SLFO-pool/php8
SHA256
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sync from SUSE:SLFO:Main php8 revision 1107bf460abe16b050a457a08983eab8

Browse Source
This commit is contained in:
Adrian Schröter
2025-07-16 11:08:47 +02:00
parent 22867a176b
commit 3884ed2f26
7 changed files with 249 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
php-8.4.10.tar.xz (Stored with Git LFS) Normal file
View File

Binary file not shown.

16
php-8.4.10.tar.xz.asc Normal file
View File

@@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=zmRy
-----END PGP SIGNATURE-----

BIN
php-8.4.5.tar.xz (Stored with Git LFS)
View File

Binary file not shown.

16
php-8.4.5.tar.xz.asc
View File

@@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----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=8Qqh
-----END PGP SIGNATURE-----

42
php-build-reproducible-phar.patch
View File

@@ -16,11 +16,11 @@ Signed-off-by: Arjen de Korte <build+github@de-korte.org>
ext/phar/zip.c | 2 +-
6 files changed, 18 insertions(+), 5 deletions(-)
Index: php-8.4.3/ext/phar/phar.c
Index: php-8.4.10/ext/phar/phar.c
===================================================================
--- php-8.4.3.orig/ext/phar/phar.c
+++ php-8.4.3/ext/phar/phar.c
@@ -2960,7 +2960,7 @@ void phar_flush_ex(phar_archive_data *ph
--- php-8.4.10.orig/ext/phar/phar.c
+++ php-8.4.10/ext/phar/phar.c
@@ -2965,7 +2965,7 @@ void phar_flush_ex(phar_archive_data *ph
4: metadata-len
+: metadata
*/
@@ -29,10 +29,10 @@ Index: php-8.4.3/ext/phar/phar.c
phar_set_32(entry_buffer, entry->uncompressed_filesize);
phar_set_32(entry_buffer+4, mytime);
phar_set_32(entry_buffer+8, entry->compressed_filesize);
Index: php-8.4.3/ext/phar/phar_internal.h
Index: php-8.4.10/ext/phar/phar_internal.h
===================================================================
--- php-8.4.3.orig/ext/phar/phar_internal.h
+++ php-8.4.3/ext/phar/phar_internal.h
--- php-8.4.10.orig/ext/phar/phar_internal.h
+++ php-8.4.10/ext/phar/phar_internal.h
@@ -315,6 +315,21 @@ static inline php_stream *phar_get_pharf
return PHAR_G(cached_fp)[phar->phar_pos].fp;
}
@@ -55,11 +55,11 @@ Index: php-8.4.3/ext/phar/phar_internal.h
static inline enum phar_fp_type phar_get_fp_type(const phar_entry_info *entry)
{
if (!entry->is_persistent) {
Index: php-8.4.3/ext/phar/stream.c
Index: php-8.4.10/ext/phar/stream.c
===================================================================
--- php-8.4.3.orig/ext/phar/stream.c
+++ php-8.4.3/ext/phar/stream.c
@@ -472,7 +472,7 @@ static int phar_stream_flush(php_stream
--- php-8.4.10.orig/ext/phar/stream.c
+++ php-8.4.10/ext/phar/stream.c
@@ -474,7 +474,7 @@ static int phar_stream_flush(php_stream
phar_entry_data *data = (phar_entry_data *) stream->abstract;
if (data->internal_file->is_modified) {
@@ -68,10 +68,10 @@ Index: php-8.4.3/ext/phar/stream.c
phar_flush(data->phar, &error);
if (error) {
php_stream_wrapper_log_error(stream->wrapper, REPORT_ERRORS, "%s", error);
Index: php-8.4.3/ext/phar/tar.c
Index: php-8.4.10/ext/phar/tar.c
===================================================================
--- php-8.4.3.orig/ext/phar/tar.c
+++ php-8.4.3/ext/phar/tar.c
--- php-8.4.10.orig/ext/phar/tar.c
+++ php-8.4.10/ext/phar/tar.c
@@ -972,7 +972,7 @@ void phar_tar_flush(phar_archive_data *p
char *buf, *signature, sigbuf[8];
@@ -81,10 +81,10 @@ Index: php-8.4.3/ext/phar/tar.c
entry.is_modified = 1;
entry.is_crc_checked = 1;
entry.is_tar = 1;
Index: php-8.4.3/ext/phar/util.c
Index: php-8.4.10/ext/phar/util.c
===================================================================
--- php-8.4.3.orig/ext/phar/util.c
+++ php-8.4.3/ext/phar/util.c
--- php-8.4.10.orig/ext/phar/util.c
+++ php-8.4.10/ext/phar/util.c
@@ -701,7 +701,7 @@ phar_entry_data *phar_get_or_create_entr
phar_add_virtual_dirs(phar, path, path_len);
@@ -94,11 +94,11 @@ Index: php-8.4.3/ext/phar/util.c
etemp.is_crc_checked = 1;
etemp.phar = phar;
etemp.filename = estrndup(path, path_len);
Index: php-8.4.3/ext/phar/zip.c
Index: php-8.4.10/ext/phar/zip.c
===================================================================
--- php-8.4.3.orig/ext/phar/zip.c
+++ php-8.4.3/ext/phar/zip.c
@@ -1266,7 +1266,7 @@ void phar_zip_flush(phar_archive_data *p
--- php-8.4.10.orig/ext/phar/zip.c
+++ php-8.4.10/ext/phar/zip.c
@@ -1271,7 +1271,7 @@ void phar_zip_flush(phar_archive_data *p
pass.error = &temperr;
entry.flags = PHAR_ENT_PERM_DEF_FILE;

208
php8.changes
View File

@@ -1,3 +1,211 @@
-------------------------------------------------------------------
Thu Jul 3 13:05:42 UTC 2025 - pgajdos@suse.com
- version update to 8.4.10 [bsc#1246146][bsc#1246148][bsc#1246167]
BcMath:
Fixed bug GH-18641 (Accessing a BcMath\Number property by ref crashes).
Core:
Fixed bugs GH-17711 and GH-18022 (Infinite recursion on deprecated attribute evaluation) and GH-18464 (Recursion protection for deprecation constants not released on bailout).
Fixed GH-18695 (zend_ast_export() - float number is not preserved).
Fix handling of references in zval_try_get_long().
Do not delete main chunk in zend_gc.
Fix compile issues with zend_alloc and some non-default options.
Curl:
Fix memory leak when setting a list via curl_setopt fails.
Date:
Fix leaks with multiple calls to DatePeriod iterator current().
DOM:
Fixed bug GH-18744 (classList works not correctly if copy HTMLElement by clone keyword).
FPM:
Fixed GH-18662 (fpm_get_status segfault).
Hash:
Fixed bug GH-14551 (PGO build fails with xxhash).
Intl:
Fix memory leak in intl_datetime_decompose() on failure.
Fix memory leak in locale lookup on failure.
Opcache:
Fixed bug GH-18743 (Incompatibility in Inline TLS Assembly on Alpine 3.22).
ODBC:
Fix memory leak on php_odbc_fetch_hash() failure.
OpenSSL:
Fix memory leak of X509_STORE in php_openssl_setup_verify() on failure.
Fixed bug #74796 (Requests through http proxy set peer name).
PGSQL:
Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during escaping). (CVE-2025-1735)
Fix warning not being emitted when failure to cancel a query with pg_cancel_query().
PDO ODBC:
Fix memory leak if WideCharToMultiByte() fails.
PDO Sqlite:
Fixed memory leak with Pdo_Sqlite::createCollation when the callback has an incorrect return type.
Phar:
Add missing filter cleanups on phar failure.
Fixed bug GH-18642 (Signed integer overflow in ext/phar fseek).
PHPDBG:
Fix 'phpdbg --help' segfault on shutdown with USE_ZEND_ALLOC=0.
Random:
Fix reference type confusion and leak in user random engine.
Readline:
Fix memory leak when calloc() fails in php_readline_completion_cb().
SimpleXML:
Fixed bug GH-18597 (Heap-buffer-overflow in zend_alloc.c when assigning string with UTF-8 bytes).
SOAP:
Fix memory leaks in php_http.c when call_user_function() fails.
Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)
Standard:
Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames). (CVE-2025-1220)
Tidy:
Fix memory leak in tidy output handler on error.
Fix tidyOptIsReadonly deprecation, using tidyOptGetCategory.
- modified patches
% php-build-reproducible-phar.patch (refreshed)
-------------------------------------------------------------------
Fri Jun 6 08:25:15 UTC 2025 - pgajdos@suse.com
- version update to 8.4.8
Core:
Fixed GH-18480 (array_splice with large values for offset/length arguments).
Partially fixed GH-18572 (nested object comparisons leading to stack overflow).
Fixed OSS-Fuzz #417078295.
Fixed OSS-Fuzz #418106144.
Curl:
Fixed GH-18460 (curl_easy_setopt with CURLOPT_USERPWD/CURLOPT_USERNAME/ CURLOPT_PASSWORD set the Authorization header when set to NULL).
Date:
Fixed bug GH-18076 (Since PHP 8, the date_sun_info() function returns inaccurate sunrise and sunset times, but other calculated times are correct) (JiriJozif).
