Change Log 8

Core: Fixed GHSA-w8hw-w9fx-j79w , GHSA-6wmf-4rv5-p3rp (Avoid state corruption via bailout). Fixed bug GH-23644 (Optimizer leaves a constant-vs-constant comparison unfolded, crashing the VM in zval_undefined_cv). Fixed OSS-Fuzz 532353396 (assertion failure with static type). Fix GH-23662 (Avoid NAN warning in print_r()). Fix GH-21999 : GC inconsistency with lazy object, var_dump(), and object comparison. Fixed OSS-Fuzz #536440507 (Immutable class incorrect assertion). Fixed AVX being reported as supported when the OS has not enabled AVX state. Fixed GH-23980 (ZEND_ASSERT violation @ ZEND_INCLUDE_OR_EVAL). Fixed use-after-free when a dl()-loaded extension declares a frameless function and a later request calls it. Fixed System V shared memory emulation for Windows attaching segments past the end of their mapping. Fixed exception thrown by destructor during GC in a Fiber not being rethrown into the frame that triggered the GC.

Fixed GHSA-w8hw-w9fx-j79w , GHSA-6wmf-4rv5-p3rp (Avoid state corruption via bailout).

Fixed bug GH-23644 (Optimizer leaves a constant-vs-constant comparison unfolded, crashing the VM in zval_undefined_cv).

Fixed OSS-Fuzz 532353396 (assertion failure with static type).

Fix GH-23662 (Avoid NAN warning in print_r()).

Fix GH-21999 : GC inconsistency with lazy object, var_dump(), and object comparison.

Fixed OSS-Fuzz #536440507 (Immutable class incorrect assertion).

Fixed AVX being reported as supported when the OS has not enabled AVX state.

Fixed GH-23980 (ZEND_ASSERT violation @ ZEND_INCLUDE_OR_EVAL).

Fixed use-after-free when a dl()-loaded extension declares a frameless function and a later request calls it.

Fixed System V shared memory emulation for Windows attaching segments past the end of their mapping.

Fixed exception thrown by destructor during GC in a Fiber not being rethrown into the frame that triggered the GC.

BCMath: Fixed BcMath\Number results that truncate to zero keeping a negative sign and comparing less than zero.

Fixed BcMath\Number results that truncate to zero keeping a negative sign and comparing less than zero.

BZ2: Fixed double close of the descriptor and use-after-free of the inner stream when bzopen() is given a stream resource.

Fixed double close of the descriptor and use-after-free of the inner stream when bzopen() is given a stream resource.

CLI: Fix GH-22567 (Windows ZTS CLI SAPI should refresh its TSRMLS cache during request activation). Fixed bug GH-23764 (Built-in server leaks a file descriptor on every HEAD request for a static file). Fixed crash in the built-in server when a client is reset before being accepted. Fixed the built-in server truncating an error page and leaking its unsent part after a partial socket write.

Fix GH-22567 (Windows ZTS CLI SAPI should refresh its TSRMLS cache during request activation).

Fixed bug GH-23764 (Built-in server leaks a file descriptor on every HEAD request for a static file).

Fixed crash in the built-in server when a client is reset before being accepted.

Fixed the built-in server truncating an error page and leaking its unsent part after a partial socket write.

DOM: Fixed use-after-free when re-constructing a DOMXPath whose php:function registrations are freed while still reachable from the cycle collector. Fixed Dom\HTMLDocument::getElementById() not finding ids of SVG and MathML elements. Fixed Dom\HTMLDocument giving attributes the namespace of their element when a fragment is parsed with an xlink, xml or xmlns context element. Fixed bug GH-23887 (Dom\HTMLCollection::namedItem() assertion failure, hang, or missed first element). Fixed DOMXPath and Dom\XPath losing the context node and in-scope namespaces of an evaluation after a php:function() callback evaluated another expression on the same object.

Fixed use-after-free when re-constructing a DOMXPath whose php:function registrations are freed while still reachable from the cycle collector.

Fixed Dom\HTMLDocument::getElementById() not finding ids of SVG and MathML elements.

Fixed Dom\HTMLDocument giving attributes the namespace of their element when a fragment is parsed with an xlink, xml or xmlns context element.

Fixed bug GH-23887 (Dom\HTMLCollection::namedItem() assertion failure, hang, or missed first element).

Fixed DOMXPath and Dom\XPath losing the context node and in-scope namespaces of an evaluation after a php:function() callback evaluated another expression on the same object.

FFI: Fixed crashes with FFI callbacks created from __call() trampolines and array callables whose object is released.

Fixed crashes with FFI callbacks created from __call() trampolines and array callables whose object is released.

FTP: Fixed bug GH-23619 (cryptic error on servers that don't support TLS session resumption on data connection).

Fixed bug GH-23619 (cryptic error on servers that don't support TLS session resumption on data connection).

GD: Fixed undefined behavior with GD2 images with `INT_MAX`-sized chunks. Fixed undefined behavior with GIFs with problematic LZW compression data.

Fixed undefined behavior with GD2 images with `INT_MAX`-sized chunks.

Fixed undefined behavior with GIFs with problematic LZW compression data.

Intl: Fixed cloning IntlDateFormatter and MessageFormatter losing PHP-side state such as dateType, timeType, calendar and the message pattern. Fixed a crash when converting with a cloned UConverter that uses toUCallback/fromUCallback. Fixed Collator attribute and strength methods not rejecting an unconstructed Collator. Fixed crash in intl_error_set_custom_msg() without an active call frame. Fixed grapheme_strstr() and grapheme_stristr() returning incorrect substrings when supplementary characters precede the match. Fixed grapheme_strstr() and grapheme_strpos() missing canonically equivalent matches, and grapheme searches reporting ICU errors for empty haystacks. Fixed grapheme_strrpos() and grapheme_strripos() skipping overlapping matches when using a negative offset. Fixed IntlDateFormatter::parse(), localtime() and parseToCalendar() treating the offset as UTF-16 code units instead of bytes.

Fixed cloning IntlDateFormatter and MessageFormatter losing PHP-side state such as dateType, timeType, calendar and the message pattern.

Fixed a crash when converting with a cloned UConverter that uses toUCallback/fromUCallback.

Fixed Collator attribute and strength methods not rejecting an unconstructed Collator.

Fixed crash in intl_error_set_custom_msg() without an active call frame.

Fixed grapheme_strstr() and grapheme_stristr() returning incorrect substrings when supplementary characters precede the match.

Fixed grapheme_strstr() and grapheme_strpos() missing canonically equivalent matches, and grapheme searches reporting ICU errors for empty haystacks.

Fixed grapheme_strrpos() and grapheme_strripos() skipping overlapping matches when using a negative offset.

Fixed IntlDateFormatter::parse(), localtime() and parseToCalendar() treating the offset as UTF-16 code units instead of bytes.

Lexbor: Merge patches lexbor/lexbor@8a14bc0 and lexbor/lexbor@f67ce4b, fixing a heap buffer overflow in :lexbor-contains() parsing and buffer overflows in malformed decode replay. Merge patches lexbor/lexbor@859f100, lexbor/lexbor@a36e09a, lexbor/lexbor@b0f7412, lexbor/lexbor@1b215a8, lexbor/lexbor@385afff, lexbor/lexbor@e6c068f, lexbor/lexbor@327a8b6, lexbor/lexbor@917742f and lexbor/lexbor@e89c258, fixing dropped usernames containing an at sign, uninitialized memory in IDNA buffer growth, the encoding of a space before a query or fragment in an opaque path, a query or fragment lost after a dot segment in a path, replacement file drive paths, the output encoding used for percent-encoding, the URLSearchParams tail pointer and fragment serialization without a query.

Merge patches lexbor/lexbor@8a14bc0 and lexbor/lexbor@f67ce4b, fixing a heap buffer overflow in :lexbor-contains() parsing and buffer overflows in malformed decode replay.

Merge patches lexbor/lexbor@859f100, lexbor/lexbor@a36e09a, lexbor/lexbor@b0f7412, lexbor/lexbor@1b215a8, lexbor/lexbor@385afff, lexbor/lexbor@e6c068f, lexbor/lexbor@327a8b6, lexbor/lexbor@917742f and lexbor/lexbor@e89c258, fixing dropped usernames containing an at sign, uninitialized memory in IDNA buffer growth, the encoding of a space before a query or fragment in an opaque path, a query or fragment lost after a dot segment in a path, replacement file drive paths, the output encoding used for percent-encoding, the URLSearchParams tail pointer and fragment serialization without a query.

MBString: Fixed bug GH-23106 (mb_strpos() reads past the end of a haystack ending in a truncated UTF-8 sequence). Fixed mbstring functions emitting surrogates in UTF-8 output and flagging it as valid UTF-8.

Fixed bug GH-23106 (mb_strpos() reads past the end of a haystack ending in a truncated UTF-8 sequence).

Fixed mbstring functions emitting surrogates in UTF-8 output and flagging it as valid UTF-8.

MySQLi: Fix GH-22854 : Fixed failed assertion when accessing mysqli property after failed reconnection.

Fix GH-22854 : Fixed failed assertion when accessing mysqli property after failed reconnection.

MySQLnd: Fixed field_count not resetting on OK packet. Fixed memory leak when closing a prepared statement after its connection was killed.

Fixed field_count not resetting on OK packet.

Fixed memory leak when closing a prepared statement after its connection was killed.

Opcache: Fixed OSS-Fuzz #546798343 (Heap-buffer-overflow in optimizer with FCCs and inlining). Fixed bug GH-23693 (Tracing JIT produces wrong results for a guard on a loop-invariant addition). Fixed OSS-Fuzz #5674034779193344 (Read of uninitialized memory in is_cacheable_stream_path()). Fix zend_analyze_calls() call_stack buffer overrun. Fixed bug GH-23628 (Tracing JIT reads undefined property slots of lazy proxy objects instead of forwarding to the real instance). Fixed bug GH-23679 (Tracing JIT writes a parent private property into a child's shadowing public property). Fix multiple incorrect DCE due to unsound escape analysis. Fixed bug GH-24063 (OPcache optimizer folds `$cond ? -0.0 : 0.0` into a single `-0.0` constant). Fixed crash when a file cache is reused with a different set of extensions declaring frameless functions. Fixed bug GH-23991 (JIT generates invalid IR for multiple recursive calls). Fix SCCP evaluation of isset()/empty() on dimension of non-escaping object. Fixed bug GH-20890 (Segfault in zval_undefined_cv with non-simple property hook with minimal tracing JIT).

Fixed OSS-Fuzz #546798343 (Heap-buffer-overflow in optimizer with FCCs and inlining).

Fixed bug GH-23693 (Tracing JIT produces wrong results for a guard on a loop-invariant addition).

Fixed OSS-Fuzz #5674034779193344 (Read of uninitialized memory in is_cacheable_stream_path()).

Fix zend_analyze_calls() call_stack buffer overrun.

Fixed bug GH-23628 (Tracing JIT reads undefined property slots of lazy proxy objects instead of forwarding to the real instance).

Fixed bug GH-23679 (Tracing JIT writes a parent private property into a child's shadowing public property).

Fix multiple incorrect DCE due to unsound escape analysis.

Fixed bug GH-24063 (OPcache optimizer folds `$cond ? -0.0 : 0.0` into a single `-0.0` constant).

Fixed crash when a file cache is reused with a different set of extensions declaring frameless functions.

Fixed bug GH-23991 (JIT generates invalid IR for multiple recursive calls).

Fix SCCP evaluation of isset()/empty() on dimension of non-escaping object.

Fixed bug GH-20890 (Segfault in zval_undefined_cv with non-simple property hook with minimal tracing JIT).

OpenSSL: Fixed stream_socket_enable_crypto() leaving the socket non-blocking after a handshake timeout. Fixed feof() on a TLS stream staying false after a close_notify on Windows.

Fixed stream_socket_enable_crypto() leaving the socket non-blocking after a handshake timeout.

Fixed feof() on a TLS stream staying false after a close_notify on Windows.

PCNTL: Fixed pcntl_signal_dispatch() dropping the queued signals when it runs while an exception is pending. Fixed pcntl_signal_dispatch() dropping the signals queued behind a handler that throws. Fixed bug GH-23986 (/proc/self paths resolve to the parent process after pcntl_fork()).

Fixed pcntl_signal_dispatch() dropping the queued signals when it runs while an exception is pending.

Fixed pcntl_signal_dispatch() dropping the signals queued behind a handler that throws.

