Repository navigation

Fix GH-19739: imagefilledellipse/imageellipse overflow - #19743

Closed

devnexen wants to merge 4832 commits into

php:PHP-8.3from

devnexen:gh19739

This pull request is big! We're only showing the most recent 250 commits

Commits on Jan 22, 2026

Fix memory leaks when sk_X509_new_null() fails
ndossche
committed
7754eaf

Commits on Jan 23, 2026

Fix crash when in openssl_x509_parse() when i2s_ASN1_INTEGER() fails
ndossche
committed
c2eadb4
Fix crash in openssl_x509_parse() when X509_NAME_oneline() fails
ndossche
committed
62afc7a

Commits on Jan 24, 2026

ext/dba/tests/dba_db4_018.phpt: fix typo (#20938)
orlitzky
authored
3053a03

Commits on Jan 26, 2026

Fix GH-21041: Dom\HTMLDocument corrupts closing tags within scripts

lexborisov
authored and
ndossche
committed
56e5a80

Commits on Jan 27, 2026

Merge branch 'PHP-8.3' into PHP-8.4
DanielEScherzer
committed
eb10255
PHP-8.4 is now for PHP 8.4.19-dev
SakiTakamachi
committed
e6beffb

Commits on Jan 28, 2026

Add missing clobbered registers
arnaud-lb
committed
93d32ea
Fix GH-21055: Pdo/Pgsql typo for GSS negotiation connection status attribute.

lsaos
authored and
devnexen
committed
3037526

Commits on Jan 29, 2026

Commits on Jan 30, 2026

Commits on Feb 2, 2026

Tweak zend.max_allowed_stack_size for gh20836_stack_limit.phpt
iluuu1994
committed
1f57d04

Commits on Feb 3, 2026

Commits on Feb 4, 2026

Fix GH-20936: DatePeriod::__set_state() cannot handle null start
ndossche
committed
7445b0f

Commits on Feb 5, 2026

Commits on Feb 8, 2026

Fix OSS-Fuzz #478009707 for JIT
iluuu1994
committed
bbde9c8
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
2cabea6

Commits on Feb 9, 2026

Improve shared_alloc_shm.c strategy to support OPcache JIT on Solaris

psumbera
authored and
iluuu1994
committed
7c6f089
Fix GH-21161: socket_set_option() crash with array 'addr' entry as null.
devnexen
committed
19ee3e6
Update IR (#21183)
dstogov
authored
dd9421d

Commits on Feb 10, 2026

Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
901ebd2

Commits on Feb 15, 2026

Commits on Feb 16, 2026

Fix build with -std=
arnaud-lb
committed
ede7c67
Update EXTENSIONS to reflect reality
ndossche
committed
84bfe2f
replace alloca with do_alloca in mb_guess_encoding_for_strings

jordikroon
authored and
alexdowad
committed
37c5a13

Commits on Feb 17, 2026

ext/pgsql: fix GH-21165 unit test.
devnexen
committed
f7af877
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
3876dff
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
8d6fbd1
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
dc977ef
Fix borked SCCP of array containing partial object
iluuu1994
committed
1931472
Fix memory leak in php_openssl_load_all_certs_from_file() when push fails
ndossche
committed
4b9e80e
Fix memory leaks in php_array_to_X509_sk() when push fails
ndossche
committed
01d598a
Fix missing error propagation when php_array_to_X509_sk() fails
ndossche
committed
ef54bec
Fix memory leaks in openssl_pkcs7_encrypt() when push fails
ndossche
committed
556ec77
Fix memory leaks in openssl_cms_encrypt() when push fails
ndossche
committed
f6887f0
Update NEWS for OpenSSL changes
ndossche
committed
b911748
curl: Don't truncate length
ndossche
committed
e2059a4

Commits on Feb 18, 2026

Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
517f131
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
8342b38
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
626fc78
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
31f35ea
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
4a396e6
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
1317a17
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
59cb3ab
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
873095d
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
085f139
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
6b7bff0
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
dc4b8ba
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
6ff7fa5

