Issues

• OPcache: file cache loses attributes on constants on 32-bit builds

  BugStatus: Needs Triage
  php/php-src#24745 · Filter by author mho22 opened on Oct 26, 2026

• var_export does not handle exception correctly when retrieving object

  BugStatus: Needs Triage
  php/php-src#24743 · Filter by author Sjord opened on Oct 26, 2026

• ext/phar: tar .phar/.metadata* entries have no upper bound on claimed size, unlike signature.bin/alias.txt -- unfixed sibling of GH-22556

  php/php-src#24740 · Filter by author kunwaratulhax0r opened on Oct 26, 2026

• ext/odbc, ext/pdo_odbc: php_odbc_connstr_is_quoted() treats a value with no closing brace as "already quoted," skipping UID/PWD escaping

  php/php-src#24736 · Filter by author kunwaratulhax0r opened on Oct 26, 2026

• DateTime::setTime() in the repeated hour of Europe/Dublin moves to the later occurrence (an hour ahead)

  php/php-src#24735 · Filter by author zoispag opened on Oct 26, 2026

• Assertion failure in zend_objects_store_del() when a bailout interrupts zend_fcc_dtor() in header_register_callback()

  BugStatus: Needs Triage
  php/php-src#24731 · Filter by author IzaiahSun opened on Oct 26, 2026

• extract() with EXTR_REFS: use-after-free still present in modes other than EXTR_OVERWRITE (follow-up to #18209)

  BugStatus: Needs Triage
  php/php-src#24730 · Filter by author IzaiahSun opened on Oct 26, 2026
  1

  

• Use-after-free in ReflectionClass::setStaticPropertyValue() when the old value's destructor unbinds the property

  BugStatus: Needs Triage
  php/php-src#24729 · Filter by author IzaiahSun opened on Oct 26, 2026

• Use-after-free when a destructor runs during compound assignment ($obj->prop .= ...)

  BugStatus: Needs Triage
  php/php-src#24728 · Filter by author IzaiahSun opened on Oct 26, 2026
  2

• MTE support

  FeatureStatus: Needs Triage
  php/php-src#24716 · Filter by author barisyild opened on Oct 26, 2026

• Assertion `!zend_lazy_object_must_init(object)' failed in Zend/zend_lazy_objects.c

  BugStatus: Needs Triage
  php/php-src#24715 · Filter by author YuanchengJiang opened on Oct 26, 2026

• Use-after-free in foreach by reference when destructor modifies the loop variable

  BugStatus: Needs Triage
  php/php-src#24712 · Filter by author vi3tL0u1s opened on Oct 26, 2026

• Assertion failure in binary operators when an error handler unsets an operand

  BugStatus: Needs Triage
  php/php-src#24708 · Filter by author vi3tL0u1s opened on Oct 26, 2026

• Use-after-free in opendir() when a user wrapper unregisters itself

  BugStatus: Needs Triage
  php/php-src#24707 · Filter by author vi3tL0u1s opened on Oct 26, 2026

• Allow Closure interface

  FeatureStatus: Requires RFC
  php/php-src#24703 · Filter by author mvorisek opened on Oct 25, 2026

• opcache.preload: use-after-free on class-typed trait constants (missing type addref in zend_do_traits_constant_binding)

  php/php-src#24701 · Filter by author sanklamm opened on Oct 25, 2026

• cli: passing PHP_HTTP_PARSER_STRICT build option doesn't work

  BugSAPI: cli_serverStatus: Verified
  php/php-src#24697 · Filter by author akku1139 opened on Oct 25, 2026

• sapi/fpm/tests/tester.inc can send SIGUSR2 to pid 0, killing run-tests.php

  BugStatus: Needs Triage
  php/php-src#24695 · Filter by author Bill-Sommerfeld opened on Oct 25, 2026

• Tracing JIT: interpreter loop gives different results than without the JIT

  php/php-src#24691 · Filter by author ChrisOrlando opened on Oct 25, 2026

• PHP-FPM: PHP_VALUE settings persist across requests

  BugStatus: Needs Triage
  php/php-src#24689 · Filter by author ultravistor opened on Oct 25, 2026
  3

• Tracing JIT: local keeps a stale constant after a trace links into a loop trace

  php/php-src#24683 · Filter by author ChrisOrlando opened on Oct 25, 2026
  2

• OPcache JIT: IR context (malloc) is not freed when zend_bailout() is taken during compilation

  BugStatus: Needs Triage
  php/php-src#24680 · Filter by author matyapiro31 opened on Oct 25, 2026
  1

• Tracing JIT with opcache.jit_max_polymorphic_calls=0: local variable undefined after a call in a side trace

  php/php-src#24678 · Filter by author ChrisOrlando opened on Oct 25, 2026

• JIT: function with >~1.7 MB of machine code corrupts JIT buffer accounting; next compilation crashes (SIGBUS on arm64)

  BugCategory: JITExtension: opcacheStatus: Verified
  php/php-src#24675 · Filter by author ChrisOrlando opened on Oct 25, 2026
  3

  

• var_destroy() UAF also reachable through SplObjectStorage::__unserialize() — separate entry point from #24481

  php/php-src#24674 · Filter by author srayuth089 opened on Oct 25, 2026
  3