From: Stanislav Malyshev Date: Tue, 21 Jun 2016 07:02:37 +0000 (-0700) Subject: Merge branch 'PHP-5.6.23' into PHP-5.6 X-Git-Tag: php-7.1.0alpha2~22^2^2~1 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=c9b24ef30735bdc1582a3628767f947d21a176ba;p=php Merge branch 'PHP-5.6.23' into PHP-5.6 * PHP-5.6.23: Fixed bug #72446 - Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow update NEWS fix tests fix build Fix bug #72455: Heap Overflow due to integer overflows Fix bug #72434: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize Fixed ##72433: Use After Free Vulnerability in PHP's GC algorithm and unserialize Fix bug #72407: NULL Pointer Dereference at _gdScaleVert Fix bug #72402: _php_mb_regex_ereg_replace_exec - double free Fix bug #72298 pass2_no_dither out-of-bounds access Fixed #72339 Integer Overflow in _gd2GetHeader() resulting in heap overflow Fix bug #72262 - do not overflow int Fix bug #72400 and #72403 - prevent signed int overflows for string lengths Fix bug #72275: don't allow smart_str to overflow int Fix bug #72340: Double Free Courruption in wddx_deserialize Fix bug #72321 - use efree() for emalloc allocation 5.6.23RC1 Conflicts: configure.in main/php_version.h --- c9b24ef30735bdc1582a3628767f947d21a176ba