]>
granicus.if.org Git - php/log
Pierre Joye [Tue, 19 Jul 2016 09:33:38 +0000 (16:33 +0700)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
improve fix #72558, free contribRow as well
Pierre Joye [Tue, 19 Jul 2016 09:33:17 +0000 (16:33 +0700)]
improve fix #72558, free contribRow as well
Pierre Joye [Tue, 19 Jul 2016 08:53:25 +0000 (15:53 +0700)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
improve fix #72558, while (u>=0) with unsigned int will always be true
Pierre Joye [Tue, 19 Jul 2016 08:51:43 +0000 (15:51 +0700)]
improve fix #72558, while (u>=0) with unsigned int will always be true
Stanislav Malyshev [Tue, 19 Jul 2016 08:47:48 +0000 (01:47 -0700)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
Fix memory leak
Stanislav Malyshev [Tue, 19 Jul 2016 08:47:40 +0000 (01:47 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Fix memory leak
Stanislav Malyshev [Tue, 19 Jul 2016 08:47:27 +0000 (01:47 -0700)]
Fix memory leak
Stanislav Malyshev [Tue, 19 Jul 2016 08:35:58 +0000 (01:35 -0700)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
fix #72519, possible OOB using imagegif
fix #72512, invalid read or write for palette image when invalid transparent index is used
Apparently some envs miss SIZE_MAX
Fix tests
Fix bug #72618: NULL Pointer Dereference in exif_process_user_comment
Partial fix for bug #72613 - do not treat negative returns from bz2 as size_t
Fix bug #72606: heap-buffer-overflow (write) simplestring_addn simplestring.c
Fix for bug #72558, Integer overflow error within _gdContributionsAlloc()
Fix bug #72603: Out of bound read in exif_process_IFD_in_MAKERNOTE
Fix bug #72562 - destroy var_hash properly
Fix bug #72533 (locale_accept_from_http out-of-bounds access)
Fix fir bug #72520
Fix for bug #72513
Fix for bug #72513
CS fix and comments with bug ID
Fix for HTTP_PROXY issue.
5.6.24RC1
add tests for bug #72512
Fixed bug #72512 gdImageTrueColorToPaletteBody allows arbitrary write/read access
Fixed bug #72479 - same as #72434
Conflicts:
Zend/zend_virtual_cwd.c
ext/bz2/bz2.c
ext/exif/exif.c
ext/session/session.c
ext/snmp/snmp.c
ext/standard/basic_functions.c
main/SAPI.c
main/php_variables.c
Stanislav Malyshev [Tue, 19 Jul 2016 08:08:18 +0000 (01:08 -0700)]
Merge branch 'PHP-7.0.9' into PHP-7.0
* PHP-7.0.9:
Partial fix for bug #72613 - do not allow reading past error read
update NEWS
Fixed bug #72570 Segmentation fault when binding parameters on a query without placeholders
Fix bug #72551 and bug #72552 - check before converting size_t->int
Fix bug #72541 - size_t overflow lead to heap corruption
fix possible optimization bug
set versions
Conflicts:
configure.in
ext/pdo_pgsql/tests/bug72570.phpt
main/php_version.h
Stanislav Malyshev [Tue, 19 Jul 2016 07:53:08 +0000 (00:53 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
fix #72519, possible OOB using imagegif
fix #72512, invalid read or write for palette image when invalid transparent index is used
Apparently some envs miss SIZE_MAX
Fix tests
Fix bug #72618: NULL Pointer Dereference in exif_process_user_comment
Partial fix for bug #72613 - do not treat negative returns from bz2 as size_t
Fix bug #72606: heap-buffer-overflow (write) simplestring_addn simplestring.c
Fix for bug #72558, Integer overflow error within _gdContributionsAlloc()
Fix bug #72603: Out of bound read in exif_process_IFD_in_MAKERNOTE
Fix bug #72562 - destroy var_hash properly
Fix bug #72533 (locale_accept_from_http out-of-bounds access)
Fix fir bug #72520
Fix for bug #72513
CS fix and comments with bug ID
Fix for HTTP_PROXY issue.
add tests for bug #72512
Fixed bug #72512 gdImageTrueColorToPaletteBody allows arbitrary write/read access
Fixed bug #72479 - same as #72434
Conflicts:
ext/bz2/bz2.c
main/SAPI.c
main/php_variables.c
Stanislav Malyshev [Tue, 19 Jul 2016 07:51:27 +0000 (00:51 -0700)]
Merge branch 'PHP-5.6.24' into PHP-5.6
* PHP-5.6.24:
Fix for bug #72513
5.6.24RC1
Conflicts:
configure.in
main/php_version.h
Stanislav Malyshev [Tue, 19 Jul 2016 07:44:08 +0000 (00:44 -0700)]
Merge branch 'PHP-5.5' of git.php.net:php-src into PHP-5.5
* 'PHP-5.5' of git.php.net:php-src:
fix #72519, possible OOB using imagegif
Anatol Belski [Tue, 19 Jul 2016 07:42:28 +0000 (09:42 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
fix #72519, possible OOB using imagegif
Anatol Belski [Tue, 19 Jul 2016 07:40:26 +0000 (09:40 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
fix #72519, possible OOB using imagegif
Pierre Joye [Tue, 19 Jul 2016 07:11:44 +0000 (14:11 +0700)]
fix #72519, possible OOB using imagegif
Pierre Joye [Tue, 19 Jul 2016 06:37:23 +0000 (13:37 +0700)]
fix #72512, invalid read or write for palette image when invalid transparent index is used
Conflicts:
ext/gd/libgd/gd.c
Pierre Joye [Tue, 19 Jul 2016 00:11:44 +0000 (07:11 +0700)]
fix #72519, possible OOB using imagegif
fix #72519, possible OOB using imagegif
Pierre Joye [Tue, 19 Jul 2016 07:16:20 +0000 (14:16 +0700)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
fix #72519, possible OOB using imagegif
Pierre Joye [Tue, 19 Jul 2016 07:16:01 +0000 (14:16 +0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
fix #72519, possible OOB using imagegif
Stanislav Malyshev [Tue, 19 Jul 2016 07:13:25 +0000 (00:13 -0700)]
Apparently some envs miss SIZE_MAX
Pierre Joye [Tue, 19 Jul 2016 07:11:44 +0000 (14:11 +0700)]
fix #72519, possible OOB using imagegif
Pierre Joye [Tue, 19 Jul 2016 06:40:34 +0000 (13:40 +0700)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
fix #72512, invalid read or write for palette image when invalid transparent index is used
Pierre Joye [Tue, 19 Jul 2016 06:39:46 +0000 (13:39 +0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
fix #72512, invalid read or write for palette image when invalid transparent index is used
Pierre Joye [Tue, 19 Jul 2016 06:37:23 +0000 (13:37 +0700)]
fix #72512, invalid read or write for palette image when invalid transparent index is used
Stanislav Malyshev [Tue, 19 Jul 2016 06:32:38 +0000 (23:32 -0700)]
Merge branch 'PHP-5.5.38' into PHP-5.5
* PHP-5.5.38:
Fix tests
Fix bug #72618: NULL Pointer Dereference in exif_process_user_comment
Partial fix for bug #72613 - do not treat negative returns from bz2 as size_t
Fix bug #72606: heap-buffer-overflow (write) simplestring_addn simplestring.c
Fix for bug #72558, Integer overflow error within _gdContributionsAlloc()
Fix bug #72603: Out of bound read in exif_process_IFD_in_MAKERNOTE
Fix bug #72562 - destroy var_hash properly
Fix bug #72533 (locale_accept_from_http out-of-bounds access)
Fix fir bug #72520
Fix for bug #72513
CS fix and comments with bug ID
Fix for HTTP_PROXY issue.
add tests for bug #72512
Fixed bug #72512 gdImageTrueColorToPaletteBody allows arbitrary write/read access
Fixed bug #72479 - same as #72434
Stanislav Malyshev [Tue, 19 Jul 2016 06:30:51 +0000 (23:30 -0700)]
Fix tests
Stanislav Malyshev [Tue, 19 Jul 2016 06:21:51 +0000 (23:21 -0700)]
Fix bug #72618: NULL Pointer Dereference in exif_process_user_comment
Stanislav Malyshev [Tue, 19 Jul 2016 06:01:10 +0000 (23:01 -0700)]
Partial fix for bug #72613 - do not allow reading past error read
Stanislav Malyshev [Tue, 19 Jul 2016 05:20:45 +0000 (22:20 -0700)]
Partial fix for bug #72613 - do not treat negative returns from bz2 as size_t
Stanislav Malyshev [Tue, 19 Jul 2016 04:44:39 +0000 (21:44 -0700)]
Fix bug #72606: heap-buffer-overflow (write) simplestring_addn simplestring.c
Christoph M. Becker [Mon, 18 Jul 2016 22:46:24 +0000 (00:46 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
# Resolved conflicts:
# ext/gd/gd.c
Christoph M. Becker [Mon, 18 Jul 2016 22:35:14 +0000 (00:35 +0200)]
Merge branch 'pull-request/1991' into PHP-5.6
Christoph M. Becker [Thu, 7 Jul 2016 12:47:55 +0000 (14:47 +0200)]
Fix #70315: 500 Server Error but page is fully rendered
That happens because the external libgd uses other error codes than PHP
(and the bundled libgd), but the libgd error codes are simply forwarded
to php_verror(). We fix that by properly mapping libgd errors to PHP errors.
