# Contributor: Valery Kartel <valery.kartel@gmail.com>
# Contributor: Jakub Jirutka <jakub@jirutka.cz>
# Maintainer: Andy Postnikov <apostnikov@gmail.com>

# Bundled libraries
#
# Name      | License             | Location               | State
# ----------+---------------------+------------------------+---------
# bcmath    | LGPL-2.1-or-later   | ext/bcmath/libbcmath   | used
# date      | MIT                 | ext/date/lib           | used
# fileinfo  | BSD-2-Clause        | ext/fileinfo/libmagic  | used
# gd        | BSD                 | ext/gd/libgd           | used
# hash      | CC0-1.0             | ext/hash/sha3          | used
# xxHash    | BSD-2-Clause        | ext/hash/xxhash        | used
# libmbfl   | LGPL-2.1-only       | ext/mbstring/libmbfl   | used
# pcre      | BSD-3-Clause        | ext/pcre/pcrelib       | not used
# sqlite3   | Public              | ext/sqlite3/libsqlite  | not used
# libzip    | BSD-3-Clause        | ext/zip/lib            | not used

# Static extensions
#
# Name      | Reason
# ----------+--------------------------------------------
# zlib      | https://bugs.alpinelinux.org/issues/8299
# json      | https://wiki.php.net/rfc/always_enable_json

pkgname=php83
pkgver=8.3.21
pkgrel=0
_apiver=20230831
_suffix=${pkgname#php}
# Is this package the default (latest) PHP version?
_default_php="yes"
provides="$pkgname-cli php-cli php"  # for backward compatibility
# priority of community/php82 is 70
provider_priority=100
pkgdesc="The PHP$_suffix language runtime engine"
url="https://www.php.net/"
arch="all"
license="PHP-3.01 BSD-3-Clause LGPL-2.0-or-later MIT Zend-2.0"
depends="$pkgname-common"
depends_dev="$pkgname=$pkgver-r$pkgrel autoconf pcre2-dev re2c"
# Most dependencies between extensions is auto-discovered (see _extension()).
_depends_mysqlnd="$pkgname-openssl"
_depends_pdo_mysql="$pkgname-pdo $pkgname-mysqlnd"
_depends_phar="$pkgname"
# openssl is actually transitive dependency here, but we need to because of
# load index based on number of dependencies.
_depends_mysqli="$pkgname-mysqlnd $pkgname-openssl"
_clang_ver=19
makedepends="
	$depends_dev
	acl-dev
	apache2
	apache2-dev
	argon2-dev
	aspell-dev
	bison
	bzip2-dev
	clang$_clang_ver
	curl-dev
	enchant2-dev
	freetds-dev
	freetype-dev
	gdbm-dev
	gettext-dev
	gmp-dev
	icu-dev
	imap-dev
	krb5-dev
	libavif-dev
	libedit-dev
	libical-dev
	libjpeg-turbo-dev
	libpng-dev
	libpq-dev
	lmdb-dev
	oniguruma-dev
	libsodium-dev
	libwebp-dev
	libxml2-dev
	libxpm-dev
	libxslt-dev
	libzip-dev
	net-snmp-dev
	openldap-dev
	patchelf
	sqlite-dev
	tidyhtml-dev
	unixodbc-dev
	zlib-dev
	"
checkdepends="icu-data-full procps-ng lsof"
subpackages="$pkgname-dbg $pkgname-dev $pkgname-doc
	$pkgname-phpdbg $pkgname-apache2
	$pkgname-embed $pkgname-cgi $pkgname-fpm
	$pkgname-pear::noarch
	"
# sources for RC available at
# - https://downloads.php.net/~jakub/php-${pkgver}RC1.tar.xz
# - https://downloads.php.net/~eric/php-${pkgver}RC1.tar.xz
# stable releases https://www.php.net/distributions/php-$pkgver.tar.xz
source="https://www.php.net/distributions/php-$pkgver.tar.xz
	$pkgname-fpm.initd
	$pkgname-fpm.logrotate
	$pkgname-module.conf
	disabled-tests.list
	disabled-tests.loongarch64.list
	disabled-tests.x86.list
	disabled-tests.ppc64le.list
	disabled-tests.s390x.list
	install-pear.patch
	includedir.patch
	sharedir.patch
	$pkgname-fpm-version-suffix.patch
	fix-tests-devserver.patch
	phpinfo-avif.patch
	loongarch64-support-for-fibers.patch
	"
builddir="$srcdir/php-$pkgver"

