CVS commit: pkgsrc/lang

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Fri Aug 28 15:19:43 UTC 2026

Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php85: distinfo

Log Message:
lang/php85: update to 8.5.10

PHP 8.5.10 (2026-08-27)

- Core:
  . Fixed bug GH-22782 (Const expr FCC crashes under preloading). (Arnaud)
  . Fixed bug GH-23088 (Stack overflow when comparing deeply nested arrays).
    (Lazizbek Ergashev)

- Date:
  . Fixed leak on double DatePeriod::__construct() call. (ilutov)

- DOM:
  . Fixed bug GH-23116 (Stack overflow when normalizing a deeply nested
    DOMDocument). (Lazizbek Ergashev)
  . Fixed bug GH-23117 (Stack overflow when normalizing a deeply nested
    Dom\XMLDocument). (Lazizbek Ergashev)
  . Fixed bug GH-22825 (DOMElement::setAttribute() fails silently when the DTD
    declares a default value for the attribute). (iliaal)
  . Fixed bug GH-23120 (Stack overflow when comparing deeply nested DOM nodes
    with DOMNode::isEqualNode()). (Weilin Du)

- Exif:
  . Fixed exif_read_data() allocating a HEIF meta box larger than the file
    it came from. (iliaal)

- Intl:
  . Fixed IntlListFormatter::__construct() leaving stale global error state
    after successful calls. (Weilin Du)

- Opcache:
  . Fixed GH-22693 (DT_TEXTREL in JIT-generated TLS access on x86_64).
    (David Carlier)
  . Fixed bug GH-22763 (JIT fails to clear ZREG_TYPE_ONLY after setting reg).
    (Arnaud)
  . Fixed bug GH-22857 (Function JIT emits wrong code for FETCH_OBJ_FUNC_ARG on
    a property hook getter, losing register-held variables). (Zhao Hao)
  . Fixed bug GH-22916 (Preserve parent regs in zend_jit_deoptimizer_start()).
    (Arnaud)

- OpenSSL:
  . Fix missing error check on invalid alpn protocols. (ndossche)

- MBString:
  . Fixed bug GH-22779 (mb_strrpos() returns the wrong position for a negative
    offset in a non-UTF-8 encoding). (Eyüp Can Akman)
  . Fixed bug GH-21036 (mb_ereg_search_getregs() crashes after mb_eregi()
    invalidates the regex cache). (Matthias Goergens)

- PCRE:
  . Fixed bug GH-21134 (Crash with \C + UTF-8). Using \C in UTF-8 patterns is
    now forbidden. (Arnaud)

- PDO_ODBC:
  . Fixed bug GH-23016 (NULL values in long columns come back as garbage
    binary strings). (Calvin Buckley, iliaal)

- PDO_PGSQL:
  . Fixed several lazy fetch (PDO::ATTR_PREFETCH => 0) defects: an infinite
    loop when cleaning up a fetch left in a COPY, a use-after-free when a
    statement with emulated or disabled prepares is destroyed, a connection
    left busy for the next fetch, and rows delivered from a result another
    statement took over. (KentarouTakeda)

- Reflection:
  . Fixed bug GH-22905 (Reflection exception messages truncate on null bytes).
    (DanielEScherzer)
  . Fixed ReflectionProperty::isLazy() and skipLazyInitialization() using the
    parent slot when a child class hooks an inherited property. (iliaal)
  . Fixed segfault in ReflectionMethod::createFromMethodName() on an
    uninstantiable subclass. (iliaal)

- Session:
  . Fix corruption in mod_mm. (ndossche)
  . Fixed bug GH-23043 (broken session id code can cause zend_mm_heap
    corrupted). (ndossche)

- SimpleXML:
  . Fixed integer element offsets that cannot resolve aliasing an existing
    element. (iliaal)
  . Fixed segfault when comparing uninitialized SimpleXMLElement
    instances. (iliaal)

