ZendPHP December 2024 Releases

Community changes

PHP version 8.4.2 changes

• BcMath

  • Fixed bug GH-16978: Avoid unnecessary padding with leading zeros

• COM

  • Fixed bug GH-16991: Getting typeinfo of non DISPATCH variant segfaults

• Core

  • Fixed bug GH-16344: setRawValueWithoutLazyInitialization() and skipLazyInitialization() may change initialized proxy
  • Fix is_zend_ptr() huge block comparison
  • Fixed potential OOB read in zend_dirname() on Windows
  • Fixed bug GH-15964: printf() can strip sign of -INF

• Curl

  • Fix various memory leaks in curl mime handling

• DBA

  • Fixed bug GH-16990: dba_list() is now zero-indexed instead of using resource ids

• DOM

  • Fixed bug GH-16906: Reloading document can cause UAF in iterator

• FPM

  • Fixed bug GH-16932: wrong FPM status output

• GMP

  • Fixed bug GH-16890: array_sum() with GMP can lose precision (LLP64)

• Opcache

  • Fixed bug GH-16851: JIT_G(enabled) not set correctly on other threads
  • Fixed bug GH-16902: Set of opcache tests fail zts+aarch64
  • Fixed bug GH-16879: JIT dead code skipping does not update call_level

• SAPI

  • Fixed bug GH-16998: UBSAN warning in rfc1867

• PHPDBG

  • Fixed bug GH-15208: Segfault with breakpoint map and phpdbg_clear()

• Standard

  • Fixed bug GH-16905: Internal iterator functions can't handle UNDEF properties
  • Fixed bug GH-16957: Assertion failure in array_shift with self-referencing array

• Streams

  • Fixed network connect poll interruption handling

• Windows

  • Fixed bug GH-16849: Error dialog causes process to hang
  • Windows Server 2025 is now properly reported

PHP version 8.3.15 changes

• Calendar

  • Fixed jdtogregorian overflow
  • Fixed cal_to_jd julian_days argument overflow

• COM

  • Fixed bug GH-16991: Getting typeinfo of non DISPATCH variant segfaults

• Core

  • Fail early in *nix configuration build script
  • Fixed bug GH-16727: Opcache bad signal 139 crash in ZTS bookworm
  • Fixed bug GH-16799: Assertion failure at Zend/zend_vm_execute.h:7469
  • Fixed bug GH-16630: UAF in lexer with encoding translation and heredocs
  • Fix is_zend_ptr() huge block comparison
  • Fixed potential OOB read in zend_dirname() on Windows

• Curl

  • Fixed bug GH-16802: open_basedir bypass using curl extension
  • Fix various memory leaks in curl mime handling

• DOM

  • Fixed bug GH-16777: Calling the constructor again on a DOM object after it is in a document causes UAF
  • Fixed bug GH-16906: Reloading document can cause UAF in iterator

• FPM

  • Fixed GH-16432: PHP-FPM 8.2 SIGSEGV in fpm_get_status

• GD

  • Fixed GH-16776: imagecreatefromstring overflow

• GMP

  • Fixed bug GH-16890: array_sum() with GMP can lose precision (LLP64)

• Hash

  • Fixed GH-16711: Segfault in mhash()

• Opcache

  • Fixed bug GH-16770: Tracing JIT type mismatch when returning UNDEF
  • Fixed bug GH-16851: JIT_G(enabled) not set correctly on other threads
  • Fixed bug GH-16902: Set of opcache tests fail zts+aarch64

• OpenSSL

  • Prevent unexpected array entry conversion when reading key
  • Fix various memory leaks related to openssl exports
  • Fix memory leak in php_openssl_pkey_from_zval()

• PDO

  • Fixed memory leak of setFetchMode()

• Phar

  • Fixed bug GH-16695: phar:// tar parser and zero-length file header blocks

• PHPDBG

  • Fixed bug GH-15208: Segfault with breakpoint map and phpdbg_clear()

• SAPI

  • Fixed bug GH-16998: UBSAN warning in rfc1867

• SimpleXML

  • Fixed bug GH-16808: Segmentation fault in RecursiveIteratorIterator->current() with an XML element input

• SOAP

  • Fix make check being invoked in ext/soap

• Standard

  • Fixed bug GH-16905: Internal iterator functions can't handle UNDEF properties
  • Fixed bug GH-16957: Assertion failure in array_shift with self-referencing array

• Streams

  • Fixed network connect poll interruption handling

• Windows

  • Fixed bug GH-16849: Error dialog causes process to hang

PHP version 8.2.27 changes

• Calendar

  • Fixed jdtogregorian overflow
  • Fixed cal_to_jd julian_days argument overflow

• COM

  • Fixed bug GH-16991: Getting typeinfo of non DISPATCH variant segfaults

• Core

  • Fail early in *nix configuration build script
  • Fixed bug GH-16727: Opcache bad signal 139 crash in ZTS bookworm
  • Fixed bug GH-16799: Assertion failure at Zend/zend_vm_execute.h:7469
  • Fixed bug GH-16630: UAF in lexer with encoding translation and heredocs
  • Fix is_zend_ptr() huge block comparison
  • Fixed potential OOB read in zend_dirname() on Windows

• Curl

  • Fix various memory leaks in curl mime handling

• FPM

  • Fixed GH-16432: PHP-FPM 8.2 SIGSEGV in fpm_get_status

• GD

  • Fixed GH-16776: imagecreatefromstring overflow

• GMP

  • Revert gmp_pow() overly restrictive overflow checks

• Hash

  • Fixed GH-16711: Segfault in mhash()

• Opcache

  • Fixed bug GH-16770: Tracing JIT type mismatch when returning UNDEF
  • Fixed bug GH-16851: JIT_G(enabled) not set correctly on other threads
  • Fixed bug GH-16902: Set of opcache tests fail zts+aarch64

• OpenSSL

  • Prevent unexpected array entry conversion when reading key
  • Fix various memory leaks related to openssl exports
  • Fix memory leak in php_openssl_pkey_from_zval()

• PDO

  • Fixed memory leak of setFetchMode()

• Phar

  • Fixed bug GH-16695: phar:// tar parser and zero-length file header blocks

• PHPDBG

  • Fixed bug GH-15208: Segfault with breakpoint map and phpdbg_clear()

• SAPI

  • Fixed bug GH-16998: UBSAN warning in rfc1867

• SimpleXML

  • Fixed bug GH-16808: Segmentation fault in RecursiveIteratorIterator->current() with an XML element input

• SNMP

  • Fixed bug GH-16959: snmget modifies the object_id array

• Standard

  • Fixed bug GH-16905: Internal iterator functions can't handle UNDEF properties

• Streams

  • Fixed network connect poll interruption handling

• Windows

  • Fixed bug GH-16849: Error dialog causes process to hang