Fixed bug GH-23986 (/proc/self paths resolve to the parent process after pcntl_fork()).

PDO: Fixed PDOStatement::getColumnMeta() reading out of bounds for an invalid column index. Fixed PDOStatement::bindColumn() registering a binding for a column name that is not in the result set. Fixed PDOStatement::execute() leaving the result available after a failed execution. Fixed a use-after-free when bindValue()/execute()/closeCursor() is called from a bound parameter's __toString() during execute(). Fixed bug GH-23962 (Destroying a persistent PDO instance rolls back a transaction still in use by another instance). Fixed PDO::setAttribute() installing a PDO::ATTR_STATEMENT_CLASS class whose constructor arguments it rejects. Fixed PDO::ATTR_STATEMENT_CLASS constructor_args type errors reporting "array given" regardless of the value passed. Fixed PDOStatement::bindParam() and bindColumn() leaking the driver options value. Fixed PDOStatement not reporting its bound parameters and columns to the cycle collector. Fixed PDOStatement::setFetchMode() not applying changes atomically.

Fixed PDOStatement::getColumnMeta() reading out of bounds for an invalid column index.

Fixed PDOStatement::bindColumn() registering a binding for a column name that is not in the result set.

Fixed PDOStatement::execute() leaving the result available after a failed execution.

Fixed a use-after-free when bindValue()/execute()/closeCursor() is called from a bound parameter's __toString() during execute().

Fixed bug GH-23962 (Destroying a persistent PDO instance rolls back a transaction still in use by another instance).

Fixed PDO::setAttribute() installing a PDO::ATTR_STATEMENT_CLASS class whose constructor arguments it rejects.

Fixed PDO::ATTR_STATEMENT_CLASS constructor_args type errors reporting "array given" regardless of the value passed.

Fixed PDOStatement::bindParam() and bindColumn() leaking the driver options value.

Fixed PDOStatement not reporting its bound parameters and columns to the cycle collector.

Fixed PDOStatement::setFetchMode() not applying changes atomically.

PDO_DBLIB: Fixed bug GH-23741 (segfault after a failed query inside a PDO transaction). Errors raised by beginTransaction(), commit(), rollBack() and lastInsertId() are now reported instead of being dropped.

Fixed bug GH-23741 (segfault after a failed query inside a PDO transaction). Errors raised by beginTransaction(), commit(), rollBack() and lastInsertId() are now reported instead of being dropped.

PDO_Firebird: Fixed bug GH-23758 (PDO_Firebird returns null for non-null empty BLOBs).

Fixed bug GH-23758 (PDO_Firebird returns null for non-null empty BLOBs).

PGSQL: Fixed pg_lo_write() rejecting data containing null bytes. Removed pg_service(), unavailable with any released libpq.

Fixed pg_lo_write() rejecting data containing null bytes.

Removed pg_service(), unavailable with any released libpq.

Readline: Fixed a heap over-read in the interactive shell prompt when cli.prompt is set to an empty string.

Fixed a heap over-read in the interactive shell prompt when cli.prompt is set to an empty string.

Reflection: Fixed bug GH-23842 (ReflectionProperty::skipLazyInitialization() copies invalid constant defaults with OPcache).

Fixed bug GH-23842 (ReflectionProperty::skipLazyInitialization() copies invalid constant defaults with OPcache).

Session: Fixed session_start() continuing after a failed create_sid() when session.use_strict_mode rejects the supplied ID. Fixed exceptions from user-defined create_sid() handlers being replaced by return-value validation errors.

Fixed session_start() continuing after a failed create_sid() when session.use_strict_mode rejects the supplied ID.

Fixed exceptions from user-defined create_sid() handlers being replaced by return-value validation errors.

SimpleXML: Fixed reconstructing a SimpleXMLElement freeing a child element that another variable still references.

Fixed reconstructing a SimpleXMLElement freeing a child element that another variable still references.

SOAP: Fixed bug GH-22895 (Heap use-after-free while encoding a Traversable with an illegal key). Fixed memory leak when load_wsdl_ex() failed to load.

Fixed bug GH-22895 (Heap use-after-free while encoding a Traversable with an illegal key).

Fixed memory leak when load_wsdl_ex() failed to load.

SQLite: Fixed a crash when SQLite3::close() is called from a userland callback.

Fixed a crash when SQLite3::close() is called from a userland callback.

Standard: Fixed sha1_file() returning a digest for incomplete data after a stream read failure. Fixed iptcembed() corrupting JPEG headers when called recursively from an output handler. Fixed proc_open() leaking descriptor zero when descriptor setup fails. Fixed three Windows-only proc_open() defects: an uninitialized PROCESS_INFORMATION, an indeterminate comspec pointer after a failed lookup, and an unchecked CreateFileA() failure. Fix persistent stream context lifetime during shutdown (Levi Morrison) Fix wordwrap() ignoring an existing break at the end of the string (Nicolas Grekas) Fixed convert.quoted-printable-decode decoding lowercase hex digits to the wrong byte. Fixed chown() and lchown() failing to resolve user names in ZTS builds when getpwnam_r() needs a larger buffer.

Fixed sha1_file() returning a digest for incomplete data after a stream read failure.

Fixed iptcembed() corrupting JPEG headers when called recursively from an output handler.

Fixed proc_open() leaking descriptor zero when descriptor setup fails.

Fixed three Windows-only proc_open() defects: an uninitialized PROCESS_INFORMATION, an indeterminate comspec pointer after a failed lookup, and an unchecked CreateFileA() failure.

Fix persistent stream context lifetime during shutdown (Levi Morrison)

Fix wordwrap() ignoring an existing break at the end of the string (Nicolas Grekas)

Fixed convert.quoted-printable-decode decoding lowercase hex digits to the wrong byte.

Fixed chown() and lchown() failing to resolve user names in ZTS builds when getpwnam_r() needs a larger buffer.

Tidy: Fixed a use-after-free when a tidyNode is used after its document is reparsed.

Fixed a use-after-free when a tidyNode is used after its document is reparsed.

Zlib: Fixed inflate_init() dropping the preset dictionary for raw streams with a non-default window.

Fixed inflate_init() dropping the preset dictionary for raw streams with a non-default window.

BCMath: Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds n_scale.

Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds n_scale.

Core: Fixed out-of-bounds reads during automatic UTF-16/32 encoding detection. Fixed bug GH-15375 (Nested "yield from" skips items after a valid() or () call on the inner generator). Fixed bug GH-23232 (lone namespace separator asks the autoloader for an empty class name). Fixed bug GH-23301 (Nested "yield from" yields a value twice when the middle generator delegates again).

Fixed out-of-bounds reads during automatic UTF-16/32 encoding detection.

Fixed bug GH-15375 (Nested "yield from" skips items after a valid() or () call on the inner generator).

Fixed bug GH-23232 (lone namespace separator asks the autoloader for an empty class name).

Fixed bug GH-23301 (Nested "yield from" yields a value twice when the middle generator delegates again).

DOM: Fixed NamedNodeMap::getNamedItemNS() with an empty URI not matching the null namespace in spec-following mode. Fixed stale getElementsByClassName() and other node list caches after className/classList writes and attribute removals. Fixed a use-after-free when cloning a DOMNameSpaceNode after DOMDocument::xinclude(). Fixed a crash in DOMXPath when a php:function callback receives a nodeset and a later callback returns a node from another document. Fixed bug GH-23331 (UAF when node_list_unlink() skips attribute children that still have a live wrapper). Fixed a use-after-free when Dom\Element::setAttributeNS() replaces the value of an attribute whose child still has a live wrapper.

Fixed NamedNodeMap::getNamedItemNS() with an empty URI not matching the null namespace in spec-following mode.

Fixed stale getElementsByClassName() and other node list caches after className/classList writes and attribute removals.

Fixed a use-after-free when cloning a DOMNameSpaceNode after DOMDocument::xinclude().

Fixed a crash in DOMXPath when a php:function callback receives a nodeset and a later callback returns a node from another document.

Fixed bug GH-23331 (UAF when node_list_unlink() skips attribute children that still have a live wrapper).

Fixed a use-after-free when Dom\Element::setAttributeNS() replaces the value of an attribute whose child still has a live wrapper.

GD: Fixed imageaffinematrixget() and imageaffinematrixconcat() reporting the wrong argument in error messages.

Fixed imageaffinematrixget() and imageaffinematrixconcat() reporting the wrong argument in error messages.

FPM: Fixed bug GH-19320 (FPM UID and GID overflow). Fixed GHSA-62xp-839h-2637 (IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison). (CVE-2026-91768)

Fixed bug GH-19320 (FPM UID and GID overflow).

Fixed GHSA-62xp-839h-2637 (IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison). (CVE-2026-91768)

Intl: Fixed grapheme_strpos() and grapheme_strrpos() with an empty needle returning UTF-16 offsets instead of grapheme offsets. Fixed a memory leak when dumping IntlCalendar instances. Fixed a memory leak when iterating IntlBreakIterator::getPartsIterator() results. Fixed a double-free when IntlGregorianCalendar construction fails after the ICU constructor adopts the TimeZone. Fixed bug GH-23094 (NumberFormatter parsing offsets use UTF-16 positions for UTF-8 strings). Fixed Locale::parseLocale() reading past a trailing '-' or '_'. Fixed grapheme_str_split() treating UBRK_DONE as a byte index. Fixed a leak in Locale::getKeywords() when a keyword value cannot be read. Fixed a use-after-free when IntlRuleBasedBreakIterator is constructed from compiled rules.

Fixed grapheme_strpos() and grapheme_strrpos() with an empty needle returning UTF-16 offsets instead of grapheme offsets.

Fixed a memory leak when dumping IntlCalendar instances.

Fixed a memory leak when iterating IntlBreakIterator::getPartsIterator() results.

Fixed a double-free when IntlGregorianCalendar construction fails after the ICU constructor adopts the TimeZone.

Fixed bug GH-23094 (NumberFormatter parsing offsets use UTF-16 positions for UTF-8 strings).

Fixed Locale::parseLocale() reading past a trailing '-' or '_'.

Fixed grapheme_str_split() treating UBRK_DONE as a byte index.

Fixed a leak in Locale::getKeywords() when a keyword value cannot be read.

Fixed a use-after-free when IntlRuleBasedBreakIterator is constructed from compiled rules.

MBString: Fixed mb_ereg_replace() emitting a NUL or out-of-bounds bytes in the replacement when a \k backref has no closing delimiter.

Fixed mb_ereg_replace() emitting a NUL or out-of-bounds bytes in the replacement when a \k backref has no closing delimiter.

MySQLnd: Fixed GHSA-r6x9-5r99-36j7 (Various packet overreads in mysqlnd wire protocol). (CVE-2025-1218)

Fixed GHSA-r6x9-5r99-36j7 (Various packet overreads in mysqlnd wire protocol). (CVE-2025-1218)

ODBC: Fixed odbc_field_len(), odbc_field_scale() and odbc_field_type() returning uninitialized memory when SQLColAttribute fails.

Fixed odbc_field_len(), odbc_field_scale() and odbc_field_type() returning uninitialized memory when SQLColAttribute fails.

Opcache: Fixed opcache.protect_memory race under ZTS. Fixed a tracing JIT crash when compiling a side trace for a method of a class that could not be stored in the inheritance cache. Fixed a crash when the huge page SHM remap discarded mappings outside the reserved address range.

Fixed opcache.protect_memory race under ZTS.

Fixed a tracing JIT crash when compiling a side trace for a method of a class that could not be stored in the inheritance cache.

Fixed a crash when the huge page SHM remap discarded mappings outside the reserved address range.

OpenSSL: Fixed GHSA-vvx9-73fr-5jjx (TLS hostname verification falls back to CN after SAN mismatch). (CVE-2026-91769) Fixed GHSA-xr7j-rvgx-xq5p (Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN). (CVE-2026-91767)

Fixed GHSA-vvx9-73fr-5jjx (TLS hostname verification falls back to CN after SAN mismatch). (CVE-2026-91769)

Fixed GHSA-xr7j-rvgx-xq5p (Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN). (CVE-2026-91767)

PDO: Fixed a leak when a persistent connection failed a liveness check with no other live PDO handle.

Fixed a leak when a persistent connection failed a liveness check with no other live PDO handle.

PDO_PGSQL: Fixed PDO::CURSOR_SCROLL statements failing under lazy fetching (PDO::ATTR_PREFETCH => 0).

Fixed PDO::CURSOR_SCROLL statements failing under lazy fetching (PDO::ATTR_PREFETCH => 0).

PDO Sqlite: Fixed bug GH-20214 (PDO::FETCH_DEFAULT unexpected behavior with PDOStatement::setFetchMode).

Fixed bug GH-20214 (PDO::FETCH_DEFAULT unexpected behavior with PDOStatement::setFetchMode).

Phar: Fixed bug GH-23418 (Use-after-free when looking up mounted directories). Fixed bug GH-23477 (Memory leak on duplicate native Phar manifest entries). Fixed GHSA-j3wh-g957-2m85 (Integer overflow in phar_tar_number() allowing TAR archive entry injection). (CVE-2026-6103)

Fixed bug GH-23418 (Use-after-free when looking up mounted directories).

Fixed bug GH-23477 (Memory leak on duplicate native Phar manifest entries).

Fixed GHSA-j3wh-g957-2m85 (Integer overflow in phar_tar_number() allowing TAR archive entry injection). (CVE-2026-6103)

Readline: Fixed the interactive shell not waiting for the pager process to exit.

Fixed the interactive shell not waiting for the pager process to exit.

SOAP: Fixed WSDL cache corruption when a soap:header defines headerfaults. Fixed stack overflow when parsing a WSDL with self-referential schema groups or attributeGroups. Fixed GHSA-rgrp-mwpx-f6rm (Unbounded recursion in server-side cleanup_xml_node()). (CVE-2026-91765) Fixed GHSA-cj93-vc83-wgqv (Integer overflow to buffer overflow in SOAP HTTP parsing). (CVE-2025-14181)

Fixed WSDL cache corruption when a soap:header defines headerfaults.

Fixed stack overflow when parsing a WSDL with self-referential schema groups or attributeGroups.

Fixed GHSA-rgrp-mwpx-f6rm (Unbounded recursion in server-side cleanup_xml_node()). (CVE-2026-91765)

Fixed GHSA-cj93-vc83-wgqv (Integer overflow to buffer overflow in SOAP HTTP parsing). (CVE-2025-14181)

Standard: Fixed a segfault when a stream filter callback unsets StreamBucket::$data before re-attaching the bucket. Fixed GHSA-7875-c8px-7q5f (Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header). (CVE-2026-93682) Fixed read buffer compaction in php_stream_filter_flush(). Fixed bug GH-22410 (Incorrect float behavior with large numbers). Fixed GH-23338 (fsockopen()/pfsockopen() ValueError reported wrong argument number for $timeout). Fixed bug GH-23576 ( index for array returned from array_keys() is wrong). Fixed GHSA-88hq-2827-7pg6 (Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL). (CVE-2026-92842) Fixed GHSA-fpwc-w8rq-cr92 (Cross-origin credential leak in HTTP stream wrapper redirects). (CVE-2026-91766)

Fixed a segfault when a stream filter callback unsets StreamBucket::$data before re-attaching the bucket.

Fixed GHSA-7875-c8px-7q5f (Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header). (CVE-2026-93682)

Fixed read buffer compaction in php_stream_filter_flush().

Fixed bug GH-22410 (Incorrect float behavior with large numbers).

Fixed GH-23338 (fsockopen()/pfsockopen() ValueError reported wrong argument number for $timeout).

Fixed bug GH-23576 ( index for array returned from array_keys() is wrong).

Fixed GHSA-88hq-2827-7pg6 (Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL). (CVE-2026-92842)

Fixed GHSA-fpwc-w8rq-cr92 (Cross-origin credential leak in HTTP stream wrapper redirects). (CVE-2026-91766)

SimpleXML: Fixed writing to a dimension of the object returned by attributes() not creating the attribute. Fixed child elements of the element returned by SimpleXMLElement::addChild() not being accessible by property name when namespaces are involved.

Fixed writing to a dimension of the object returned by attributes() not creating the attribute.

Fixed child elements of the element returned by SimpleXMLElement::addChild() not being accessible by property name when namespaces are involved.

Windows: Fixed GHSA-9f67-6fw4-hpfp (Reserved device names are not rejected before file and stream I/O). (CVE-2026-17545)

Fixed GHSA-9f67-6fw4-hpfp (Reserved device names are not rejected before file and stream I/O). (CVE-2026-17545)

Zip: Fixed bug GH-17787 (ZipArchive stream stops reading early when the archive is freed while the stream is still open). Fixed bug GH-23276 (ZipArchive subclass storing its own stream cannot be garbage collected).

Fixed bug GH-17787 (ZipArchive stream stops reading early when the archive is freed while the stream is still open).

Fixed bug GH-23276 (ZipArchive subclass storing its own stream cannot be garbage collected).

SAPI: Fixed fuzzer targets failing to build in isolation. Fixed returns uninitialized value on LiteSpeed lsapi SAPI (Go Kudo)

Fixed fuzzer targets failing to build in isolation.

Fixed returns uninitialized value on LiteSpeed lsapi SAPI (Go Kudo)

Core: Fixed bug GH-22782 (Const expr FCC crashes under preloading). Fixed bug GH-23088 (Stack overflow when comparing deeply nested arrays).

Fixed bug GH-22782 (Const expr FCC crashes under preloading).

Fixed bug GH-23088 (Stack overflow when comparing deeply nested arrays).

Date: Fixed leak on double DatePeriod::__construct() call.

Fixed leak on double DatePeriod::__construct() call.

DOM: Fixed bug GH-23116 (Stack overflow when normalizing a deeply nested DOMDocument). Fixed bug GH-23117 (Stack overflow when normalizing a deeply nested Dom\XMLDocument). Fixed bug GH-22825 (DOMElement::setAttribute() fails silently when the DTD declares a default value for the attribute). Fixed bug GH-23120 (Stack overflow when comparing deeply nested DOM nodes with DOMNode::isEqualNode()).

Fixed bug GH-23116 (Stack overflow when normalizing a deeply nested DOMDocument).

Fixed bug GH-23117 (Stack overflow when normalizing a deeply nested Dom\XMLDocument).

Fixed bug GH-22825 (DOMElement::setAttribute() fails silently when the DTD declares a default value for the attribute).

Fixed bug GH-23120 (Stack overflow when comparing deeply nested DOM nodes with DOMNode::isEqualNode()).