Stanislav Malyshev [Mon, 18 Jul 2016 07:17:48 +0000 (00:17 -0700)]
Fix for bug #72558, Integer overflow error within _gdContributionsAlloc()
Stanislav Malyshev [Sun, 17 Jul 2016 23:43:27 +0000 (16:43 -0700)]
Merge branch 'PHP-7.0.9' of git.php.net:php-src into PHP-7.0.9
* 'PHP-7.0.9' of git.php.net:php-src:
update NEWS
Fixed bug #72570 Segmentation fault when binding parameters on a query without placeholders
Stanislav Malyshev [Sun, 17 Jul 2016 23:34:21 +0000 (16:34 -0700)]
Fix bug #72603: Out of bound read in exif_process_IFD_in_MAKERNOTE
Nikita Popov [Sat, 16 Jul 2016 21:02:34 +0000 (23:02 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Conflicts:
Zend/zend_gc.c
Nikita Popov [Sat, 16 Jul 2016 21:00:47 +0000 (23:00 +0200)]
Revert "Fixed bug #72286 (Segmentation fault During Garbage Collection)"
This reverts commit
1c84b55adea936b065a20102202bea3d1d243225 .
Christoph M. Becker [Fri, 15 Jul 2016 17:47:21 +0000 (19:47 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Fri, 15 Jul 2016 17:42:26 +0000 (19:42 +0200)]
Fix #72604: imagearc() ignores thickness for full arcs
We remove the special casing for full arcs, what conforms to external libgd.
Christoph M. Becker [Thu, 14 Jul 2016 23:09:58 +0000 (01:09 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Thu, 14 Jul 2016 22:57:36 +0000 (00:57 +0200)]
Fix bug #66502: DOM document dangling reference
When we decrement the refcount of a node's document, we state that we
won't need it anymore. Therefore we can *always* set the pointer to the
document to NULL, what avoids invalid memory accesses for some edge cases
as demonstrated with the PHPT.
Original patch provided by Sean Heelan.
Nikita Popov [Thu, 14 Jul 2016 21:22:09 +0000 (23:22 +0200)]
Fix test output
The error is now detected earlier, so the message ends up being
different.
Nikita Popov [Thu, 14 Jul 2016 19:38:10 +0000 (21:38 +0200)]
Fix is_callable() on abstract method via object
Dmitry Stogov [Thu, 14 Jul 2016 19:38:47 +0000 (22:38 +0300)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
Fixed bug #72286 (Segmentation fault During Garbage Collection)
Dmitry Stogov [Thu, 14 Jul 2016 19:37:25 +0000 (22:37 +0300)]
Fixed bug #72286 (Segmentation fault During Garbage Collection)
Anatol Belski [Thu, 14 Jul 2016 19:21:01 +0000 (21:21 +0200)]
Merge branch 'PHP-7.0' of git.php.net:php-src into PHP-7.0
Anatol Belski [Thu, 14 Jul 2016 19:16:07 +0000 (21:16 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
Extend libxml exports
Updated NEWS
Fix #69975: PHP segfaults when accessing nvarchar(max) defined columns
Updated NEWS
Fix bug #70480 (php_url_parse_ex() buffer overflow read)
Update PHP 5.5 NEWS entries with CVE info
Anatol Belski [Thu, 14 Jul 2016 19:13:49 +0000 (21:13 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Extend libxml exports
Updated NEWS
Fix #69975: PHP segfaults when accessing nvarchar(max) defined columns
Updated NEWS
Fix bug #70480 (php_url_parse_ex() buffer overflow read)
Update PHP 5.5 NEWS entries with CVE info
Anatol Belski [Thu, 14 Jul 2016 19:08:54 +0000 (21:08 +0200)]
Extend libxml exports
These are needed to support libxslt 1.1.29 on Windows. This libxslt version
fixes CVE-2015-7995 and for this reason needs to be used.
