CVS commit: pkgsrc/lang

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Fri Aug 28 15:18:33 UTC 2026

Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php84: distinfo

Log Message:
lang/php84: update to 8.4.25

PHP 8.4.25 (2026-08-27)

- Core:
  . Fixed bug GH-23088 (Stack overflow when comparing deeply nested arrays).
    (Lazizbek Ergashev)

- Date:
  . Fixed leak on double DatePeriod::__construct() call. (ilutov)

- DOM:
  . Fixed bug GH-23116 (Stack overflow when normalizing a deeply nested
    DOMDocument). (Lazizbek Ergashev)
  . Fixed bug GH-23117 (Stack overflow when normalizing a deeply nested
    Dom\XMLDocument). (Lazizbek Ergashev)
  . Fixed bug GH-22825 (DOMElement::setAttribute() fails silently when the DTD
    declares a default value for the attribute). (iliaal)
  . Fixed bug GH-22447 (UAF at dom_objects_free_storage when setting an
    attribute node that collides by local name with a namespaced
    attribute). (David Carlier)
  . Fixed bug GH-23120 (Stack overflow when comparing deeply nested DOM nodes
    with DOMNode::isEqualNode()). (Weilin Du)

- LibXML:
  . Fixed bug GH-22752 (Build failure with libxml 2.15). (David Carlier)

- MBString:
  . Fixed bug GH-22779 (mb_strrpos() returns the wrong position for a negative
    offset in a non-UTF-8 encoding). (Eyüp Can Akman)
  . Fixed bug GH-21036 (mb_ereg_search_getregs() crashes after mb_eregi()
    invalidates the regex cache). (Matthias Goergens)

- Opcache:
  . Fixed bug GH-22857 (Function JIT emits wrong code for FETCH_OBJ_FUNC_ARG on a
    property hook getter, losing register-held variables). (Zhao Hao)

- OpenSSL:
  . Fix missing error check on invalid alpn protocols. (ndossche)

- Opcache:
  . Fixed bug GH-22916 (Preserve parent regs in zend_jit_deoptimizer_start()).
    (Arnaud)

- PCRE:
  . Fixed bug GH-21134 (Crash with \C + UTF-8). Using \C in UTF-8 patterns is
    now forbidden. (Arnaud)

- Reflection:
  . Fixed bug GH-22905 (Reflection exception messages truncate on null bytes).
    (DanielEScherzer)
  . Fixed ReflectionProperty::isLazy() and skipLazyInitialization() using the
    parent slot when a child class hooks an inherited property. (iliaal)
  . Fixed segfault in ReflectionMethod::createFromMethodName() on an
    uninstantiable subclass. (iliaal)

- Session:
  . Fix corruption in mod_mm. (ndossche)
  . Fixed bug GH-23043 (broken session id code can cause zend_mm_heap
    corrupted). (ndossche)

- SimpleXML:
  . Fixed integer element offsets that cannot resolve aliasing an existing
    element. (iliaal)
  . Fixed segfault when comparing uninitialized SimpleXMLElement
    instances. (iliaal)

- Sockets:
  . Fixed various memory related issues in ext/sockets. (David Carlier)

- SQLite:
  . Fix leak when trying to close db if blob stream is still open. (ndossche)

- Standard:
  . Fixed bug GH-23111 (Stack overflow in array_walk_recursive() with deeply
    nested arrays). (Lazizbek Ergashev)
  . Fixed bug GH-23113 (Stack overflow in array_replace_recursive() with deeply
    nested arrays). (Lazizbek Ergashev)
  . Fixed bug GH-23115 (Stack overflow in compact() with deeply nested
    arrays). (Lazizbek Ergashev)
  . Fixed stack overflow in count() with COUNT_RECURSIVE and deeply nested
    arrays. (Lazizbek Ergashev)

- Streams:
  . Fixed bug GH-15836 (Use-after-free when a user stream filter accesses
    $this->stream during the close flush). (iliaal)

- Sysvshm:
  . Fixed out-of-bounds write when shm_attach() opens an existing segment with
    a size larger than the segment actually is. (David Carlier)

- XSL:
  . Fixed use-after-free when a DOMDocument subclass __clone() retains the
    stylesheet copy made by XSLTProcessor::importStylesheet(). (iliaal)

- Zip:
  . Fixed ZipArchive::addGlob() and ZipArchive::addPattern() ignoring their
    default options when no options array is given. (David Carlier)


To generate a diff of this commit:
cvs rdiff -u -r1.511 -r1.512 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.24 -r1.25 pkgsrc/lang/php84/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.511 pkgsrc/lang/php/phpversion.mk:1.512
--- pkgsrc/lang/php/phpversion.mk:1.511 Fri Jul 31 04:55:12 2026
+++ pkgsrc/lang/php/phpversion.mk       Fri Aug 28 15:18:33 2026
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.511 2026/07/31 04:55:12 taca Exp $
+# $NetBSD: phpversion.mk,v 1.512 2026/08/28 15:18:33 taca Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -112,7 +112,7 @@ PHP56_VERSION=      5.6.40
 PHP74_VERSION= 7.4.33
 PHP82_VERSION= 8.2.33
 PHP83_VERSION= 8.3.33
-PHP84_VERSION= 8.4.24
+PHP84_VERSION= 8.4.25
 PHP85_VERSION= 8.5.9
 
 _VARGROUPS+=   php

Index: pkgsrc/lang/php84/distinfo
diff -u pkgsrc/lang/php84/distinfo:1.24 pkgsrc/lang/php84/distinfo:1.25
--- pkgsrc/lang/php84/distinfo:1.24     Fri Jul 31 04:52:14 2026
+++ pkgsrc/lang/php84/distinfo  Fri Aug 28 15:18:33 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.24 2026/07/31 04:52:14 taca Exp $
+$NetBSD: distinfo,v 1.25 2026/08/28 15:18:33 taca Exp $
 
-BLAKE2s (php-8.4.24.tar.xz) = 4ad7e4b40a148a6bda9732d6df81958447089bae8ab232a8ae22331ce04bca52
-SHA512 (php-8.4.24.tar.xz) = 4db6ba60459148f23445c0f0f20d9ac9828b80b55033e21c0d374f2c544d695ee925825466d538a8d1befde486054d90c5eb375687000c709b03b224b8fdd022
-Size (php-8.4.24.tar.xz) = 13752320 bytes
+BLAKE2s (php-8.4.25.tar.xz) = d475e6fed922520d3f309914f34e70b3d66a7cdf84e6309e536ce476c6bbaaf0
+SHA512 (php-8.4.25.tar.xz) = 8966ccaa8e1be9cf19281a46dc967ebcaf86ddede80708dcd5015e0c381a427a1a6081aa0ab25df8774395a2d934d558fabc7d5af2cf22c39ad96dd06ad66689
+Size (php-8.4.25.tar.xz) = 13759432 bytes
 SHA1 (patch-build_Makefile.global) = da9577733497d026315b4702cb19d673053148ed
 SHA1 (patch-build_php.m4) = bb72e38ab391ad587962940ba85e8d4de8633dca
 SHA1 (patch-configure.ac) = 2bdd1d2b1def552032dba5fbeb6140922b72c880