PHP 8.4.6 Release Announcement

The PHP development team announces the immediate availability of PHP 8.4.6. This is a bug fix release.

All PHP 8.4 users are encouraged to upgrade to this version.

For source downloads of PHP 8.4.6 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code

• PHP 8.4.6 (tar.gz)
  sha256: 49be0f2f45c9b07c9b921d023bf28b1fc781700c829869725681300e72e3faa8
• PHP 8.4.6 (tar.bz2)
  sha256: 9cf2734509b603f6589617ab52a9712a03e0fe059951cddd2d4623df4bf7c6c6
• PHP 8.4.6 (tar.xz)
  sha256: 089b08a5efef02313483325f3bacd8c4fe311cf1e1e56749d5cc7d059e225631

Change Log

• bcmath
  • Fixed pointer subtraction for scale.
• core
  • Fixed property hook backing value access in multi-level inheritance.
  • Fixed accidentally inherited default value in overridden virtual properties.
  • Fixed bug GH-17376 (Broken JIT polymorphism for property hooks added to child class).
  • Fixed bug GH-17913 (ReflectionFunction::isDeprecated() returns incorrect results for closures created from magic __call()).
  • Fixed bug GH-17941 (Stack-use-after-return with lazy objects and hooks).
  • Fixed bug GH-17988 (Incorrect handling of hooked props without get hook in get_object_vars()).
  • Fixed bug GH-17998 (Skipped lazy object initialization on primed SIMPLE_WRITE cache).
  • Fixed bug GH-17998 (Assignment to backing value in set hook of lazy proxy calls hook again).
  • Fixed bug GH-17961 (use-after-free during dl()'ed module class destruction).
  • Fixed bug GH-15367 (dl() of module with aliased class crashes in shutdown).
  • Fixed OSS-Fuzz #403308724.
  • Fixed bug GH-13193 again (Significant performance degradation in 'foreach').
• dba
  • Fixed assertion violation when opening the same file with dba_open multiple times.
• dom
  • Fixed bug GH-17991 (Assertion failure dom_attr_value_write).
  • Fix weird unpack behaviour in DOM.
  • Fixed bug GH-18090 (DOM: Svg attributes and tag names are being lowercased).
  • Fix xinclude destruction of live attributes.
• fuzzer
  • Fixed bug GH-18081 (Memory leaks in error paths of fuzzer SAPI).
• gd
  • Fixed bug GH-17984 (calls with arguments as array with references).
• ldap
  • Fixed bug GH-18015 (Error messages for ldap_mod_replace are confusing).
• mbstring
  • Fixed bug GH-17989 (mb_output_handler crash with unset http_output_conv_mimetypes).
• opcache
  • Fixed bug GH-15834 (Segfault with hook "simple get" cache slot and minimal JIT).
  • Fixed bug GH-17966 (Symfony JIT 1205 assertion failure).
  • Fixed bug GH-18037 (SEGV Zend/zend_execute.c).
  • Fixed bug GH-18050 (IN_ARRAY optimization in DFA pass is broken).
  • Fixed bug GH-18113 (stack-buffer-overflow ext/opcache/jit/ir/ir_sccp.c).
  • Fixed bug GH-18112 (NULL access with preloading and INI option).
  • Fixed bug GH-18107 (Opcache CFG jmp optimization with try-finally breaks the exception table).
• pdo
  • Fix memory leak when destroying PDORow.
• pgsql
  • Fixed bug GH-18148 (pg_copy_from() regression with explicit \n terminator due to wrong offset check).
• standard
  • Fix memory leaks in array_any() / array_all().
• soap
  • Fixed bug #66049 (Typemap can break parsing in parse_packet_soap leading to a segfault) .
• spl
  • Fixed bug GH-18018 (RC1 data returned from offsetGet causes UAF in ArrayObject).
• treewide
  • Fixed bug GH-17736 (Assertion failure zend_reference_destroy()).
• windows
  • Fixed bug GH-17836 (zend_vm_gen.php shouldn't break on Windows line endings).