Skip to content

[pull] master from php:master - #1136

Merged
pull[bot] merged 9 commits into
turkdevops:masterfrom
php:master
Jul 30, 2026
Merged

[pull] master from php:master#1136
pull[bot] merged 9 commits into
turkdevops:masterfrom
php:master

Conversation

@pull

@pull pull Bot commented Jul 30, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

LamentXU123 and others added 9 commits July 31, 2026 00:02
* PHP-8.4:
  Fix GH-22935: Make php_hash.h includable from C++ code (#22940)
* PHP-8.5:
  Fix GH-22935: Make php_hash.h includable from C++ code (#22940)
Previously, SOAP only rejected packed arrays, which still allowed sparse
integer-keyed arrays and mixed string integer-keyed arrays to be accepted.

Since classmap is expected to be an associative mapping, arrays containing
integer keys are now rejected consistently.

Co-authored-by: David CARLIER <devnexen@gmail.com>
Co-authored-by: NickSdot <32384907+NickSdot@users.noreply.github.com>
#21694)

These classes wrap native C handles (libxml2 writer/reader, SNMP
session, libTidy document/node) that cannot survive serialization.
Unserializing produces a broken object with NULL internal pointers, and
tidyNode segfaults on use.

bug72479.phpt exercised a UAF via unserialize() of SNMP; NOT_SERIALIZABLE
rejects the class outright, closing that vector by construction.

Fixes GH-21682
Closes GH-21694
…#22823)

And do a few other checks such as is the class even instantiable.

It might make sense in the future to raise a deprecation if the class does not extend php_user_filter or create a new StreamFilter interface so that we know the various methods exist
Add the ReflectionAttribute::inNamespace(), ReflectionAttribute::getNamespaceName(), and ReflectionAttribute::getShortName() methods.

Closes GH-19556
@pull pull Bot locked and limited conversation to collaborators Jul 30, 2026
@pull pull Bot added the ⤵️ pull label Jul 30, 2026
@pull
pull Bot merged commit 9ed85af into turkdevops:master Jul 30, 2026
1 of 3 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants