Skip to content

[pull] master from php:master#813

Merged
pull[bot] merged 7 commits intoturkdevops:masterfrom
php:master
Mar 25, 2026
Merged

[pull] master from php:master#813
pull[bot] merged 7 commits intoturkdevops:masterfrom
php:master

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Mar 25, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

arnaud-lb and others added 7 commits March 25, 2026 16:05
The TAILLCALL VM returns in ZEND_VM_ENTER_EX and ZEND_VM_LEAVE, but that's
not necessary.

Redefine ZEND_VM_ENTER_EX, ZEND_VM_LEAVE so that they tailcall instead.

This makes the Symfony and bench.php benchmarks about 1% and 3.5% faster.

Closes GH-21475
We must not jump into a zend_try block because that skips setting up of
EG(bailout), which will deref null when trying to bailout. In practice, this bug
is impossible to trigger, given php_execute_script() already guards against
bailout.

Fixes GH-21420
This reverts commit e5a723e.

This fix was wrong, because we don't want to run the second try block when the
first block bails. Given this can't happen in practice, let's just keep it the
way it is.
Cloning a non-document DOM node creates a copy within the same
xmlDoc. importStylesheet then passes that original document to
xsltParseStylesheetDoc, which may strip and free nodes during
processing, invalidating PHP objects still referencing them.

Resolve the ownerDocument for non-document nodes and clone that
instead.

close GH-21500
* PHP-8.4:
  Fix GH-21496: UAF in dom_objects_free_storage.
* PHP-8.5:
  Fix GH-21496: UAF in dom_objects_free_storage.
@pull pull bot locked and limited conversation to collaborators Mar 25, 2026
@pull pull bot added the ⤵️ pull label Mar 25, 2026
@pull pull bot merged commit 1655d57 into turkdevops:master Mar 25, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants