head	1.15;
access;
symbols
	pkgsrc-2026Q3:1.12.0.2
	pkgsrc-2026Q3-base:1.12
	pkgsrc-2026Q2:1.11.0.4
	pkgsrc-2026Q2-base:1.11
	pkgsrc-2026Q1:1.11.0.2
	pkgsrc-2026Q1-base:1.11
	pkgsrc-2025Q4:1.9.0.2
	pkgsrc-2025Q4-base:1.9
	pkgsrc-2025Q3:1.7.0.2
	pkgsrc-2025Q3-base:1.7
	pkgsrc-2025Q2:1.6.0.2
	pkgsrc-2025Q2-base:1.6
	pkgsrc-2025Q1:1.1.0.2
	pkgsrc-2025Q1-base:1.1;
locks; strict;
comment	@# @;


1.15
date	2026.09.29.06.06.17;	author wiz;	state Exp;
branches;
next	1.14;
commitid	qal4xgy1mkCzPtXG;

1.14
date	2026.09.27.11.37.20;	author tnn;	state Exp;
branches;
next	1.13;
commitid	QJQtnAYom0oZIfXG;

1.13
date	2026.09.24.15.44.50;	author taca;	state Exp;
branches;
next	1.12;
commitid	qlrMExEbALCddTWG;

1.12
date	2026.09.02.19.03.13;	author wiz;	state Exp;
branches;
next	1.11;
commitid	vXszxoxOqka005UG;

1.11
date	2026.01.19.15.32.17;	author taca;	state Exp;
branches;
next	1.10;
commitid	MCri1JFAi6aa71rG;

1.10
date	2026.01.07.08.47.40;	author wiz;	state Exp;
branches;
next	1.9;
commitid	1wQ3ICD8eebefrpG;

1.9
date	2025.11.23.12.40.14;	author taca;	state Exp;
branches;
next	1.8;
commitid	gXkf5vpI6KFGZFjG;

1.8
date	2025.10.23.20.38.05;	author wiz;	state Exp;
branches;
next	1.7;
commitid	1V2hBZn9ypXaCJfG;

1.7
date	2025.07.04.01.21.45;	author taca;	state Exp;
branches;
next	1.6;
commitid	qGlr0OMPgEMENm1G;

1.6
date	2025.06.11.14.58.27;	author taca;	state Exp;
branches
	1.6.2.1;
next	1.5;
commitid	kK3M1Ujj4BWR3uYF;

1.5
date	2025.05.19.15.04.50;	author taca;	state Exp;
branches;
next	1.4;
commitid	NPWrzaDmluRZPwVF;

1.4
date	2025.05.17.05.37.25;	author taca;	state Exp;
branches;
next	1.3;
commitid	Rcsevkfr51qkLdVF;

1.3
date	2025.05.14.15.54.26;	author jperkin;	state Exp;
branches;
next	1.2;
commitid	LlyCFvBHXA9ufTUF;

1.2
date	2025.04.17.21.51.22;	author wiz;	state Exp;
branches;
next	1.1;
commitid	xcIXAVA292fk6sRF;

1.1
date	2025.02.22.15.27.55;	author taca;	state Exp;
branches;
next	;
commitid	09vYOZ688SojJtKF;

1.6.2.1
date	2025.07.04.15.25.33;	author maya;	state Exp;
branches;
next	;
commitid	HEj8faKBaOLstr1G;


desc
@@


1.15
log
@*: recursive bump for pcre2 10.49
@
text
@# $NetBSD: Makefile,v 1.14 2026/09/27 11:37:20 tnn Exp $

#
# We can't omit PKGNAME here to handle PKG_OPTIONS.
#
PKGNAME=		${PHP_PKG_PREFIX}-${PHP_VERSION}
PKGREVISION=		2
CATEGORIES=		lang

COMMENT=		PHP Hypertext Preprocessor version 8.4
LICENSE=		php

TEST_TARGET=		test

USE_TOOLS+=		autoconf gmake lex
LIBTOOL_OVERRIDE=	# empty

PHP_VERSIONS_ACCEPTED=	84

CONFLICTS+=		php-[0-9]*
SUPERSEDES+=		php>=8.4<8.5

.include "Makefile.php"

CGIDIR=			${PREFIX}/libexec/cgi-bin
MESSAGE_SUBST+=		CGIDIR=${CGIDIR} PHP_VER=${PHP_VER}

CONFIGURE_ENV+=		lt_cv_path_SED=${SED:Q}
MAKE_ENV+=		INSTALL_ROOT=${DESTDIR}

CONF_FILES=		${PHP_EGDIR}/php.ini-production ${PKG_SYSCONFDIR}/php.ini
PLIST_SUBST+=		PHPEXTDIR="${PHP_EXTENSION_DIR}"

# taken from devel/pkgconf/Makefile
PKGCONFIG_PATHS=	${PREFIX}/lib/pkgconfig
PKGCONFIG_PATHS+=	${PREFIX}/share/pkgconfig
PKGCONFIG_PATHS+=	/usr/lib/pkgconfig

# At this point, PREFIX is not set yet.
.if ${LOCALBASE} != ${X11BASE}
PKGCONFIG_PATHS+=	${X11BASE}/lib/pkgconfig
.endif

PHP_PKGCONFIG_PATH=	${PKGCONFIG_PATHS:ts:}

REPLACE_PHP=		ext/phar/phar/phar.php run-tests.php

INSTALLATION_DIRS+=	${CGIDIR} ${PHP_EXTENSION_DIR} ${PHP_EGDIR} \
			${PHP_SHAREDIR}

# Make sure modules can link correctly
.if ${OPSYS} == "Darwin"
INSTALL_UNSTRIPPED=	yes
.endif

# Darwin < 9 (Mac OS X < 10.5 "Leopard") doesn't have gethostuuid(2)
# and lacks the zone memory allocator
.if !empty(MACHINE_PLATFORM:MDarwin-[0-8].*-*)
CFLAGS+=	-DSQLITE_ENABLE_LOCKING_STYLE=0 -DSQLITE_WITHOUT_ZONEMALLOC
.endif

pre-configure:
	cd ${WRKSRC} && ${PKGSRC_SETENV} ${CONFIGURE_ENV} autoconf -f

post-install:
	cd ${WRKSRC}; ${INSTALL_DATA} php.ini-development php.ini-production \
		${DESTDIR}${PREFIX}/${PHP_EGDIR}

.include "../../lang/php/phpversion.mk"
.include "../../mk/bsd.pkg.mk"
@


1.14
log
@*: revbump for pcre2 symbol versioning change
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2026/09/24 15:44:50 taca Exp $
d7 1
a7 1
PKGREVISION=		1
@


1.13
log
@lang/php84: udpate to 8.4.26

PHP 8.4.26 (2026-09-24)

- BCMath:
  . Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds
    n_scale. (Ilia Alshanetsky)

- Core:
  . Fixed out-of-bounds reads during automatic UTF-16/32 encoding detection.
    (Yudai Takada)
  . Fixed bug GH-15375 (Nested "yield from" skips items after a valid() or
    next() call on the inner generator). (iliaal)
  . Fixed bug GH-23232 (lone namespace separator asks the autoloader for an
    empty class name). (spawnia)
  . Fixed bug GH-23301 (Nested "yield from" yields a value twice when the
    middle generator delegates again). (Lazizbek Ergashev)

- CLI:
  . Fixed bug GH-23425 (sapi_cli_server_send_headers() does not check the
    return value of php_cli_server_client_send_through()). (Lazizbek Ergashev)

- DOM:
  . Fixed NamedNodeMap::getNamedItemNS() with an empty URI not matching
    the null namespace in spec-following mode. (Ilia Alshanetsky)
  . Fixed a use-after-free when cloning a DOMNameSpaceNode after
    DOMDocument::xinclude(). (iliaal)
  . Fixed bug GH-23331 (UAF when node_list_unlink() skips attribute children
    that still have a live wrapper). (iliaal)
  . Fixed a use-after-free when Dom\Element::setAttributeNS() replaces the
    value of an attribute whose child still has a live wrapper. (iliaal)

- GD:
  . Fixed imageaffinematrixget() and imageaffinematrixconcat() reporting the
    wrong argument in error messages. (Weilin Du)
  . Fixed bug GH-23457 (imagebmp() is extremely slow when writing to a file).
    (Lazizbek Ergashev)

- FPM:
  . Fixed bug GH-19320 (FPM UID and GID overflow). (Pratik Bhujel)
  . Fixed GHSA-62xp-839h-2637 (IPv6 ACL bypass in FastCGI listen.allowed_clients
    due to partial address comparison). (CVE-2026-91768) (Alexandre Daubois)

- Hash:
  . Fixed a buffer overflow in hash_pbkdf2() with a large output length.
    (Lazizbek Ergashev)

- Intl:
  . Fixed grapheme_strpos() and grapheme_strrpos() with an empty needle
    returning UTF-16 offsets instead of grapheme offsets. (Ilia Alshanetsky)
  . Fixed a memory leak when dumping IntlCalendar instances. (Ilia Alshanetsky)
  . Fixed a memory leak when iterating IntlBreakIterator::getPartsIterator()
    results. (iliaal)
  . Fixed a double-free when IntlGregorianCalendar construction fails after
    the ICU constructor adopts the TimeZone. (iliaal)
  . Fixed bug GH-23094 (NumberFormatter parsing offsets use UTF-16 positions
    for UTF-8 strings). (ColumbusLabs)
  . Fixed Locale::parseLocale() reading past a trailing '-' or '_'.
    (iliaal, Xuyang Zhang)
  . Fixed grapheme_str_split() treating UBRK_DONE as a byte index. (iliaal)
  . Fixed a leak in Locale::getKeywords() when a keyword value cannot be
    read. (iliaal)
  . Fixed a use-after-free when IntlRuleBasedBreakIterator is constructed
    from compiled rules. (iliaal)

- MBString:
  . Fixed mb_ereg_replace() emitting a NUL or out-of-bounds bytes in the
    replacement when a \k<name> backref has no closing delimiter.
    (Ilia Alshanetsky)

- MySQLnd:
  . Fixed GHSA-r6x9-5r99-36j7 (Various packet overreads in mysqlnd wire
    protocol). (CVE-2025-1218) (Jakub Zelenka, Nora Dossche)

- ODBC:
  . Fixed odbc_field_len(), odbc_field_scale() and odbc_field_type()
    returning uninitialized memory when SQLColAttribute fails.
    (Ilia Alshanetsky)

- Opcache:
  . Fixed a crash when the huge page SHM remap discarded mappings outside the
    reserved address range. (Piotr Hałas)
  . Fixed opcache.protect_memory race under ZTS. (realFlowControl)
  . Fixed bug GH-23288 (Crash on restart when opcache.interned_strings_buffer
    is overridden in an individual FPM pool). (David Carlier)
  . Fixed a tracing JIT crash when compiling a side trace for a method of a
    class that could not be stored in the inheritance cache. (GH-21710)
    (Arnaud, iliaal)

- OpenSSL:
  . Fixed GHSA-vvx9-73fr-5jjx (TLS hostname verification falls back to CN after
    SAN mismatch). (CVE-2026-91769) (Jakub Zelenka)
  . Fixed GHSA-xr7j-rvgx-xq5p (Heap buffer overflow in
    php_openssl_matches_wildcard_name() on crafted server certificate wildcard
    CN). (CVE-2026-91767) (Jakub Zelenka)

- PDO:
  . Fixed a leak when a persistent connection failed a liveness check
    with no other live PDO handle. (iliaal)

- PDO_ODBC:
  . Fixed bug GH-23444 (ODBC_ATTR_ASSUME_UTF8 corrupts Unicode data outside
    Windows). (Calvin Buckley, Lazizbek Ergashev)

- PDO_PGSQL:
  . Fixed PDO::CURSOR_SCROLL statements closing a cursor that does not exist.
    (KentarouTakeda)

- PDO Sqlite:
  . Fixed bug GH-20214 (PDO::FETCH_DEFAULT unexpected behavior with
    PDOStatement::setFetchMode). (SakiTakamachi)

- Phar:
  . Fixed bug GH-23418 (Use-after-free when looking up mounted directories).
    (Weilin Du)
  . Fixed bug GH-23477 (Memory leak on duplicate native Phar manifest entries).
    (Weilin Du)
  . Fixed GHSA-j3wh-g957-2m85 (Integer overflow in phar_tar_number() allowing
    TAR archive entry injection). (CVE-2026-6103) (Jakub Zelenka)

- SNMP:
  . Fixed bug GH-23453 (SNMP::setSecurity() frees a non-malloced address with a
    context engine ID longer than 32 bytes). (Lazizbek Ergashev)

- SOAP:
  . Fixed bug GH-23447 (Segfault when a class passed to SoapServer::setClass()
    fails to initialize). (Lazizbek Ergashev)
  . Fixed WSDL cache corruption when a soap:header defines headerfaults.
    (Ilia Alshanetsky)
  . Fixed stack overflow when parsing a WSDL with self-referential schema
    groups or attributeGroups. (Ilia Alshanetsky)
  . Fixed GHSA-rgrp-mwpx-f6rm (Unbounded recursion in server-side
    cleanup_xml_node()). (CVE-2026-91765) (Alexandre Daubois)
  . Fixed GHSA-cj93-vc83-wgqv (Integer overflow to buffer overflow in SOAP HTTP
    parsing). (CVE-2025-14181) (Nora Dossche, Jakub Zelenka)

- Standard:
  . Fixed a segfault when a stream filter callback unsets StreamBucket::$data
    before re-attaching the bucket. (iliaal)
  . Fixed GHSA-7875-c8px-7q5f (Out-of-bounds read in the HTTP stream wrapper
    when following a redirect with an empty Location header). (CVE-2026-93682)
    (Ilia Alshanetsky, Jordi Kroon)
  . Fixed a memory leak in array_merge_recursive() when the recursive merge of
    an object converted to an array fails. (David Carlier)
  . Fixed read buffer compaction in php_stream_filter_flush(). (crystarm)
  . Fixed bug GH-22410 (Incorrect float behavior with large numbers).
    (arshidkv12)
  . Fixed GH-23338 (fsockopen()/pfsockopen() ValueError reported wrong
    argument number for $timeout). (lacatoire)
  . Fixed bug GH-23576 (Next index for array returned from array_keys() is
    wrong). (Lazizbek Ergashev)
  . Fixed GHSA-88hq-2827-7pg6 (Out-of-bounds read in convert.* stream filters
    when line-break-chars contains NUL). (CVE-2026-92842) (geeknik)
  . Fixed GHSA-fpwc-w8rq-cr92 (Cross-origin credential leak in HTTP stream
    wrapper redirects). (CVE-2026-91766) (Alexandre Daubois, Jakub Zelenka)

- SimpleXML:
  . Fixed writing to a dimension of the object returned by attributes() not
    creating the attribute. (Ilia Alshanetsky)
  . Fixed child elements of the element returned by
    SimpleXMLElement::addChild() not being accessible by property name when
    namespaces are involved. (Ilia Alshanetsky)

- Windows:
  . Fixed GHSA-9f67-6fw4-hpfp (Reserved device names are not rejected before
    file and stream I/O). (CVE-2026-17545) (Shivam Mathur, Jakub Zelenka)

- Zip:
  . Fixed bug GH-23276 (ZipArchive subclass storing its own stream cannot be
    garbage collected). (Weilin Du, ndossche)
  . Fixed ZipArchive::extractTo() and ZipArchive::getFrom*() reporting success
    on corrupted entries. (David Carlier)
  . Fixed ZipArchive::getNameIndex() truncating the entry index to int.
    (David Carlier)
  . Fixed fstat() on a zip:// stream reporting success when the archive cannot
    be opened. (David Carlier)

- SAPI:
  . Fixed fuzzer targets failing to build in isolation. (Mrmaxmeier)
  . Fixed returns uninitialized value on LiteSpeed lsapi SAPI (Go Kudo)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2026/09/02 19:03:13 wiz Exp $
d7 1
@


1.12
log
@*: recursive bump for pcre2 10.48
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2026/01/19 15:32:17 taca Exp $
a6 1
PKGREVISION=		1
@


1.11
log
@lang/php84: update to 8.4.17

8.4.17 (2025-01-15)

- Core:
  . Fix OSS-Fuzz #465488618 (Wrong assumptions when dumping function signature
    with dynamic class const lookup default argument). (ilutov)
  . Fixed bug GH-20695 (Assertion failure in normalize_value() when parsing
    malformed INI input via parse_ini_string()). (ndossche)
  . Fixed bug GH-20714 (Uncatchable exception thrown in generator). (ilutov)
  . Fixed bug GH-20352 (UAF in php_output_handler_free via re-entrant
    ob_start() during error deactivation). (ndossche)

- Bz2:
  . Fixed bug GH-20620 (bzcompress overflow on large source size).
    (David Carlier)

- DOM:
  . Fixed bug GH-20722 (Null pointer dereference in DOM namespace node cloning
    via clone on malformed objects). (ndossche)
  . Fixed bug GH-20444 (Dom\XMLDocument::C14N() seems broken compared
    to DOMDocument::C14N()). (ndossche)

- GD:
  . Fixed bug GH-20622 (imagestring/imagestringup overflow). (David Carlier)

- Intl:
  . Fix leak in umsg_format_helper(). (ndossche)

- LDAP:
  . Fix memory leak in ldap_set_options(). (ndossche)

- Mbstring:
  . Fixed bug GH-20674 (mb_decode_mimeheader does not handle separator).
    (Yuya Hamada)

- PCNTL:
  . Fixed bug with pcntl_getcpuaffinity() on solaris regarding invalid
    process ids handling. (David Carlier)

- Phar:
  . Fixed bug GH-20732 (Phar::LoadPhar undefined behavior when reading fails).
    (ndossche)
  . Fix SplFileInfo::openFile() in write mode. (ndossche)
  . Fix build on legacy OpenSSL 1.1.0 systems. (Giovanni Giacobbi)
  . Fixed bug #74154 (Phar extractTo creates empty files). (ndossche)

- POSIX:
  . Fixed crash on posix groups to php array creation on macos.
    (David Carlier)

- SPL:
  . Fixed bug GH-20678 (resource created by GlobIterator crashes with fclose()).
    (David Carlier)

- Sqlite3:
  . Fixed bug GH-20699 (SQLite3Result fetchArray return array|false,
    null returned). (ndossche, plusminmax)

