php-8.4.11

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

31 Jul 2025, PHP 8.4.11

• Calendar:
  • Fixed jewishtojd overflow on year argument.

• Core:
  • Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order)
  • Fixed bug GH-18907 (Leak when creating cycle in hook).
  • Fix OSS-Fuzz 427814456.
  • Fix OSS-Fuzz 428983568 and 428760800.
  • Fixed bug GH-17204 (-Wuseless-escape warnings emitted by re2c).
  • Fixed bug GH-19064 (Undefined symbol 'execute_ex' on Windows ARM64).

• Curl:
  • Fix memory leaks when returning refcounted value from curl callback.
  • Remove incorrect string release.

• DOM:
  • Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte)

• LDAP:
  • Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID

• MbString:
  • Fixed bug GH-18901 (integer overflow mb_split).

• Opcache:
  • Fixed bug GH-18639 (Internal class aliases can break preloading + JIT).
  • Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet)
  • Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit-c).
  • Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading)

• OpenSSL:
  • Fixed bug 80770 (It is not possible to get client peer certificate with stream_socket_server)

• PCNTL:
  • Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers)

• Phar:
  • Fix stream double free in phar. (nielsdos, dixyes)
  • Fix phar crash and file corruption with SplFileObject.

• SOAP:
  • Fixed bug GH-18990, bug 81029, bug 47314 (SOAP HTTP socket not closing on object destruction)
  • Fix memory leak when URL parsing fails in redirect.

• SPL:
  • Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash)

• Standard:
  • Fix misleading errors in printf().
  • Fix RCN violations in array functions.
  • Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value.

• Streams:
  • Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error)

• Zip:
  • Fix leak when path is too long in ZipArchive::extractTo().

[Bruce Dubbs]

Fixed at commits

1866863a01 Update to SPIRV-LLVM-Translator-20.1.5.
07fad51814 Update to php-8.4.11.
1c324a740b Update to libinput-1.29.0 (Xorg driver).
1fc10bfe0b Update to whois-5.6.4.