]> granicus.if.org Git - php/log
php
9 years agoFixed Bug #69667 segfault in php_pgsql_meta_data
Remi Collet [Wed, 20 May 2015 06:08:41 +0000 (08:08 +0200)]
Fixed Bug #69667 segfault in php_pgsql_meta_data

Incomplete fix for #68741

9 years agofix test output (32bits)
Remi Collet [Thu, 14 May 2015 08:28:59 +0000 (10:28 +0200)]
fix test output (32bits)

9 years agoUpdated NEWS
Julien Pauli [Wed, 13 May 2015 12:29:02 +0000 (14:29 +0200)]
Updated NEWS

9 years agoClose fd at the end, otherwise people complain
Leigh [Fri, 27 Mar 2015 19:14:33 +0000 (20:14 +0100)]
Close fd at the end, otherwise people complain

Even though it's closed when the process terminates!

9 years agoAdd file descriptor caching to mcrypt_create_iv()
Leigh [Fri, 27 Mar 2015 13:33:30 +0000 (14:33 +0100)]
Add file descriptor caching to mcrypt_create_iv()

This improves performance for applications that make repeated calls to
mcrypt_create_iv()

9 years agoUpdated NEWS
Julien Pauli [Wed, 13 May 2015 11:05:46 +0000 (13:05 +0200)]
Updated NEWS

9 years agoMerge branch 'PHP-5.4' into PHP-5.5
Stanislav Malyshev [Tue, 12 May 2015 21:24:15 +0000 (14:24 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  fix format
  update NEWS
  Add test for bug #69522
  Update tests
  Fix bug #69522 - do not allow int overflow
  Forgot test file
  Fix bug #69403 and other int overflows
  Fixed bug #69418 - more s->p fixes for filenames
  Fixed bug #69364 - use smart_str to assemble strings
  Fix bug #69453 - don't try to cut empty string
  Fix bug #69545 - avoid overflow when reading list

Conflicts:
ext/pcntl/pcntl.c
ext/standard/basic_functions.c
ext/standard/pack.c
ext/standard/tests/dir/opendir_variation1-win32.phpt

9 years agofix format
Stanislav Malyshev [Tue, 12 May 2015 19:37:28 +0000 (12:37 -0700)]
fix format

9 years agoupdate NEWS
Stanislav Malyshev [Tue, 12 May 2015 19:17:54 +0000 (12:17 -0700)]
update NEWS

9 years agoFix for #66048
Julien Pauli [Tue, 12 May 2015 14:12:29 +0000 (16:12 +0200)]
Fix for #66048

9 years agoAdd test for bug #69522
Stanislav Malyshev [Mon, 11 May 2015 08:10:35 +0000 (01:10 -0700)]
Add test for bug #69522

9 years agoUpdate tests
Stanislav Malyshev [Mon, 11 May 2015 06:33:44 +0000 (23:33 -0700)]
Update tests

9 years agoFix bug #69522 - do not allow int overflow
Stanislav Malyshev [Mon, 11 May 2015 06:06:08 +0000 (23:06 -0700)]
Fix bug #69522 - do not allow int overflow

9 years agoForgot test file
Stanislav Malyshev [Sun, 10 May 2015 09:24:29 +0000 (02:24 -0700)]
Forgot test file

9 years agoFix bug #69403 and other int overflows
Stanislav Malyshev [Sun, 10 May 2015 09:20:08 +0000 (02:20 -0700)]
Fix bug #69403 and other int overflows

9 years agoFixed bug #69418 - more s->p fixes for filenames
Stanislav Malyshev [Sun, 10 May 2015 06:13:06 +0000 (23:13 -0700)]
Fixed bug #69418 - more s->p fixes for filenames

9 years agoFixed bug #69364 - use smart_str to assemble strings
Stanislav Malyshev [Sun, 10 May 2015 06:04:25 +0000 (23:04 -0700)]
Fixed bug #69364 - use smart_str to assemble strings

9 years agoFix #48147 - implement manual handling of //IGNORE for broken libc
Stanislav Malyshev [Fri, 8 May 2015 07:03:54 +0000 (00:03 -0700)]
Fix #48147 - implement manual handling of  //IGNORE for broken libc