Nikita Popov [Thu, 14 Jul 2016 18:44:36 +0000 (20:44 +0200)]
Fix bad merge
In master the operand is fetched earlier, I didn't account for
that.
Nikita Popov [Thu, 14 Jul 2016 15:43:29 +0000 (17:43 +0200)]
Fix leak when creating timezone with null bytes
Nikita Popov [Thu, 14 Jul 2016 15:36:56 +0000 (17:36 +0200)]
Fix leak when dynamically calling abstract method
Nikita Popov [Thu, 14 Jul 2016 15:29:59 +0000 (17:29 +0200)]
Fix leak of class name when printing exception backtrace
Nikita Popov [Thu, 14 Jul 2016 13:55:30 +0000 (15:55 +0200)]
Fix leaks in yield from error conditions
Conflicts:
Zend/zend_vm_execute.h
Nikita Popov [Wed, 13 Jul 2016 22:08:29 +0000 (00:08 +0200)]
Fix leak for by-ref assign to overloaded object
Conflicts:
Zend/zend_vm_execute.h
Nikita Popov [Wed, 13 Jul 2016 21:55:19 +0000 (23:55 +0200)]
Add missing call opcodes in cleanup_unfinished_calls()
Otherwise we may leak if an exception is thrown from them.
Nikita Popov [Wed, 13 Jul 2016 21:35:53 +0000 (23:35 +0200)]
Fix leak if throw_exception_object() fails
Christoph M. Becker [Thu, 14 Jul 2016 15:20:19 +0000 (17:20 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Thu, 14 Jul 2016 14:43:13 +0000 (16:43 +0200)]
Fix bug #72596: imagetypes function won't advertise WEBP support
We add the constant IMG_WEBP and make sure that WebP support is properly
reported by imagetypes().
Anatol Belski [Thu, 14 Jul 2016 11:21:38 +0000 (13:21 +0200)]
update NEWS
Anatol Belski [Thu, 14 Jul 2016 11:20:13 +0000 (13:20 +0200)]
update NEWS
Matteo Beccati [Sun, 10 Jul 2016 12:36:07 +0000 (14:36 +0200)]
Fixed bug #72570 Segmentation fault when binding parameters on a query without placeholders
Special commit for 7.0.9
Dmitry Stogov [Thu, 14 Jul 2016 10:05:27 +0000 (13:05 +0300)]
Fixed memory leak
Xinchen Hui [Thu, 14 Jul 2016 05:36:43 +0000 (13:36 +0800)]
Fixed bug #72594 (Calling an earlier instance of an included anonymous class fatals)
Nikita Popov [Wed, 13 Jul 2016 19:57:14 +0000 (21:57 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Nikita Popov [Wed, 13 Jul 2016 19:57:01 +0000 (21:57 +0200)]
Add NEWS entry
Nikita Popov [Wed, 13 Jul 2016 19:46:52 +0000 (21:46 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Conflicts:
ext/reflection/php_reflection.c
nikita2206 [Sun, 15 May 2016 23:58:21 +0000 (02:58 +0300)]
fix: bug72222 for PHP-5.6 reflection export of array consts
Stanislav Malyshev [Wed, 13 Jul 2016 06:27:45 +0000 (23:27 -0700)]
Fix bug #72562 - destroy var_hash properly
Stanislav Malyshev [Wed, 13 Jul 2016 06:13:52 +0000 (23:13 -0700)]
Fix bug #72551 and bug #72552 - check before converting size_t->int
Stanislav Malyshev [Wed, 13 Jul 2016 05:59:19 +0000 (22:59 -0700)]
Fix bug #72541 - size_t overflow lead to heap corruption
Stanislav Malyshev [Wed, 13 Jul 2016 05:37:36 +0000 (22:37 -0700)]
Fix bug #72533 (locale_accept_from_http out-of-bounds access)
Stanislav Malyshev [Wed, 13 Jul 2016 05:03:40 +0000 (22:03 -0700)]
Fix fir bug #72520
Stanislav Malyshev [Wed, 13 Jul 2016 04:48:00 +0000 (21:48 -0700)]
Fix for bug #72513
Stanislav Malyshev [Wed, 13 Jul 2016 04:52:27 +0000 (21:52 -0700)]
Fix for bug #72513
Stanislav Malyshev [Wed, 13 Jul 2016 04:35:02 +0000 (21:35 -0700)]
CS fix and comments with bug ID
Keyur [Wed, 13 Jul 2016 03:15:03 +0000 (03:15 +0000)]
Merge branch 'PHP-7.0' of https://git.php.net/push/php-src into PHP-7.0
Keyur [Wed, 13 Jul 2016 03:03:26 +0000 (03:03 +0000)]
Add to NEWS
Keyur [Wed, 13 Jul 2016 02:47:46 +0000 (02:47 +0000)]
Fixes #72590: Opcache restart with kill_all_lockers does not work
ACCEL_LOG_ERROR is special and causes a zend_bailout() and the code
never gets to call kill() in the next line after the logging. Change
the log level to WARNING.
