Changes
- Fixed heap corruption when dispatching a protected/private action
- Fixed segfault in Yaf_Dispatcher::getInstance() without an application
- Fixed segfault on numeric keys in the system config section
- Fixed several crashes: Yaf_Config_Ini on unopenable file, Yaf_View_Simple::eval() on empty template, getLanguage() on malformed Accept-Language, controller construction without a request
- Fixed out-of-bounds read and NULL deref in base_uri / request URI handling
- Fixed uninitialized map/reverse in Yaf_Route_Regex on failed construction; reject unknown route types; validate supervar route value is a string
- Fixed inverted GC refcount condition when releasing controller/session properties
- Fixed exception handler clobbering dispatcher flags
- Fixed Yaf_Request_Abstract::setParam(array) always returning FALSE
- Fixed stale config property exposed when config init failed
- Missing required action argument now raises ArgumentCountError
- Clamp yaf.forward_limit to the default on non-positive values; route init()-time forward() through the dispatch loop
- Fixed several memory leaks (response headers, bootstrap, error message, view setScriptPath)
- Fixed fatal arginfo/zpp mismatch at startup for Yaf_Route_Regex::__construct() with NULL map/verify/reverse arguments
- Fixed Yaf_Session write accessors (__set/__unset/offsetSet/offsetUnSet) crashing debug builds due to a void return type conflicting with the aliased bool-returning methods
- Performance: pre-size the view symbol table to the template variable count