_libdir="/usr/lib/$pkgname"
_extension_dir="$_libdir/modules"
_extension_confd="/etc/$pkgname/conf.d"

_extensions="
	bcmath
	bz2
	calendar
	ctype
	curl
	dba
	dom
	enchant
	exif
	ffi
	fileinfo
	ftp
	gd
	gettext
	gmp
	iconv
	imap
	intl
	ldap
	mbstring
	mysqli
	mysqlnd
	odbc
	opcache
	openssl
	pcntl
	pdo
	pdo_dblib
	pdo_mysql
	pdo_odbc
	pdo_pgsql
	pdo_sqlite
	pgsql
	phar
	posix
	pspell
	session
	shmop
	simplexml
	snmp
	soap
	sodium
	sockets
	sqlite3
	sysvmsg
	sysvsem
	sysvshm
	tidy
	tokenizer
	xml
	xmlreader
	xmlwriter
	xsl
	zip
	"
for _ext in $_extensions; do
	case "$_ext" in
		phar) subpackages="$subpackages $pkgname-$_ext:$_ext";;
		*) subpackages="$subpackages $pkgname-$_ext:_extension";;
	esac
done
subpackages="$subpackages $pkgname-common::noarch"
subpackages="$subpackages $pkgname-litespeed"

# secfixes:
#   8.3.18-r0:
#     - CVE-2025-1217
#     - CVE-2025-1219
#     - CVE-2025-1734
#     - CVE-2025-1736
#     - CVE-2025-1861
#     - CVE-2024-11235
#   8.3.14-r0:
#     - CVE-2024-8929
#     - CVE-2024-8932
#     - CVE-2024-11233
#     - CVE-2024-11234
#     - CVE-2024-11236
#   8.3.5-r0:
#     - CVE-2024-1874
#     - CVE-2024-2756
#     - CVE-2024-2757
#     - CVE-2024-3096

prepare() {
	default_prepare

	local vapi=$(sed -n '/#define PHP_API_VERSION/{s/.* //;p}' main/php.h)
	if [ "$vapi" != "$_apiver" ]; then
		error "Upstream API version is now $vapi. Expecting $_apiver"
		error "After updating _apiver, all 3rd-party extensions must be rebuilt."
		return 1
	fi

	# https://bugs.php.net/63362 - Not needed but installed headers.
	# Drop some Windows specific headers to avoid installation,
	# before build to ensure they are really not needed.
	rm -f TSRM/tsrm_win32.h \
		TSRM/tsrm_config.w32.h \
		Zend/zend_config.w32.h \
		ext/mysqlnd/config-win.h \
		ext/standard/winver.h

	# Fix some bogus permissions.
	find . -name '*.[ch]' -exec chmod 644 {} \;

	# Remove failing tests includng arch specific ones.
	local tests="disabled-tests.list disabled-tests.$CARCH.list"
	local file; for file in $tests; do [ -f "$srcdir"/$file ] && \
		sed -n '/^[^#]/p' "$srcdir"/$file | while read -r item; do
			rm -r $item  # do it in this way to apply globbing...
		done
	done

	autoconf
}

# Notes:
# * gd-jis-conv breaks any non-latin font rendering (vakartel).
# * libxml cannot be build as shared.
# * -O2 optimize for apps usage (andypost)
_build() {
	export CFLAGS="${CFLAGS/-Os/-O2}"
	export CXXFLAGS="${CXXFLAGS/-Os/-O2}"

	local without_pcre_jit
	[ "$CARCH" = "s390x" ] && without_pcre_jit="--without-pcre-jit"