Conflicts:
ext/iconv/iconv.c

9 years agoFixed bug #69549 (Memory leak with opcache.optimization_level=0xFFFFFFFF)
Dmitry Stogov [Thu, 7 May 2015 09:14:14 +0000 (12:14 +0300)]
Fixed bug #69549 (Memory leak with opcache.optimization_level=0xFFFFFFFF)

9 years agoRelax tests failing on i386 with new zic
Remi Collet [Tue, 5 May 2015 09:22:29 +0000 (11:22 +0200)]
Relax tests failing on i386 with new zic

9 years agoUpdate version
Xinchen Hui [Tue, 5 May 2015 03:06:04 +0000 (11:06 +0800)]
Update version

9 years agoSaving the latter checking in most cases
Xinchen Hui [Mon, 4 May 2015 11:21:54 +0000 (19:21 +0800)]
Saving the latter checking in most cases

9 years agoUpdate NEWS
Xinchen Hui [Mon, 4 May 2015 02:34:39 +0000 (10:34 +0800)]
Update NEWS

9 years agoFix uninitialized value with extension traits
John Boehr [Sun, 3 May 2015 21:29:19 +0000 (14:29 -0700)]
Fix uninitialized value with extension traits

9 years agoFix bug #69453 - don't try to cut empty string
Stanislav Malyshev [Thu, 30 Apr 2015 05:04:20 +0000 (22:04 -0700)]
Fix bug #69453 - don't try to cut empty string

9 years agoFix bug #69545 - avoid overflow when reading list
Stanislav Malyshev [Thu, 30 Apr 2015 04:57:33 +0000 (21:57 -0700)]
Fix bug #69545 - avoid overflow when reading list

9 years agoMerge branch 'PHP-5.4' into PHP-5.5
Stanislav Malyshev [Thu, 30 Apr 2015 05:27:21 +0000 (22:27 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  Upgrade to PCRE 8.37 due to various bugfixes

9 years agoUpgrade to PCRE 8.37 due to various bugfixes
Stanislav Malyshev [Thu, 30 Apr 2015 05:25:02 +0000 (22:25 -0700)]
Upgrade to PCRE 8.37 due to various bugfixes

9 years ago5.5.26 now
Julien Pauli [Wed, 29 Apr 2015 09:16:06 +0000 (11:16 +0200)]
5.5.26 now

9 years agoUse new structures for tzdb header here as well
Derick Rethans [Tue, 28 Apr 2015 23:28:50 +0000 (00:28 +0100)]
Use new structures for tzdb header here as well

9 years agoThis doesn't work in PHP 5.5 - sigh, I wish the libs were kept in sync
Derick Rethans [Tue, 28 Apr 2015 23:25:29 +0000 (00:25 +0100)]
This doesn't work in PHP 5.5 - sigh, I wish the libs were kept in sync

9 years agoSplit header reading in 32bit and 64bit variants.
Derick Rethans [Tue, 28 Apr 2015 23:08:28 +0000 (00:08 +0100)]
Split header reading in 32bit and 64bit variants.

We need to use the 64bit header for the second set of transitions, as there
could be a different amount of transitions. This also opens up the way towards
real 64bit support.

9 years agoMerge whitespace changes that have been made to timelib and PHP-5.6 and master
Derick Rethans [Tue, 28 Apr 2015 14:57:26 +0000 (15:57 +0100)]
Merge whitespace changes that have been made to timelib and PHP-5.6 and master

9 years agobackported patch for bug #69472
Anatol Belski [Tue, 28 Apr 2015 13:31:47 +0000 (15:31 +0200)]
backported patch for bug #69472

9 years agoupdated NEWS
Anatol Belski [Tue, 28 Apr 2015 13:13:19 +0000 (15:13 +0200)]
updated NEWS

9 years agoFixed bug #69381 out of memory with sage odbc driver
Frederic Marchal [Tue, 28 Apr 2015 13:08:53 +0000 (15:08 +0200)]
Fixed bug #69381 out of memory with sage odbc driver

This is just a hotfix as there are still drivers with no full
ODBC 3.x support. This patch origins from bug #68350 which was
solved by the proper 3.0 migration, another driver (Sage)
turned out to have the real issue.

