Skip to content

[pull] master from php:master#847

Merged
pull[bot] merged 9 commits into
dolfly:masterfrom
php:master
Jun 23, 2026
Merged

[pull] master from php:master#847
pull[bot] merged 9 commits into
dolfly:masterfrom
php:master

Conversation

@pull

@pull pull Bot commented Jun 23, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

iliaal and others added 9 commits June 23, 2026 08:24
ps_call_handler() returned on the recursive-call rejection branch before
reaching the argv cleanup loop, leaking one ref per owned argument. The
read/write/destroy/validate_sid/update_timestamp callers copy the session
id and data into argv and rely on ps_call_handler() to release them, so a
handler that re-enters session machinery (for example calling
session_destroy() from within a write handler) leaks those strings. Fold
the handler call into an else branch so the cleanup loop always runs.

Closes GH-22382
* PHP-8.4:
  Fix session save-handler argv leak on recursive rejection
* PHP-8.5:
  Fix session save-handler argv leak on recursive rejection
…#22406)

By using `ZEND_DOUBLE_MAX_LENGTH` instead of `(sizeof(double) << 3) + 1` we can fix the bug that base_convert() truncates output at 64 characters.

Fixes #22395
* PHP-8.4:
  Fix GH-22395: Avoid truncating base_convert() output at 64 characters (#22406)
* PHP-8.5:
  Fix GH-22395: Avoid truncating base_convert() output at 64 characters (#22406)
Use a shared helper for checking whether a path refers to the magic .phar
directory. Treat .phar itself and paths below it as magic, while allowing
non-magic entries that merely use a .phar-prefixed name such as .pharx.

Apply the same check across creation, copying, ArrayAccess, stream lookup,
directory iteration, extraction, and mounts so these paths are handled
consistently.

Co-authored-by: Gina Peter Banyard <girgias@php.net>

Closes #22372
* PHP-8.4:
  ext/phar: Fix .phar-prefixed non-magic directory handling (#22372)
* PHP-8.5:
  ext/phar: Fix .phar-prefixed non-magic directory handling (#22372)
@pull pull Bot locked and limited conversation to collaborators Jun 23, 2026
@pull pull Bot added the ⤵️ pull label Jun 23, 2026
@pull pull Bot merged commit 324b3ba into dolfly:master Jun 23, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants