PHP 8.4.3 Release Announcement

The PHP development team announces the immediate availability of PHP 8.4.3. This is a bug fix release.

All PHP 8.4 users are encouraged to upgrade to this version.

For source downloads of PHP 8.4.3 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code

• PHP 8.4.3 (tar.gz)
  sha256: 45b88555b31487401b42c8bd36f2c45d84992bc93ae4c1a23d93bb3347984ecb
• PHP 8.4.3 (tar.bz2)
  sha256: d6b12379d1f1df216d1932840a31b14fed1e0fc7e8db1e9d1795f75a1e75ead9
• PHP 8.4.3 (tar.xz)
  sha256: 5c42173cbde7d0add8249c2e8a0c19ae271f41d8c47d67d72bdf91a88dcc7e4b

Change Log

• bcmath
  • Fixed bug GH-17049 (Correctly compare 0 and -0).
  • Fixed bug GH-17061 (Now Number::round() does not remove trailing zeros).
  • Fixed bug GH-17064 (Correctly round rounding mode with zero edge case).
  • Fixed bug GH-17275 (Fixed the calculation logic of dividend scale).
• core
  • Fixed bug OSS-Fuzz #382922236 (Duplicate dynamic properties in hooked object iterator properties table).
  • Fixed unstable get_iterator pointer for hooked classes in shm on Windows.
  • Fixed bug GH-17106 (ZEND_MATCH_ERROR misoptimization).
  • Fixed bug GH-17162 (zend_array_try_init() with dtor can cause engine UAF).
  • Fixed bug GH-17101 (AST->string does not reproduce constructor property promotion correctly).
  • Fixed bug GH-17200 (Incorrect dynamic prop offset in hooked prop iterator).
  • Fixed bug GH-17216 (Trampoline crash on error).
• dba
  • Skip test if inifile is disabled.
• dom
  • Fixed bug GH-17145 (DOM memory leak).
  • Fixed bug GH-17201 (Dom\TokenList issues with interned string replace).
  • Fixed bug GH-17224 (UAF in importNode).
• embed
  • Make build command for program using embed portable.
• ffi
  • Fixed bug #79075 (FFI header parser chokes on comments).
  • Fix memory leak on ZEND_FFI_TYPE_CHAR conversion failure.
  • Fixed bug GH-16013 and bug #80857 (Big endian issues).
• fileinfo
  • Fixed bug GH-17039 (PHP 8.4: Incorrect MIME content type).
• fpm
  • Fixed bug GH-13437 (FPM: ERROR: scoreboard: failed to lock (already locked)).
  • Fixed bug GH-17112 (Macro redefinitions).
  • Fixed bug GH-17208 (bug64539-status-json-encoding.phpt fail on 32-bits).
• gd
  • Fixed bug GH-16255 (Unexpected nan value in ext/gd/libgd/gd_filter.c).
  • Ported fix for libgd bug 276 (Sometimes pixels are missing when storing images as BMPs).
• gettext
  • Fixed bug GH-17202 (Segmentation fault ext/gettext/gettext.c bindtextdomain()).
• iconv
  • Fixed bug GH-17047 (UAF on iconv filter failure).
• ldap
  • Fixed bug GH-17280 (ldap_search() fails when $attributes array has holes).
• libxml
  • Fixed bug GH-17223 (Memory leak in libxml encoding handling).
• mbstring
  • Fixed bug GH-17112 (Macro redefinitions).
• opcache
  • opcache_get_configuration() properly reports jit_prof_threshold.
  • Fixed bug GH-17140 (Assertion failure in JIT trace exit with ZEND_FETCH_DIM_FUNC_ARG).
  • Fixed bug GH-17151 (Incorrect RC inference of op1 of FETCH_OBJ and INIT_METHOD_CALL).
  • Fixed bug GH-17246 (GC during SCCP causes segfault).
  • Fixed bug GH-17257 (UBSAN warning in ext/opcache/jit/zend_jit_vm_helpers.c).
• pcntl
  • Fix memory leak in cleanup code of pcntl_exec() when a non stringable value is encountered past the first entry.
• pgsql
  • Fixed bug GH-17158 (pg_fetch_result Shows Incorrect ArgumentCountError Message when Called With 1 Argument).
  • Fixed further ArgumentCountError for calls with flexible number of arguments.
• phar
  • Fixed bug GH-17137 (Segmentation fault ext/phar/phar.c).
• simplexml
  • Fixed bug GH-17040 (SimpleXML's unset can break DOM objects).
  • Fixed bug GH-17153 (SimpleXML crash when using autovivification on document).
• sockets
  • Fixed bug GH-16276 (socket_strerror overflow handling with INT_MIN).
  • Fixed overflow on SO_LINGER values setting, strengthening values check on SO_SNDTIMEO/SO_RCVTIMEO for socket_set_option().
• spl
  • Fixed bug GH-17198 (SplFixedArray assertion failure with get_object_vars).
  • Fixed bug GH-17225 (NULL deref in spl_directory.c).
• streams
  • Fixed bug GH-17037 (UAF in user filter when adding existing filter name due to incorrect error handling).
  • Fixed bug GH-16810 (overflow on fopen HTTP wrapper timeout value).
  • Fixed bug GH-17067 (glob:// wrapper doesn't cater to CWD for ZTS builds).
• windows
  • Hardened proc_open() against cmd.exe hijacking.
• xml
  • Fixed bug GH-1718 (unreachable program point in zend_hash).