Fixed bug GH-18481 (date_sunrise with unexpected nan value for the offset).
DOM:
Backport lexbor/lexbor#274.
Intl:
Fix various reference issues.
LDAP:
Fixed bug GH-18529 (ldap no longer respects TLS_CACERT from ldaprc in ldap_start_tls()).
Opcache:
Fixed bug GH-18417 (Windows SHM reattachment fails when increasing memory_consumption or jit_buffer_size).
Fixed bug GH-18297 (Exception not handled when jit guard is triggered).
Fixed bug GH-18408 (Snapshotted poly_func / poly_this may be spilled).
Fixed bug GH-18567 (Preloading with internal class alias triggers assertion failure).
Fixed bug GH-18534 (FPM exit code 70 with enabled opcache and hooked properties in traits).
Fix leak of accel_globals->key.
OpenSSL:
Fix missing checks against php_set_blocking() in xp_ssl.c.
SPL:
Fixed bug GH-18421 (Integer overflow with large numbers in LimitIterator).
Standard:
Fixed bug GH-17403 (Potential deadlock when putenv fails).
Fixed bug GH-18400 (http_build_query type error is inaccurate).
Fixed bug GH-18509 (Dynamic calls to assert() ignore zend.assertions).
Windows:
Fix leak+crash with sapi_windows_set_ctrl_handler().
Zip:
Fixed bug GH-18431 (Registering ZIP progress callback twice doesn't work).
Fixed bug GH-18438 (Handling of empty data and errors in ZipArchive::addPattern).
-------------------------------------------------------------------
Fri May 9 16:20:20 UTC 2025 - Arjen de Korte <suse+build@de-korte.org>
- version update to 8.4.7
Core:
Fixed bug GH-18038 (Lazy proxy calls magic methods twice).
Fixed bug GH-18209 (Use-after-free in extract() with EXTR_REFS).
Fixed bug GH-18268 (Segfault in array_walk() on object with added property hooks).
Fixed bug GH-18304 (Changing the properties of a DateInterval through dynamic properties triggers a SegFault).
Fix some leaks in php_scandir.
DBA:
FIxed bug GH-18247 dba_popen() memory leak on invalid path.
Filter:
Fixed bug GH-18309 (ipv6 filter integer overflow).
GD:
Fixed imagecrop() overflow with rect argument with x/width y/heigh usage in gdImageCrop().
Fixed GH-18243 imagettftext() overflow/underflow on font size value.
Intl:
Fix reference support for intltz_get_offset().
LDAP:
Fixed bug GH-17776 (LDAP_OPT_X_TLS_* options can't be overridden).
Fix NULL deref on high modification key.
libxml:
Fixed custom external entity loader returning an invalid resource leading to a confusing TypeError message.
Opcache:
Fixed bug GH-18294 (assertion failure zend_jit_ir.c).
Fixed bug GH-18289 (Fix segfault in JIT).
Fixed bug GH-18136 (tracing JIT floating point register clobbering on Windows and ARM64).
OpenSSL:
Fix memory leak in openssl_sign() when passing invalid algorithm.
Fix potential leaks when writing to BIO fails.
PDO Firebird:
Fixed bug GH-18276 (persistent connection - "zend_mm_heap corrupted" with setAttribute())
Fixed bug GH-17383 (PDOException has wrong code and message since PHP 8.4)
PDO Sqlite:
Fix memory leak on error return of collation callback.
PgSql:
Fix uouv in pg_put_copy_end().
SPL:
Fixed bug GH-18322 (SplObjectStorage debug handler mismanages memory).
Standard:
Fixed bug GH-18145 (php8ts crashes in php_clear_stat_cache()).
Fix resource leak in iptcembed() on error.
Tests:
Address deprecated PHP 8.4 session options to prevent test failures.