Commits on Feb 19, 2026

Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
fcb55f8

Commits on Feb 20, 2026

Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
70b2761

Commits on Feb 22, 2026

Commits on Feb 23, 2026

ext/pcntl: Fix signal table updated before php_signal4 succeeds in pcntl_signal
devnexen
committed
6a1bde5
sapi/*/Makefile.frag: install programs built with libtool, with libtool

orlitzky
authored and
petk
committed
db6cca2
ext/pcntl: fix pcntl_signal_dispatch() stale tail pointer and exception handling.
devnexen
committed
296fad1

Commits on Feb 24, 2026

Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
9a6a841
Tweak stack limit values for gh20840.phpt
iluuu1994
committed
f07809f
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
b003f5f
Update IR (#21288)
dstogov
authored
e792511
Fix preloaded constant erroneously propagated to file-cached script
iluuu1994
committed
ec5a1e0
ext/pcre: preg_match() fix memory leak with invalid regexes.
devnexen
committed
6c45f7a
PHP-8.4 is now for PHP 8.4.20-dev
NattyNarwhal
committed
9942f06
php_version.h: remove trailing whitespace
DanielEScherzer
committed
90cb181

Commits on Feb 25, 2026

Update IR
dstogov
committed
f073425

Commits on Feb 26, 2026

ext/pcre: fix memory leaks on error paths
devnexen
committed
78702fa

Commits on Feb 27, 2026

Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
14427ac
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
e027c66
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
6f91209
Fix GH-20906: Assertion failure when messing up output buffers
ndossche
committed
1709689
ext/pcre: fix mdata_used race conditions in PCRE functions
devnexen
committed
f8114f5
bz2: Fix truncation of total output size causing erroneous errors

ndossche
and
arnaud-lb
committed
4ee95fc

Commits on Feb 28, 2026

[ci skip] Tweak SKIPIFs
ndossche
committed
cf180f2
ext/pcntl: add new tests to ver invalid signals handling.
devnexen
committed
cf9d6f4

Commits on Mar 2, 2026

Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
1553242
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
e78f0d1
Fix pcre leak test (#21327)
ndossche
authored
4e83123
Empty merge
derickr
committed
9daecc1
Updated to version 2026.1 (2026a)
derickr
committed
0489755
Fix compile warnings under GCC 15.2.1 (#21320)
ndossche
authored
583be5a

Commits on Mar 3, 2026

Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
2fb1411

Commits on Mar 4, 2026

Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
94853b6

Commits on Mar 5, 2026

Fix GH-21336: undefined behavior in snmp setSecurity.
devnexen
committed
41458c6

Commits on Mar 6, 2026

zip is now 1.22.8
remicollet
committed
fb80f35

Commits on Mar 7, 2026

Update ext/standard/libavifinfo

y-guyon
authored and
ndossche
committed
c3777c7
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
e8e6f90
Merge branch 'PHP-8.3' into PHP-8.4
bukka
committed
6d97ed5
Merge branch 'PHP-8.3' into PHP-8.4
bukka
committed
6d97fd6
ext/session: Fix memory leak due to multiple exception happening during session abort

Girgias
and
arshidkv12
committed
0acde11

Commits on Mar 9, 2026

ext/pgsql: Fix preprocessor guard typo that silently disabled a feature

KentarouTakeda
authored and
devnexen
committed
35d98cb

Commits on Mar 10, 2026

Commits on Mar 11, 2026

Commits on Mar 12, 2026

Fix GH-21083: Skip private_key_bits validation for EC/curve-based keys

iliaal
authored and
ndossche
committed
7950482
[ci skip] NEWS for GH-20838
ndossche
committed
9150226

Commits on Mar 14, 2026

ext/zip: Fix const-generic compile warning
ndossche
committed
b95f0eb
ext/gd: phpinfo() to be able to display libjpeg 10.0 support.
devnexen
committed
e257c08

Commits on Mar 16, 2026

Fix GH-21267: JIT infinite loop on FETCH_OBJ_R with IS_UNDEF property (#21368)
iliaal
authored
e1a3a4c
Update IR (#21462)
dstogov
committed
a563722

Commits on Mar 17, 2026

Fix GH-21454: Missing write lock validation in SplHeap
ndossche
committed
8796d75
[ci skip] Update JIT news
ndossche
committed
ae863ea

Commits on Mar 19, 2026

Commits on Mar 20, 2026

Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
69b455c
Fix GH-20875: Propagate IN_GET guard in get_property_ptr_ptr for lazy proxies

iliaal
authored and
arnaud-lb
committed
9ec303e

Commits on Mar 21, 2026

openssl: Fix missing error propagation for BIO_printf() calls
ndossche
committed
f92d54b
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
6fd46f1