	case "$CARCH" in
	arm*|aarch64|riscv64|loongarch64)
		export CFLAGS="${CFLAGS/-fstack-clash-protection}"
		export CXXFLAGS="${CXXFLAGS/-fstack-clash-protection}"
		;;
	esac
	export CC=clang-$_clang_ver
	export CXX=clang++-$_clang_ver
	EXTENSION_DIR=$_extension_dir ./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--program-suffix=$_suffix \
		--libdir=$_libdir \
		--datadir=/usr/share/$pkgname \
		--sysconfdir=/etc/$pkgname \
		--localstatedir=/var \
		--with-layout=GNU \
		--with-pic \
		--with-config-file-path=/etc/$pkgname \
		--with-config-file-scan-dir=$_extension_confd \
		--disable-rpath \
		--disable-short-tags \
		\
		--enable-bcmath=shared \
		--with-bz2=shared \
		--enable-calendar=shared \
		--enable-ctype=shared \
		--with-curl=shared \
		--enable-dba=shared \
			--with-dbmaker=shared \
			--with-gdbm \
			--with-lmdb \
		--enable-dom=shared \
		--with-enchant=shared \
		--enable-exif=shared \
		--with-ffi=shared \
		--enable-fileinfo=shared \
		--enable-ftp=shared \
		--enable-gd=shared \
			--with-avif \
			--with-freetype \
			--with-jpeg \
			--with-webp \
			--with-xpm \
			--disable-gd-jis-conv \
		--with-gettext=shared \
		--with-gmp=shared \
		--with-iconv=shared \
		--with-imap=shared \
			--with-imap-ssl \
		--enable-intl=shared \
		--with-ldap=shared \
			--with-ldap-sasl \
		--with-libedit \
		--with-libxml \
		--enable-mbstring=shared \
		--with-mysqli=shared \
			--with-mysql-sock=/run/mysqld/mysqld.sock \
		--enable-mysqlnd=shared \
		--enable-opcache=shared \
		--with-openssl=shared  \
			--with-kerberos \
			--with-system-ciphers \
		--with-password-argon2 \
		--enable-pcntl=shared \
		--with-external-pcre \
			$without_pcre_jit \
		--enable-pdo=shared \
			--with-pdo-dblib=shared,/usr \
			--with-pdo-mysql=shared,mysqlnd \
			--with-pdo-odbc=shared,unixODBC,/usr \
			--with-pdo-pgsql=shared \
			--with-pdo-sqlite=shared \
		--with-pgsql=shared \
		--enable-phar=shared \
		--enable-posix=shared \
		--with-pspell=shared \
		--without-readline \
		--enable-session=shared \
		--enable-shmop=shared \
		--enable-simplexml=shared \
		--with-snmp=shared \
		--enable-soap=shared \
		--with-sodium=shared \
		--enable-sockets=shared \
		--with-sqlite3=shared \
		--enable-sysvmsg=shared \
		--enable-sysvsem=shared \
		--enable-sysvshm=shared \
		--with-tidy=shared \
		--enable-tokenizer=shared \
		--with-unixODBC=shared,/usr \
		--enable-xml=shared \
		--enable-xmlreader=shared \
		--enable-xmlwriter=shared \
		--with-xsl=shared \
		--with-zip=shared \
		--with-zlib \
		--enable-zend-test=shared \
		"$@"
	rm -f modules/* # clean-up possible previous build
	make
}

build() {
	# build phpcgi and apache2 SAPIs first
	# because not fixed https://bugs.php.net/bug.php?id=52419
	# apache2 module
	_build --disable-phpdbg \
		--disable-cli \
		--with-apxs2
	mv libs/libphp.so sapi/apache2handler/mod_php$_suffix.so

	local enable_litespeed
	[ -z ${subpackages##*-litespeed*} ] && enable_litespeed=--enable-litespeed
	# cgi, cli, fpm, embed, phpdbg, pear/pecl, litespeed
	_build --enable-phpdbg \
		--with-pear=/usr/share/$pkgname \
		--enable-fpm \
		--with-fpm-acl \
		$enable_litespeed \
		--enable-embed
}

check() {
	# PHP is so stupid that it's not able to resolve dependencies
	# between extensions and load them in correct order, so we must
	# help it...
	# opcache is Zend extension, it's handled specially in Makefile
	local php_modules=$(_extensions_by_load_order \
		| grep -vx opcache \
		| xargs -n 1 printf "'$builddir/modules/%s.la' ")
	sed -i "/^PHP_TEST_SHARED_EXTENSIONS/,/extension=/ \
		s|in \$(PHP_MODULES)\"*|in $php_modules|" Makefile

	# XXX: Few tests fail on the named platforms.
	# Ignore it for now and continue build even on test failures.
	local allow_fail='no'
	case "$CARCH" in
		no ) allow_fail='yes'
	esac

	TESTS="${TESTS:- --show-diff }" NO_INTERACTION=1 REPORT_EXIT_STATUS=1 \
		SKIP_SLOW_TESTS=1 SKIP_ONLINE_TESTS=1 TEST_TIMEOUT=10 \
		SKIP_PERF_SENSITIVE=1 \
		TZ='' LANG='' LC_ALL='' TEST_FPM_EXTENSION_DIR=modules \
		TRAVIS=true SKIP_IO_CAPTURE_TESTS=1 \
		make test || [ "$allow_fail" = yes ]

	echo 'NOTE: We have skipped quite a lot tests, see disabled-tests.list.'
}

package() {
	make -j1 INSTALL_ROOT="$pkgdir" install
	rm "$pkgdir"/usr/lib/php$_suffix/modules/zend_test.so

	install -Dm644 php.ini-production "$pkgdir"/etc/$pkgname/php.ini

	local file; for file in pear peardev pecl; do
		sed -i -e "s|/usr/bin/php|/usr/bin/php$_suffix|g" \
			-e "s|PHP=php|PHP=php$_suffix|" \
			"$pkgdir"/usr/bin/$file
	done

	find "$pkgdir" -name '.*' -print0 | xargs -0 rm -rf
	rmdir "$pkgdir"/var/run

	if [ "$_default_php" = yes ]; then
		ln -s php$_suffix "$pkgdir"/usr/bin/php
	fi

	install -D -m 755 sapi/apache2handler/mod_php$_suffix.so \
		"$pkgdir"/usr/lib/apache2/mod_php$_suffix.so

	install -D -m 644 "$srcdir"/php$_suffix-module.conf \
		"$pkgdir"/etc/apache2/conf.d/php$_suffix-module.conf
}

dev() {
	default_dev
	replaces="php-dev"

	amove \
		usr/bin/php-config$_suffix \
		usr/bin/phpize$_suffix \
		$_libdir/build

	if [ "$_default_php" = yes ]; then
		ln -s phpize$_suffix "$subpkgdir"/usr/bin/phpize
		ln -s php-config$_suffix "$subpkgdir"/usr/bin/php-config
	fi
}

doc() {
	default_doc

	cd "$builddir"

	mkdir -p "$subpkgdir"/usr/share/doc/$pkgname
	cp CODING_STANDARDS.md EXTENSIONS LICENSE NEWS \
		README* UPGRADING* \
		"$subpkgdir"/usr/share/doc/$pkgname/
}

apache2() {
	pkgdesc="PHP$_suffix Module for Apache2"
	depends="$depends apache2"
	provides="php-apache2"

	amove usr/lib/apache2/mod_php$_suffix.so
	amove etc/apache2/conf.d/php$_suffix-module.conf

}

phpdbg() {
	pkgdesc="Interactive PHP$_suffix debugger"
	provides="php-phpdbg"

	amove usr/bin/phpdbg$_suffix

	if [ "$_default_php" = yes ]; then
		ln -s phpdbg$_suffix "$subpkgdir"/usr/bin/phpdbg
	fi
}

embed() {
	pkgdesc="PHP$_suffix Embedded Library"
	provides="php-embed"

	mkdir -p "$subpkgdir"/usr/lib
	mv "$pkgdir"/usr/lib/libphp.so "$subpkgdir"/usr/lib/libphp$_suffix.so
	# we do this so it matches the name, otherwise SONAME libphp.so conflicts
	patchelf --set-soname libphp$_suffix.so "$subpkgdir"/usr/lib/libphp$_suffix.so
}

litespeed() {
	pkgdesc="PHP$_suffix LiteSpeed SAPI"
	provides="php-lightspeed"

	amove usr/bin/lsphp$_suffix

	if [ "$_default_php" = yes ]; then
		ln -s lsphp$_suffix "$subpkgdir"/usr/bin/lsphp
	fi
}

cgi() {
	pkgdesc="PHP$_suffix Common Gateway Interface"
	provides="php-cgi"

