Commit 19aeda2d969 for php

commit 19aeda2d9697eef46395b765e39d8ed4c937d5df
Merge: 92830bd5d32 6454e102d81
Author: ndossche <7771979+ndossche@users.noreply.github.com>
Date:   Sat Oct 24 19:14:53 2026 +0200

    Merge branch 'PHP-8.4' into PHP-8.5

    * PHP-8.4:
      Fix error paths in dom_xml_serializing_a_document_node()

diff --cc NEWS
index 2518d1cabee,952acfa5d8e..0b6e155d3f2
--- a/NEWS
+++ b/NEWS
@@@ -36,9 -41,23 +36,12 @@@ PH
    . Fixed bug GH-24641 (ndbm backend never checks dbm_open() return value,
      NULL deref on first use after a failed open). (Girgias)

+ - DOM:
 -  . Fixed bug GH-23352 (UAF reading an attribute value node retained across
 -    DOMDocument::adoptNode()). (David Carlier)
 -  . Fixed bug GH-24260 (querySelectorAll() returns duplicate elements for
 -    selector lists). (fivefilters)
 -  . Fixed bug GH-23334 (Use-after-free in php_dom_free_templated_content()).
 -    (David Carlier, ndossche)
 -  . Fixed bug GH-22077 (UAF in custom XPath function). (Joe Afflerbach)
 -  . Fixed bug GH-22554 (use-after-free with XPath callback returning a node
 -    from a foreign document). (David Carlier)
 -  . Fixed DOMXPath crash wrapping a foreign node after a nodeset callback.
 -    (Ilia Alshanetsky)
+   . Fix error paths in dom_xml_serializing_a_document_node(). (ndossche)
+
 -- FFI:
 -  . Fixed bug GH-24582 (Memory leaks in ext/ffi parser when finalize_type()
 -    bails out). (matyapiro31, David Carlier)
 +- Fileinfo:
 +  . Fixed bug GH-24289 (finfo::file() reports the wrong argument number for
 +    an invalid $filename). (Lazizbek Ergashev)

  - FPM:
    . Fixed bug GH-24229 (fcgi_close() passes shutdown() a literal 1, which is