Repository navigation
Expand file tree
/
Copy pathNEWS
More file actions
1143 lines (977 loc) · 48.5 KB
/
Copy pathNEWS
File metadata and controls
1143 lines (977 loc) · 48.5 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
PHP NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
24 Sep 2026, PHP 8.6.0RC2
- Core:
. Fixed incorrect internal pointer and foreach iterator positions when
compacting arrays with holes. (Weilin Du)
. Fix handling of references to typed properties during unserialization
of various internal classes. (ndossche, timwolla)
. Fixed OSS-Fuzz 532353396 (assertion failure with static type). (Girgias)
. Fix GH-23662 (Avoid NAN warning in print_r()). (CodedByManish)
. Fixed bug GH-23752 (Use scoped diagnostic suppression for the global
register declarations so the caller's -Wvolatile-register-var state is
restored). (yqtian-se)
. Fixed OSS-Fuzz #538730793 (Assertion failure when returning by-ref from
closure invoke). (ndossche)
. Fixed OSS-Fuzz #540904105 (ASSERT: ast->attr == T_CLASS_C). (ndossche)
- CLI
. Fix GH-22567 (Windows ZTS CLI SAPI should refresh its TSRMLS cache during
request activation). (matyhtf)
. Fixed bug GH-23764 (Built-in server leaks a file descriptor on every HEAD
request for a static file). (jakubskopal)
- Date:
. Fix unserialization of Time\Duration. (timwolla)
. Add comparison handler for Time\Duration. (timwolla)
- DOM:
. Fixed use-after-free when re-constructing a DOMXPath whose php:function
registrations are freed while still reachable from the cycle collector.
(Ilia Alshanetsky)
. Fixed Dom\HTMLDocument::getElementById() not finding ids of SVG and
MathML elements. (Ilia Alshanetsky)
. Fixed Dom\HTMLDocument giving attributes the namespace of their element
when a fragment is parsed with an xlink, xml or xmlns context element.
(Ilia Alshanetsky)
- Fileinfo:
. Upgrade to file 5.48. (Weilin Du)
- Intl:
. Fixed cloning IntlDateFormatter and MessageFormatter losing PHP-side state
such as dateType, timeType, calendar and the message pattern.
(Ilia Alshanetsky)
. Fixed a crash when converting with a cloned UConverter that uses
toUCallback/fromUCallback. (Ilia Alshanetsky)
. Fixed Collator attribute and strength methods not rejecting an
unconstructed Collator. (Ilia Alshanetsky)
- Lexbor:
. Merge patches lexbor/lexbor@8a14bc0 and lexbor/lexbor@f67ce4b, fixing a
heap buffer overflow in :lexbor-contains() parsing and buffer overflows
in malformed decode replay. (alexandre-daubois)
- MBString:
. Fixed bug GH-23106 (mb_strpos() reads past the end of a haystack ending in
a truncated UTF-8 sequence). (Lazizbek Ergashev)
. Updated Unicode data tables to Unicode 18.0 (Yuya Hamada)
- MySQLi:
. Fix GH-22854: Fixed failed assertion when accessing mysqli property after
failed reconnection. (Kamil Tekiela)
- Opcache:
. Fixed bug GH-23693 (Tracing JIT produces wrong results for a guard on a
loop-invariant addition). (Ilia Alshanetsky)
. Fixed OSS-Fuzz #545352966 (default value AST of an SHM-persisted partial).
(ndossche)
- PDO:
. Fixed PDOStatement::getColumnMeta() reading out of bounds for an invalid
column index. (Ilia Alshanetsky)
. Fixed PDOStatement::bindColumn() registering a binding for a column name
that is not in the result set. (Ilia Alshanetsky)
- PGSQL:
. Fixed pg_lo_write() rejecting data containing null bytes. (Ilia Alshanetsky)
- Posix:
. Reverted the validity check on the flags argument of posix_access().
(David Carlier)
- Readline:
. Fixed a heap over-read in the interactive shell prompt when cli.prompt is
set to an empty string. (Ilia Alshanetsky)
- Session:
. Fixed session_start() continuing after a failed create_sid() when
session.use_strict_mode rejects the supplied ID. (Ilia Alshanetsky)
- SPL:
. Fixed bug GH-23385 (SplDoublyLinkedList::serialize() use-after-free when
__serialize() removes an element). (David Carlier)
- SQLite:
. Fixed a crash when SQLite3::close() is called from a userland callback.
(Ilia Alshanetsky)
- Standard:
. Fixed bug #60110 (fclose(), file_put_contents(), copy() do not return false
properly). (Jakub Zelenka, Ilija Tovilo)
. Fixed three Windows-only proc_open() defects: an uninitialized
PROCESS_INFORMATION, an indeterminate comspec pointer after a failed
lookup, and an unchecked CreateFileA() failure. (Ilia Alshanetsky)
. Fixed bug GH-23780 (unserialize('') fails silently). (timwolla)
- URI:
. Fix casing of enum cases in UriHostType and UrlHostType to match the RFC
and PHP’s naming policy. (timwolla)
- Zlib:
. Fixed inflate_init() dropping the preset dictionary for raw streams with
a non-default window. (Ilia Alshanetsky)
10 Sep 2026, PHP 8.6.0beta3
- BCMath:
. Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds
n_scale. (Ilia Alshanetsky)
- Core:
. Fixed out-of-bounds reads during automatic UTF-16/32 encoding detection.
(Yudai Takada)
. Calling is_a() or is_subclass_of() with a string as the first argument
when $allow_string is false is now deprecated. (Daniel Scherzer)
. Fixed bug GH-23232 (lone namespace separator asks the autoloader for an
empty class name). (spawnia)
. Enabled the TAILCALL VM (--disable-gcc-global-regs) when building with GCC >= 16.