- Standard:
  . Fix error check for proc_open() command. (ndossche)
  . Fix memory leak in mail() when header key is numeric. (Girgias)
  . Fixed bug GH-20582 (Heap Buffer Overflow in iptcembed). (ndossche)

- Zlib:
  . Fix OOB gzseek() causing assertion failure. (ndossche)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2026/01/07 08:47:40 wiz Exp $
d7 1
@


1.10
log
@*: recursive bump for icu 78.1
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2025/11/23 12:40:14 taca Exp $
a6 1
PKGREVISION=		1
@


1.9
log
@lang/php84: update to 8.4.15

PHP 8.4.15 (2025-11-20)

- Core:
  . Fixed bug GH-19934 (CGI with auto_globals_jit=0 causes uouv). (ilutov)
  . Fixed bug GH-20073 (Assertion failure in WeakMap offset operations on
    reference). (nielsdos)
  . Fixed bug GH-20085 (Assertion failure when combining lazy object
    get_properties exception with foreach loop). (nielsdos)
  . Fixed bug GH-19844 (Don't bail when closing resources on shutdown). (ilutov)
  . Fixed bug GH-20177 (Accessing overridden private property in
    get_object_vars() triggers assertion error). (ilutov)
  . Fixed bug GH-20270 (Broken parent hook call with named arguments). (ilutov)
  . Fixed bug GH-20183 (Stale EG(opline_before_exception) pointer through eval).
    (ilutov)

- DOM:
  . Partially fixed bug GH-16317 (DOM classes do not allow
    __debugInfo() overrides to work). (nielsdos)
  . Fixed bug GH-20281 (\Dom\Document::getElementById() is inconsistent
    after nodes are removed). (nielsdos)

- Exif:
  . Fix possible memory leak when tag is empty. (nielsdos)

- FPM:
  . Fixed bug GH-19974 (fpm_status_export_to_zval segfault for parallel
    execution). (Jakub Zelenka, txuna)

- FTP:
  . Fixed bug GH-20240 (FTP with SSL: ftp_fput(): Connection timed out on
    successful writes). (nielsdos)

- GD:
  . Fixed bug GH-20070 (Return type violation in imagefilter when an invalid
    filter is provided). (Girgias)

- Intl:
  . Fix memory leak on error in locale_filter_matches(). (nielsdos)

- LibXML:
  . Fix not thread safe schema/relaxng calls. (SpencerMalone, nielsdos)

- MySQLnd:
  . Fixed bug GH-8978 (SSL certificate verification fails (port doubled)).
    (nielsdos)
  . Fixed bug GH-20122 (getColumnMeta() for JSON-column in MySQL). (nielsdos)

- Opcache:
  . Fixed bug GH-20081 (access to uninitialized vars in preload_load()).
    (Arnaud)
  . Fixed bug GH-20121 (JIT broken in ZTS builds on MacOS 15).
    (Arnaud, Shivam Mathur)
  . Fixed bug GH-19875 (JIT 1205 segfault on large file compiled in subprocess).
    (Arnaud)
  . Fixed bug GH-20012 (heap buffer overflow in jit). (Arnaud)
  . Partially fixed bug GH-17733 (Avoid calling wrong function when reusing file
    caches across differing environments). (ilutov)

- PgSql:
  . Fix memory leak when first string conversion fails. (nielsdos)
  . Fix segfaults when attempting to fetch row into a non-instantiable class
    name. (Girgias, nielsdos)

- Phar:
  . Fix memory leak of argument in webPhar. (nielsdos)
  . Fix memory leak when setAlias() fails. (nielsdos)
  . Fix a bunch of memory leaks in phar_parse_zipfile() error handling.
    (nielsdos)
  . Fix file descriptor/memory leak when opening central fp fails. (nielsdos)
  . Fix memleak+UAF when opening temp stream in buildFromDirectory() fails.
    (nielsdos)
  . Fix potential buffer length truncation due to usage of type int instead
    of type size_t. (Girgias)
  . Fix memory leak when openssl polyfill returns garbage. (nielsdos)
  . Fix file descriptor leak in phar_zip_flush() on failure. (nielsdos)
  . Fix memory leak when opening temp file fails while trying to open
    gzip-compressed archive. (nielsdos)
  . Fixed bug GH-20302 (Freeing a phar alias may invalidate
    PharFileInfo objects). (nielsdos)

- Random:
  . Fix Randomizer::__serialize() w.r.t. INDIRECTs. (nielsdos)

- Reflection:
  . Fixed bug GH-20217 (ReflectionClass::isIterable() incorrectly returns true
    for classes with property hooks). (alexandre-daubois)

- SimpleXML:
  . Partially fixed bug GH-16317 (SimpleXML does not allow __debugInfo() overrides
    to work). (nielsdos)

- Streams:
  . Fixed bug GH-19798: XP_SOCKET XP_SSL (Socket stream modules): Incorrect
    condition for Win32/Win64. (Jakub Zelenka)

- Tidy:
  . Fixed GH-19021 (improved tidyOptGetCategory detection).
    (arjendekorte, David Carlier, Peter Kokot)
  . Fix UAF in tidy when tidySetErrorBuffer() fails. (nielsdos)

- XMLReader:
  . Fix arginfo/zpp violations when LIBXML_SCHEMAS_ENABLED is not available.
    (nielsdos)

- Windows:
  . Fix GH-19722 (_get_osfhandle asserts in debug mode when given a socket).
    (dktapps)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2025/10/23 20:38:05 wiz Exp $
d7 1
@


1.8
log
@*: recursive bump for pcre2

Running an old binary against the new pcre doesn't work:
/usr/pkg/lib/libpcre2-8.so.0: version PCRE2_10.47 required by /usr/pkg/lib/libglib-2.0.so.0 not defined
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2025/07/04 01:21:45 taca Exp $
a6 1
PKGREVISION=		1
@


1.7
log
@lang/php84: update to 8.4.10

PHP 8.4.9 was skipped since it tagged without including security patches.

PHP 8.4.10 (2025-07-03)

- BcMath:
  . Fixed bug GH-18641 (Accessing a BcMath\Number property by ref crashes).
    (nielsdos)

- Core:
  . Fixed bugs GH-17711 and GH-18022 (Infinite recursion on deprecated attribute
    evaluation) and GH-18464 (Recursion protection for deprecation constants not
    released on bailout). (DanielEScherzer and ilutov)
  . Fixed GH-18695 (zend_ast_export() - float number is not preserved).
    (Oleg Efimov)
  . Fix handling of references in zval_try_get_long(). (nielsdos)
  . Do not delete main chunk in zend_gc. (danog, Arnaud)
  . Fix compile issues with zend_alloc and some non-default options. (nielsdos)

- Curl:
  . Fix memory leak when setting a list via curl_setopt fails. (nielsdos)

- Date:
  . Fix leaks with multiple calls to DatePeriod iterator current(). (nielsdos)

- DOM:
  . Fixed bug GH-18744 (classList works not correctly if copy HTMLElement by
    clone keyword). (nielsdos)

- FPM:
  . Fixed GH-18662 (fpm_get_status segfault). (txuna)

- Hash:
  . Fixed bug GH-14551 (PGO build fails with xxhash). (nielsdos)

- Intl:
  . Fix memory leak in intl_datetime_decompose() on failure. (nielsdos)
  . Fix memory leak in locale lookup on failure. (nielsdos)

- Opcache:
  . Fixed bug GH-18743 (Incompatibility in Inline TLS Assembly on Alpine 3.22).
    (nielsdos, Arnaud)

- ODBC:
  . Fix memory leak on php_odbc_fetch_hash() failure. (nielsdos)

- OpenSSL:
  . Fix memory leak of X509_STORE in php_openssl_setup_verify() on failure.
    (nielsdos)
  . Fixed bug #74796 (Requests through http proxy set peer name).
    (Jakub Zelenka)

- PGSQL:
  . Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during
    escaping). (CVE-2025-1735) (Jakub Zelenka)

- PDO ODBC:
  . Fix memory leak if WideCharToMultiByte() fails. (nielsdos)

- PDO Sqlite:
  . Fixed memory leak with Pdo_Sqlite::createCollation when the callback
    has an incorrect return type. (David Carlier)

- Phar:
  . Add missing filter cleanups on phar failure. (nielsdos)
  . Fixed bug GH-18642 (Signed integer overflow in ext/phar fseek). (nielsdos)

- PHPDBG:
  . Fix 'phpdbg --help' segfault on shutdown with USE_ZEND_ALLOC=0. (nielsdos)

- PGSQL:
  . Fix warning not being emitted when failure to cancel a query with
    pg_cancel_query(). (Girgias)

- Random:
  . Fix reference type confusion and leak in user random engine.
    (nielsdos, timwolla)

- Readline:
  . Fix memory leak when calloc() fails in php_readline_completion_cb().
    (nielsdos)

- SimpleXML:
  . Fixed bug GH-18597 (Heap-buffer-overflow in zend_alloc.c when assigning
    string with UTF-8 bytes). (nielsdos)

- SOAP:
  . Fix memory leaks in php_http.c when call_user_function() fails. (nielsdos)
  . Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension
    via Large XML Namespace Prefix). (CVE-2025-6491) (Lekssays, nielsdos)

- Standard:
  . Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames).
    (CVE-2025-1220) (Jakub Zelenka)

- Tidy:
  . Fix memory leak in tidy output handler on error. (nielsdos)
  . Fix tidyOptIsReadonly deprecation, using tidyOptGetCategory. (David Carlier)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2025/06/11 14:58:27 taca Exp $
d7 1
@


1.6
log
@lang/php{74,81,82,83,84}: correct include_path

Correct default include_path in configuration files.

Bump PKGREVISION.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2025/05/19 15:04:50 taca Exp $
a6 1
PKGREVISION=		1
@


1.6.2.1
log
@Pullup ticket #6979 - requested by taca
lang/php84: Security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.467
- lang/php84/Makefile                                           1.7
- lang/php84/distinfo                                           1.9

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Jul  4 01:21:45 UTC 2025

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php84: Makefile distinfo

   Log Message:
   lang/php84: update to 8.4.10

   PHP 8.4.9 was skipped since it tagged without including security patches.

   PHP 8.4.10 (2025-07-03)

   - BcMath:
     . Fixed bug GH-18641 (Accessing a BcMath\Number property by ref crashes).
       (nielsdos)

   - Core:
     . Fixed bugs GH-17711 and GH-18022 (Infinite recursion on deprecated attribute
       evaluation) and GH-18464 (Recursion protection for deprecation constants not
       released on bailout). (DanielEScherzer and ilutov)
     . Fixed GH-18695 (zend_ast_export() - float number is not preserved).
       (Oleg Efimov)
     . Fix handling of references in zval_try_get_long(). (nielsdos)
     . Do not delete main chunk in zend_gc. (danog, Arnaud)
     . Fix compile issues with zend_alloc and some non-default options. (nielsdos)

   - Curl:
     . Fix memory leak when setting a list via curl_setopt fails. (nielsdos)

   - Date:
     . Fix leaks with multiple calls to DatePeriod iterator current(). (nielsdos)

   - DOM:
     . Fixed bug GH-18744 (classList works not correctly if copy HTMLElement by
       clone keyword). (nielsdos)

   - FPM:
     . Fixed GH-18662 (fpm_get_status segfault). (txuna)

   - Hash:
     . Fixed bug GH-14551 (PGO build fails with xxhash). (nielsdos)

   - Intl:
     . Fix memory leak in intl_datetime_decompose() on failure. (nielsdos)
     . Fix memory leak in locale lookup on failure. (nielsdos)

   - Opcache:
     . Fixed bug GH-18743 (Incompatibility in Inline TLS Assembly on Alpine 3.22).
       (nielsdos, Arnaud)

   - ODBC:
     . Fix memory leak on php_odbc_fetch_hash() failure. (nielsdos)

   - OpenSSL:
     . Fix memory leak of X509_STORE in php_openssl_setup_verify() on failure.
       (nielsdos)
     . Fixed bug #74796 (Requests through http proxy set peer name).
       (Jakub Zelenka)

   - PGSQL:
     . Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during
       escaping). (CVE-2025-1735) (Jakub Zelenka)

   - PDO ODBC:
     . Fix memory leak if WideCharToMultiByte() fails. (nielsdos)

   - PDO Sqlite:
     . Fixed memory leak with Pdo_Sqlite::createCollation when the callback
       has an incorrect return type. (David Carlier)

   - Phar:
     . Add missing filter cleanups on phar failure. (nielsdos)
     . Fixed bug GH-18642 (Signed integer overflow in ext/phar fseek). (nielsdos)

   - PHPDBG:
     . Fix 'phpdbg --help' segfault on shutdown with USE_ZEND_ALLOC=0. (nielsdos)

   - PGSQL:
     . Fix warning not being emitted when failure to cancel a query with
       pg_cancel_query(). (Girgias)

   - Random:
     . Fix reference type confusion and leak in user random engine.
       (nielsdos, timwolla)

   - Readline:
     . Fix memory leak when calloc() fails in php_readline_completion_cb().
       (nielsdos)

   - SimpleXML:
     . Fixed bug GH-18597 (Heap-buffer-overflow in zend_alloc.c when assigning
       string with UTF-8 bytes). (nielsdos)

   - SOAP:
     . Fix memory leaks in php_http.c when call_user_function() fails. (nielsdos)
     . Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension
       via Large XML Namespace Prefix). (CVE-2025-6491) (Lekssays, nielsdos)

   - Standard:
     . Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames).
       (CVE-2025-1220) (Jakub Zelenka)

   - Tidy:
     . Fix memory leak in tidy output handler on error. (nielsdos)
     . Fix tidyOptIsReadonly deprecation, using tidyOptGetCategory. (David Carlier)
@
text
@d1 1
a1 1
# $NetBSD$
d7 1
@


1.5
log
@lang/php84: update to 8.4.7

PHP 8.4.7 (2025-05-08)

Core:
* Fixed bug GH-18038 (Lazy proxy calls magic methods twice).
* Fixed bug GH-18209 (Use-after-free in extract() with EXTR_REFS).
* Fixed bug GH-18268 (Segfault in array_walk() on object with added property
  hooks).
* Fixed bug GH-18304 (Changing the properties of a DateInterval through
  dynamic properties triggers a SegFault).
* Fix some leaks in php_scandir.

