]>
granicus.if.org Git - php/log
Anatol Belski [Mon, 31 Aug 2015 20:22:46 +0000 (22:22 +0200)]
cleanup an atavism
no DOS support here )
Anatol Belski [Mon, 31 Aug 2015 19:48:14 +0000 (21:48 +0200)]
add overflow check
Anatol Belski [Mon, 31 Aug 2015 19:43:24 +0000 (21:43 +0200)]
remove unnecessary macros
Dmitry Stogov [Wed, 2 Sep 2015 12:55:41 +0000 (15:55 +0300)]
Use regular huge pages instead of anonymous if available.
Dmitry Stogov [Wed, 2 Sep 2015 10:05:12 +0000 (13:05 +0300)]
Introduced additional check. Its miss might be the reason of bug #70392 (SIGSEGV during PHP shutdown)
Dmitry Stogov [Wed, 2 Sep 2015 10:03:31 +0000 (13:03 +0300)]
Prevent HashTable compaction below HT_MIN_SIZE (this may lead to hash collisions).
Stanislav Malyshev [Wed, 2 Sep 2015 08:23:40 +0000 (01:23 -0700)]
Temporary add XFAILs, will fix soon
Stanislav Malyshev [Wed, 2 Sep 2015 08:21:47 +0000 (01:21 -0700)]
fix memory leak
Stanislav Malyshev [Wed, 2 Sep 2015 08:00:16 +0000 (01:00 -0700)]
Merge remote-tracking branch 'origin/master'
* origin/master:
Add test for ReflectionMethod::getPrototype_basic()
Added two tests to check the main functionallity of recode extension
Doubles are not refcounted
Fix #32490: constructor of mysqli has wrong name
Stanislav Malyshev [Tue, 1 Sep 2015 19:40:10 +0000 (12:40 -0700)]
Merge branch 'PHP-5.6'
* PHP-5.6: (21 commits)
fix unit tests
update NEWS
add NEWS for fixes
Improve fix for #70172
Fix bug #70312 - HAVAL gives wrong hashes in specific cases
fix test
add test
Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
Fix bug #70172 - Use After Free Vulnerability in unserialize()
Fix bug #70388 - SOAP serialize_function_call() type confusion
Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
Improve fix for #70385
Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
Fix bug #70219 (Use after free vulnerability in session deserializer)
Fix bug ##70284 (Use after free vulnerability in unserialize() with GMP)
Fix for bug #69782
Add CVE IDs asigned (post release) to PHP 5.4.43
Add CVE IDs asigned to #69085 (PHP 5.4.39)
...
Conflicts:
ext/exif/exif.c
ext/gmp/gmp.c
ext/pcre/php_pcre.c
ext/session/session.c
ext/session/tests/session_decode_variation3.phpt
ext/soap/soap.c
ext/spl/spl_observer.c
ext/standard/var.c
ext/standard/var_unserializer.c
ext/standard/var_unserializer.re
ext/xsl/xsltprocessor.c
marcosptf [Tue, 25 Aug 2015 04:22:42 +0000 (01:22 -0300)]
Add test for ReflectionMethod::getPrototype_basic()
Daniel Persson [Tue, 1 Sep 2015 19:53:09 +0000 (21:53 +0200)]
Added two tests to check the main functionallity of recode extension
Hannes Magnusson [Tue, 1 Sep 2015 21:52:04 +0000 (14:52 -0700)]
Doubles are not refcounted
Christoph M. Becker [Tue, 1 Sep 2015 16:38:11 +0000 (18:38 +0200)]
Fix #32490: constructor of mysqli has wrong name
As of PHP 7 old style constructor names are deprecated, so we rename
mysqli::mysqli() to mysqli::__construct().
Stanislav Malyshev [Tue, 1 Sep 2015 19:24:14 +0000 (12:24 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
fix unit tests
Stanislav Malyshev [Tue, 1 Sep 2015 19:23:55 +0000 (12:23 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
fix unit tests
Stanislav Malyshev [Tue, 1 Sep 2015 19:23:22 +0000 (12:23 -0700)]
fix unit tests
Stanislav Malyshev [Tue, 1 Sep 2015 19:06:41 +0000 (12:06 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
update NEWS
add NEWS for fixes
Improve fix for #70172
Fix bug #70312 - HAVAL gives wrong hashes in specific cases
fix test
add test
Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
Fix bug #70172 - Use After Free Vulnerability in unserialize()
Fix bug #70388 - SOAP serialize_function_call() type confusion
Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
Improve fix for #70385
Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
Fix bug #70219 (Use after free vulnerability in session deserializer)
Fix for bug #69782
Add CVE IDs asigned (post release) to PHP 5.4.43
Add CVE IDs asigned to #69085 (PHP 5.4.39)
5.4.45 next
Conflicts:
ext/pcre/php_pcre.c
ext/standard/var_unserializer.c
ext/standard/var_unserializer.re
ext/zip/php_zip.c
Stanislav Malyshev [Tue, 1 Sep 2015 19:05:02 +0000 (12:05 -0700)]
Merge branch '70284' into PHP-5.6
* 70284:
Fix bug ##70284 (Use after free vulnerability in unserialize() with GMP)
Stanislav Malyshev [Tue, 1 Sep 2015 19:03:48 +0000 (12:03 -0700)]
update NEWS
Stanislav Malyshev [Tue, 1 Sep 2015 19:00:30 +0000 (12:00 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
add NEWS for fixes
Stanislav Malyshev [Tue, 1 Sep 2015 18:53:59 +0000 (11:53 -0700)]
add NEWS for fixes
Stanislav Malyshev [Tue, 1 Sep 2015 18:42:19 +0000 (11:42 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Improve fix for #70172
Fix bug #70312 - HAVAL gives wrong hashes in specific cases
fix test
add test
Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
Fix bug #70172 - Use After Free Vulnerability in unserialize()
Fix bug #70388 - SOAP serialize_function_call() type confusion
Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
Improve fix for #70385
Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
Fix bug #70219 (Use after free vulnerability in session deserializer)
Fix for bug #69782
Add CVE IDs asigned (post release) to PHP 5.4.43
Add CVE IDs asigned to #69085 (PHP 5.4.39)
5.4.45 next
Conflicts:
configure.in
ext/pcre/php_pcre.c
ext/standard/var_unserializer.c
ext/standard/var_unserializer.re
main/php_version.h
Stanislav Malyshev [Tue, 1 Sep 2015 18:40:15 +0000 (11:40 -0700)]
Merge branch 'PHP-5.4.45' into PHP-5.4
* PHP-5.4.45:
Improve fix for #70172
Fix bug #70312 - HAVAL gives wrong hashes in specific cases
fix test
add test
Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
Fix bug #70172 - Use After Free Vulnerability in unserialize()
Fix bug #70388 - SOAP serialize_function_call() type confusion
Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
Improve fix for #70385
Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
Fix bug #70219 (Use after free vulnerability in session deserializer)
Fix for bug #69782
Stanislav Malyshev [Tue, 1 Sep 2015 18:38:15 +0000 (11:38 -0700)]
Improve fix for #70172
Bob Weinand [Tue, 1 Sep 2015 16:04:00 +0000 (18:04 +0200)]
Fixed bug #70397 (Segmentation fault when using Closure::call and yield)
Joe Watkins [Tue, 1 Sep 2015 15:51:40 +0000 (16:51 +0100)]
fix for --enable-zend-signals and ZTS
temporary fix to make queue size bigger in zend_signal while I work on it
Joe Watkins [Tue, 1 Sep 2015 10:00:45 +0000 (11:00 +0100)]
Merge branch 'master' of https://github.com/php/php-src
Dmitry Stogov [Tue, 1 Sep 2015 09:56:33 +0000 (12:56 +0300)]
Fixed possible caching with invalid key value
Joe Watkins [Tue, 1 Sep 2015 08:34:54 +0000 (09:34 +0100)]
fix zend signal and tsrm compat
Stanislav Malyshev [Tue, 1 Sep 2015 08:16:30 +0000 (01:16 -0700)]
Fix bug #70312 - HAVAL gives wrong hashes in specific cases
Stanislav Malyshev [Tue, 1 Sep 2015 07:59:31 +0000 (00:59 -0700)]
fix test
Dmitry Stogov [Tue, 1 Sep 2015 07:39:00 +0000 (10:39 +0300)]
Fixed one more problem related to bug #70187 (Notice: unserialize(): Unexpected end of serialized data)
Stanislav Malyshev [Tue, 1 Sep 2015 07:26:12 +0000 (00:26 -0700)]
add test
Stanislav Malyshev [Tue, 1 Sep 2015 07:20:45 +0000 (00:20 -0700)]
Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
Stanislav Malyshev [Tue, 1 Sep 2015 07:14:15 +0000 (00:14 -0700)]
Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
Stanislav Malyshev [Tue, 1 Sep 2015 04:28:11 +0000 (21:28 -0700)]
Fix bug #70172 - Use After Free Vulnerability in unserialize()
Stanislav Malyshev [Tue, 1 Sep 2015 04:06:03 +0000 (21:06 -0700)]
Fix bug #70388 - SOAP serialize_function_call() type confusion
Dmitry Stogov [Tue, 1 Sep 2015 00:15:50 +0000 (03:15 +0300)]
Added missing set of fcc->initialized flag.
Bob Weinand [Mon, 31 Aug 2015 21:42:15 +0000 (23:42 +0200)]
Fix valgrind warning upon displaying lines from eval()ed code in phpdbg
Dmitry Stogov [Mon, 31 Aug 2015 10:56:42 +0000 (13:56 +0300)]
Ensure proper data alignment
Dmitry Stogov [Mon, 31 Aug 2015 08:38:16 +0000 (11:38 +0300)]
Add myself into list of authors of the most refactored files.
Bob Weinand [Sun, 30 Aug 2015 18:25:10 +0000 (20:25 +0200)]
Respect exit status for -rr option with phpdbg
Xinchen Hui [Sun, 30 Aug 2015 15:02:17 +0000 (08:02 -0700)]
Merge branch 'patch-8' of https://github.com/ovr/php-src
Xinchen Hui [Sun, 30 Aug 2015 15:00:15 +0000 (08:00 -0700)]
Merge branch 'master' of https://github.com/softwarespot/php-src
Xinchen Hui [Sun, 30 Aug 2015 12:34:31 +0000 (05:34 -0700)]
Merge branch 'PHP-5.6'
Xinchen Hui [Sun, 30 Aug 2015 12:34:15 +0000 (05:34 -0700)]
Merge branch 'PHP-5.6' of git.php.net:/php-src into PHP-5.6
Xinchen Hui [Sun, 30 Aug 2015 12:31:36 +0000 (05:31 -0700)]
Merge branch 'PHP-5.6'
Conflicts:
ext/pdo/pdo_dbh.c
ext/pdo/php_pdo_driver.h
Xinchen Hui [Sun, 30 Aug 2015 12:02:13 +0000 (05:02 -0700)]
Fixed bug #70389 (PDO constructor changes unrelated variables)
Stanislav Malyshev [Sun, 30 Aug 2015 07:38:08 +0000 (00:38 -0700)]
Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
Stanislav Malyshev [Sun, 30 Aug 2015 06:01:36 +0000 (23:01 -0700)]
Improve fix for #70385
Anatol Belski [Sat, 29 Aug 2015 18:14:07 +0000 (20:14 +0200)]
fix possible overflow
Anatol Belski [Sat, 29 Aug 2015 18:12:31 +0000 (20:12 +0200)]
use non deprecated symbols
Matteo Beccati [Sat, 29 Aug 2015 08:48:53 +0000 (10:48 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
Added missing skipif for phar+zlib test
Matteo Beccati [Sat, 29 Aug 2015 08:41:31 +0000 (10:41 +0200)]
Added missing skipif for phar+zlib test
Matteo Beccati [Sat, 29 Aug 2015 06:04:03 +0000 (08:04 +0200)]
Fixed bug #70386 Can't compile on NetBSD because of missing WCONTINUED
since
90114a3e93f5209b3d880d154fdb61d3d0c67185
Stanislav Malyshev [Sat, 29 Aug 2015 05:52:50 +0000 (22:52 -0700)]
Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
Stanislav Malyshev [Sat, 29 Aug 2015 05:25:41 +0000 (22:25 -0700)]
Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
Nikita Popov [Fri, 28 Aug 2015 16:58:49 +0000 (18:58 +0200)]
Fix bug #62441
These checks were introduced by
8646d9afce989718cde927c526684bbbc1c96e97
back when name resolution was working differently.
Nikita Popov [Wed, 26 Aug 2015 20:07:48 +0000 (22:07 +0200)]
Fix HT_ASSERT ht->nInternalPointer checks
The & was on the wrong side...
Dmitry Stogov [Fri, 28 Aug 2015 13:10:07 +0000 (16:10 +0300)]
HANDLE_BLOCK_INTERRUPTIONS() is not used by SAPIs anymore. It may be useful only when PHP configured with --enable-zend-signals.
Anatol Belski [Fri, 28 Aug 2015 12:49:14 +0000 (14:49 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
fix dir separator in test
fix path separator in test
fix test
Dmitry Stogov [Fri, 28 Aug 2015 12:32:50 +0000 (15:32 +0300)]
Removed signal protection (set to NULL before free() to avoid dangling pointers)
Dmitry Stogov [Fri, 28 Aug 2015 09:47:21 +0000 (12:47 +0300)]
Simplified integer overflow checks
Anatol Belski [Fri, 28 Aug 2015 09:39:26 +0000 (11:39 +0200)]
fix dir separator in test
Dmitry Stogov [Fri, 28 Aug 2015 09:39:18 +0000 (12:39 +0300)]
Removed useless signal protection
Anatol Belski [Fri, 28 Aug 2015 09:38:16 +0000 (11:38 +0200)]
fix path separator in test
Anatol Belski [Fri, 28 Aug 2015 09:29:38 +0000 (11:29 +0200)]
fix test
Adam Harvey [Thu, 27 Aug 2015 23:01:33 +0000 (16:01 -0700)]
Merge branch 'PHP-5.6'
* PHP-5.6:
Fix NEWS indentation.
Don't detect FreeBSD 10 as FreeBSD 1 in libtool.m4.
Adam Harvey [Thu, 27 Aug 2015 23:00:36 +0000 (16:00 -0700)]
Fix NEWS indentation.
Adam Harvey [Thu, 27 Aug 2015 22:59:59 +0000 (15:59 -0700)]
Don't detect FreeBSD 10 as FreeBSD 1 in libtool.m4.
Fixes bug #70370 (Bundled libtool.m4 doesn't handle FreeBSD 10 when building
extensions).
Jakub Zelenka [Thu, 27 Aug 2015 20:44:38 +0000 (21:44 +0100)]
Remove merged bug #55259 info from PHP 7 NEWS
Jakub Zelenka [Thu, 27 Aug 2015 20:43:57 +0000 (21:43 +0100)]
Merge branch 'PHP-5.6'
Jakub Zelenka [Thu, 27 Aug 2015 20:37:59 +0000 (21:37 +0100)]
Update NEWS with info about bug #55259
Dmitry Stogov [Thu, 27 Aug 2015 20:02:15 +0000 (23:02 +0300)]
Prevent double load on fast path (manual common subexpression elimination)
Jakub Zelenka [Thu, 27 Aug 2015 19:17:33 +0000 (20:17 +0100)]
Merge branch 'PHP-5.6'
Xinchen Hui [Thu, 27 Aug 2015 05:05:41 +0000 (13:05 +0800)]
remove redundant ;
Xinchen Hui [Thu, 27 Aug 2015 03:42:50 +0000 (11:42 +0800)]
Enable format checking for strpprintf
Xinchen Hui [Thu, 27 Aug 2015 03:34:52 +0000 (11:34 +0800)]
Fixed printing
softwarespot [Wed, 26 Aug 2015 19:24:46 +0000 (22:24 +0300)]
Removed trailing whitespace
Anatol Belski [Wed, 26 Aug 2015 19:03:55 +0000 (21:03 +0200)]
make overflow checks as unexpected
it's supposed to mark an error case
Jakub Zelenka [Wed, 26 Aug 2015 18:55:16 +0000 (19:55 +0100)]
Use new range checks in openssl ext
Dmitry Stogov [Wed, 26 Aug 2015 15:29:42 +0000 (18:29 +0300)]
Mark parse error functions as cold
Dmitry Stogov [Wed, 26 Aug 2015 15:29:23 +0000 (18:29 +0300)]
Removed unused functions
Anatol Belski [Wed, 26 Aug 2015 15:10:23 +0000 (17:10 +0200)]
fix year in the header
Anatol Belski [Wed, 26 Aug 2015 12:18:42 +0000 (14:18 +0200)]
add range check to ext/soap
Anatol Belski [Tue, 25 Aug 2015 20:47:23 +0000 (22:47 +0200)]
add some range checks to pcre
Anatol Belski [Tue, 25 Aug 2015 19:33:38 +0000 (21:33 +0200)]
more range checks in ext/tidy
Anatol Belski [Tue, 25 Aug 2015 18:32:43 +0000 (20:32 +0200)]
add range checks to ext/tidy
Anatol Belski [Tue, 25 Aug 2015 15:54:27 +0000 (17:54 +0200)]
add some range checks to ext/dom
Anatol Belski [Tue, 25 Aug 2015 15:38:11 +0000 (17:38 +0200)]
fix test
Anatol Belski [Tue, 25 Aug 2015 15:37:35 +0000 (17:37 +0200)]
add range checks to simplexml
Anatol Belski [Tue, 25 Aug 2015 13:30:57 +0000 (15:30 +0200)]
fix typo
Anatol Belski [Tue, 25 Aug 2015 09:58:13 +0000 (11:58 +0200)]
include range checks with the portability header
Anatol Belski [Tue, 25 Aug 2015 09:40:44 +0000 (11:40 +0200)]
added basic stuff with the zend_range_check.h
Dmitry Stogov [Wed, 26 Aug 2015 11:53:41 +0000 (14:53 +0300)]
Avoid duplication
Christopher Jones [Wed, 26 Aug 2015 11:24:05 +0000 (21:24 +1000)]
Merge branch 'master' of https://git.php.net/repository/php-src
Christopher Jones [Wed, 26 Aug 2015 11:22:58 +0000 (21:22 +1000)]
Squash some more PHP 7 diffs and improve test portability (Senthil)
Niklas Keller [Wed, 26 Aug 2015 05:30:56 +0000 (07:30 +0200)]
Fix Typos: exteption -> exception
Christopher Jones [Wed, 26 Aug 2015 04:35:41 +0000 (14:35 +1000)]
Merge branch 'master' of https://git.php.net/repository/php-src