	amove usr/bin/php-cgi$_suffix

	if [ "$_default_php" = yes ]; then
		ln -s php-cgi$_suffix "$subpkgdir"/usr/bin/php-cgi
	fi
}

fpm() {
	pkgdesc="PHP$_suffix FastCGI Process Manager"
	provides="php-fpm"

	amove etc/$pkgname/php-fpm* usr/sbin var
	amove usr/share/$pkgname/fpm

	local file; for file in php-fpm.conf php-fpm.d/www.conf; do
		mv "$subpkgdir"/etc/$pkgname/$file.default \
			"$subpkgdir"/etc/$pkgname/$file
	done

	install -D -m 755 "$srcdir"/$pkgname-fpm.initd \
		"$subpkgdir"/etc/init.d/php-fpm$_suffix

	install -D -m 644 "$srcdir"/$pkgname-fpm.logrotate \
		"$subpkgdir"/etc/logrotate.d/php-fpm$_suffix

	mkdir -p "$subpkgdir"/var/log/$pkgname
}

pear() {
	pkgdesc="PHP$_suffix Extension and Application Repository"
	depends="$pkgname $pkgname-xml"
	provides="php-pear"

	mkdir -p "$subpkgdir"/usr/bin
	local file; for file in pecl pear peardev; do
		mv "$pkgdir"/usr/bin/$file "$subpkgdir"/usr/bin/$file$_suffix
		if [ "$_default_php" = yes ]; then
			ln -s $file$_suffix "$subpkgdir"/usr/bin/$file
		fi
	done

	amove etc/$pkgname/pear.conf usr/share
}

common() {
	pkgdesc="$pkgdesc (common config)"
	provides="php-common $pkgname-zlib php-zlib $pkgname-json php-json"  # for backward compatibility
	depends=""

	amove etc
	mkdir -p "$subpkgdir"/$_extension_confd "$subpkgdir"/$_extension_dir
}

phar() {
	_extension

	amove usr/bin/phar$_suffix.phar usr/bin/phar$_suffix

	if [ "$_default_php" = yes ]; then
		ln -s phar.phar$_suffix "$subpkgdir"/usr/bin/phar.phar
		ln -s phar.phar$_suffix "$subpkgdir"/usr/bin/phar
	fi
}

_extension() {
	local extname="${subpkgname#"$pkgname"-}"
	local extdepends="$(eval "echo \$_depends_$extname")"
	local extdesc="$(head -n1 "$builddir"/ext/$extname/CREDITS 2>/dev/null ||:)"
	pkgdesc="PHP$_suffix extension: ${extdesc:-$extname}"
	provides="php-$extname"

	: "${extdepends:=$(_resolve_extension_deps "$extname")}"
	depends="$depends $extdepends"

	local load_order=$(_extension_load_order "$extname")

	# extension prefix
	local prefix=
	[ "$extname" != "opcache" ] || prefix="zend_"

	amove $_extension_dir/$extname.so

	mkdir -p "$subpkgdir"/$_extension_confd
	echo "${prefix}extension=$extname" \
		> "$subpkgdir"/$_extension_confd/"$(printf %02d $load_order)"_$extname.ini
}

# Resolves dependencies of the given extension name (without $pkgname- prefix)
# on other extensions in $_extensions and prints them with $pkgname- prefix.
_resolve_extension_deps() {
	local name="$1"

	# We use config.w32 just because it's more accurate than config.m4.
	local config="$builddir/ext/$name/config.w32"
	[ -f "$config" ] || return 0

	sed -En "s/.*ADD_EXTENSION_DEP\('$name', ([^)]+)\).*/\1/p" "$config" \
		| tr -d "'," | tr ' ' '\n' \
		| sort -u \
		| while read -r dep; do
			if echo "$_extensions" | grep -qw "$dep"; then
				echo "$pkgname-$dep"
			fi
		done
}

# Prints a load order (0-based integer) for the given extension name. Extension
# with lower load order should be loaded before exts with higher load order.
# It's based on number of dependencies of the extension (with exception for
# "imap"), which is flawed, but simple and good enough for now.
_extension_load_order() {
	local name="$1"
	local deps=$(eval "echo \$_depends_$name")

	case "$name" in
		# XXX: This must be loaded after recode, even though it does
		# not depend on it. So we must use this hack...
		*) echo "${deps:=$(_resolve_extension_deps $name)}" | wc -w;;
	esac
}

# Prints $_extensions sorted by load order and name.
_extensions_by_load_order() {
	local deps list name

	for name in $_extensions; do
		list="$list $(_extension_load_order $name);$name"
	done
	printf '%s\n' $list | sort -t ';' -k 1 | sed -E 's/\d+;//'
}

sha512sums="
63ab270ef6fde033245e134ba7c1824b7e449a667ab7a6ffe001e18b7fc26218eefe55959b8be9093c35fd6437175244c40f3e4efe72478fe7819573bb4973b2  php-8.3.21.tar.xz
39be7f05f71656107f730818d6abcb4065e550e5b2e2c7021b3490d329c967064012dbeb63ee790ecb65a8e0f7a0f59148de2c692d7879d773acee21fe412bee  php83-fpm.initd
1b177644e92be37b28ccc3f8a583aeaf636293d45517d6225c0d6e1c7639d33f734e5f671b5e703b8be00c936422de4a1845039b0eff0e60df5e70cde13186b7  php83-fpm.logrotate
283716161585c68b41be2540312414f028dfee9fcd63fde34662379dd3f05709136e9bd2dc1ba843e8832fdde643eba202d024623d1d46300f9fbf3bebdbf0d2  php83-module.conf
75ae7d7a930911f0f3ce67833db8321e0e7a73a7d1b7e45204cb55813bbd96650fdbe49858d78a5b378b4fd09f738559b7d787aa24ce13d96039eceaa33bc89a  disabled-tests.list
34b98b9a63865f6306049b95be4ae208b507aa9792207f8277e764c3da4eb15f1a55460cdf76c9959960530d4cf60dca35f6eb8c0c83c230c17a38b1df660a5b  disabled-tests.loongarch64.list
6d3bc15982e13ec4c065b6445e07818d589f2cc677147a57929d1739b3e6b119cc9be6a07d3a99bb5e989e47a62fa6047f967c3c962253845d4bab224b378db3  disabled-tests.x86.list
30cba10c11f800d23e013c7f92cadb7e2a9ac5e89e5466445c77761369e7f3b8daba7ae64e23967329139b01f37f187acd2f1f1e3dfb0bca2e900a7d7e1afd07  disabled-tests.ppc64le.list
82ada02bee221863649475a43bbc141b61c253f88ddc5ef5a0181d5f47b33dfbf47216df2ccc43cfb0c8bfd6e7c5f7e2a74a6b92d88ca7cc1bcbe8878a095a9c  disabled-tests.s390x.list
ec206639d076ddac6c2d1db697a5428ed3be979157db39417af7fbe6ab837e8dc00315ae0e55aea4f92f45ca5827c88cc4933099fad9c962f029ca81bef779d7  install-pear.patch
200138f00a0cc04b299588ee9cbc15660fb4b9176e2c596c72601a1f50291419a3774d251f68ccb44a7142af07b3df74fa886f1cfb90d516094dc08df0232868  includedir.patch
5f91185f7006e4133f986d372a948cb1f4cb6419baaccb8951e066c7654040b8df4fd8997cc10f936233406982d3811e12e01c1a25c949c2995ce93193174e27  sharedir.patch
1af8ce5c76d153bd9d61d49864201a5144d26f3131b47c517d329f19267965d8b4eafcc96b319f15967d85a8243a653dee323599b6ca9dbde9ff83b31517767e  php83-fpm-version-suffix.patch
ba4e351c6ed4e16c70ac22d9fc88da3add2f4f3582de2553475c52fa9ee9854c7a3c28a4cc64d6cb8e44074f1bdf645bfa0bc5960f1b56d36c45a9a8f17d20b1  fix-tests-devserver.patch
8833c5c6f5225f5e85a9cd842274e4e6b2f55dc572a13bdb3066c624f82c9f39fa07cb2f8f242092ff814f61f0cb8abaa792b1f93c16ad341f1a8dec05a6ca2d  phpinfo-avif.patch
6b81d6644a6c0d777712507276f367d54b3ea6062178372f576a49707ad7e808848386dacb745abebed2ba036c2bca967c54d54fc3ec99e8d5e9c5bb09f6a8b0  loongarch64-support-for-fibers.patch
"