lexbor: Cherry pick "URL: fixed "heap-buffer-overflow" for scheme is "file"."

see lexbor/lexbor@65435d3

Fixes php#20668

Author: TimWolla

NEWS

@@ -13,6 +13,9 @@ PHP                                                                        NEWS
 - LDAP:
   . Fix memory leak in ldap_set_options(). (ndossche)
 
+- Lexbor:
+  . Fixed bug GH-20668 (\Uri\WhatWg\Url::withHost() crashes (SEGV) for URLs
+    using the file: scheme). (lexborisov)
 
 18 Dec 2025, PHP 8.5.1
 

ext/lexbor/lexbor/url/url.c

@@ -1817,7 +1817,6 @@ lxb_url_parse_basic_h(lxb_url_parser_t *parser, lxb_url_t *url,
         if (override_state != LXB_URL_STATE__UNDEF
             && url->scheme.type == LXB_URL_SCHEMEL_TYPE_FILE)
         {
-            p -= 1;
             state = LXB_URL_STATE_FILE_HOST_STATE;
             goto again;
         }