(henderkes)
- CLI:
. Fixed bug GH-23242 (PHP development server does not support Expect
100-continue flow control). (Sjoerd Langkemper)
- Calendar:
. Fixed *tojd() functions and cal_to_jd() truncating arguments outside the
int range instead of rejecting them. (lacatoire)
- DOM:
. Fixed NamedNodeMap::getNamedItemNS() with an empty URI not matching
the null namespace in spec-following mode. (Ilia Alshanetsky)
. Fixed stale getElementsByClassName() and other node list caches after
className/classList writes and attribute removals. (Ilia Alshanetsky)
. Fixed reference cycles through DOMXPath and XSLTProcessor php:function
callback arguments and return values not being collectable.
(Ilia Alshanetsky)
- Hash:
. Fixed hash_file() reporting argument #1 ($algo) instead of argument #2
($filename) when the filename contains null bytes. (lacatoire)
- Intl:
. Fixed grapheme_strpos() and grapheme_strrpos() with an empty needle
returning UTF-16 offsets instead of grapheme offsets. (Ilia Alshanetsky)
. Fixed a memory leak when dumping IntlCalendar instances. (Ilia Alshanetsky)
. Fixed Collator::sortWithSortKeys() allocating fixed 2MiB buffers
regardless of array size. (Ilia Alshanetsky)
. Fixed a memory leak when iterating IntlBreakIterator::getPartsIterator()
results. (iliaal)
. Fixed a leak in Locale::getKeywords() when a keyword value cannot be
read. (iliaal)
. Fixed a use-after-free when IntlRuleBasedBreakIterator is constructed
from compiled rules. (iliaal)
. Fixed Spoofchecker methods not recording the ICU error code when an ICU
call fails. (Ilia Alshanetsky)
. Fixed idn_to_ascii() and idn_to_utf8() reporting argument #2 ($flags)
instead of argument #3 ($variant) for an invalid IDNA variant, and the
domain length error message printing a literal "d" instead of the limit.
(lacatoire)
- MBString:
. Fixed mb_ereg_replace() emitting a NUL or out-of-bounds bytes in the
replacement when a \k<name> backref has no closing delimiter.
(Ilia Alshanetsky)
- ODBC:
. Fixed odbc_field_len(), odbc_field_scale() and odbc_field_type()
returning uninitialized memory when SQLColAttribute fails.
(Ilia Alshanetsky)
. odbc_error() and odbc_errormsg() now also report SQLColAttribute
failures. (Ilia Alshanetsky)
- PCNTL:
. Fixed the declared signature of pcntl_signal(), whose $restart_syscalls
argument accepts null and defaults to it. (lacatoire)
- PDO_PGSQL:
. Added Pdo\Pgsql::ATTR_CHUNK_SIZE to fetch a result set in chunks of the
given number of rows. (KentarouTakeda)
- PGSQL:
. Fixed the pg_insert(), pg_update() and pg_delete() flag error messages,
which did not name the set of flags actually accepted. (lacatoire)
- Phar:
. Fixed bug GH-23418 (Use-after-free when looking up mounted directories).
(Weilin Du)
. Fixed bug GH-23477 (Memory leak on duplicate native Phar manifest entries).
(Weilin Du)
- Sockets:
. Fixed socket_set_option() with SO_ATTACH_REUSEPORT_CBPF and a zero value,
which detached the classic BPF filter instead of the reuseport program.
(David Carlier)
- SOAP:
. Fixed WSDL cache corruption when a soap:header defines headerfaults.
(Ilia Alshanetsky)
. Fixed stack overflow when parsing a WSDL with self-referential schema
groups or attributeGroups. (Ilia Alshanetsky)
- Sodium:
. Added support for the libsodium 1.0.22 KEM APIs (X-Wing and ML-KEM768).
(Zachary DuBois)
- Standard:
. Fixed a segfault when a stream filter callback unsets StreamBucket::$data
before re-attaching the bucket. (iliaal)
. Fixed an out-of-bounds read when following a redirect response with an
empty Location header. (iliaal)
. Fixed read buffer compaction in php_stream_filter_flush(). (crystarm)
. Io\Poll\Context::wait() now rejects a $maxEvents value greater than
INT_MAX instead of truncating it. (marc-mabe)
. Fixed GH-23338 (fsockopen()/pfsockopen() ValueError reported wrong
argument number for $timeout). (lacatoire)
. Fixed bug GH-23576 (Next index for array returned from array_keys() is
wrong). (Lazizbek Ergashev)
- SimpleXML:
. Fixed writing to a dimension of the object returned by attributes() not
creating the attribute. (Ilia Alshanetsky)
. Fixed child elements of the element returned by
SimpleXMLElement::addChild() not being accessible by property name when
namespaces are involved. (Ilia Alshanetsky)
- Streams:
. Added so_rcvbuf and so_sndbuf stream socket context options, setting the
socket receive and send buffer sizes in bytes. (David Carlier)
27 Aug 2026, PHP 8.6.0beta2
- Core:
. Fixed bug GH-15375 (Nested "yield from" skips items after a valid() or
next() call on the inner generator). (iliaal)
. Fixed GH-10497 (Allow direct mutation of objects stored in constants or
class constants via OBJ->prop = $val). (Khaled Alam)
. Reverted GH-22833, which attempted to fix bug GH-18985. (ilutov)
. Using the return statement in a finally block is now deprecated.
(aldemeery)
- Curl:
. Set content length using CURLOPT_POSTFIELDSIZE_LARGE instead of
CURLOPT_POSTFIELDSIZE. This makes it possible to post strings larger than
2GB on some platforms, e.g. Windows. (Sjoerd Langkemper)
- DOM:
. Fixed a typo in the DOMException message for INUSE_ATTRIBUTE_ERR.
(Weilin Du)
. Fixed bug GH-22624 (use-after-free via DOMNameSpaceNode after
DOMDocument::xinclude()). (David Carlier)
. Fixed a use-after-free when cloning a DOMNameSpaceNode after
DOMDocument::xinclude(). (iliaal)
. Fixed a crash in DOMXPath when a php:function callback receives a nodeset
and a later callback returns a node from another document. (iliaal)
. Fixed bug GH-23331 (UAF when node_list_unlink() skips attribute children
that still have a live wrapper). (iliaal)
. Fixed a use-after-free when Dom\Element::setAttributeNS() replaces the
value of an attribute whose child still has a live wrapper. (iliaal)
- GD:
. Fixed imageaffinematrixget() and imageaffinematrixconcat() reporting the
wrong argument in error messages. (Weilin Du)
. Fixed imageaffinematrixget() to enforce the documented array|float type
for the $options parameter. (Weilin Du)
- Intl:
. Fixed grapheme_strrev() treating UBRK_DONE as a byte index and leaving
the result without a terminating NUL. (iliaal)
. Fixed a double-free when IntlGregorianCalendar construction fails after
the ICU constructor adopts the TimeZone. (iliaal)
. Fixed bug GH-23094 (NumberFormatter parsing offsets use UTF-16 positions
for UTF-8 strings). (ColumbusLabs)
. Fixed Locale::parseLocale() reading past a trailing '-' or '_'.
(iliaal, Xuyang Zhang)
. Fixed grapheme_str_split() treating UBRK_DONE as a byte index. (iliaal)
- Opcache:
. Fixed a tracing JIT crash when compiling a side trace for a method of a
class that could not be stored in the inheritance cache. (GH-21710)
(Arnaud, iliaal)
- PDO:
. Fixed a leak when a persistent connection failed a liveness check
with no other live PDO handle. (iliaal)
- PDO_PGSQL:
. Fixed several lazy fetch (PDO::ATTR_PREFETCH => 0) defects: an infinite
loop when cleaning up a fetch left in a COPY, a use-after-free when a
statement with emulated or disabled prepares is destroyed, a connection
left busy for the next fetch, and rows delivered from a result another
statement took over. (KentarouTakeda)
- PGSQL:
. Fixed the class name casing of pg_close_stmt()'s connection parameter.
(lacatoire)
- Phar:
. Fixed Phar archives being automatically detected when ".phar" only occurs
in a directory name or is not a filename extension in an included file's
path. (Weilin Du)
- Readline:
. Fixed class constant completion in the interactive shell. (Weilin Du)
- Zip:
. Fixed bug GH-23276 (ZipArchive subclass storing its own stream cannot be
garbage collected). (Weilin Du, ndossche)
- SAPI:
. Fixed fuzzer targets failing to build in isolation. (Mrmaxmeier)
. Fixed returns uninitialized value on LiteSpeed lsapi SAPI (Go Kudo)
- Session:
. Fixed bug GH-23056 (missing handler name in session write warning).
(lazerg)
. SessionHandler::validateId() is now implemented, so
session.use_strict_mode applies to the built-in handler. (Girgias)
. It is now deprecated to pass an object that does not implement the
create_sid() and validateId() methods. (Girgias)
. A deprecation is now emitted when implementing SessionHandlerInterface on a
class which doesn't define the create_sid() or validateId() methods, as
those will be moved from SessionUpdateTimestampHandlerInterface and
SessionIdInterface to SessionHandlerInterface. (Girgias)
- SNMP:
. It is now possible to use the AES192, AES192C, AES256, and AES256C as
SNMPv3 security protocols if the underlying library supports them.
(eskyuu)
. It is now possible to reset the MIB tree using the new snmp_init_mib()
function. (eskyuu)
. Additional MIB parsing and output control functionality has been exposed
via the snmp_set_mib_option(), snmp_set_output_option(),
snmp_set_string_output_format() functions, the $numeric_index,
$numeric_timeticks, $extended_index, $dont_print_units, $escape_quotes,
$print_hex_text SNMP properties, and the SNMP::setOidOutputFormat(),
SNMP::setStringOutputFormat() methods. (eskyuu)
- Sodium:
. Fixed incorrect parameter name in sodium_add(), sodium_memcmp(), and
sodium_compare() length-mismatch error messages. (lacatoire)
- SPL:
. The following SplFileObject methods have been deprecated
SplFileObject::fgetcsv(), SplFileObject::fputcsv(),
SplFileObject::setCsvControl(), and SplFileObject::getCsvControl().
(Girgias)
- Standard:
. Fixed incorrect parameter name in convert_uudecode() warning. (lacatoire)
. Added support for the "<" and ">" endianness modifiers in pack() and
unpack() format codes. (alexandre-daubois)
- Zip:
. Fixed bug GH-17787 (ZipArchive stream stops reading early when the archive
is freed while the stream is still open). (Eyüp Can Akman)
- Zlib:
. Fixed bug GH-22142 (Assertion failure in deflate_init() when an option
object has uninitialised typed properties). (David Carlier)
13 Aug 2026, PHP 8.6.0beta1
- Core:
. Deprecated "namespace" as a class constant name. (NickSdot)
. Changed run-tests.php to run in parallel by default, using up to 10
automatically detected workers. Pass -j1 for sequential execution.
(NickSdot)
. Allowed readonly properties to declare default values. (NickSdot)
. Changed run-tests.php to run test subprocesses without a shell where
possible. (NickSdot)
. Fixed GH-23083 (SEGV build_trace_args in zend_exceptions.c with
-d error_include_args=On). (David Carlier)
. Fixed GH-23121 (is_callable() wrongly accepts objects with no get_closure
handler). (David Carlier)
. Passing a 3rd argument to define() is now deprecated. (Girgias)
. Naming a function readonly is now deprecated. (Girgias)
. Added stateless closure cache. (ilutov)
- BZ2:
. Passing an object for the Bzip2 {de}compression stream filter is now
deprecated. Use get_object_vars() on the object instead. (Girgias)
- Curl:
. Improved cURL option validation errors to include the option name.
(Sjoerd Langkemper)
. Raise a value error when the callback registered with CURLOPT_READFUNCTION
returns an unexpected long. (Sjoerd Langkemper)
. Fix bug GH-16513 (curl: exceptions in callbacks do not abort the request).
(Sjoerd Langkemper)
- Date:
. Update timelib to 2026.02. (Derick, timwolla)
. Added Time\Duration. (timwolla, Derick)
- DOM:
. Fixed bug GH-23116 (Stack overflow when normalizing a deeply nested
DOMDocument). (Lazizbek Ergashev)
. Fixed bug GH-23117 (Stack overflow when normalizing a deeply nested
Dom\XMLDocument). (Lazizbek Ergashev)
- Exif:
. Fixed exif_read_data() allocating a HEIF meta box larger than the file
it came from. (iliaal)
- GMP:
. Added optional $definitely_prime output parameter to gmp_prevprime().
(Weilin Du)
. Added gmp_powm_sec(). (Weilin Du)
- Intl:
. Added static methods IntlDatePatternGenerator::getSkeleton() and
IntlDatePatternGenerator::getBaseSkeleton(). (Weilin Du)
. Fixed Collator::sort(), collator_sort(), Collator::asort(), and
collator_asort() to report UTF-8/UTF-16 conversion errors through the intl
error handler instead of emitting a warning and continuing with an empty
string. (Weilin Du)
. Fixed IntlListFormatter::__construct() leaving stale global error state
after successful calls. (Weilin Du)
. Fixed IntlNumberRangeFormatter leaving stale global error state after
successful createFromSkeleton() and format() calls. (Weilin Du)
. Implemented GH-20255 (Add a predefined calendar constant in
IntlDateFormatter for the proleptic gregorian calendar). (David Carlier)
. Added SpoofChecker::areBidiConfusable(). (David Carlier)
. Added SpoofChecker::getBidiSkeleton(). (Weilin Du)
. Added SpoofChecker::getSkeleton(). (David Carlier)
. Fixed IntlNumberRangeFormatter::format() crash when the formatting fails.
(David Carlier)
- MbString:
. Passing objects to mb_convert_variables() is now deprecated. (Girgias)
- MySQLi:
. The mysqli_get_charset() function and mysqli::get_charset() method are now deprecated. (Kamil Tekiela)
. The mysqli_stmt_init() function and mysqli::stmt_init() method are now deprecated. (Kamil Tekiela)
. Instantiation of mysqli_stmt without providing the $query parameter is now deprecated. (Kamil Tekiela)
- PDO:
. Fixed pdo_raise_impl_error() emitting a warning under ERRMODE_SILENT.
(iliaal)
- PDO_ODBC:
. Fixed bug GH-23016 (NULL values in long columns come back as garbage
binary strings). (Calvin Buckley, iliaal)
- Readline:
. Fixed the interactive shell not waiting for the pager process to exit.
(Weilin Du)
- Reflection:
. Added ReflectionAttribute::inNamespace(),
ReflectionAttribute::getNamespaceName(), and
ReflectionAttribute::getShortName(). (Girgias)
. Fixed bug GH-22905 (Reflection exception messages truncate on null bytes).
(DanielEScherzer)
. Fixed ReflectionProperty::isLazy() and skipLazyInitialization() using the
parent slot when a child class hooks an inherited property. (iliaal)
. Fixed segfault in ReflectionMethod::createFromMethodName() on an
uninstantiable subclass. (iliaal)
- SimpleXML:
. Fixed integer element offsets that cannot resolve aliasing an existing
element. (iliaal)
. SimpleXMLElement::__construct() now raises a ValueError when the $data
argument contains NUL bytes. (iliaal)
. Fixed segfault when comparing uninitialized SimpleXMLElement
instances. (iliaal)
- SPL:
. The spl_classes() function is now deprecated, use
ReflectionExtension::getClassNames() instead. (Girgias)
. The spl_object_hash() function is now deprecated, use spl_object_id()
instead. (Girgias)
. The following ArrayIterator methods are now deprecated:
* ArrayIterator::getFlags()
* ArrayIterator::setFlags()
* ArrayIterator::asort()
* ArrayIterator::ksort()
* ArrayIterator::uasort()
* ArrayIterator::uksort()
* ArrayIterator::natsort()
* ArrayIterator::natcasesort()
* ArrayIterator::unserialize()
* ArrayIterator::serialize()
(Girgias)
- Standard:
. Passing an object as the $data argument to http_build_query() is now
deprecated. The interpretation of object values within $data as arrays
is also deprecated. Convert objects to arrays with get_object_vars()
before calling the function. (Girgias)
. Added the "filter.max_filter_count" stream context option for php://filter
URLs. Using more than 16 filters without configuring this option is now
deprecated. (Sjoerd Langkemper)
. The metaphone() function is now deprecated, use a userland phonetic
matching library instead. (Weilin Du)
. Improved performance of array_intersect(). (mehmetcansahin)
. Fixed bug GH-23006 (phpcredits() full-page HTML title says phpinfo()).
