Merge RNG fixes RFC. PR #1986

* rng-fixes:
  Fix legacy mode RAND_RANGE and 32/64-bit consistency
  Fix crypt salt not being converted to b64
  Make mode selection part of mt_srand()
  Use zend_bitset
  Improve array_rand distribution
  Fix some insecure usages of php_rand
  Alias rand to mt_rand
  Fix RAND_RANGE for mt_rand
  Fix mt_rand impl. Provide legacy impl. access.
  Split rand and mt_rand into separate files

diff --cc NEWS
index 019f612705bbb9562b570f219bcf713fa20c11c2,c67cb9e0c234ffa6dfa415cacc5c3246c4815eb7..d0514a295912b4cea4f4b109ef67122fda9fb2e0
--- 1/NEWS
--- 2/NEWS
+++ b/NEWS
@@@ -2,90 -2,6 +2,91 @@@ PH
  |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
  ?? ??? 2016, PHP 7.1.0beta1
  
 +- Core:
 +  . Fixed bug #72594 (Calling an earlier instance of an included anonymous
 +    class fatals). (Laruence)
 +  . Fixed bug #72581 (previous property undefined in Exception after
 +    deserialization). (Laruence)
 +  . Fixed bug #72543 (Different references behavior comparing to PHP 5)
 +    (Laruence, Dmitry, Nikita)
 +  . Fixed bug #72347 (VERIFY_RETURN type casts visible in finally). (Dmitry)
 +  . Fixed bug #72216 (Return by reference with finally is not memory safe).
 +    (Dmitry)
 +  . Fixed bug #72215 (Wrong return value if var modified in finally). (Dmitry)
 +  . Fixed bug #71818 (Memory leak when array altered in destructor). (Dmitry)
 +  . Fixed bug #71539 (Memory error on $arr[$a] =& $arr[$b] if RHS rehashes)
 +    (Dmitry, Nikita)
 +  . Added new constant PHP_FD_SETSIZE. (cmb)
 +  . Added optind parameter to getopt(). (as)
 +  . Added PHP to SAPI error severity mapping for logs. (Martin Vobruba)
 +  . Fixed bug #71911 (Unable to set --enable-debug on building extensions by
 +    phpize on Windows). (Yuji Uchiyama)
 +  . Fixed bug #29368 (The destructor is called when an exception is thrown from
 +    the constructor). (Dmitry)
++  . Implemented RFC: RNG Fixes. (Leigh)
 +
 +- COM:
 +  . Fixed bug #72569 (DOTNET/COM array parameters broke in PHP7). (Anatol)
 +
 +- Date:
 +  . Fixed bug #66836 (DateTime::createFromFormat 'U' with pre 1970 dates fails
 +    parsing). (derick)
 +
 +- DOM:
 +  . Fixed bug #66502 (DOM document dangling reference). (Sean Heelan, cmb)
 +
 +- Filter:
 +  . Fixed bug #71745 (FILTER_FLAG_NO_RES_RANGE does not cover whole 127.0.0.0/8
 +    range). (bugs dot php dot net at majkl578 dot cz)
 +
 +- FPM:
 +  . Fixed bug #72575 (using --allow-to-run-as-root should ignore missing user).
 +    (gooh)
 +
 +- GD:
 +  . Fixed bug #72596 (imagetypes function won't advertise WEBP support). (cmb)
 +  . Fixed bug #72604 (imagearc() ignores thickness for full arcs). (cmb)
 +
 +- Intl:
 +  . Partially fixed #72506 (idn_to_ascii for UTS #46 incorrect for long domain
 +    names). (cmb)
 +
 +- Mbstring:
 +  . Deprecated mb_ereg_replace() eval option. (Rouven Weßling, cmb)
 +
 +- MCrypt:
 +  . Deprecated ext/mcrypt. (Scott Arciszewski, cmb)
 +
 +- Opcache:
 +  . Fixed bug #72590 (Opcache restart with kill_all_lockers does not work).
 +    (Keyur)
 +
 +- PDO_pgsql:
 +  . Fixed bug #70313 (PDO statement fails to throw exception). (Matteo)
 +  . Fixed bug #72570 (Segmentation fault when binding parameters on a query
 +    without placeholders). (Matteo)
 +
 +- Pcntl
 +  . Implemented asynchronous signal handling without TICKS. (Dmitry)
 +  . Added pcntl_signal_get_handler() that returns the current signal handler
 +    for a particular signal. Addresses FR #72409. (David Walker)
 +
 +- Reflection:
 +  . Fixed bug #72222 (ReflectionClass::export doesn't handle array constants).
 +    (Nikita Nefedov)
 +
 +- SimpleXML:
 +  . Fixed bug #72588 (Using global var doesn't work while accessing SimpleXML
 +    element). (Laruence)
 +
 +- Tidy:
 +  . Implemented support for libtidy 5.0.0 and above. (Michael Orlitzky, Anatol)
 +
 +- Wddx:
 +  . Fixed bug #72564 (boolean always deserialized as "true") (Remi)
 +
 +07 Jul 2016, PHP 7.1.0alpha3
 +
  - Core:
    . Implemented RFC: Iterable. (Aaron Piotrowski)
    . Fixed bug #72523 (dtrace issue with reflection (failed test)). (Laruence)

diff --cc UPGRADING
index adb4741a5b13f18fe97fab8ec358721798b876a3,9af87e98e5eb2c13feebe145e282a6b4a81295bd..ab3c3ecac8f51dfe5063e0a76d1839562c5ca404
--- 1/UPGRADING
--- 2/UPGRADING
+++ b/UPGRADING
@@@ -47,8 -47,6 +47,18 @@@ PHP 7.1 UPGRADE NOTE
      syslog error levels. This brings finer differentiation in the error logs
      in contrary to the previous approach where all the errors are loggged with
      the notice level only.
 +  . Don't call destructors of incompletely constructed objects, even if they
 +    are kept referenced. See bug #29368 and Zend/tests/bug29368_1.phpt.
++  . rand() and srand() are now aliases of mt_rand() and mt_srand().
++    Consequently the output of the following functions has changed:
++     . rand()
++     . shuffle()
++     . str_shuffle()
++     . array_rand()
++  . Fixes to random number generators mean that mt_rand() now produces a
++    different sequence of outputs to previous versions. If you relied on
++    mt_srand() to produce a deterministic sequence, it can be called using
++    mt_srand($seed, MT_RAND_PHP) to produce old the sequences.
  
  - JSON:
    . The serialize_precision is used instead of precision when encoding double

diff --cc ext/standard/basic_functions.c
Simple merge