- Sockets:
  . Fixed socket_set_option() validation error messages for UDP_SEGMENT and
    SO_LINGER options. (Weilin Du)
  . Fixed various memory related issues in ext/sockets. (David Carlier)

- SQLite:
  . Fix leak when trying to close db if blob stream is still open. (ndossche)

- Standard:
  . Fixed bug GH-23111 (Stack overflow in array_walk_recursive() with deeply
    nested arrays). (Lazizbek Ergashev)
  . Fixed bug GH-23113 (Stack overflow in array_replace_recursive() with deeply
    nested arrays). (Lazizbek Ergashev)
  . Fixed bug GH-23115 (Stack overflow in compact() with deeply nested
    arrays). (Lazizbek Ergashev)

- Streams:
  . Fixed bug GH-15836 (Use-after-free when a user stream filter accesses
    $this->stream during the close flush). (iliaal)

- XSL:
  . Fixed use-after-free when a DOMDocument subclass __clone() retains the
    stylesheet copy made by XSLTProcessor::importStylesheet(). (iliaal)


To generate a diff of this commit:
cvs rdiff -u -r1.512 -r1.513 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/php85/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.512 pkgsrc/lang/php/phpversion.mk:1.513
--- pkgsrc/lang/php/phpversion.mk:1.512 Fri Aug 28 15:18:33 2026
+++ pkgsrc/lang/php/phpversion.mk       Fri Aug 28 15:19:43 2026
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.512 2026/08/28 15:18:33 taca Exp $
+# $NetBSD: phpversion.mk,v 1.513 2026/08/28 15:19:43 taca Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -113,7 +113,7 @@ PHP74_VERSION=      7.4.33
 PHP82_VERSION= 8.2.33
 PHP83_VERSION= 8.3.33
 PHP84_VERSION= 8.4.25
-PHP85_VERSION= 8.5.9
+PHP85_VERSION= 8.5.10
 
 _VARGROUPS+=   php
 _USER_VARS.php=        PHP_VERSION_DEFAULT

Index: pkgsrc/lang/php85/distinfo
diff -u pkgsrc/lang/php85/distinfo:1.9 pkgsrc/lang/php85/distinfo:1.10
--- pkgsrc/lang/php85/distinfo:1.9      Fri Jul 31 04:55:12 2026
+++ pkgsrc/lang/php85/distinfo  Fri Aug 28 15:19:43 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.9 2026/07/31 04:55:12 taca Exp $
+$NetBSD: distinfo,v 1.10 2026/08/28 15:19:43 taca Exp $
 
-BLAKE2s (php-8.5.9.tar.xz) = 3bbdda7ed7a9f574ad1129a421f76802d9c0e3a9cd56637ea3264e07751e1800
-SHA512 (php-8.5.9.tar.xz) = 2567bf804e308d27e74430757e41e3a37b70ec65bd8b10bc675c5b180ad31bd2bdcc75f64d984d23dbf6b6e580ed47120f1e77874372da352ee17db17a23dec1
-Size (php-8.5.9.tar.xz) = 14419304 bytes
+BLAKE2s (php-8.5.10.tar.xz) = 1198067bbebfa69922390cd81d742ea5da7095f14220e89cdc6f9875693dab34
+SHA512 (php-8.5.10.tar.xz) = a8b901acd4cbb4f86d0ce0a4f04e4c1867088f9682150bc991f0151b1e768889ab1b15002228873705c8aba9499beaa1cec8e5a5abd4b502877b2c62c9992745
+Size (php-8.5.10.tar.xz) = 14455696 bytes
 SHA1 (patch-build_Makefile.global) = 570d813a05626f633e2ce380ab6668fdc7e8f030
 SHA1 (patch-build_php.m4) = bb72e38ab391ad587962940ba85e8d4de8633dca
 SHA1 (patch-configure.ac) = 20c95915d5e4aa622d04ee923c626789c44fef11