(Weilin Du)
. The following functions now raise a ValueError when the $filename argument
contains NUL bytes: fileperms(), fileinode(), filesize(), fileowner(),
filegroup(), fileatime(), filemtime(), filectime(), filetype(),
is_writable(), is_readable(), is_executable(), is_file(), is_dir(),
is_link(), file_exists(), lstat(), stat(). (Girgias)
. Fixed bug GH-22818 (stream_filter_register() orphaned user_filter_map on
shutdown re-registration). (David Carlier)
. Io\Poll\Context::wait() now takes a Time\Duration object as a timeout.
(timwolla)
. Passing an object to array_walk{_recursive} is now deprecated. Use
get_object_vars() on the object instead. (Girgias)
. The is_double() function is now deprecated, use is_float() instead.
(Girgias)
. The is_long() and is_integer() functions are now deprecated, use is_int()
instead. (Girgias)
. The doubleval() function is now deprecated, use floatval() instead.
(Girgias)
. The strcoll() function is now deprecated, use Collator::compare() instead.
(Girgias)
. The SORT_LOCALE_STRING constant for the family of sort functions is now
deprecated, use one of the following functions instead:
* Collator::asort()
* Collator::sort()
* Collator::sortWithSortKeys()
(Girgias)
- Streams:
. Fixed file_put_contents() LOCK_EX early return leaking stream error
operation depth. (iliaal)
- XSL:
. Fixed use-after-free when a DOMDocument subclass __clone() retains the
stylesheet copy made by XSLTProcessor::importStylesheet(). (iliaal)
- Zlib
. Passing an object for the zlib deflate and inflate stream filter is now
deprecated. Use get_object_vars() on the object instead. (Girgias)
. Passing an object to the $option argument to deflate_init and inflate_init
is now deprecated. Use get_object_vars() on the object instead. (Girgias)
30 Jul 2026, PHP 8.6.0alpha3
- Core:
. Implemented partial function application RFC. (Arnaud)
. Fixed bug GH-22263 (reset typed property default on every unserialize
failure path). (David Carlier)
. Fixed bug GH-18985 (Wrong line numbers for match with constant arms).
(ilutov)
. Fixed bug GH-18847 (SEGV in zend_fetch_debug_backtrace() when the memory
limit is reached while the tracing JIT enters a call frame). (Arnaud,
iliaal)
- DOM:
. Fixed bug GH-22825 (DOMElement::setAttribute() fails silently when the DTD
declares a default value for the attribute). (iliaal)
. Fixed bug GH-23120 (Stack overflow when comparing deeply nested DOM nodes
with DOMNode::isEqualNode()). (Weilin Du)
- Embed:
. Made php-cli functionality available in embed builds. (henderkes)
- GMP:
. Added gmp_prevprime(). (Weilin Du, David Carlier)
. Fixed GMP power and shift operators to reject GMP right operands outside
the unsigned long range instead of silently truncating them. (Weilin Du)
. Fixed GMP integer string parsing to reject strings containing NUL bytes
instead of silently truncating them. (Weilin Du)
. Fixed GMP error messages that referenced outdated parameter names.
(Weilin Du)
- Intl:
. Fixed grammatical issues in Normalizer invalid form and IntlCalendar time
zone offset error messages. (Weilin Du)
. Removed the dependency on the ICU IO library. (Weilin Du)
- ODBC:
. Fixed bug GH-22668 (Heap buffer over-read when a column value exceeds the
driver-reported display size). (iliaal)
- Opcache:
. Re-enable JIT for ZTS builds on Apple Silicon. (realFlowControl)
- PDO_ODBC:
. Fixed bug GH-22667 (Heap buffer over-read when a column value exceeds the
driver-reported display size). (iliaal)
. Fixed bug GH-22666 (Heap buffer overflow when an output parameter value is
longer than the declared maxlen). (iliaal)
. Fixed bug GH-22665 (Out-of-bounds write when the ODBC driver reports a
diagnostic message length beyond the error buffer). (iliaal)
- Phar:
. Fixed grammatical issues and outdated terminology in Phar error messages.
(Weilin Du)
- Reflection:
. Fixed bug GH-22681 (Reflection*::__toString() truncates on null bytes).
(DanielEScherzer)
- SOAP:
. Fixed header injection through the Content-Type context option, the
soapaction and the cookie names and values. (David Carlier)
. Fixed the SoapClient and SoapServer "classmap" option to reject arrays
containing integer keys, and made SoapClient throw TypeError/ValueError
for invalid "classmap" options. (Weilin Du, David Carlier)
- MBString:
. Fixed bug GH-22779 (mb_strrpos() returns the wrong position for a negative
offset in a non-UTF-8 encoding). (Eyüp Can Akman)
. Fixed bug GH-21036 (mb_ereg_search_getregs() crashes after mb_eregi()
invalidates the regex cache). (Matthias Goergens)
- PCRE:
. Fixed bug GH-21134 (Crash with \C + UTF-8). Using \C in UTF-8 patterns is
now forbidden. (Arnaud)
- Sockets:
. Fixed socket_set_option() validation error messages for UDP_SEGMENT and
TCP_USER_TIMEOUT, and SO_LINGER options. (Weilin Du)
. Fixed various memory related issues in ext/sockets. (David Carlier)
- Standard:
. Fixed setlocale() to reject locale names containing NUL bytes instead of
silently truncating them, and to reject arrays passed after the $locales
argument or additional arguments passed after an array $locales argument.