Zip:
Fix uouv when handling empty options in ZipArchive::addGlob().
Fix memory leak when handling a too long path in ZipArchive::addGlob().
-------------------------------------------------------------------
Fri Apr 18 06:10:13 UTC 2025 - Manu Maier <mmanu84@outlook.de>
- version update to 8.4.6
BCMath:
Fixed pointer subtraction for scale.
Core:
Fixed property hook backing value access in multi-level inheritance.
Fixed accidentally inherited default value in overridden virtual properties.
Fixed bug GH-17376 (Broken JIT polymorphism for property hooks added to child class).
Fixed bug GH-17913 (ReflectionFunction::isDeprecated() returns incorrect results for closures created from magic __call()).
Fixed bug GH-17941 (Stack-use-after-return with lazy objects and hooks).
Fixed bug GH-17988 (Incorrect handling of hooked props without get hook in get_object_vars()).
Fixed bug GH-17998 (Skipped lazy object initialization on primed SIMPLE_WRITE cache).
Fixed bug GH-17998 (Assignment to backing value in set hook of lazy proxy calls hook again).
Fixed bug GH-17961 (use-after-free during dl()'ed module class destruction).
Fixed bug GH-15367 (dl() of module with aliased class crashes in shutdown).
Fixed OSS-Fuzz #403308724.
Fixed bug GH-13193 again (Significant performance degradation in 'foreach').
DBA:
Fixed assertion violation when opening the same file with dba_open multiple times.
DOM:
Fixed bug GH-17991 (Assertion failure dom_attr_value_write).
Fix weird unpack behaviour in DOM.
Fixed bug GH-18090 (DOM: Svg attributes and tag names are being lowercased).
Fix xinclude destruction of live attributes.
Fuzzer:
Fixed bug GH-18081 (Memory leaks in error paths of fuzzer SAPI).
GD:
Fixed bug GH-17984 (calls with arguments as array with references).
LDAP:
Fixed bug GH-18015 (Error messages for ldap_mod_replace are confusing).
Mbstring:
Fixed bug GH-17989 (mb_output_handler crash with unset http_output_conv_mimetypes).
Opcache:
Fixed bug GH-15834 (Segfault with hook "simple get" cache slot and minimal JIT).
Fixed bug GH-17966 (Symfony JIT 1205 assertion failure).
Fixed bug GH-18037 (SEGV Zend/zend_execute.c).
Fixed bug GH-18050 (IN_ARRAY optimization in DFA pass is broken).
Fixed bug GH-18113 (stack-buffer-overflow ext/opcache/jit/ir/ir_sccp.c).
Fixed bug GH-18112 (NULL access with preloading and INI option).
Fixed bug GH-18107 (Opcache CFG jmp optimization with try-finally breaks the exception table).
PDO:
Fix memory leak when destroying PDORow.
Standard:
Fix memory leaks in array_any() / array_all().
SOAP:
Fixed bug #66049 (Typemap can break parsing in parse_packet_soap leading to a segfault) .
SPL:
Fixed bug GH-18018 (RC1 data returned from offsetGet causes UAF in ArrayObject).
Treewide:
Fixed bug GH-17736 (Assertion failure zend_reference_destroy()).
Windows:
Fixed bug GH-17836 (zend_vm_gen.php shouldn't break on Windows line endings).
-------------------------------------------------------------------
Wed Apr 2 08:57:28 UTC 2025 - pgajdos@suse.com

2
php8.spec
View File

@@ -57,7 +57,7 @@
%bcond_without sodium
Name: %{pprefix}%{php_name}%{psuffix}
Version: 8.4.5
Version: 8.4.10
Release: 0
Summary: Interpreter for the PHP scripting language version 8
License: MIT AND PHP-3.01