Issues

• ext/standard: Skip mbrlen() for ASCII bytes in php_mblen()

  ABI breakExtension: standard
  Unread
  php/php-src#24207·ArtUkrainskiy opened Oct 8, 2026 · Updated Oct 8, 2026

• ext/standard: Hold argv while getopt() converts its entries

  Extension: standard
  Unread
  php/php-src#24205·iliaal opened Oct 8, 2026 · Updated Oct 8, 2026

• ext/standard: Validate the bcrypt cost before reading it

  Extension: standard
  Unread
  php/php-src#24203·iliaal opened Oct 8, 2026 · Updated Oct 8, 2026

• ext/standard: Discard a stream filter when onCreate() throws

  Extension: standard
  Unread
  php/php-src#24202·iliaal opened Oct 8, 2026 · Updated Oct 8, 2026

• Bug: Memory leak of the last response headers after a nested HTTP request

  Extension: standard
  Unread
  php/php-src#24201·EdmondDantes opened Oct 8, 2026 · Updated Oct 8, 2026

• Fix signed-to-unsigned conversion in TIFF dimension parsing

  Extension: standard
  Unread
  php/php-src#24197·Ti-Mis opened Oct 8, 2026 · Updated Oct 8, 2026
  1

• Fix use-after-free when pclose() closes a stream from its user filter

  Extension: standard
  Unread
  php/php-src#24175·EdmondDantes opened Oct 7, 2026 · Updated Oct 7, 2026
  3

• Fix GH-24173: Sockets left in non-blocking mode on Windows

  Extension: standard
  Unread
  php/php-src#24174·vibbow opened Oct 7, 2026 · Updated Oct 7, 2026

• Use-after-free when a user wrapper closes the other stream during stream_copy_to_stream()

  Extension: standard
  Unread
  php/php-src#24169·EdmondDantes opened Oct 6, 2026 · Updated Oct 6, 2026

• Use-after-free in stream_filter_remove() called from a stream callback

  ABI breakExtension: standard
  Unread
  php/php-src#24168·EdmondDantes opened Oct 6, 2026 · Updated Oct 7, 2026
  6

• Fix heap overflow when a read filter changes the stream's chunk size

  Extension: standard
  Unread
  php/php-src#24163·EdmondDantes opened Oct 6, 2026 · Updated Oct 6, 2026

• std: refactor userfilter_filter() to use zend_call_method_if_exists()

  Extension: standard
  Unread
  php/php-src#24162·Girgias opened Oct 6, 2026 · Updated Oct 6, 2026·Draft

• array_push(): Append to packed arrays in bulk

  Extension: standard
  Unread
  php/php-src#24157·mehmetcansahin opened Oct 6, 2026 · Updated Oct 8, 2026
  7

• ext/standard: Stop at the first non-name byte in html_entity_decode()

  Extension: standard
  Unread
  php/php-src#24142·ArtUkrainskiy opened Oct 5, 2026 · Updated Oct 6, 2026
  1

• Fix GH-23898: Keep user_filter_map alive until streams are closed

  ABI breakCategory: StreamsExtension: standard
  Unread
  php/php-src#24140·bukka opened Oct 5, 2026 · Updated Oct 5, 2026

• Fix stale read buffer length in stream filter flush

  Extension: standard
  Unread
  php/php-src#24136·bukka opened Oct 5, 2026 · Updated Oct 5, 2026

• ext/standard: Stop get_browser() looping on browscap parent cycles

  Extension: standard
  Unread
  php/php-src#24127·iliaal opened Oct 4, 2026 · Updated Oct 4, 2026

• ext/standard: Check opened copy endpoints before truncation

  Extension: standard
  Unread
  php/php-src#24101·iliaal opened Oct 3, 2026 · Updated Oct 3, 2026

• ext/standard: Honor sprintf flags for non-finite values

  Extension: standard
  Unread
  php/php-src#24097·iliaal opened Oct 3, 2026 · Updated Oct 3, 2026

• ext/standard: bcrypt-sha256 password hash

  ABI breakCategory: Build SystemExtension: hashExtension: standardRFC
  Unread
  php/php-src#24073·Sjord opened Oct 2, 2026 · Updated Oct 6, 2026
  22

• Report Io\Poll level watchers with buffered stream data

  Category: IOExtension: standardSTF: Streams
  Unread
  php/php-src#24017·bukka opened Sep 30, 2026 · Updated Oct 5, 2026

• ext/standard: Pin lazy proxy instances while reading properties

  Extension: standard
  Unread
  php/php-src#24005·iliaal opened Sep 29, 2026 · Updated Sep 29, 2026

• IO hooks PoC

  ABI breakCategory: Build SystemCategory: CICategory: DNSCategory: EngineCategory: FilesystemCategory: IOCategory: StreamsExtension: curlExtension: hashExtension: libxmlExtension: mysqliExtension: mysqlndExtension: opensslExtension: pcntlExtension: reflectionExtension: socketsExtension: standardExtension: xmlreaderExtension: xmlwriterSTF: Streams
  Unread
  php/php-src#23997·bukka opened Sep 29, 2026 · Updated Oct 8, 2026·Draft
  11

• windows: support PGO with clang

  ABI breakCategory: Build SystemExtension: com_dotnetExtension: intlExtension: opcacheExtension: pdo_firebirdExtension: standard
  Unread
  php/php-src#23992·henderkes opened Sep 29, 2026 · Updated Oct 2, 2026·Draft
  3

• ext/standard: Don't share the unserialize() context with enum autoloaders

  Extension: standard
  Unread
  php/php-src#23981·nicolas-grekas opened Sep 29, 2026 · Updated Oct 6, 2026