(Weilin Du)
- Streams:
. Added a new IO copy API used by php_stream_copy_to_stream_ex() that
leverages platform primitives (sendfile, splice, copy_file_range,
TransmitFile) for faster stream copying. (Jakub Zelenka, David Carlier)
. Fixed bug GH-22841 (php_stream_copy_to_stream_ex() drops progress
notifications when using the copy fast path). (David Carlier)
. Fixed bug GH-15836 (Use-after-free when a user stream filter accesses
$this->stream during the close flush). (iliaal)
16 Jul 2026, PHP 8.6.0alpha2
- Core:
. Sync Boost.Context assembly with 1.91.0. (kn1g78)
. Fixed bug GH-22387 (AST pretty-printing drops meaningful parentheses around
RHS of instanceof). (timwolla)
. Fixed bug GH-15672 and GH-15911 (Stack overflow when an internal function
recurses through zend_call_function, such as a self-attached SPL
iterator). (iliaal)
. Lock unmodified readonly properties for modification after clone-with.
(NickSdot)
. abort() instead of exit() on hard OOM. (realFlowControl)
. perf: ZTS: move AG and SCNG into native __thread storage. (henderkes)
- Calendar:
. Fixed bug GH-22602 (gregoriantojd() and juliantojd() integer overflow with
INT_MAX year). (arshidkv12)
- Curl:
. Added CURLOPT_SEEKFUNCTION and the CURL_SEEKFUNC_OK, CURL_SEEKFUNC_FAIL
and CURL_SEEKFUNC_CANTSEEK constants, letting libcurl rewind a streamed
request body to resend it on a redirect, multi-pass authentication or a
retried reused connection. (GrahamCampbell)
- Date:
. Update timelib to 2022.17. (Derick)
. Fixed bug GH-19803 (Parsing a string with a single white space does create
an error). (Derick)
. Fixed Unix timestamps in February of the year 0 are misparsed with
@-notation. (LukasGelbmann)
. Fixed bug GH-11368 (idate() doesn't work for the year -1). (Derick)
. Fixed bug GH-11310 (__debugInfo does nothing on userland classes extending
Date classes). (Derick)
- DBA:
. Fixed OOB read on malformed length field in dba flatfile handler. (alhudz)
- DOM:
. Fixed bug GH-22570 (Stack overflow when serializing a deeply nested
Dom\XMLDocument). (iliaal)
. Fixed Dom\DtdNamedNodeMap integer dimension access so negative indexes
return NULL and indexes outside the int range throw ValueError instead of
returning the first entity or notation. (Weilin Du)
. Fixed bug GH-22623 (use after free with namespace nodes from
XSLTProcessor::registerFunctions())/ (David Carlier)
. Fixed bug GH-22554 (use-after-free with XPath callback returning a node
from a foreign document). (David Carlier)
- Exif:
. Fixed bug GH-11020 (exif_read_data() emits a spurious "Illegal IFD size"
warning when an IFD is not followed by a next-IFD offset). (Eyüp Can Akman)
- GMP:
. Fixed bug GH-22549 (Assertion failure / UB on a compound GMP power or shift
assignment with a negative exponent). (iliaal)
- Intl:
. Fixed NumberFormatter::parse() and NumberFormatter::parseCurrency() to
reject offset values outside the 32-bit range instead of silently
truncating them. (Weilin Du)
. IntlDateFormatter::parse()/datefmt_parse() and
IntlDateFormatter::localtime()/datefmt_localtime() now raise TypeError
when the offset argument is not of type int. (Weilin Du)
- JSON:
. Report unterminated JSON strings as syntax errors. (timwolla)
. Improve performance error position tracking during JSON decoding.
(henderkes)
. Fixed bug GH-22514 (Incorrect error column in PHP 8.6 JSON parser).
(henderkes, timwolla)
- Opcache:
. Fixed bug GH-21770 (Infinite recursion in property hook getter in opcache
preloaded trait). (iliaal)
- OpenSSL:
. Added $salt_length parameter to openssl_sign() and openssl_verify() with
new OPENSSL_RSA_PSS_SALTLEN_* constants. (Jakub Zelenka)
. Fixed timeout for supplemental read at end of a blocking stream in SSL
stream wrapper. (ilutov)
. Fixed stream_socket_get_crypto_status() after supplemental read. (ilutov)
- PDO_ODBC:
. Fixed bug GH-20726 (Crash with ODBC connection pooling when the DSN
carries no credentials). (iliaal)
- PHPDBG:
. Fixed fleaked lowercased lookup keys in phpdbg_resolve_opline_break.
(jorgsowa)
. Fixed off-by-one in phpdbg_safe_class_lookup() causing class lookups to
always fail during phpdbg's signal-safe interruption path. (jorgsowa)
- Reflection:
. Fixed bug GH-22683 (Reflection(Class)Constant::__toString() should not warn
on NAN conversions). (Khaled Alam)
. Fixed bug GH-22681 (Reflection*::__toString() truncates on null bytes).
(DanielEScherzer)
- Session:
. Fixed bug GH-21314 (Different session garbage collector behavior between
PHP 8.3 and PHP 8.5). (jorgsowa)
- SOAP:
. Fixed bug GH-22585 (OOM on bailout with uninitialized
do_request() parameters). (David Carlier)
. Fixed xsd:hexBinary decoding to reject odd-length values instead of
silently truncating the last nibble. (Weilin Du)
. Made SOAP encoding errors report the affected type or failing operation
instead of the generic "Violation of encoding rules" message. (Weilin Du)
- Standard:
. Fixed sleep() and usleep() to reject values that overflow the underlying
unsigned int timeout. (Weilin Du)
. Fixed bug GH-22671 (assert.bail aborts the process when the assert callback
throws an exception whose reporting re-throws). (iliaal)
. Fixed bug GH-22678 (Use-after-free in array_multisort() when the comparator
mutates the array being sorted). (azchin, iliaal)
- Streams:
. Fixed bug GH-21468 (Segfault in file_get_contents w/ a https URL
and a proxy set). (CVE-2026-12184) (ndossche)
- URI:
. Fixed bug GH-22628 (Percent-encoding of caret in WHATWG URL paths is not
performed). (kocsismate)
. Fixed bug GH-22629 (WHATWG Validation error incorrect with empty host and
non-empty userinfo). (kocsismate)
- Zip:
. Fixed bug GH-22649 (ZipArchive::setCommentName() and setCommentIndex()
could crash after overwriting an entry and resetting its inherited
unchanged comment). (Weilin Du)
. Fixed bug GH-21705 (ZipArchive::getFromIndex() ignores
ZipArchive::FL_UNCHANGED for deleted entries). (Weilin Du)
. Fixed bug GH-22176 (memory leak with ZipArchive::registerCancelBack()
is used with reference returning function during shutdown).
(David Carlier)
. ZipArchive::addGlob() and ZipArchive::addPattern() now raise a TypeError
for invalid "remove_all_path", "comp_method", "comp_flags", and
"enc_method" options instead of emitting a warning. (David Carlier)
02 Jul 2026, PHP 8.6.0alpha1
- Core:
. Added first-class callable cache to share instances for the duration of the
request. (ilutov)
. It is now possible to use reference assign on WeakMap without the key
needing to be present beforehand. (ndossche)
. Added `clamp()`. (kylekatarnls, thinkverse)
. Fix OSS-Fuzz #429429090 (Failed assertion on unset() with uninitialized
container). (ilutov)
. Fixed GH-20564 (Don't call autoloaders with pending exception). (ilutov)
. Fix deprecation not showing when accessing null key of an array with JIT.
(alexandre-daubois)
. Fixed bug GH-20174 (Assertion failure in
ReflectionProperty::skipLazyInitialization after failed LazyProxy
initialization). (Arnaud)
. Enabled the TAILCALL VM on Windows when compiling with Clang >= 19 x86_64.
(henderkes)
. Deprecate specifying a nullable return type for __debugInfo(). (timwolla)
. Fixed bug GH-22142 (Assertion failure in zendi_try_get_long() on IS_UNDEF).
(David Carlier)
. Fixed bug GH-22046 (The unserialize function can lead to segfault when
non-Serializable internal classes are serialized back with the C format).
(kocsismate)
. Fixed bug GH-22292 (AST pretty printing does not correctly handle invalid
variable names). (timwolla)
. Fixed bug GH-22291 (AST pretty printing does not correctly handle braces in
string interpolation). (timwolla)
. Fixed bug GH-22373 (AST pretty-printing drops meaningful parentheses
surrounding property access). (timwolla)
. Fixed GH-22422 (zend_arena layout mismatch leaked memory in separately
built extensions under AddressSanitizer). (iliaal)
. TSRM: use local-exec TLS in PIE executables. (henderkes)
. perf: make all static extensions use TSRMG_STATIC. (henderkes)
. Fixed bug GH-22257 (type confusion in Exception::getTraceAsString()).
(David Carlier)
. TSRM: make CG, EG, SCNG and AG compile-time offsets. (henderkes)
. Deprecate returning values from __construct() and __destruct(). (timwolla)
. base_convert, bindex, hexdec and octdec now raise a notice when they cannot
precisely convert the given number. (Sjoerd Langkemper)
. Added error_include_args INI option to make the display of function
arguments consistent in error output. (Calvin Buckley)
- BCMath:
. Added NUL-byte validation to BCMath functions. (jorgsowa)
- BZ2:
. Reject oversized input in bzdecompress(). (arshidkv12)
- Curl:
. Add support for CURLINFO_SIZE_DELIVERED (libcurl >= 8.20.0). (Ayesh)
- Date:
. Update timelib to 2022.16. (Derick)
- DOM:
. Removed LIBXML_XINCLUDE from valid options for XMLDocument, as it was a
no-op. (ndossche)
. Readonly DOM properties are now declared with asymmetric visibility
(public private(set)). ReflectionProperty::isWritable() reports them
correctly, and external writes raise "Cannot modify private(set)
property" instead of the previous readonly modification error.
(David Carlier)
. Fixed Dom\Notation nodes missing tree connection, so that ownerDocument,
parentNode, isConnected and baseURI now return correct values, and
textContent returns NULL per the DOM specification. (jordikroon)
- EXIF:
. Added support for reading EXIF metadata from WebP images (GH-19904).
(iliaal)
- Fileinfo:
. Fixed bug GH-20679 (finfo_file() doesn't work on remote resources).
(ndossche)
. Fixed bug #66095 (Hide libmagic dynamic symbols). (orlitzky)
- GD:
. imagesetstyle()/imagefilter()/imagecrop() check array argument entries
types. (David Carlier)
- GMP:
. gmp_fact() reject values larger than unsigned long. (David Carlier)
. gmp_pow/binomial/root/rootrem and shift/pow operators reject values larger
than unsigned long. (David Carlier)
. GMP exponentiation and shift operators now emit a deprecation warning
when converting a float right operand to int loses precision. (Weilin Du)
- Hash:
. Upgrade xxHash to 0.8.2. (timwolla)
- Intl:
. Fixed malformed ResourceBundle::get() error message when fallback is
disabled. (Weilin Du)
. Added Locale::getDisplayKeyword() and Locale::getDisplayKeywordValue(),
with the alias of locale_get_display_keyword() and
locale_get_display_keyword_value() respectively. (Weilin Du)
. Fix incorrect argument positions for invalid start/end arguments in
transliterator_transliterate(). (Weilin Du)
. Fixed IntlTimeZone::getDisplayName() to synchronize object error state
for invalid display types. (Weilin Du)
. Fixed Locale::lookup() and locale_lookup() to return NULL instead of the
fallback locale when a language tag cannot be canonicalized. (Weilin Du)
. Added IntlNumberRangeFormatter class to format an interval of two numbers
with a given skeleton, locale, collapse type and identity fallback.
(BogdanUngureanu)
. Fixed bug GH-20426 (Spoofchecker::setRestrictionLevel() error message
suggests missing constants). (DanielEScherzer)
. Added grapheme_strrev (Yuya Hamada)
. Passing a non-stringable object as a time zone to Intl time zone
argument handling now raises TypeError instead of Error. (Weilin Du)
. IntlBreakIterator::getLocale() now raises ValueError for invalid locale
types. (Weilin Du)
. Fixed MessageFormatter::parse() and parseMessage() returning PHP_INT_MIN
as float rather than int on 64-bit platforms. (Weilin Du)
. Fixed UConverter::transcode() silently truncating from_subst and to_subst
option lengths greater than 127 bytes. (Weilin Du)
. Fixed IntlIterator::current() to return NULL instead of an undefined value
when the iterator is not positioned on a valid element. (Weilin Du)
- IO:
. Added new polling API. (Jakub Zelenka)
- JSON:
. Enriched JSON last error / exception message with error location.
(Juan Morales)
- Fibers:
. Fixed bug GH-20483 (ASAN stack overflow with fiber.stack_size INI small
value). (David Carlier)
- Mail:
. Fixed bug GH-20862 (null pointer dereference in
php_mail_detect_multiple_crlf via error_log (jordikroon)
- Mbstring:
. ini_set() with mbstring.detect_order changes the order of mb_detect_order
as intended, since mbstring.detect_order is an INI_ALL setting. (tobee94)
. Added GB18030-2022 to default encoding list for zh-CN. (HeRaNO)
. Fixed bug GH-20836 (Stack overflow in mb_convert_variables with
recursive array references). (alexandre-daubois)
. Fixed bug GH-21223; mb_guess_encoding no longer crashes when passed huge
list of candidate encodings (with 200,000+ entries). (Jordi Kroon)
. mbregex has been deprecated. (youkidearitai)
- Mysqli:
. Added mysqli_quote_string() and mysqli::quote_string(). (Kamil Tekiela)
- Opcache:
. Fixed bug GH-20051 (apache2 shutdowns when restart is requested during
preloading). (Arnaud, welcomycozyhom)
- OpenSSL:
. Added AES-SIV support. (jordikroon)
. Implemented GH-20310 (No critical extension indication in
openssl_x509_parse() output). (StephenWall)
. Added TLS session resumption support for streams with new context options
and Openssl\Session class. (Jakub Zelenka)
. Added TLS external PSK support for streams with new context options and
Openssl\Psk class. (Jakub Zelenka)
. Added TLS 1.3 early data (0-RTT) support for streams with new context
options early_data, max_early_data and early_data_cb. (Jakub Zelenka)
. Added stream crypto status for exposing OpenSSL WANT_READ / WANT_WRITE.
(Jakub Zelenka)
- PCNTL:
. pcntl_exec() now throws a ValueError if the $args array is not a list
array. (Weilin Du)
- PDO_DBLIB:
. Added dblib_handle_check_liveness handler. (freddy77)
- PDO_PGSQL:
. Clear session-local state disconnect-equivalent processing.
(KentarouTakeda)
- PGSQL:
. Enabled 64 bits support for pg_lo_truncate()/pg_lo_tell() if the server
supports it. (KentarouTakeda)
. pg_fetch_object() now surfaces non-instantiable class errors before
fetching, resolves the constructor via the get_constructor handler, and
reports the empty-constructor ValueError on the $constructor_args argument.
(David Carlier)
- Phar:
. Support reference values in Phar::mungServer(). (ndossche)
. Invalid values now throw in Phar::mungServer() instead of being silently
ignored. (ndossche)
. Fixed a bypass of the magic ".phar" directory protection in
Phar::addEmptyDir() for paths starting with "/.phar". (Weilin Du)
. Fixed an integer underflow when parsing ZIP extra fields. (Weilin Du)
. Phar::addEmptyDir() now allows non-magic directory names that merely
share the ".phar" prefix. (Weilin Du)
. Support overridden methods in SplFileInfo for getMTime() and getPathname()
when building a phar. (ndossche)
. Mark Phar::buildFromIterator() base directory argument as a path.
(ndossche)
- phpdbg:
. Fixed GH-22480 (Use-after-free when re-watching an already-watched
variable). (iliaal)
- Posix:
. Added validity check to the flags argument for posix_access(). (arshidkv12)
- Reflection:
. Fixed bug GH-20217 (ReflectionClass::isIterable() incorrectly returns true
for classes with property hooks). (alexandre-daubois)
. Added ReflectionConstant::inNamespace(). (Khaled Alam)
. Added ReflectionProperty::isReadable() and ::isWritable(). (ilutov)
. Fixed bug GH-21362 (ReflectionMethod::invoke/invokeArgs() did not verify
Closure instance identity for Closure::__invoke()). (Ilia Alshanetsky)
. Added ReflectionParameter::getDocComment(). (chschneider)