| # |
subject |
author |
date |
lines |
| 253039 |
[php-src] Issue #24386: JIT: register operand must be loaded before the typed reference check |
ndossche |
Mon, 19 Oct 2026 20:38:37 +0000 |
4 |
| 253040 |
[php-src] Issue #22556: ext/phar: LongLink TAR entry causes ~4 GB allocation due to missing upper-bound check (DoS) |
ndossche |
Mon, 19 Oct 2026 20:57:55 +0000 |
4 |
| 253041 |
[php-src] Issue #23686: SoapClient only strips `Authorization: Basic` when a WSDL imports from another host |
DanielEScherzer |
Mon, 19 Oct 2026 22:35:47 +0000 |
4 |
| 253042 |
[php-src] Issue #24454: Allow distinguishing request-derived values from environment variables in $_SERVER |
shyim |
Tue, 20 Oct 2026 07:53:17 +0000 |
25 |
| 253043 |
[php-src] Issue #24455: Lazy object reset with object destructor can lead to use-after-free |
alexandre-daubois |
Tue, 20 Oct 2026 08:16:55 +0000 |
4 |
| 253044 |
[php-src] Issue #24455: Lazy object reset with object destructor can lead to use-after-free |
alexandre-daubois |
Tue, 20 Oct 2026 08:16:55 +0000 |
54 |
| 253045 |
[php-src] Issue #24457: imagewebp() returns true when encoding fails |
lacatoire |
Tue, 20 Oct 2026 08:42:23 +0000 |
37 |
| 253046 |
[php-src] Issue #24458: quoted_printable_encode does not encode trailing space |
Sjord |
Tue, 20 Oct 2026 09:44:55 +0000 |
59 |
| 253047 |
[php-src] Issue #24461: pdo_pgsql: DISCARD ALL on persistent connection cleanup drops PgBouncer's prepared statements (+52% CPU per request) |
ArtUkrainskiy |
Tue, 20 Oct 2026 11:58:04 +0000 |
68 |
| 253048 |
[php-src] Issue #24437: JIT: tracing JIT gives wrong sum for `$a[0] += $i + 1` on an array parameter in a loop |
ndossche |
Tue, 20 Oct 2026 12:55:45 +0000 |
4 |
| 253049 |
[php-src] Issue #24462: convert.quoted-printable-encode drops or duplicates a CR at the end of a write |
auraseb |
Tue, 20 Oct 2026 15:32:33 +0000 |
58 |
| 253050 |
[php-src] Issue #24471: Tracing JIT: float temporary kept only in a register is marked type_only in a side trace exit, VM then reads a stale value |
mollenthiel |
Wed, 21 Oct 2026 08:55:16 +0000 |
123 |
| 253051 |
[php-src] Issue #24474: [pdo_odbc] Buffer overflow / CWB0111 on SQL_BIT columns with IBM i Access ODBC Driver |
boivinj |
Wed, 21 Oct 2026 10:07:52 +0000 |
101 |
| 253052 |
[php-src] Issue #24480: finally block runs twice when a VM interrupt throws as it returns to "return" in the try block |
cscott |
Wed, 21 Oct 2026 15:02:12 +0000 |
69 |
| 253053 |
[php-src] Issue #24481: Use-after-free in var_destroy() during unserialize() re-entrancy allows __destruct to read a freed var_entries chunk |
SleepTheGod |
Wed, 21 Oct 2026 15:28:17 +0000 |
323 |
| 253054 |
[php-src] Issue #24482: Tracing JIT: second `($d & 1) === 0` in a loop iteration evaluates to true for odd `$d` after side traces are compiled |
gitKBDL |
Wed, 21 Oct 2026 15:36:28 +0000 |
65 |
| 253055 |
[php-src] Issue #24488: 8.4.27 / 8.5.12 regression: GC double-frees the SimpleXMLElement properties table (`zend_mm_heap corrupted`), introduced by th... |
evankford |
Wed, 21 Oct 2026 17:42:49 +0000 |
117 |
| 253056 |
[php-src] Issue #24489: master: part of the mbstring bailout fix got lost in a merge |
dev-null-undefined |
Wed, 21 Oct 2026 18:00:37 +0000 |
16 |
| 253057 |
[php-src] Issue #24490: pdo_pgsql: prepare() hangs on a query containing a NUL byte |
dev-null-undefined |
Wed, 21 Oct 2026 18:00:39 +0000 |
45 |
| 253058 |
[php-src] Issue #24491: Stream error_handler given as 'Class::method' turns the real exception into a TypeError |
dev-null-undefined |
Wed, 21 Oct 2026 18:00:42 +0000 |
53 |