Pull requests · php/php-src

zend_memnstr: Use a compact Sunday shift table for short needles

#25115ArtUkrainskiy opened

Oct 31, 2026

Contributor

ext/openssl: Fix GH-9317: OpenSSL config path does not respect open_basedir

#25114Roman3349 opened

Oct 31, 2026

ext/openssl: Fix GH-25088: SNI server contexts do not inherit the base policy

#25113Roman3349 opened

Oct 31, 2026

Fix GH-25107: Preserve foreach iterators on array_unshift

#25111JoaoMarcos44 opened

Oct 31, 2026

Fix GH-25108: Skip uninitialized hooked properties in json_encode()

#25110JoaoMarcos44 opened

Oct 31, 2026

Fix GH-25106: Clear stale PDO SQLite prefetch

#25109JoaoMarcos44 opened

Oct 31, 2026

ext/fileinfo: Fix HWPX misidentification as OOXML

#25105LamentXU123 opened

Oct 31, 2026

Member

1

Fix GH-25093: Phar::webPhar() measures the redirect target by the on-disk path

#25104dhrupo opened

Oct 31, 2026

Fix GH-25093: Phar::webPhar() redirect reads past the request URI

#25102lazerg opened

Oct 31, 2026

Contributor

Fix GH-25094: NULL dereference in SOAP get_doc_function() with missing parts

#25101lazerg opened

Oct 31, 2026

Contributor

Fix GH-25092: Double free in Phar::copy() on link and mounted entries

#25100lazerg opened

Oct 31, 2026

Contributor

1

Fix GH-25089: Heap buffer over-read via crafted alias size in zip-based phar

#25099lazerg opened

Oct 31, 2026

Contributor

1

Fix GH-25090: UAF in phar rename() of an entry with metadata

#25098lazerg opened

Oct 31, 2026

Contributor

Fix GH-25091: UAF in phar rename() when source and destination are equal

#25097lazerg opened

Oct 31, 2026

Contributor

Improve GH-25021 test, use non-deprecated method

#25095mvorisek opened

Oct 31, 2026

Contributor

Fix GH-25086: Io\Poll kqueue backend leaks memory on every modifyEvents()

#25087lazerg opened

Oct 31, 2026

Contributor

opcache: preserve loop-carried cv values across trace guards

#25085aasul opened

Oct 31, 2026

Contributor

zend_ast: Fix FCC in trait const expressions resolving to the first using class

#25083jorgsowa opened

Oct 31, 2026

Contributor

3

ext/session: validate session id just before sending cookie

#25082Sjord opened

Oct 31, 2026

Contributor

1

ext/session: expose php_session_valid_key_ex

#25081Sjord opened

Oct 31, 2026

Contributor

tree: use correct argument order for allocation functions

#25079Girgias opened

Oct 31, 2026

Member

1

Zend: remove ZEND_RETURN_{VAL|REF|VALUE|REFERENCE} defines

#25078Girgias opened

Oct 31, 2026

Member

UPGRADING: Note the TrueType font MIME type change in fileinfo

#25073dhrupo opened

Oct 31, 2026

Fix stream_select() failing unpredictably with many or large descriptors (backport of #14452 to PHP-8.4)

#25072frodeborli opened

Oct 30, 2026

Tracing JIT: Implement COALESCE as a guard resulting in a side-trace

#25071ndossche opened

Oct 30, 2026

Member

Navigation Menu

Repository navigation

All pull requests

zend_memnstr: Use a compact Sunday shift table for short needles

ext/openssl: Fix GH-9317: OpenSSL config path does not respect open_basedir

ext/openssl: Fix GH-25088: SNI server contexts do not inherit the base policy

Fix GH-25107: Preserve foreach iterators on array_unshift

Fix GH-25108: Skip uninitialized hooked properties in json_encode()

Fix GH-25106: Clear stale PDO SQLite prefetch

ext/fileinfo: Fix HWPX misidentification as OOXML

Fix GH-25093: Phar::webPhar() measures the redirect target by the on-disk path

Fix GH-25093: Phar::webPhar() redirect reads past the request URI

Fix GH-25094: NULL dereference in SOAP get_doc_function() with missing parts

Fix GH-25092: Double free in Phar::copy() on link and mounted entries

Fix GH-25089: Heap buffer over-read via crafted alias size in zip-based phar

Fix GH-25090: UAF in phar rename() of an entry with metadata

Fix GH-25091: UAF in phar rename() when source and destination are equal

Improve GH-25021 test, use non-deprecated method

Fix GH-25086: Io\Poll kqueue backend leaks memory on every modifyEvents()

opcache: preserve loop-carried cv values across trace guards

zend_ast: Fix FCC in trait const expressions resolving to the first using class

ext/session: validate session id just before sending cookie

ext/session: expose php_session_valid_key_ex

tree: use correct argument order for allocation functions

Zend: remove ZEND_RETURN_{VAL|REF|VALUE|REFERENCE} defines

UPGRADING: Note the TrueType font MIME type change in fileinfo

Fix stream_select() failing unpredictably with many or large descriptors (backport of #14452 to PHP-8.4)

Tracing JIT: Implement COALESCE as a guard resulting in a side-trace