[php-src] Issue #24649: applying PHP-8.1-CVE-2026-109618-109619 triggers regeneration of Zend files
| From: | BjarneDMat | Date: | Sat, 24 Oct 2026 14:50:55 +0000 |
| Subject: | [php-src] Issue #24649: applying PHP-8.1-CVE-2026-109618-109619 triggers regeneration of Zend files | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-253160@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/24649
Author: BjarneDMat
### Description
Working on the the _MacPorts_ backports of **php2shell**, I/we ran into the following problem:
When applying the patch, the
zend_vm_gen.php is triggered by https://github.com/php/php-src/commit/9b816d8
leading to a build failure due to the files not being regenerated correctly.
For a detailed description, analysis and remidiation see https://github.com/macports/macports-ports/pull/35882
.
The workaround is to add this to the patch :
```
--- a/Zend/zend_vm_gen.php 2026-10-23 13:30:15
+++ b/Zend/zend_vm_gen.php 2026-10-23 13:31:21
@@ -1,5 +1,6 @@
#!/usr/bin/env php
<?php
+exit ;
/*
+----------------------------------------------------------------------+
| Zend Engine |
```
### PHP Version
```plain
PHP 8.1.34 (cli) (built: Oct 22 2026 13:48:02) (NTS)
Copyright (c) The PHP Group
Zend Engine v4.1.34, Copyright (c) Zend Technologies
with Zend OPcache v8.1.34, Copyright (c), by Zend Technologies
```
### Operating System
_No response_