The fourth release candidate of PHP 8.4 has addressed multiple bugs across various components, including BcMath, Core, Date, DOM, FPM, GD, GMP, Opcache, OpenSSL, PDO, PDO_ODBC, Reflection, Session, SPL, and SysVShm.

php-8.4.0RC4

- BcMath:
. Fixed bug GH-16265 (Added early return case when result is 0)
(Saki Takamachi).
. Fixed bug GH-16262 (Fixed a bug where size_t underflows) (Saki Takamachi).

- Core:
. Fixed bug GH-16574 (Incorrect error "undefined method" messages).
(nielsdos)
. Fixed bug GH-16577 (EG(strtod_state).freelist leaks with opcache.preload).
(nielsdos)
. Fixed bug GH-16615 (Assertion failure in zend_std_read_property). (Arnaud)
. Fixed bug GH-16342 (Added ReflectionProperty::isLazy()). (Arnaud)
. Fixed bug GH-16648 (Use-after-free during array sorting). (ilutov)

- Date:
. Fixed bug GH-14732 (date_sun_info() fails for non-finite values). (cmb)

- DOM:
. Fixed bug GH-16594 (Assertion failure in DOM -> before). (nielsdos)
. Fixed bug GH-16593 (Assertion failure in DOM->replaceChild). (nielsdos)
. Fixed bug GH-16595 (Another UAF in DOM -> cloneNode). (nielsdos)

- FPM:
. Fixed bug GH-16628 (FPM logs are getting corrupted with this log
statement). (nielsdos)

- GD:
. Fixed bug GH-16559 (UBSan abort in ext/gd/libgd/gd_interpolation.c:1007).
(nielsdos)

- GMP:
. Fixed segfaults and other issues related to operator overloading with
GMP objects. (Girgias)

- Opcache:
. Fixed bug GH-16572 (Incorrect result with reflection in low-trigger JIT).
(nielsdos)

- OpenSSL:
. Fix various memory leaks on error conditions in openssl_x509_parse().
(nielsdos)

- PDO:
. Fixed bug GH-16167 (Prevent mixing PDO sub-classes with different DSN).
(kocsismate)
. Fixed bug GH-16314 ("Pdo\Mysql object is uninitialized" when opening a
persistent connection). (kocsismate)

- PDO_ODBC:
. Fixed bug GH-16450 (PDO_ODBC can inject garbage into field values). (cmb)

- Reflection:
. Fixed bug GH-16601 (Memory leak in Reflection constructors). (nielsdos)

- Session:
. Fixed bug GH-16590 (UAF in session_encode()). (nielsdos)

- SPL:
. Fixed bug GH-16588 (UAF in Observer->serialize). (nielsdos)
. Fix GH-16477 (Segmentation fault when calling __debugInfo() after failed
SplFileObject::__constructor). (Girgias)
. Fixed bug GH-16589 (UAF in SplDoublyLinked->serialize()). (nielsdos)
. Fixed bug GH-16604 (Memory leaks in SPL constructors). (nielsdos)
. Fixed bug GH-16646 (UAF in ArrayObject::unset() and
ArrayObject::exchangeArray()). (ilutov)

- SysVShm:
. Fixed bug GH-16591 (Assertion error in shm_put_var). (nielsdos, cmb)

Release php-8.4.0RC4 · php/php-src