3.3.8

• Fixed heap corruption when dispatching a protected/private action
• Fixed segfault in Yaf_Dispatcher::getInstance() without an application
• Fixed segfault on numeric keys in the system config section
• Fixed several crashes: Yaf_Config_Ini on unopenable file, Yaf_View_Simple::eval() on empty template, getLanguage() on malformed Accept-Language, controller construction without a request
• Fixed out-of-bounds read and NULL deref in base_uri / request URI handling
• Fixed uninitialized map/reverse in Yaf_Route_Regex on failed construction; reject unknown route types; validate supervar route value is a string
• Fixed inverted GC refcount condition when releasing controller/session properties
• Fixed exception handler clobbering dispatcher flags
• Fixed Yaf_Request_Abstract::setParam(array) always returning FALSE
• Fixed stale config property exposed when config init failed
• Missing required action argument now raises ArgumentCountError
• Clamp yaf.forward_limit to the default on non-positive values; route init()-time forward() through the dispatch loop
• Fixed several memory leaks (response headers, bootstrap, error message, view setScriptPath)
• Fixed fatal arginfo/zpp mismatch at startup for Yaf_Route_Regex::__construct() with NULL map/verify/reverse arguments
• Fixed Yaf_Session write accessors (__set/__unset/offsetSet/offsetUnSet) crashing debug builds due to a void return type conflicting with the aliased bool-returning methods
• Performance: pre-size the view symbol table to the template variable count