All pull requests

Pull requests

• getopt(): protect $argv iteration against reentrant __toString()

  #2641·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• Serialize getprotobyname()/getprotobynumber() under ZTS

  #2640·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• Reject an out of range $protocol in getprotobynumber()

  #2639·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• Reject an out of range $port in getservbyport()

  #2638·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• gettext()/dgettext()/dcgettext(): reject $message with an embedded null byte

  #2637·lacatoire opened Sep 28, 2026Owner·

  ·

• glob(): make GLOB_ERR abort on a directory read error

  #2636·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• glob(): don't drop GLOB_NOCHECK's synthetic entry under GLOB_ONLYDIR

  #2635·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• glob(): expose GLOB_LIMIT so callers can bound the result count

  #2634·lacatoire opened Sep 28, 2026Owner·

  ·

• Fix curl_multi_errno() returning a stale error code

  #2633·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• ext/curl: fix curl_multi_close() reentrancy through a handle's own destructor

  #2632·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• ext/curl: guard curl_multi_close() against being called from a callback

  #2631·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• Fix curl_getinfo() CURLINFO_OFF_T truncating to native long

  #2630·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• Fix curl_getinfo() HTTPAUTH_USED test comparing against the wrong key

  #2629·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• Fix segfault in curl_getinfo(CURLINFO_TLS_SESSION / CURLINFO_TLS_SSL_PTR)

  #2628·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• Fix curl_exec() reporting success on a failed final write flush

  #2627·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• fix(curl): reject curl_exec()/curl_multi_add_handle() reentrant on the same handle

  #2616·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• fix(curl): verify stream handlers even when a callback throws or never fires

  #2615·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• fix(curl): clear curl_error() message when curl_setopt() is rejected

  #2614·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• fix(curl): refcount the CURLFile mime callback arg to survive cloning

  #2613·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• fix(curl): clear cached POSTFIELDS mime structure on reset or field change

  #2612·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• fix(curl): copy CURLOPT_STDERR stream reference on handle clone

  #2611·lacatoire opened Sep 28, 2026Owner·

  ·
  1

• fix(standard): guard array_replace_recursive() against reentrant destructors at every recursion depth

  #2556·lacatoire opened Sep 25, 2026Owner·

  ·

• fix(standard): scan the full key-class run in array_intersect_uassoc()'s value tie-break

  #2555·lacatoire opened Sep 25, 2026Owner·

  ·

• fix(standard): retry getpwnam_r() on ERANGE, not EAGAIN, in php_get_uid_by_name()

  #2554·lacatoire opened Sep 25, 2026Owner·

  ·

• fix(com_dotnet): fix sink leak and uninitialized HashTable in com_event_sink()

  #2553·lacatoire opened Sep 25, 2026Owner·

  ·