Merge branch 'PHP-5.6' into PHP-7.0

diff --cc NEWS
index f881d7fabcb90ba00fa9c0e656a8024bc867774c,531d6266b4126f21afa76cb45ed5ba0f94bd6aa3..36b01a3453398f9331477d3ad3fc25b07fbba41d
--- 1/NEWS
--- 2/NEWS
+++ b/NEWS
@@@ -1,22 -1,10 +1,25 @@@
  PHP                                                                        NEWS
  |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 -?? ??? 2016, PHP 5.6.26
 +?? ??? 2016 PHP 7.0.12
 +
++- mbstring:
++  . Fixed bug #66797 (mb_substr only takes 32-bit signed integer). (cmb)
++
 +- Standard:
 +  . Fixed bug #71882 (Negative ftruncate() on php://memory exhausts memory).
 +    (cmb)
 +
 +15 Sep 2016 PHP 7.0.11
  
  - Core:
 -  . Fixed bug #72907 (null pointer deref, segfault in gc_remove_zval_from_buffer
 -    (zend_gc.c:260)). (Laruence)
 +  . Fixed bug #72944 (Null pointer deref in zval_delref_p). (Dmitry)
 +  . Fixed bug #72943 (assign_dim on string doesn't reset hval). (Laruence)
 +  . Fixed bug #72911 (Memleak in zend_binary_assign_op_obj_helper). (Laruence)
 +  . Fixed bug #72813 (Segfault with __get returned by ref). (Laruence)
 +  . Fixed bug #72767 (PHP Segfaults when trying to expand an infinite operator).
 +    (Nikita)
 +  . Fixed bug #72854 (PHP Crashes on duplicate destructor call). (Nikita)
 +  . Fixed bug #72857 (stream_socket_recvfrom read access violation). (Anatol)
    . Fixed bug #72703 (Out of bounds global memory read in BF_crypt triggered by
      password_verify). (Anatol)
  

diff --cc ext/mbstring/mbstring.c
Simple merge