Commits on Mar 22, 2026

Commits on Mar 25, 2026

PHP-8.4 is now for PHP 8.4.21-dev
SakiTakamachi
committed
c7e38ef
Fix GH-21496: UAF in dom_objects_free_storage.
devnexen
committed
26ab037

Commits on Mar 26, 2026

Fix curl_setopt_ssl test for curl 8.19.0 (#21518)
shivammathur
authored
cd568cb
Fix GH-19983: GC assertion failure with fibers, generators and destructors

iliaal
authored and
arnaud-lb
committed
b15c597
Revert 49b2ff5dbb94b76b265fd5909881997e1d95c6b3 to fix bug GH-21499
Girgias
committed
e912c02

Commits on Mar 27, 2026

Reduce memory limit for gh19983.phpt
iluuu1994
committed
78a0b57

Commits on Mar 28, 2026

Fix GH-21557: jewishtojd returns 0 for years >= 6000.
devnexen
committed
7647b47
Merge branch 'PHP-8.3' into PHP-8.4
devnexen
committed
86c4877
Fix GH-17399: iconv memory leak on bailout

iliaal
authored and
iluuu1994
committed
38628e8
[skip ci] Mark gh17399_substr.phpt as slow
iluuu1994
committed
5cd8777

Commits on Mar 31, 2026

Reset stackmap reg
arnaud-lb
committed
9f33bff
Fix GH-21548: Dom\XMLDocument::C14N() emits duplicate xmlns declarations after setAttributeNS().
devnexen
committed
4ee275f
[skip ci] update NEWS
devnexen
committed
3a0d1cc

Commits on Apr 1, 2026

Update IR (#21594)
dstogov
authored
3748255

Commits on Apr 2, 2026

Fix function JIT JMPNZ smart branch
iluuu1994
committed
455ae28

Commits on Apr 3, 2026

Fix GH-21478: Forward property operations to real instance for initialized lazy proxies

iliaal
authored and
arnaud-lb
committed
9c08243
Fix NULL deref when enabling TLS fails and the peer name needs to be reset
ndossche
committed
7782b88
Fix build warning on LibreSSL (#21050)
ndossche
authored
5216ca8
Fix NPD when i2d_PKCS12_bio is called on NULL bio
ndossche
committed
23b151a
Fix memory leak in check_cert() when X509_STORE_CTX_init() fails
ndossche
committed
eb6c48d
Fix crash in php_openssl_pkey_init_ec() when EVP_PKEY_CTX_new() fails
ndossche
committed
6b16390
Fix crash in openssl_digest() when EVP_MD_CTX_create() fails
ndossche
committed
b2f3472
Fix crash in openssl_pkey_export() when BIO_new() fails
ndossche
committed
d0d9183
Fix crash in openssl_pkcs12_read() when BIO_new() fails
ndossche
committed
5f9b6ed
Fix crash in php_openssl_create_sni_server_ctx() when SSL_CTX_new() fails
ndossche
committed
1ef9aa7
Fix memory leak on error path in openssl_open()
ndossche
committed
20903a8
Fix missing error propagation in openssl_x509_export_to_file()
ndossche
committed
2004b70
Fix memory leaks when adding certificate to store fails
ndossche
committed
4bb68c5
Fix SKIPIF of openssl_password.phpt (#20941)
ndossche
authored
1c94632
openssl: Fix missing error propagation in openssl_x509_export() (#21375)
ndossche
authored
7831244
openssl: Fix error propagation in csr exports (#21403)
ndossche
authored
4a16d22
Fix error check on X509V3_EXT_print()
ndossche
committed
5684949
Fix crash in openssl_pkey_get_details() when BIO_new() fails
ndossche
committed
e474d3c
Fix crash when ASN1_STRING_to_UTF8() fails
ndossche
committed
8c11370
Fix error check on X509_set_subject_name()
ndossche
committed
8b031ea
Merge branch 'PHP-8.3' into PHP-8.4
bukka
committed
449bfaf
Add back sni_server_ca for expired cert test
bukka
committed
1d8643d

Commits on Apr 4, 2026

openssl: Propagate PHP_OPENSSL_ASN1_INTEGER_set() failure
ndossche
committed
cea48b4
Fix memory leaks when php_openssl_dh_pub_from_priv() fails
ndossche
committed
35e8cb8
[ci skip] Silence test warning
ndossche
committed
f9519cc
Add missing error check on BN_CTX_new()
ndossche
committed
4cffcba
Fix memory leaks when BN_bin2bn() fails
ndossche
committed
7eb38cd
Fix UB and error propagation when X509_gmtime_adj() fails
ndossche
committed
2467dfb
Add missing error check on SSL_set_ex_data()
ndossche
committed
f81a9a2
Fix const-generic warning in xp_ssl.c
ndossche
committed
883014d
Fix memory leaks and missing error propagation when php_openssl_csr_make() fails to set a version
ndossche
committed
79b1ca2
openssl: Fix merge
ndossche
committed
c5fb035
Fix GH-21600: Remove xsltCleanupGlobals call in ext/xsl MSHUTDOWN.
devnexen
committed
96e93e9
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
c9cb77f

Commits on Apr 5, 2026

Merge branch 'PHP-8.3' into PHP-8.4
TimWolla
committed
51115d4

Commits on Apr 6, 2026

Fix concurrent iteration and deletion issues in SplObjectStorage
ndossche
committed
43a4f91

Commits on Apr 7, 2026

Commits on Apr 8, 2026

Merge branch 'PHP-8.3' into PHP-8.4
petk
committed
fc48049
NEWS
arnaud-lb
committed
d1512d3
[skip if] Drop NEWS entry
iluuu1994
committed
af50736
Fix faulty zend_try handling in zend_jit_trace()
iluuu1994
committed
95e93b8
Add EG(bailout) consistency assertion
iluuu1994
committed
e50cd12
Fix missing addref for Countable::count()
iluuu1994
committed
8972938

Commits on Apr 9, 2026

Fix GH-21688: SEGV in C14N on empty HTMLDocument.
devnexen
committed
19f73c5

Commits on Apr 10, 2026

Fix GH-21698: memory leak in ZipArchive::addGlob on early returns.
devnexen
committed
391ec27

Commits on Apr 11, 2026

Simplify gh21031.phpt and solve flakiness
iluuu1994
committed
afded3d

Commits on Apr 13, 2026

Fix GH-21699: callable resolution must fail if error handler threw during self/parent/static deprecations (#21712)
macoaure
authored
e585034
Fix-up NEWS
Girgias
committed
d64eb79
Add date.timezone=UTC to the INI overwrites in run-tests.php

hakre
authored and
iluuu1994
committed
d1670fb
ext/pdo_odbc: Require non-empty string when building string buffer (#21652)
NattyNarwhal
authored
9b6f83e
Add myself to DOM/XML/SOAP/SimpleXML/XMLReader/Writer and XSL.
devnexen
committed
72c12ea

Commits on Apr 14, 2026

Fix missing addref for __unset
iluuu1994
committed
6c5bed3

Commits on Apr 15, 2026

GH-21754: sapi/cli: avoid deprecation messages with `--rf` and methods (#21758)
DanielEScherzer
authored
fbd3017

Commits on Apr 16, 2026

Upgrade Lexbor to v2.7.0

ndossche
and
iluuu1994
committed
16baee5
[skip ci] Add note for lexbor v2.7.0 upgrade
iluuu1994
committed
f7eb5ef

Commits on Apr 20, 2026

zend_inheritance: Fix enum case conflict in trait binding (#21771)
prateekbhujel
authored
2d651e2
Accept HY000 in pdo_firebird autocommit test (#21789)
shivammathur
authored
46286fb
phar: restore is_link handler in phar_intercept_functions_shutdown

iliaal
authored and
Girgias
committed
b77b505
phar: fix NULL dereference in Phar::webPhar() when SCRIPT_NAME is absent

iliaal
authored and
Girgias
committed
36c4195
phar: free is_temp_dir entry before rejecting .phar/* paths in offsetGet

iliaal
authored and
Girgias
committed
b9aaa05
phar: call phar_entry_delref before goto finish in phar_add_file error paths

iliaal
authored and
Girgias
committed
0c99bd7
phar: propagate phar_stream_flush return value from phar_stream_close

iliaal
authored and
Girgias
committed
30f3685
ext/phar: Fix memory leak in phar_verify_signature() when md_ctx is invalid

JarneClauw
authored and
Girgias
committed
2fe8527
Update NEWS for recent bug fixes
Girgias
committed
3df1fa7
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
7a7f5ac

Commits on Apr 21, 2026

ext/session: fix missing zval_ptr_dtor for retval in PS_GC_FUNC(user)

jorgsowa
authored and
Girgias
committed
d965793
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
6a5525c
Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
ed1b00c
PHP 8.4 is now for PHP 8.4.22-dev
NattyNarwhal
committed
aeb5671

Commits on Apr 22, 2026

Fix GH-21544: Dom\XMLDocument::C14N() drops namespace declarations on DOM-built documents.
devnexen
committed
d43c523

Commits on Apr 23, 2026

Commits on Apr 24, 2026

Fix GH-20214: PDO::FETCH_DEFAULT unexpected behavior with PDOStatement::setFetchMode (#21434)

iliaal
authored and
SakiTakamachi
committed
7bd27e7

Commits on Apr 26, 2026

Revert "Fix GH-20214: PDO::FETCH_DEFAULT unexpected behavior with PDOStatement::setFetchMode (#21434)"
iluuu1994
committed
171b722

Commits on Apr 28, 2026

version_compare: Fix handling of version numbers with a trailing dot (#21689)
TimWolla
authored
60b3fa3

Commits on Apr 30, 2026

Fix JIT vm_interrupt (#21910)
morrisonlevi
authored
1f50b63

Commits on May 1, 2026

Merge branch 'PHP-8.3' into PHP-8.4
iluuu1994
committed
5bd7e3b

Commits on May 2, 2026

ext/spl: Fix SplFixedArray::setSize leak when destructor grows during clear.
devnexen
committed
cb3dc62

Commits on May 4, 2026

Commits on May 5, 2026

Fix compiler warning with GCC 16: variable 'offset' set but not used [-Werror=unused-but-set-variable=]
arnaud-lb
committed
ac86e10

Commits on May 6, 2026

Commits on May 7, 2026

Preserve full XMM registers in Windows VM wrapper (#21976)
shivammathur
authored
f79f921

Commits on May 11, 2026

ext/standard: Fix ip2long in AIX to treat IPs with leading zeros as invalid like LINUX

reshmavk
authored and
devnexen
committed
e88e049

Commits on May 12, 2026

Update IR (#22019)
dstogov
authored
8fa692b
Fix COMMUNITY_asan failure on src/Symfony/Component/HttpClient (#22021)
dstogov
authored
6114857
JIT: Fix TSSA of ZEND_FE_FETCH_R with key operand
arnaud-lb
committed
ef589ce

Commits on May 13, 2026

JIT: Fix escape_if_undef on PHP-8.4 CALL VM
iliaal
committed
05afc37

Commits on May 14, 2026

ext/gd: fix gh16559 and gh17349 tests

orlitzky
authored and
devnexen
committed
37bb1c3

Commits on May 16, 2026

ext/intl: Fix out-of-bounds argument positions in calendar date/time APIs.

LamentXU123
authored and
devnexen
committed
10704f0
ext/xml: Use zend_string_safe_realloc() for cdata concatenation.
devnexen
committed
d5a57af

Commits on May 17, 2026

ext/intl: Expose Spoofchecker restriction-level APIs on all supported ICU versions

LamentXU123
authored and
devnexen
committed
4f94715

Commits on May 18, 2026

Commits on May 19, 2026

PHP-8.4 is now for PHP 8.4.23-dev
SakiTakamachi
committed
945b9e9
ext/soap: Fix integer overflow when decoding SOAP array indexes

LamentXU123
authored and
devnexen
committed
f5db09d
Fix GH-21986: PharData::getContent() crash on infinite recursion with symlinks.
devnexen
committed
b2de3cf

Commits on May 20, 2026

Merge branch 'PHP-8.3' into PHP-8.4
shivammathur
committed
6e90c02
Merge branch 'PHP-8.3' into PHP-8.4
shivammathur
committed
8708c9d

Commits on May 21, 2026

ext/intl: Fix argument position for uninitialized calendar arguments

LamentXU123
authored and
devnexen
committed
27d593e