Commit 4f8d7bb6687 for php

commit 4f8d7bb6687bce8efc52dca751589662616d0c0c
Merge: e5f67fb2da1 71e8293fa29
Author: Weilin Du <weilindu@php.net>
Date:   Tue Oct 27 13:38:29 2026 +0800

    Merge branch 'PHP-8.5' into PHP-8.6

    * PHP-8.5:
      Fix GH-24605: Guard var_export() against native stack overflow (#24671)

diff --cc NEWS
index 88996f48e0c,8007c670c35..06c1c76dba0
--- a/NEWS
+++ b/NEWS
@@@ -207,7 -167,15 +207,9 @@@ PH
      Windows). (Nicolas Grekas)
    . Fixed glob() not negating bracket expressions that start with "^".
      (Nicolas Grekas)
+   . Fixed bug GH-24605 (var_export() crashes on deeply nested arrays and
+     objects). (Labish Bardiya)

 -- Streams:
 -  . Fixed bug GH-24508 (HTTP wrapper leaks the dechunk filter when header
 -    parsing fails after Transfer-Encoding). (bercedev)
 -  . Fixed bug GH-24509 (HTTP wrapper leaks Location buffer on empty
 -    Location header). (bercedev)
 -
  - Tidy:
    . Fixed tidy_repair_string(), tidy_repair_file(), tidy::repairString() and
      tidy::repairFile() rejecting null for $encoding. (lacatoire)