Xinchen Hui [Wed, 13 Jul 2016 02:49:58 +0000 (10:49 +0800)]
Fixed bug #72588 (Using global var doesn't work while accessing SimpleXML element)
Anatol Belski [Tue, 12 Jul 2016 15:04:41 +0000 (17:04 +0200)]
missed the dot
Anatol Belski [Tue, 12 Jul 2016 15:01:51 +0000 (17:01 +0200)]
update NEWS
Julien Pauli [Tue, 12 Jul 2016 13:51:23 +0000 (15:51 +0200)]
Updated NEWS
Julien Pauli [Tue, 12 Jul 2016 13:50:58 +0000 (15:50 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
Updated NEWS
Revert "Fixes #52384: Adds parameter value to dumped output. Also adds output flag indicating presence of PDO::PARAM_INPUT_OUTPUT."
Revert "Fix test for #52384"
Conflicts:
ext/pdo/pdo_stmt.c
Julien Pauli [Tue, 12 Jul 2016 13:47:05 +0000 (15:47 +0200)]
Updated NEWS
Julien Pauli [Tue, 12 Jul 2016 13:46:07 +0000 (15:46 +0200)]
Revert "Fixes #52384: Adds parameter value to dumped output. Also adds output flag indicating presence of PDO::PARAM_INPUT_OUTPUT."
This reverts commit
15336b44d95c41079438af8ac73f77ff893aeef7 .
Julien Pauli [Tue, 12 Jul 2016 13:45:49 +0000 (15:45 +0200)]
Revert "Fix test for #52384"
This reverts commit
642e44b98f18d867052aa7e02476aae9c8881201 .
Julien Pauli [Tue, 12 Jul 2016 13:27:57 +0000 (15:27 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
Fix test for #52384
Julien Pauli [Tue, 12 Jul 2016 13:27:37 +0000 (15:27 +0200)]
Fix test for #52384
Anatol Belski [Tue, 12 Jul 2016 12:58:13 +0000 (14:58 +0200)]
Fixed bug #72569 DOTNET/COM array parameters broke in PHP7
Christoph M. Becker [Tue, 12 Jul 2016 12:51:23 +0000 (14:51 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
# Resolved conflicts:
# ext/intl/idn/idn.c
Christoph M. Becker [Tue, 12 Jul 2016 12:42:38 +0000 (14:42 +0200)]
Partially fix #72506: idn_to_ascii for UTS #46 incorrect for long domain names
We don't actually fix this issue wrt. the empty $info array, because it is
not clear what this array should contain and we're concerned about the
potential BC break, but at least we fix the inconsistent handling of
resulting domains with 255 bytes (which raise an error), and longer domains
(which just return FALSE), what has to be considered a very minor BC break
if at all.
Anatol Belski [Tue, 12 Jul 2016 11:01:54 +0000 (13:01 +0200)]
update NEWS
y-uti [Tue, 12 Jul 2016 10:59:11 +0000 (12:59 +0200)]
Make phpize set a proper build type (windows)
Julien Pauli [Tue, 12 Jul 2016 09:17:58 +0000 (11:17 +0200)]
Updated NEWS
Julien Pauli [Tue, 12 Jul 2016 09:17:36 +0000 (11:17 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
Updated NEWS
Fixes #52384: Adds parameter value to dumped output. Also adds output flag indicating presence of PDO::PARAM_INPUT_OUTPUT.
Conflicts:
ext/pdo/pdo_stmt.c
Julien Pauli [Tue, 12 Jul 2016 08:49:04 +0000 (10:49 +0200)]
Updated NEWS
Bishop Bettini [Tue, 21 Jun 2016 12:16:51 +0000 (08:16 -0400)]
Fixes #52384: Adds parameter value to dumped output. Also adds output flag indicating presence of PDO::PARAM_INPUT_OUTPUT.
Julien Pauli [Tue, 12 Jul 2016 08:38:40 +0000 (10:38 +0200)]
Updated NEWS