Skip to content

[pull] master from php:master#538

Merged
pull[bot] merged 15 commits intoturkdevops:masterfrom
php:master
Nov 15, 2025
Merged

[pull] master from php:master#538
pull[bot] merged 15 commits intoturkdevops:masterfrom
php:master

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Nov 15, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

ndossche and others added 15 commits November 15, 2025 12:45
Fortunately, libxml won't allow _at this point in time_ to have more
than INT_MAX/5 attributes, so this doesn't cause issues right now.
However, if this limit is ever raised then it can cause an integer
overflow which will cause a heap overflow.
So future-proof this code by properly using safe_emalloc().

Closes GH-20472.
* PHP-8.3:
  xml: Use safe_emalloc() correctly
* PHP-8.4:
  xml: Use safe_emalloc() correctly
* PHP-8.5:
  xml: Use safe_emalloc() correctly
* PHP-8.5:
  [skip ci] Fix destructuring typo in NEWS and UPGRADING (#20488)
The flush functions always return EOF, even in the success path.
The success path should return 0 to indicate success.

Closes GH-20474.
* PHP-8.3:
  phar: Fix broken return value of fflush() for phar file entries
* PHP-8.4:
  Revert "ext/phar: Voidify flush function as it always returns EOL"
  phar: Fix broken return value of fflush() for phar file entries
* PHP-8.5:
  Revert "ext/phar: Voidify flush function as it always returns EOL"
  phar: Fix broken return value of fflush() for phar file entries
In 61884c3 I added these FIXME comments after I noticed that this
would cause an assertion failure. At that time I did not yet know what
to do here. I took a look at the code now and other streams return -1
and leave the file position untouched. So we do the same for phar.
This fixes the assertion failure and subsequent crashes, but also
changes one test output. However, I believe the new test output is
correct.

Closes GH-20475.
* PHP-8.3:
  Fix assertion failure when fseeking a phar file out of bounds
* PHP-8.4:
  Fix assertion failure when fseeking a phar file out of bounds
* PHP-8.5:
  Fix assertion failure when fseeking a phar file out of bounds
@pull pull bot locked and limited conversation to collaborators Nov 15, 2025
@pull pull bot added the ⤵️ pull label Nov 15, 2025
@pull pull bot merged commit b3061df into turkdevops:master Nov 15, 2025
1 of 2 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants