Commit 92830bd5d32 for php
commit 92830bd5d32a551b632f58298573d80b1cb9d4ef
Merge: c3db616f389 b309533729f
Author: Gina Peter Banyard <girgias@php.net>
Date: Sat Oct 24 17:42:36 2026 +0100
Merge branch 'PHP-8.4' into PHP-8.5
* PHP-8.4:
dba: fix GH-24641 (NULL dereferencement with ndbm backend)
diff --cc NEWS
index 0b54af8daef,38476ae6311..2518d1cabee
--- a/NEWS
+++ b/NEWS
@@@ -32,9 -37,26 +32,13 @@@ PH
. Fixed bug GH-24350 (MINIT reads a stale external tz database after an
in-process module restart). (Lazizbek Ergashev)
+ - DBA:
+ . Fixed bug GH-24641 (ndbm backend never checks dbm_open() return value,
+ NULL deref on first use after a failed open). (Girgias)
+
-- DOM:
- . Fixed bug GH-23352 (UAF reading an attribute value node retained across
- DOMDocument::adoptNode()). (David Carlier)
- . Fixed bug GH-24260 (querySelectorAll() returns duplicate elements for
- selector lists). (fivefilters)
- . Fixed bug GH-23334 (Use-after-free in php_dom_free_templated_content()).
- (David Carlier, ndossche)
- . Fixed bug GH-22077 (UAF in custom XPath function). (Joe Afflerbach)
- . Fixed bug GH-22554 (use-after-free with XPath callback returning a node
- from a foreign document). (David Carlier)
- . Fixed DOMXPath crash wrapping a foreign node after a nodeset callback.
- (Ilia Alshanetsky)
-
-- FFI:
- . Fixed bug GH-24582 (Memory leaks in ext/ffi parser when finalize_type()
- bails out). (matyapiro31, David Carlier)
+- Fileinfo:
+ . Fixed bug GH-24289 (finfo::file() reports the wrong argument number for
+ an invalid $filename). (Lazizbek Ergashev)
- FPM:
. Fixed bug GH-24229 (fcgi_close() passes shutdown() a literal 1, which is