]>
granicus.if.org Git - php/log
Anatol Belski [Tue, 3 May 2016 17:09:11 +0000 (19:09 +0200)]
add test fo rbug 71805
Anatol Belski [Tue, 3 May 2016 16:24:35 +0000 (18:24 +0200)]
upate libs versions
Anatol Belski [Sun, 1 May 2016 11:18:24 +0000 (13:18 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Update PHP 5.5 NEWS entries with CVE info
Added CVE
Updated NEWS
Lior Kaplan [Sun, 1 May 2016 11:14:57 +0000 (13:14 +0200)]
Update PHP 5.5 NEWS entries with CVE info
Lior Kaplan [Fri, 29 Apr 2016 10:23:41 +0000 (13:23 +0300)]
Add CVE to bug #69719 (PHP 5.6.10)
Lior Kaplan [Fri, 29 Apr 2016 10:21:35 +0000 (13:21 +0300)]
Add CVE IDs PHP 5.6.12
Lior Kaplan [Fri, 29 Apr 2016 10:19:46 +0000 (13:19 +0300)]
Add CVE IDs PHP 5.6.13
Lior Kaplan [Fri, 29 Apr 2016 10:17:34 +0000 (13:17 +0300)]
Add CVE IDs PHP 5.6.14
Lior Kaplan [Fri, 29 Apr 2016 10:16:27 +0000 (13:16 +0300)]
Add CVE to bug #70976 (PHP 5.6.17)
Lior Kaplan [Fri, 29 Apr 2016 10:15:30 +0000 (13:15 +0300)]
Add CVE IDs PHP 5.6.18
Lior Kaplan [Fri, 29 Apr 2016 10:11:54 +0000 (13:11 +0300)]
Add CVE IDs PHP 5.6.20
Lior Kaplan [Fri, 29 Apr 2016 10:10:13 +0000 (13:10 +0300)]
Add CVE to bug #71912 (PHP 5.6.21)
Julien Pauli [Fri, 29 Apr 2016 07:12:27 +0000 (09:12 +0200)]
Added CVE
Lior Kaplan [Thu, 28 Apr 2016 17:46:29 +0000 (20:46 +0300)]
Add NEWS entry for bug #71331 (fixed in PHP 5.6.18)
Ferenc Kovacs [Thu, 28 Apr 2016 00:32:45 +0000 (02:32 +0200)]
small whitespace fix
Anatol Belski [Wed, 27 Apr 2016 12:50:46 +0000 (14:50 +0200)]
update NEWS
Anatol Belski [Wed, 27 Apr 2016 11:16:57 +0000 (13:16 +0200)]
fix/improve tests
Julien Pauli [Wed, 27 Apr 2016 09:55:05 +0000 (11:55 +0200)]
Updated NEWS
Stanislav Malyshev [Wed, 27 Apr 2016 06:48:41 +0000 (23:48 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Fix memory leak
Fix bug #72099: xml_parse_into_struct segmentation fault
5.5.36 now
Fix bug #72094 - Out of bounds heap read access in exif header processing
Fix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definition
Fix bug #72061 - Out-of-bounds reads in zif_grapheme_stripos with negative offset
Fix for bug #71912 (libgd: signedness vulnerability)
Typo in NEWS
Conflicts:
configure.in
main/php_version.h
Stanislav Malyshev [Wed, 27 Apr 2016 05:54:58 +0000 (22:54 -0700)]
Fix memory leak
Stanislav Malyshev [Mon, 25 Apr 2016 06:50:57 +0000 (23:50 -0700)]
Fix bug #72099: xml_parse_into_struct segmentation fault
Julien Pauli [Tue, 26 Apr 2016 20:34:00 +0000 (22:34 +0200)]
5.5.36 now
Dmitry Stogov [Tue, 26 Apr 2016 10:43:18 +0000 (13:43 +0300)]
Fixed test on 32-bit platforms (split into 32-bit and 64-bit versions)
Stanislav Malyshev [Mon, 25 Apr 2016 02:33:52 +0000 (19:33 -0700)]
Fix bug #72094 - Out of bounds heap read access in exif header processing
Stanislav Malyshev [Mon, 25 Apr 2016 01:33:32 +0000 (18:33 -0700)]
Fix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definition
We can not modify result since it can be copy of _zero_ or _one_, etc. and
"copy" in bcmath is just bumping the refcount.
Stanislav Malyshev [Sun, 24 Apr 2016 19:49:01 +0000 (12:49 -0700)]
Fix bug #72061 - Out-of-bounds reads in zif_grapheme_stripos with negative offset
Adam Harvey [Tue, 19 Apr 2016 02:20:35 +0000 (19:20 -0700)]
Fix ZTS builds by adding a missing TSRMLS_FETCH().
Stanislav Malyshev [Wed, 20 Apr 2016 06:44:00 +0000 (23:44 -0700)]
Better fix for #71952
Stanislav Malyshev [Tue, 19 Apr 2016 06:31:03 +0000 (23:31 -0700)]
Fix bug #71952: Corruption inside imageaffinematrixget
Stanislav Malyshev [Tue, 19 Apr 2016 05:20:22 +0000 (22:20 -0700)]
Fix for bug #71912 (libgd: signedness vulnerability)
Dmitry Stogov [Mon, 18 Apr 2016 22:31:49 +0000 (01:31 +0300)]
Prevent usage in GC after free.
Ferenc Kovacs [Mon, 18 Apr 2016 07:04:27 +0000 (09:04 +0200)]
mark frequent intermittent fpm test with XFAIL
Ferenc Kovacs [Mon, 18 Apr 2016 06:14:16 +0000 (08:14 +0200)]
prepare for 5.6.21RC1
Lior Kaplan [Fri, 15 Apr 2016 19:07:47 +0000 (22:07 +0300)]
Align NEWS entry format
Christopher Jones [Thu, 14 Apr 2016 05:08:42 +0000 (15:08 +1000)]
Fix old comment cut-n-paste error
Christopher Jones [Thu, 14 Apr 2016 03:50:01 +0000 (13:50 +1000)]
Fixed bug #71422 (Fix ORA-01438: value larger than specified precision allowed for this column)
Lior Kaplan [Fri, 8 Apr 2016 19:38:07 +0000 (22:38 +0300)]
opcache config.m4: Use = for comparison
Anatol Belski [Tue, 5 Apr 2016 09:52:53 +0000 (11:52 +0200)]
update NEWS
Thomas Punt [Thu, 24 Mar 2016 11:09:59 +0000 (11:09 +0000)]
Use STR_EMPTY_ALLOC macro instead
Thomas Punt [Wed, 23 Mar 2016 23:57:50 +0000 (23:57 +0000)]
Fix DateInterval::format segfault
Matteo Beccati [Mon, 4 Apr 2016 21:45:10 +0000 (23:45 +0200)]
Fixed bug #71447 (Quotes inside comments not properly handled)
Matteo Beccati [Mon, 4 Apr 2016 21:42:52 +0000 (23:42 +0200)]
Fixed a few PDO tests to conform to PDO Common standards
Joe Watkins [Mon, 4 Apr 2016 09:22:13 +0000 (10:22 +0100)]
news entry #69537
Joe Watkins [Sun, 3 Apr 2016 11:40:29 +0000 (12:40 +0100)]
Fix #69537: __debugInfo with empty string for key gives error
Julien Pauli [Thu, 31 Mar 2016 15:45:07 +0000 (17:45 +0200)]
Typo in NEWS
Anatol Belski [Wed, 30 Mar 2016 23:36:47 +0000 (01:36 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
fix borked mainstream patch
5.5.35 now
Anatol Belski [Wed, 30 Mar 2016 23:33:38 +0000 (01:33 +0200)]
fix borked mainstream patch
Anatol Belski [Wed, 30 Mar 2016 23:29:05 +0000 (01:29 +0200)]
fix test to not to cause false positives
Lior Kaplan [Wed, 30 Mar 2016 21:52:53 +0000 (00:52 +0300)]
Align NEWS entry format
Ferenc Kovacs [Wed, 30 Mar 2016 20:28:28 +0000 (22:28 +0200)]
update NEWS
Julien Pauli [Tue, 29 Mar 2016 16:11:03 +0000 (18:11 +0200)]
5.5.35 now
Anatol Belski [Tue, 29 Mar 2016 12:19:35 +0000 (14:19 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
fix dir separator in test
Anatol Belski [Tue, 29 Mar 2016 12:18:25 +0000 (14:18 +0200)]
fix dir separator in test
Anatol Belski [Sun, 27 Mar 2016 22:45:19 +0000 (00:45 +0200)]
Fixed bug #71527 Buffer over-write in finfo_open with malformed magic file
The actual fix is applying the upstream patch from
https://github.com/file/file/commit/
6713ca45e7757297381f4b4cdb9cf5e624a9ad36
Anatol Belski [Tue, 29 Mar 2016 11:11:17 +0000 (13:11 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Fixed bug #71527 Buffer over-write in finfo_open with malformed magic file
Anatol Belski [Sun, 27 Mar 2016 22:45:19 +0000 (00:45 +0200)]
Fixed bug #71527 Buffer over-write in finfo_open with malformed magic file
The actual fix is applying the upstream patch from
https://github.com/file/file/commit/
6713ca45e7757297381f4b4cdb9cf5e624a9ad36
Stanislav Malyshev [Tue, 29 Mar 2016 06:45:15 +0000 (23:45 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Fixed bug #71704 php_snmp_error() Format String Vulnerability
Anatol Belski [Wed, 16 Mar 2016 08:48:40 +0000 (09:48 +0100)]
Fixed bug #71704 php_snmp_error() Format String Vulnerability
Conflicts:
ext/snmp/snmp.c
Stanislav Malyshev [Tue, 29 Mar 2016 06:30:14 +0000 (23:30 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut
Stanislav Malyshev [Tue, 29 Mar 2016 06:29:45 +0000 (23:29 -0700)]
Merge branch 'PHP-5.5.34' into PHP-5.5
* PHP-5.5.34:
Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut
Stanislav Malyshev [Tue, 29 Mar 2016 06:21:15 +0000 (23:21 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut
Fix bug #71798 - Integer Overflow in php_raw_url_encode
Fix bug #71860: Require valid paths for phar filenames
Going for 5.5.34
Conflicts:
configure.in
ext/phar/tests/create_path_error.phpt
main/php_version.h
Stanislav Malyshev [Mon, 28 Mar 2016 08:22:37 +0000 (01:22 -0700)]
Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut
Stanislav Malyshev [Mon, 28 Mar 2016 08:22:37 +0000 (01:22 -0700)]
Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut
Stanislav Malyshev [Sun, 27 Mar 2016 21:22:19 +0000 (14:22 -0700)]
Fix bug #71798 - Integer Overflow in php_raw_url_encode
Nikita Popov [Fri, 25 Mar 2016 19:18:46 +0000 (20:18 +0100)]
Fixed bug #67512
Derick Rethans [Thu, 24 Mar 2016 11:09:05 +0000 (11:09 +0000)]
Updated to version 2016.3 (2016c)
Julien Pauli [Mon, 21 Mar 2016 14:26:21 +0000 (15:26 +0100)]
Updated NEWS
Julien Pauli [Mon, 21 Mar 2016 14:23:18 +0000 (15:23 +0100)]
Reworked Fix bug #52098
Daniel Persson [Sat, 26 Sep 2015 10:43:40 +0000 (12:43 +0200)]
Fix bug #52098
Xinchen Hui [Mon, 21 Mar 2016 08:43:30 +0000 (16:43 +0800)]
Xinchen Hui [Mon, 21 Mar 2016 08:39:22 +0000 (16:39 +0800)]
Merge branch 'PHP-5.6' of https://github.com/msierks/php-src into PHP-5.6
* 'PHP-5.6' of https://github.com/msierks/php-src:
FIX #71831: CURLOPT_NOPROXY applied as long instead of string
Stanislav Malyshev [Mon, 21 Mar 2016 03:54:09 +0000 (20:54 -0700)]
Fix bug #71860: Require valid paths for phar filenames
Nikita Popov [Sun, 20 Mar 2016 16:46:12 +0000 (17:46 +0100)]
Fixed bug #67582
Michael Sierks [Fri, 18 Mar 2016 12:29:01 +0000 (07:29 -0500)]
FIX #71831: CURLOPT_NOPROXY applied as long instead of string
The CURLOPT_NOPROXY option value is converted to a long before
being applied as a curl option. This causes the option to have
no effect. This patch changes this conversion to a string.
