2023-01-23 17:35:16 +00:00
. password_hash() will now chain the original RandomException to the ValueError
on salt generation failure. (timwolla)
Fix GH-10239: proc_close after proc_get_status always returns -1 The waitpid function only works once when a process is exited. Cache the result so subsequent status reads succeed. Closes GH-10250
2023-01-06 20:47:22 +00:00
. Fix GH-10239 (proc_close after proc_get_status always returns -1). (nielsdos)
Improve the warning message for unpack() in case not enough values were provided (#10949)
2023-03-26 22:04:42 +00:00
. Improve the warning message for unpack() in case not enough values were
provided. (nielsdos)
Improve ini number handling with INI_SCANNER_TYPED Fixes GH-11010 Closes GH-11014
2023-04-04 14:14:24 +00:00
. Fix GH-11010 (parse_ini_string() now preserves formatting of unquoted
strings starting with numbers when the INI_SCANNER_TYPED flag is
specified). (ilutov)
`http_response_code` should warn if headers were already sent This would previously fail silently. We also return false to indicate the error. Fixes GH-10742 Closes GH-10744
2023-03-01 17:30:15 +00:00
. Fix GH-10742 (http_response_code emits no error when headers were already
sent). (NattyNarwhal)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Added support for rounding negative places in number_format().
(Marc Bennewitz)
. Prevent precision loss on formatting decimal integers in number_format().
(Marc Bennewitz)
. Added usage of posix_spawn for proc_open when supported by OS.
(Cristian Rodriguez)
. Added $before_needle argument to strrchr(). (HypeMC)
. Fixed GH-11982 (str_getcsv returns null byte for unterminated enclosure).
(Jakub Zelenka)
. Fixed str_decrement() on "1". (ilutov)
Promote unserialize() notices to warning (#9629) * Unserialize: Migrate "Unexpected end of serialized data" to E_WARNING * Unserialize: Migrate "Error at offset %d of %d bytes" to E_WARNING * Unserialize: Migrate "%s is returned from __sleep() multiple times" to E_WARNING * Add NEWS for “Promote unserialize() notices to warning”
2022-11-15 18:36:38 +00:00
Fix bug #51056: fread() on blocking stream will block even if data is available This is applied only on socket connection which already returns immediately if there is no data in the buffer.
2022-10-05 13:31:28 +00:00
- Streams:
. Fixed bug #51056: blocking fread() will block even if data is available.
(Jakub Zelenka)
Keep the orig_path for xport stream Closes GH-11113
2023-04-20 08:34:25 +00:00
. Added storing of the original path used to open xport stream.
(Luc Vieillescazes)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
. Implement GH-8641 (STREAM_NOTIFY_COMPLETED over HTTP never emitted).
(nielsdos, Jakub Zelenka)
. Fix bug GH-10406 (fgets on a redis socket connection fails on PHP 8.3).
(Jakub Zelenka)
. Implemented GH-11242 (_php_stream_copy_to_mem: Allow specifying a maximum
length without allocating a buffer of that size). (Jakub Zelenka)
. Fixed bug #52335 (fseek() on memory stream behavior different than file).
(Jakub Zelenka)
. Fixed bug #76857 (Can read "non-existant" files). (Jakub Zelenka)
Fix bug #51056: fread() on blocking stream will block even if data is available This is applied only on socket connection which already returns immediately if there is no data in the buffer.
2022-10-05 13:31:28 +00:00
Fix bug 69168: DomNode::getNodePath() returns invalid path Upon freeing libxslt's context, every document which is not the *main* document will be freed by libxslt. If a node of a document which is not the main document gets returned to userland, we'd free the node twice: - first by the cleanup of the xslt context - and then by our own refcounting mechanism. This was reported in bug 49634, and was fixed by always copying the node (and later re-fixed in bug 70078). The original fix is not entirely correct unfortunately because of the following two main reasons: - modifications to the node will only modify the copy, and not the original - accesses to the parent, path, ... will not work This patch fixes it properly by only copying the node if it origins from a document other than the main document. Co-authored-by: juha.ikavalko@agentit.fi Closes GH-10318.
2023-01-14 15:21:35 +00:00
- XSLTProcessor:
. Fixed bug #69168 (DomNode::getNodePath() returns invalid path). (nielsdos)
Prepare NEWS for 8.3.0
2023-11-21 14:00:51 +00:00
- ZIP:
. zip extension version 1.22.0 for libzip 1.10.0. (Remi)
. add new error macros (ER_DATA_LENGTH and ER_NOT_ALLOWED). (Remi)
. add new archive global flags (ER_AFL_*). (Remi)
. add ZipArchive::setArchiveFlag and ZipArchive::getArchiveFlag methods.
(Remi)
Reference in New Issue Copy Permalink