Download PHP 4.4.0

The development team behind PHP, the PHP Hypertext Preprocessor, has released a new version in the 4.x branch of this HTML-embedded scripting language. It is version 4.4.0 and it fixes, among other things, a serious memory corruption issue. In addition, a load of less serious bugs have also been fixed. The full changelog looks like this:

Changelog for version 4.4.0

• Added man pages for “phpize” and “php-config” scripts.
• Added support for .cc files in extensions.
• Added the sorting flag SORT_LOCALE_STRING to the sort() functions which makes them sort based on the current locale.
• Changed sha1_file() and md5_file() functions to use streams instead of low level IO.
• Fixed memory corruptions when using references in a wrong way.
• Fixed memory corruption in pg_copy_from() in case the as_null parameter was passed.
• Fixed memory corruption in strstr(). (Derick)
• Fixed bug #32685, Fixed bug #29423 (Segfault when using assignment by reference within function).
• Fixed bug #33242 (Mangled error message when stream fails).
• Fixed bug #33222 (segfault when CURL handle is closed in a callback).
• Fixed bug #33214 (odbc_next_result does not signal SQL errors with 2-statement SQL batches).
• Fixed bug #33210 (relax jpeg recursive loop protection).
• Fixed bug #33200 (preg_replace(): magic_quotes_sybase=On makes ‘e’ modifier misbehave).
• Fixed bug #33150 (shtool: insecure temporary file creation).
• Fixed bug #33072 (Add a safemode/open_basedir check for runtime save_path change).
• Fixed bug #33070 (Improved performance of bzdecompress() by several orders of magnitude).
• Fixed bug #33057 (Don’t send extraneous entity-headers on a 304 as per RFC 2616 section 10.3.5).
• Fixed bug #33019 (socket errors cause memory leaks in php_strerror()).
• Fixed bug #33017 (“make distclean” gives an error with VPATH build).
• Fixed bug #33013 (“next month” was handled wrong while parsing dates).
• Fixed bug #32974 (pcntl calls malloc() from a signal handler).
• Fixed bug #32944 (Disabling session.use_cookies doesn’t prevent reading session cookies).
• Fixed bug #32936 (http redirects URLs are not checked for control chars).
• Fixed bug #32932 (Oracle LDAP: ldap_get_entries invalid pointer).
• Fixed bug #32904 (pg_get_notify() ignores result_type parameter).
• Fixed bug #32813 (parse_url() does not handle scheme-only urls properly).
• Fixed bug #32810 (temporary files not using plain file wrapper).
• Fixed bug #32802 (General cookie overrides more specific cookie).
• Fixed bug #32800, Fixed bug #32830 (ext/odbc: Problems with 64bit systems).
• Fixed bug #32773 (GMP functions break when second parameter is 0).
• Fixed bug #32742 (segmentation fault when the stream with a wrapper is not closed).
• Fixed bug #32730 (ext/crack.c fails to compile with cracklib-2.8.3).
• Fixed bug #32670 (foreach() does not issue warning on unset array arg).
• Fixed bug #32699 (pg_affected_rows() was defined when it was not available).
• Fixed bug #32682 (ext/mssql: Error on module shutdown when called from activescript).
• Fixed bug #32647 (Using register_shutdown_function() with invalid callback can crash PHP).
• Fixed bug #32591 (ext/mysql: Unsatisfied symbol: ntohs with HP-UX).
• Fixed bug #32589 (Possible crash inside imap_mail_compose, with charsets).
• Fixed bug #32587 (Apache2: errors sent to error_log do not include timestamps).
• Fixed bug #32567 (ext/gmp fails to compile in threadsafe mode).
• Fixed bug #32538 (ext/swf/swf.c does not compile with gcc-3.4.x or newer).
• Fixed bug #32530 (chunk_split() does not append endstr if chunklen is longer then the original string).
• Fixed bug #32491 (File upload error – unable to create a temporary file).
• Fixed bug #32311 (mb_encode_mimeheader() does not properly escape characters).
• Fixed bug #32245 (xml_parser_free() in a function assigned to the xml parser gives a segfault).
• Fixed bug #32116 (mysql compressed connection doesn’t work under windows).
• Fixed bug #31887 (ISAPI: Custom 5xx error does not return correct HTTP response message).
• Fixed bug #31583 (php_std_date() uses short day names in non-y2k_compliance mode).
• Fixed bug #31213 (Sideeffects caused by fix of bug Fixed bug #29493).
• Fixed bug #30052 (Crash on shutdown after odbc_pconnect()).
• Fixed bug #29975 (memory leaks when set_error_handler() is used inside error handler).
• Fixed bug #29944 (Function defined in switch, crashes).
• Fixed bug #29338 (unencoded spaces get ignored after certain tags).
• Fixed bug #28605 (Need to use -[m]ieee option for Alpha CPUs).
• Fixed bug #28377 (debug_backtrace is intermittently passing args).

[break]The following downloads are available:
PHP 4.4.0 Complete Source Code (tar.bz2)
PHP 4.4.0 Complete Source Code (tar.gz)
PHP 4.4.0 zip file
The Windows installer is not available at the moment