Anatol Belski [Thu, 17 Mar 2016 18:02:08 +0000 (19:02 +0100)]
fix and update NEWS
Anatol Belski [Thu, 17 Mar 2016 13:28:32 +0000 (14:28 +0100)]
Xinchen Hui [Thu, 17 Mar 2016 13:27:23 +0000 (21:27 +0800)]
Merge branch 'PHP-5.6' of git.php.net:/php-src into PHP-5.6
* 'PHP-5.6' of git.php.net:/php-src:
fix NEWS
NEWS
Fix Bug #63171 Script hangs after max_execution_time
Remi Collet [Thu, 17 Mar 2016 12:53:42 +0000 (13:53 +0100)]
fix NEWS
Remi Collet [Thu, 17 Mar 2016 12:40:42 +0000 (13:40 +0100)]
NEWS
Remi Collet [Thu, 17 Mar 2016 12:38:45 +0000 (13:38 +0100)]
Fix Bug #63171 Script hangs after max_execution_time
If aborted via timer expiration, don't try to call any unixODBC function
which may hangs because of internal locks
Xinchen Hui [Thu, 17 Mar 2016 11:06:50 +0000 (19:06 +0800)]
Fixed bug #71843 (null ptr deref ZEND_RETURN_SPEC_CONST_HANDLER)
Xinchen Hui [Thu, 17 Mar 2016 09:06:56 +0000 (17:06 +0800)]
Fixed test script
Xinchen Hui [Thu, 17 Mar 2016 07:23:44 +0000 (15:23 +0800)]
Fixed test script
Xinchen Hui [Thu, 17 Mar 2016 07:16:47 +0000 (15:16 +0800)]
Fixed bug #71841 (EG(error_zval) is not handled well)
Xinchen Hui [Thu, 17 Mar 2016 06:27:27 +0000 (14:27 +0800)]
Fixed bug #71840 (Unserialize accepts wrongly data)
Ferenc Kovacs [Thu, 17 Mar 2016 00:46:00 +0000 (01:46 +0100)]
prepare for 5.6.20RC1
Remi Collet [Wed, 16 Mar 2016 06:17:49 +0000 (07:17 +0100)]
fix #ifdef usage
Derick Rethans [Tue, 15 Mar 2016 09:14:09 +0000 (09:14 +0000)]
Updated to version 2016.2 (2016b)
Anatol Belski [Tue, 15 Mar 2016 08:41:34 +0000 (09:41 +0100)]
update libs versions
Anatol Belski [Mon, 14 Mar 2016 14:53:02 +0000 (15:53 +0100)]
fix test
Many warnings won't appear with libxml2 >= 2.9.3 because in many
cases libxml2 2.9.3 will just abort processing.
Anatol Belski [Fri, 11 Mar 2016 13:22:11 +0000 (14:22 +0100)]
update NEWS
Thomas Punt [Mon, 7 Mar 2016 09:40:22 +0000 (09:40 +0000)]
Fix DatePeriod::getEndDate() segfault
Anatol Belski [Thu, 10 Mar 2016 10:35:50 +0000 (11:35 +0100)]
fix error condition, part of bug #71753
Xinchen Hui [Thu, 10 Mar 2016 06:24:13 +0000 (14:24 +0800)]
tsrm_win32_get_path_sid_key might returns NULL (Partially fix bug #71752)
cherry-picked from
7d5f71b0b125c89211e5a2a6d925deba938abd41
Xinchen Hui [Thu, 10 Mar 2016 07:22:34 +0000 (15:22 +0800)]
Fixed typo (partially fix for #71753)
Anatol Belski [Wed, 9 Mar 2016 13:16:29 +0000 (14:16 +0100)]
fix directory separator
Anatol Belski [Tue, 8 Mar 2016 11:59:59 +0000 (12:59 +0100)]
fix regression introduced in
5683b6fa39
Test extended. Basically, both iterator type and next node have
to be checked.
Christoph M. Becker [Tue, 14 Jul 2015 09:09:03 +0000 (11:09 +0200)]
Fixed bug #69953
Added support for MKCALENDAR request method in CLI web server.
Anton Blanchard [Thu, 3 Mar 2016 16:28:34 +0000 (17:28 +0100)]
Additional improvements to crypt() detection code
Reformat to normalize tabs vs spaces, return 1 if crypt.h not
defined, fix C99 compliance.
Michael Orlitzky [Mon, 9 Nov 2015 15:49:10 +0000 (10:49 -0500)]
ext/standard/config.m4: fix crypt() test segfaults in >=glibc-2.17.
Starting with glibc-2.17, the crypt() function will report an EINVAL
and return NULL when the format of the "salt" parameter is
invalid. The current tests for crypt() pass its result to strcmp(),
causing segfaults when the value returned from crypt() is NULL.
This commit modifies the test programs to exit with failure when
crypt() returns NULL.
Reference: https://bugs.gentoo.org/show_bug.cgi?id=518964