Exif: Fixed exif_read_data() allocating a HEIF meta box larger than the file it came from.

Fixed exif_read_data() allocating a HEIF meta box larger than the file it came from.

Intl: Fixed IntlListFormatter::__construct() leaving stale global error state after successful calls.

Fixed IntlListFormatter::__construct() leaving stale global error state after successful calls.

Opcache: Fixed GH-22693 (DT_TEXTREL in JIT-generated TLS access on x86_64). Fixed bug GH-22763 (JIT fails to clear ZREG_TYPE_ONLY after setting reg). Fixed bug GH-22857 (Function JIT emits wrong code for FETCH_OBJ_FUNC_ARG on a property hook getter, losing register-held variables). Fixed bug GH-22916 (Preserve parent regs in zend_jit_deoptimizer_start()).

Fixed GH-22693 (DT_TEXTREL in JIT-generated TLS access on x86_64).

Fixed bug GH-22763 (JIT fails to clear ZREG_TYPE_ONLY after setting reg).

Fixed bug GH-22857 (Function JIT emits wrong code for FETCH_OBJ_FUNC_ARG on a property hook getter, losing register-held variables).

Fixed bug GH-22916 (Preserve parent regs in zend_jit_deoptimizer_start()).

OpenSSL: Fix missing error check on invalid alpn protocols.

Fix missing error check on invalid alpn protocols.

MBString: Fixed bug GH-22779 (mb_strrpos() returns the wrong position for a negative offset in a non-UTF-8 encoding). Fixed bug GH-21036 (mb_ereg_search_getregs() crashes after mb_eregi() invalidates the regex cache).

Fixed bug GH-22779 (mb_strrpos() returns the wrong position for a negative offset in a non-UTF-8 encoding).

Fixed bug GH-21036 (mb_ereg_search_getregs() crashes after mb_eregi() invalidates the regex cache).

PCRE: Fixed bug GH-21134 (Crash with \C + UTF-8). Using \C in UTF-8 patterns is now forbidden.

Fixed bug GH-21134 (Crash with \C + UTF-8). Using \C in UTF-8 patterns is now forbidden.

PDO_ODBC: Fixed bug GH-23016 (NULL values in long columns come back as garbage binary strings).

Fixed bug GH-23016 (NULL values in long columns come back as garbage binary strings).

PDO_PGSQL: Fixed several lazy fetch (PDO::ATTR_PREFETCH => 0) defects: an infinite loop when cleaning up a fetch left in a COPY, a use-after-free when a statement with emulated or disabled prepares is destroyed, a connection left busy for the fetch, and rows delivered from a result another statement took over.

Fixed several lazy fetch (PDO::ATTR_PREFETCH => 0) defects: an infinite loop when cleaning up a fetch left in a COPY, a use-after-free when a statement with emulated or disabled prepares is destroyed, a connection left busy for the fetch, and rows delivered from a result another statement took over.

Reflection: Fixed bug GH-22905 (Reflection exception messages truncate on null bytes). Fixed ReflectionProperty::isLazy() and skipLazyInitialization() using the parent slot when a child class hooks an inherited property. Fixed segfault in ReflectionMethod::createFromMethodName() on an uninstantiable subclass.

Fixed bug GH-22905 (Reflection exception messages truncate on null bytes).

Fixed ReflectionProperty::isLazy() and skipLazyInitialization() using the parent slot when a child class hooks an inherited property.

Fixed segfault in ReflectionMethod::createFromMethodName() on an uninstantiable subclass.

Session: Fix corruption in mod_mm. Fixed bug GH-23043 (broken session id code can cause zend_mm_heap corrupted).

Fix corruption in mod_mm.

Fixed bug GH-23043 (broken session id code can cause zend_mm_heap corrupted).

SimpleXML: Fixed integer element offsets that cannot resolve aliasing an existing element. Fixed segfault when comparing uninitialized SimpleXMLElement instances.

Fixed integer element offsets that cannot resolve aliasing an existing element.

Fixed segfault when comparing uninitialized SimpleXMLElement instances.

Sockets: Fixed socket_set_option() validation error messages for UDP_SEGMENT and SO_LINGER options. Fixed various memory related issues in ext/sockets.

Fixed socket_set_option() validation error messages for UDP_SEGMENT and SO_LINGER options.

Fixed various memory related issues in ext/sockets.

SQLite: Fix leak when trying to close db if blob stream is still open.

Fix leak when trying to close db if blob stream is still open.

Standard: Fixed bug GH-23111 (Stack overflow in array_walk_recursive() with deeply nested arrays). Fixed bug GH-23113 (Stack overflow in array_replace_recursive() with deeply nested arrays). Fixed bug GH-23115 (Stack overflow in compact() with deeply nested arrays).

Fixed bug GH-23111 (Stack overflow in array_walk_recursive() with deeply nested arrays).

Fixed bug GH-23113 (Stack overflow in array_replace_recursive() with deeply nested arrays).

Fixed bug GH-23115 (Stack overflow in compact() with deeply nested arrays).

Streams: Fixed bug GH-15836 (Use-after-free when a user stream filter accesses $this->stream during the close flush).

Fixed bug GH-15836 (Use-after-free when a user stream filter accesses $this->stream during the close flush).

XSL: Fixed use-after-free when a DOMDocument subclass __clone() retains the stylesheet copy made by XSLTProcessor::importStylesheet().

Fixed use-after-free when a DOMDocument subclass __clone() retains the stylesheet copy made by XSLTProcessor::importStylesheet().

Core: Fixed bug GH-22290 (AST pretty printing does not correctly handle strings containing NUL). Fixed bug GH-22206 (missing return in global register detection). Lock unmodified readonly properties for modification after clone-with.

Fixed bug GH-22290 (AST pretty printing does not correctly handle strings containing NUL).

Fixed bug GH-22206 (missing return in global register detection).

Lock unmodified readonly properties for modification after clone-with.

BCMath: Fixed GHSA-x692-q9x7-8c3f (Out-of-bounds write in bccomp()). (CVE-2026-17544)

Fixed GHSA-x692-q9x7-8c3f (Out-of-bounds write in bccomp()). (CVE-2026-17544)

Calendar: Fixed bug GH-22602 (gregoriantojd() and juliantojd() integer overflow with INT_MAX year).

