Commit 4f40b69ffa5 for php

commit 4f40b69ffa534294b255640635807943e25845f8
Merge: 29fc38b714b 06be15d22e4
Author: ndossche <7771979+ndossche@users.noreply.github.com>
Date:   Fri Oct 9 18:50:49 2026 +0200

    Merge branch 'PHP-8.4' into PHP-8.5

    * PHP-8.4:
      Fix GH-24218: Invalid opcode for count() of a literal array without SCCP

diff --cc NEWS
index 43e9ef3d965,5c01150cabe..3a3c4ff57fc
--- a/NEWS
+++ b/NEWS
@@@ -13,10 -13,16 +13,12 @@@ PH
    . Fixed memory manager keeping a block reallocated to exactly the size of
      the next smaller bin in its larger bin, which efree_size() then freed
      into the wrong one. (Marc Bennewitz)
 +  . Fixed bug GH-24081 (User opcode handlers resume execution against a stale
 +    frame under ZEND_VM_KIND_TAILCALL). (devnexen)
+   . Fixed bug GH-24218 (Invalid opcode for count() of a literal array
+     without SCCP). (lazerg)

 -- DOM:
 -  . Fixed bug GH-23352 (UAF reading an attribute value node retained across
 -    DOMDocument::adoptNode()). (David Carlier)
 -
  - Opcache:
 -  . Fixed bug GH-20890 (Segfault in zval_undefined_cv with non-simple property
 -    hook with minimal tracing JIT). (ndossche)
    . Fixed bug GH-17626 (JIT corrupts an opline handler when blacklisting a
      root trace at the opcache.jit_max_root_traces limit, causing spurious
      "Too few arguments" errors and crashes). (RV7PR)
diff --cc Zend/zend_vm_execute.h
index 64e0c5f041e,44def91de74..f0b244f53c3
Binary files differ