Merge branch '6.4' into 7.3

* 6.4:
  Replace backtick operator, deprecated in PHP 8.5, with shell_exec()
  [DependencyInjection] Add test case to ensure XML parse exception message includes filename and position
  [Serializer] Fix normalizing objects with accessors having the same name as a property
  [SecurityBundle] Prevent accessing the tracked token storage when collecting data

Author: nicolas-grekas

Tests/Fixtures/xml/services31.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="utf-8"?>
+<container xmlns="http://symfony.com/schema/dic/services" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://symfony.com/schema/dic/services https://symfony.com/schema/dic/services/services-1.0.xsd">
+    <services>
+        <service id="invalid_service" class="App\Foo">
+            <bogusTag />
+        </service>
+    </services>
+</container>

Tests/Loader/XmlFileLoaderTest.php

@@ -1362,4 +1362,20 @@ public function testLoadServicesWithEnvironment()
 
         self::assertInstanceOf(RemoteCallerSocket::class, $container->get(RemoteCaller::class));
     }
+
+    public function testXmlParseExceptionIncludesFilenameAndPosition()
+    {
+        $container = new ContainerBuilder();
+        $loader = new XmlFileLoader(
+            $container,
+            new FileLocator(__DIR__.'/../Fixtures/xml')
+        );
+
+        $invalidXMLFileName = 'services31.xml';
+
+        $this->expectException(InvalidArgumentException::class);
+        $this->expectExceptionMessageMatches('/Unable to parse file .*services31\.xml.*bogusTag.*This element is not expected.*line 5, column 0/');
+
+        $loader->load($invalidXMLFileName);
+    }
 }