DBA:
* FIxed bug GH-18247 dba_popen() memory leak on invalid path.

Filter:
* Fixed bug GH-18309 (ipv6 filter integer overflow).

GD:
* Fixed imagecrop() overflow with rect argument with x/width y/heigh usage
  in gdImageCrop().
* Fixed GH-18243 imagettftext() overflow/underflow on font size value.

Intl:
* Fix reference support for intltz_get_offset().

LDAP:
* Fixed bug GH-17776 (LDAP_OPT_X_TLS_* options can't be overridden).
* Fix NULL deref on high modification key.

libxml:

* Fixed custom external entity loader returning an invalid resource leading
  to a confusing TypeError message.

Opcache:
* Fixed bug GH-18294 (assertion failure zend_jit_ir.c).
* Fixed bug GH-18289 (Fix segfault in JIT).
* Fixed bug GH-18136 (tracing JIT floating point register clobbering on
  Windows and ARM64).

OpenSSL:
* Fix memory leak in openssl_sign() when passing invalid algorithm.
* Fix potential leaks when writing to BIO fails.

PDO Firebird:
* Fixed bug GH-18276 (persistent connection - "zend_mm_heap corrupted" with
  setAttribute()) (SakiTakamachi).
* Fixed bug GH-17383 (PDOException has wrong code and message since PHP 8.4)
  (SakiTakamachi).

PDO Sqlite:
* Fix memory leak on error return of collation callback.

PgSql:
* Fix uouv in pg_put_copy_end().

SPL:

* Fixed bug GH-18322 (SplObjectStorage debug handler mismanages memory).

Standard:

* Fixed bug GH-18145 (php8ts crashes in php_clear_stat_cache()).
* Fix resource leak in iptcembed() on error.

Tests:
* Address deprecated PHP 8.4 session options to prevent test failures.

Zip:
* Fix uouv when handling empty options in ZipArchive::addGlob().
* Fix memory leak when handling a too long path in ZipArchive::addGlob().
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2025/05/17 05:37:25 taca Exp $
d7 1
@


1.4
log
@lang/php{56,74,81,82,83}: explictly specify libdir and datadir

Explictly specify libdir and datadir to set PHP_LIBDIR and PHP_DATADIR
correctly.

Bump PKGREVISION.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2025/05/14 15:54:26 jperkin Exp $
a6 1
PKGREVISION=		3
@


1.3
log
@php*: Improve SUPERSEDES matches.

By using a generic catch-all of php-[0-9]* it was impossible for tools to
correctly determine what package should be the successor when there are
multiple to choose from.

Matching against exact versions will mean that improved SUPERSEDES handling
in the next version of pkgin should hopefully be able to support upgrades
Past the php renovation.  At least with a hand-modified pkgin.db and a test
pkgin binary it correctly detects the php-8.2.26 => php82-8.2.28nb1 rename.

Bump PKGREVISION for each.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2025/04/17 21:51:22 wiz Exp $
d7 1
a7 1
PKGREVISION=		2
@


1.2
log
@*: recursive bump for icu 77 and libxml2 2.14
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1 2025/02/22 15:27:55 taca Exp $
d7 1
a7 1
PKGREVISION=		1
d21 1
a21 1
SUPERSEDES+=		php-[0-9]*
@


1.1
log
@lang/php84: add package version 8.4.4

PHP is a widely-used open source general-purpose scripting language
that is especially suited for web development and can be embedded
into HTML.  It is modular, and object-oriented.  Much of its syntax
is borrowed from C, Java and Perl with a couple of unique PHP-specific
features thrown in.  The language is designed to allow web developers
to write dynamically generated pages quickly.

PHP 8.4 comes with numerous improvements and new features such as

* Property Hooks
* Asymmetric Property Visibility
* Lazy Objects
* #[\Deprecated] attribute
* Parsing RFC1867 (multipart) requests in non-POST HTTP requests
* Chaining new expressions without parentheses
* Improved Debugging Info for WeakReference
* Improved Debugging Info for Closure
* Defining Identical Symbols in Different Namespace Blocks
* And much much more...
@
text
@d1 1
a1 1
# $NetBSD$
d7 1
@