9 years agoMerge branch 'PHP-5.4' into PHP-5.5
Anatol Belski [Tue, 28 Apr 2015 12:38:21 +0000 (14:38 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  fix VC9 build with PCRE

9 years agofix VC9 build with PCRE
Anatol Belski [Tue, 28 Apr 2015 11:15:39 +0000 (13:15 +0200)]
fix VC9 build with PCRE

9 years agoRevert "Fix segfault in ext/date since 957aa2"
Matteo Beccati [Tue, 28 Apr 2015 10:48:00 +0000 (12:48 +0200)]
Revert "Fix segfault in ext/date since 957aa2"

This reverts commit b5e5098c50397ed910a79ac1d64b7d0fff2c02e1.

A proper fix from Derick is underway. I apologise for stepping on his toes ;)

9 years agorelax tests with huge year (new zic)
Remi Collet [Sat, 18 Apr 2015 08:00:15 +0000 (10:00 +0200)]
relax tests with huge year (new zic)

9 years agoignore second value for huge timestamp test (new zic)
Remi Collet [Sat, 18 Apr 2015 07:37:06 +0000 (09:37 +0200)]
ignore second value for huge timestamp test (new zic)

9 years agorelax test for date < INT32_MIN (new zic)
Remi Collet [Sat, 18 Apr 2015 07:28:29 +0000 (09:28 +0200)]
relax test for date < INT32_MIN (new zic)

9 years agorelax bigbang content (new zic)
Remi Collet [Sat, 18 Apr 2015 07:11:39 +0000 (09:11 +0200)]
relax bigbang content (new zic)

9 years agoMake date transitions tests more flexible
Remi Collet [Sat, 18 Apr 2015 05:47:47 +0000 (07:47 +0200)]
Make date transitions tests more flexible

zic in recent glibc (2.20) introduce a new transitionn
so use a range to avoid failure when total number
of transitions is different (243/244)

9 years agoFix segfault in ext/date since 957aa2
Matteo Beccati [Tue, 28 Apr 2015 08:57:18 +0000 (10:57 +0200)]
Fix segfault in ext/date since 957aa2

9 years agoMerge branch 'PHP-5.4' into PHP-5.5
Stanislav Malyshev [Tue, 28 Apr 2015 06:22:44 +0000 (23:22 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  Upgrade PCRE to 8.36, it fixes some crashes

9 years agoUpgrade PCRE to 8.36, it fixes some crashes
Stanislav Malyshev [Tue, 28 Apr 2015 06:15:27 +0000 (23:15 -0700)]
Upgrade PCRE to 8.36, it fixes some crashes

We probably will need to go to 8.37 once it is released.

9 years agoFixed location reading due to file format changes
Derick Rethans [Sun, 26 Apr 2015 10:04:16 +0000 (11:04 +0100)]
Fixed location reading due to file format changes

9 years ago- Updated to version 2015.4 (2015d)
Derick Rethans [Fri, 24 Apr 2015 16:22:31 +0000 (17:22 +0100)]
- Updated to version 2015.4 (2015d)

9 years agoSet NULL after efree
Yasuo Ohgaki [Fri, 24 Apr 2015 07:04:01 +0000 (16:04 +0900)]
Set NULL after efree

9 years agoAdd entry for bug #69152 in 5.5.24
Lior Kaplan [Wed, 22 Apr 2015 16:38:26 +0000 (19:38 +0300)]
Add entry for bug #69152 in 5.5.24

9 years agoAdd merged bug fixes into 5.5.24
Lior Kaplan [Wed, 22 Apr 2015 14:41:34 +0000 (17:41 +0300)]
Add merged bug fixes into 5.5.24

Done in commits 25cb6f00 and 363e6ce6

9 years agoRemove tail blank which is committed by accident
Xinchen Hui [Tue, 21 Apr 2015 14:44:22 +0000 (22:44 +0800)]
Remove tail blank which is committed by accident

9 years agoFixed Bug #69467 (Wrong checked for the interface by using Trait)
Xinchen Hui [Tue, 21 Apr 2015 14:36:32 +0000 (22:36 +0800)]
Fixed Bug #69467 (Wrong checked for the interface by using Trait)