Fixed bug GH-22602 (gregoriantojd() and juliantojd() integer overflow with INT_MAX year).

Date: Update timelib to 2022.17. Fixed bug GH-19803 (Parsing a string with a single white space does create an error). Fixed Unix timestamps in February of the year 0 are misparsed with @-notation. Fixed bug GH-11310 (__debugInfo does nothing on userland classes extending Date classes).

Update timelib to 2022.17.

Fixed bug GH-19803 (Parsing a string with a single white space does create an error).

Fixed Unix timestamps in February of the year 0 are misparsed with @-notation.

Fixed bug GH-11310 (__debugInfo does nothing on userland classes extending Date classes).

DBA: Fixed OOB read on malformed length field in dba flatfile handler.

Fixed OOB read on malformed length field in dba flatfile handler.

DOM: Fixed bug GH-22570 (Stack overflow when serializing a deeply nested Dom\XMLDocument). Fixed getElementsByClassName() item() returning the wrong element on random access.

Fixed bug GH-22570 (Stack overflow when serializing a deeply nested Dom\XMLDocument).

Fixed getElementsByClassName() item() returning the wrong element on random access.

Exif: Fixed bug GH-11020 (exif_read_data() emits a spurious "Illegal IFD size" warning when an IFD is not followed by a -IFD offset).

Fixed bug GH-11020 (exif_read_data() emits a spurious "Illegal IFD size" warning when an IFD is not followed by a -IFD offset).

GD: Upgrade libgd. (CVE-2026-9672)

Upgrade libgd. (CVE-2026-9672)

Hash: Fixed bug GH-18173 (ext/hash relies on implementation-defined malloc alignment).

Fixed bug GH-18173 (ext/hash relies on implementation-defined malloc alignment).

ODBC: Fixed bug GH-22668 (Heap buffer over-read when a column value exceeds the driver-reported display size).

Fixed bug GH-22668 (Heap buffer over-read when a column value exceeds the driver-reported display size).

Opcache: Fixed bug GH-22158 (Tracing JIT dispatches the observer begin handler through the wrong run_time_cache slot on megamorphic calls). Fixed bug GH-22443 (Tracing JIT SIGSEGV on megamorphic dynamic calls from an undereferenced run_time_cache map_ptr offset). Fixed bug GH-21770 (Infinite recursion in property hook getter in opcache preloaded trait).

Fixed bug GH-22158 (Tracing JIT dispatches the observer begin handler through the wrong run_time_cache slot on megamorphic calls).

Fixed bug GH-22443 (Tracing JIT SIGSEGV on megamorphic dynamic calls from an undereferenced run_time_cache map_ptr offset).

Fixed bug GH-21770 (Infinite recursion in property hook getter in opcache preloaded trait).

OpenSSL: Fixed timeout for supplemental read at end of a blocking stream in SSL stream wrapper.

Fixed timeout for supplemental read at end of a blocking stream in SSL stream wrapper.

Intl: Fixed Locale::lookup() and locale_lookup() to return NULL instead of the fallback locale when a language tag cannot be canonicalized. Fixed memory leaks when calling Collator::__construct() or Spoofchecker::__construct() twice. Fixed memory leak when calling IntlListFormatter::__construct() twice. Fixed IntlChar methods leaving stale global error state after successful calls.

Fixed Locale::lookup() and locale_lookup() to return NULL instead of the fallback locale when a language tag cannot be canonicalized.

Fixed memory leaks when calling Collator::__construct() or Spoofchecker::__construct() twice.

Fixed memory leak when calling IntlListFormatter::__construct() twice.

Fixed IntlChar methods leaving stale global error state after successful calls.

PDO_ODBC: Fixed bug GH-20726 (Crash with ODBC connection pooling when the DSN carries no credentials). Fixed bug GH-22667 (Heap buffer over-read when a column value exceeds the driver-reported display size). Fixed bug GH-22666 (Heap buffer overflow when an output parameter value is longer than the declared maxlen). Fixed bug GH-22665 (Out-of-bounds write when the ODBC driver reports a diagnostic message length beyond the error buffer).

Fixed bug GH-20726 (Crash with ODBC connection pooling when the DSN carries no credentials).

Fixed bug GH-22667 (Heap buffer over-read when a column value exceeds the driver-reported display size).

Fixed bug GH-22666 (Heap buffer overflow when an output parameter value is longer than the declared maxlen).

Fixed bug GH-22665 (Out-of-bounds write when the ODBC driver reports a diagnostic message length beyond the error buffer).

PGSQL: Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via E'...' backslash breakout). (CVE-2026-17543)

Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via E'...' backslash breakout). (CVE-2026-17543)

Phar: Fixed inconsistent handling of the magic ".phar" directory. Paths such as "/.phar" remain protected, while non-magic paths that merely start with ".phar" are handled consistently across file and directory creation, copying, ArrayAccess, stream lookup, directory iteration and extraction. Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260)

Fixed inconsistent handling of the magic ".phar" directory. Paths such as "/.phar" remain protected, while non-magic paths that merely start with ".phar" are handled consistently across file and directory creation, copying, ArrayAccess, stream lookup, directory iteration and extraction.

Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260)

PHPDBG: Fixed bug GH-17387 (Trivial crash in phpdbg lexer). Fixed fleaked lowercased lookup keys in phpdbg_resolve_opline_break. Fixed off-by-one in phpdbg_safe_class_lookup() causing class lookups to always fail during phpdbg's signal-safe interruption path.

Fixed bug GH-17387 (Trivial crash in phpdbg lexer).

Fixed fleaked lowercased lookup keys in phpdbg_resolve_opline_break.

Fixed off-by-one in phpdbg_safe_class_lookup() causing class lookups to always fail during phpdbg's signal-safe interruption path.

Reflection: Fixed bug GH-22324 (Ignore leading namespace separator in ReflectionParameter::__construct()). Fixed bug GH-22441 (ReflectionClass::hasProperty() and getProperty() ignore dynamic properties shadowing a private parent property). Fixed bug GH-22658 (ReflectionConstant::__toString() with a string value with null bytes truncates output). Fixed bug GH-22683 (Reflection(Class)Constant::__toString() should not warn on NAN conversions). Fixed bug GH-22681 (Reflection*::__toString() truncates on null bytes).

Fixed bug GH-22324 (Ignore leading namespace separator in ReflectionParameter::__construct()).

Fixed bug GH-22441 (ReflectionClass::hasProperty() and getProperty() ignore dynamic properties shadowing a private parent property).

Fixed bug GH-22658 (ReflectionConstant::__toString() with a string value with null bytes truncates output).

Fixed bug GH-22683 (Reflection(Class)Constant::__toString() should not warn on NAN conversions).

Fixed bug GH-22681 (Reflection*::__toString() truncates on null bytes).

Session: Fixed bug GH-21314 (Different session garbage collector behavior between PHP 8.3 and PHP 8.5).

Fixed bug GH-21314 (Different session garbage collector behavior between PHP 8.3 and PHP 8.5).

SPL: Fix class_parents for classes with leading slash in non-autoload mode. Ignore leading back-slash in class_parents(), class_implements(), and class_uses(). Fixed bug GH-16217 (SplFileObject::fputcsv() on an uninitialized object segfaults).

Fix class_parents for classes with leading slash in non-autoload mode.

Ignore leading back-slash in class_parents(), class_implements(), and class_uses().

Fixed bug GH-16217 (SplFileObject::fputcsv() on an uninitialized object segfaults).

Standard: Fixed bug GH-22395 (base_convert() outputs at most 64 characters). Fixed bug GH-22678 (Use-after-free in array_multisort() when the comparator mutates the array being sorted).

Fixed bug GH-22395 (base_convert() outputs at most 64 characters).

Fixed bug GH-22678 (Use-after-free in array_multisort() when the comparator mutates the array being sorted).

URI: Fixed behavior of Uri\WhatWg\Url wither methods with regards to empty opaque hosts. Fixed bug GH-22628 (Percent-encoding of caret in WHATWG URL paths is not performed). Fixed bug GH-22629 (WHATWG Validation error incorrect with empty host and non-empty userinfo).

Fixed behavior of Uri\WhatWg\Url wither methods with regards to empty opaque hosts.

Fixed bug GH-22628 (Percent-encoding of caret in WHATWG URL paths is not performed).

Fixed bug GH-22629 (WHATWG Validation error incorrect with empty host and non-empty userinfo).

Zip: Fixed bug GH-22649 (ZipArchive::setCommentName() and setCommentIndex() could crash after overwriting an entry and resetting its inherited unchanged ). Fixed bug GH-21705 (ZipArchive::getFromIndex() ignores ZipArchive::FL_UNCHANGED for deleted entries).

Fixed bug GH-22649 (ZipArchive::setCommentName() and setCommentIndex() could crash after overwriting an entry and resetting its inherited unchanged ).

Fixed bug GH-21705 (ZipArchive::getFromIndex() ignores ZipArchive::FL_UNCHANGED for deleted entries).

Core: Fixed bug GH-22280 (Incorrect compile error for goto to label preceding try/finally block). Fixed bug GH-22112 (Assertion when error handler throws during NaN to bool/string coercion).

Fixed bug GH-22280 (Incorrect compile error for goto to label preceding try/finally block).

Fixed bug GH-22112 (Assertion when error handler throws during NaN to bool/string coercion).

BCMath: Fixed issues with oversized allocations and signed overflow in bcround() and BcMath\Number::round().

Fixed issues with oversized allocations and signed overflow in bcround() and BcMath\Number::round().

Date: Fix incorrect recurrence check of DatePeriod::createFromISO8601String().

Fix incorrect recurrence check of DatePeriod::createFromISO8601String().

Exif: Read correct value for single and double tags.

Read correct value for single and double tags.

GD: Fixed bug GH-22121 (Double free in gdImageSetStyle() after overflow-triggered early return).

Fixed bug GH-22121 (Double free in gdImageSetStyle() after overflow-triggered early return).

Intl: Fix incorrect argument positions for invalid start/end arguments in transliterator_transliterate(). Fixed IntlTimeZone::getDisplayName() to synchronize object error state for invalid display types.

Fix incorrect argument positions for invalid start/end arguments in transliterator_transliterate().

Fixed IntlTimeZone::getDisplayName() to synchronize object error state for invalid display types.

Lexbor: Merge patch c3a6847.

Opcache: Fixed bug GH-22265 (Another tailcall vm_interrupt bug). Fixed bug GH-20469 (Unsafe inheritance cache replay with reentrant autoloading). Fixed bug GH-21972 (Corrupted variable type when a typed by-value return contains a reference wrapper).

Fixed bug GH-22265 (Another tailcall vm_interrupt bug).

Fixed bug GH-20469 (Unsafe inheritance cache replay with reentrant autoloading).

Fixed bug GH-21972 (Corrupted variable type when a typed by-value return contains a reference wrapper).

OpenSSL: Fixed bug GH-22187 (Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD). (CVE-2026-14355)

Fixed bug GH-22187 (Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD). (CVE-2026-14355)

Phar: Fixed a bypass of the magic ".phar" directory protection in Phar::addEmptyDir() for paths starting with "/.phar", while allowing non-magic directory names that merely the ".phar" prefix.

Fixed a bypass of the magic ".phar" directory protection in Phar::addEmptyDir() for paths starting with "/.phar", while allowing non-magic directory names that merely the ".phar" prefix.

Reflection: Preserve class-name case in ReflectionClass::getProperty() error messages and autoloading.

Preserve class-name case in ReflectionClass::getProperty() error messages and autoloading.

SOAP: Fixed bug GH-22218 (SoapServer::handle() crash on $_SERVER not being an array). Fixed bug GH-22285 (Soap server requires the raw input to be passed to $server->handle).

Fixed bug GH-22218 (SoapServer::handle() crash on $_SERVER not being an array).

Fixed bug GH-22285 (Soap server requires the raw input to be passed to $server->handle).

Sqlite: Fix error checks for column retrieval.

Fix error checks for column retrieval.

URI: Add LEXBOR_STATIC to CFLAGS_URI on Windows so ext/uri does not see LXB_API as __declspec(dllimport) when linked statically into PHP. Clean error logs before each Uri\WhatWg\Url wither call so that errors from wither calls are not returned the time a UrlValidationError is thrown.

Add LEXBOR_STATIC to CFLAGS_URI on Windows so ext/uri does not see LXB_API as __declspec(dllimport) when linked statically into PHP.

Clean error logs before each Uri\WhatWg\Url wit...