9 years agoupdated NEWS
Anatol Belski [Sun, 19 Apr 2015 18:30:43 +0000 (20:30 +0200)]
updated NEWS

9 years agofix more dir separators
Anatol Belski [Sun, 19 Apr 2015 18:27:28 +0000 (20:27 +0200)]
fix more dir separators

9 years agoMerge branch 'PHP-5.4' into PHP-5.5
Hannes Magnusson [Fri, 17 Apr 2015 17:06:31 +0000 (10:06 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  phpweb now publishes SHA256s -- and please don't cc php-announce@ - make it seperate mail
  Fixed res leak

9 years agophpweb now publishes SHA256s -- and please don't cc php-announce@ - make it seperate...
Hannes Magnusson [Fri, 17 Apr 2015 17:05:32 +0000 (10:05 -0700)]
phpweb now publishes SHA256s -- and please don't cc php-announce@ - make it seperate mail

9 years agofix column name attribute with ODBC 3.0
Anatol Belski [Fri, 17 Apr 2015 15:10:46 +0000 (17:10 +0200)]
fix column name attribute with ODBC 3.0

9 years agomigrate SQLAllocStmt for ODBC 3.0 compliance
Anatol Belski [Fri, 17 Apr 2015 14:09:35 +0000 (16:09 +0200)]
migrate SQLAllocStmt for ODBC 3.0 compliance

9 years ago66550 will be part of 5.5.24
Ferenc Kovacs [Wed, 15 Apr 2015 17:53:38 +0000 (19:53 +0200)]
66550 will be part of 5.5.24

9 years agoUpdated NEWS
Julien Pauli [Wed, 15 Apr 2015 12:40:00 +0000 (14:40 +0200)]
Updated NEWS

9 years agofix dir separator in test
Anatol Belski [Wed, 15 Apr 2015 09:07:13 +0000 (11:07 +0200)]
fix dir separator in test

9 years agoFixed res leak
Xinchen Hui [Wed, 15 Apr 2015 02:38:55 +0000 (10:38 +0800)]
Fixed res leak

9 years agoFixed res leak
Xinchen Hui [Wed, 15 Apr 2015 02:38:55 +0000 (10:38 +0800)]
Fixed res leak

9 years agoFixed warnings
Xinchen Hui [Wed, 15 Apr 2015 02:37:35 +0000 (10:37 +0800)]
Fixed warnings

9 years agoMerge branch 'PHP-5.4' into PHP-5.5
Stanislav Malyshev [Tue, 14 Apr 2015 18:12:48 +0000 (11:12 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  Fixed recently introduced memory leak

9 years agoFixed recently introduced memory leak
Dmitry Stogov [Tue, 14 Apr 2015 12:47:26 +0000 (15:47 +0300)]
Fixed recently introduced memory leak

9 years agoFix Bug #69402: Reading empty SSL stream hangs until timeout
Daniel Lowrey [Tue, 14 Apr 2015 15:12:28 +0000 (09:12 -0600)]
Fix Bug #69402: Reading empty SSL stream hangs until timeout

9 years agoFixed bug #69419
Nikita Popov [Tue, 14 Apr 2015 14:35:23 +0000 (16:35 +0200)]
Fixed bug #69419

9 years agoBug #63336 is not a bug
Dmitry Stogov [Tue, 14 Apr 2015 14:15:50 +0000 (17:15 +0300)]
Bug #63336 is not a bug

9 years agofix test
Anatol Belski [Tue, 14 Apr 2015 13:20:44 +0000 (15:20 +0200)]
fix test

9 years agoFixed recently introduced memory leak
Dmitry Stogov [Tue, 14 Apr 2015 12:47:26 +0000 (15:47 +0300)]
Fixed recently introduced memory leak

9 years agocodes standard
Xinchen Hui [Tue, 14 Apr 2015 11:32:01 +0000 (19:32 +0800)]
codes standard

9 years ago- Updated to version 2015.3 (2015c)
Derick Rethans [Tue, 14 Apr 2015 09:51:10 +0000 (10:51 +0100)]
- Updated to version 2015.3 (2015c)

9 years agoMerge branch 'PHp-5.4' into PHP-5.5
Stanislav Malyshev [Tue, 14 Apr 2015 07:49:23 +0000 (00:49 -0700)]
Merge branch 'PHp-5.4' into PHP-5.5

* PHp-5.4:
  fix non-standard C

9 years agofix non-standard C
Stanislav Malyshev [Tue, 14 Apr 2015 07:46:47 +0000 (00:46 -0700)]
fix non-standard C

9 years agoupdate NEWS
Stanislav Malyshev [Tue, 14 Apr 2015 07:43:19 +0000 (00:43 -0700)]
update NEWS

9 years agoMerge branch 'PHP-5.4' into PHP-5.5
Stanislav Malyshev [Tue, 14 Apr 2015 07:34:02 +0000 (00:34 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  5.4.41 next
  fix CVE num
  update NEWS
  Fix bug #69441 (Buffer Overflow when parsing tar/zip/phar in phar_set_inode)
  fix type in fix for #69085
  fix CVE num

Conflicts:
configure.in
main/php_version.h

9 years agoMerge branch 'PHP-5.5.24' into PHP-5.5
Stanislav Malyshev [Tue, 14 Apr 2015 07:33:04 +0000 (00:33 -0700)]
Merge branch 'PHP-5.5.24' into PHP-5.5

* PHP-5.5.24:
  fix test
  fix memory leak & add test
  Fix tests
  Fix bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability)
  Fix test
  Additional fix for bug #69324
  More fixes for bug #69152
  Fixed bug #69353 (Missing null byte checks for paths in various PHP extensions)
  Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar)
  Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
  Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
  Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
  Fixed bug #68901 (use after free)
  Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
  Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
  Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
  Updated NEWS
  Fixed bug #69336 (Issues with "last day of <monthname>").
  5.5.24RC1

9 years ago5.4.41 next
Stanislav Malyshev [Tue, 14 Apr 2015 07:30:58 +0000 (00:30 -0700)]
5.4.41 next

9 years agoMerge branch 'PHP-5.4.40' into PHP-5.4
Stanislav Malyshev [Tue, 14 Apr 2015 07:26:15 +0000 (00:26 -0700)]
Merge branch 'PHP-5.4.40' into PHP-5.4

* PHP-5.4.40:
  update NEWS
  Fix bug #69441 (Buffer Overflow when parsing tar/zip/phar in phar_set_inode)
  fix memory leak & add test
  Fix tests
  fix CVE num
  Fix bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability)
  Fix test
  Additional fix for bug #69324
  More fixes for bug #69152
  Fixed bug #69353 (Missing null byte checks for paths in various PHP extensions)
  Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar)
  Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
  Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
  Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)

9 years agofix CVE num
Stanislav Malyshev [Mon, 13 Apr 2015 03:47:27 +0000 (20:47 -0700)]
fix CVE num

9 years agoupdate NEWS
Stanislav Malyshev [Tue, 14 Apr 2015 07:22:09 +0000 (00:22 -0700)]
update NEWS

9 years agoMerge branch 'PHP-5.4' into PHP-5.4.40
Stanislav Malyshev [Tue, 14 Apr 2015 07:08:57 +0000 (00:08 -0700)]
Merge branch 'PHP-5.4' into PHP-5.4.40

* PHP-5.4:
  fix CVE num

9 years agoFix bug #69441 (Buffer Overflow when parsing tar/zip/phar in phar_set_inode)
Stanislav Malyshev [Tue, 14 Apr 2015 07:03:50 +0000 (00:03 -0700)]
Fix bug #69441 (Buffer Overflow when parsing tar/zip/phar in phar_set_inode)

9 years agofix test
Stanislav Malyshev [Mon, 13 Apr 2015 23:10:05 +0000 (16:10 -0700)]
fix test

9 years agofix type in fix for #69085
Remi Collet [Mon, 13 Apr 2015 12:39:11 +0000 (14:39 +0200)]
fix type in fix for #69085

9 years agofix type in fix for #69085
Remi Collet [Mon, 13 Apr 2015 12:39:11 +0000 (14:39 +0200)]
fix type in fix for #69085

(cherry picked from commit 085e9ddc26f37ce556b8fd787044746e726264b2)

9 years agoMerge branch 'PHP-5.4.40' into PHP-5.5.24
Stanislav Malyshev [Mon, 13 Apr 2015 06:49:16 +0000 (23:49 -0700)]
Merge branch 'PHP-5.4.40' into PHP-5.5.24

* PHP-5.4.40:
  fix memory leak & add test
  Fix tests

9 years agofix memory leak & add test
Stanislav Malyshev [Mon, 13 Apr 2015 05:00:18 +0000 (22:00 -0700)]
fix memory leak & add test

9 years agoFix tests
Stanislav Malyshev [Mon, 13 Apr 2015 03:53:09 +0000 (20:53 -0700)]
Fix tests

9 years agofix CVE num
Stanislav Malyshev [Mon, 13 Apr 2015 03:47:27 +0000 (20:47 -0700)]
fix CVE num

9 years agoMerge branch 'PHP-5.4.40' into PHP-5.5.24
Stanislav Malyshev [Mon, 13 Apr 2015 03:13:00 +0000 (20:13 -0700)]
Merge branch 'PHP-5.4.40' into PHP-5.5.24

* PHP-5.4.40:
  Fix bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability)
  Fix test

9 years agoMerge branch 'PHP-5.5-security' into PHP-5.5.24
Stanislav Malyshev [Mon, 13 Apr 2015 03:12:38 +0000 (20:12 -0700)]
Merge branch 'PHP-5.5-security' into PHP-5.5.24

* PHP-5.5-security: (22 commits)
  Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
  Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
  Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
  updated NEWS
  added test for bug #69354
  revert skipif, this should run everywhere
  further ODBC 3.0 compliance
  more compliance with the ODBC 3.0
  test fixes
  Prevent GC from changing zval or object 'color' before they are actually inserted into possible roots buffer.
  sigh, can't even copypaste without screwing up
  oop, put both the error number and message for both db object to the error message
  test fixes
  Fixed bug #69281 (opcache_is_script_cached no longer works)
  Fix typo: unitialized -> uninitialized
  Fix typo: unitialized -> uninitialized
  Fixed bug #68739 (Missing break / control flow). Fixed bug #68740 (NULL Pointer Dereference). Fixed bug #68677 (Use After Free).
  Fixed bug #68739 (Missing break / control flow in curl)
  Fixed bug #68740 (NULL Pointer Dereference)
  Fixed bug #68677 (Use After Free in OPcache)
  ...

Conflicts:
configure.in
ext/curl/tests/bug69316.phpt
main/php_version.h

9 years agoFix bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability)
Stanislav Malyshev [Sun, 12 Apr 2015 08:30:33 +0000 (01:30 -0700)]
Fix bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability)

9 years agoFix test
Stanislav Malyshev [Sun, 12 Apr 2015 07:56:02 +0000 (00:56 -0700)]
Fix test

9 years agoMerge branch 'PHP-5.4.40' into PHP-5.5.24
Stanislav Malyshev [Sat, 11 Apr 2015 23:56:12 +0000 (16:56 -0700)]
Merge branch 'PHP-5.4.40' into PHP-5.5.24

* PHP-5.4.40:
  Additional fix for bug #69324
  More fixes for bug #69152
  Fixed bug #69353 (Missing null byte checks for paths in various PHP extensions)
  Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar)
  Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
  Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
  Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
  Fixed bug #68901 (use after free)
  Fixed bug #68740 (NULL Pointer Dereference)
  Fix bug #66550 (SQLite prepared statement use-after-free)
  Better fix for #68601 for perf https://bitbucket.org/libgd/gd-libgd/commits/81e9a993f2893d651d225646378e3fd1b7465467
  Fix bug #68601 buffer read overflow in gd_gif_in.c
  Revert "Merge branch 'PHP-5.4' of https://git.php.net/repository/php-src into PHP-5.4"
  Fixed bug #69293
  Add ZEND_ARG_CALLABLE_INFO to allow internal function to type hint against callable.

9 years agoAdditional fix for bug #69324
Stanislav Malyshev [Sat, 11 Apr 2015 23:42:16 +0000 (16:42 -0700)]
Additional fix for bug #69324

Not so happy about duplication but needed due to bug #69429

9 years agoMore fixes for bug #69152
Stanislav Malyshev [Mon, 6 Apr 2015 00:30:59 +0000 (17:30 -0700)]
More fixes for bug #69152