]>
granicus.if.org Git - php/log
Lauri Kenttä [Mon, 11 Jul 2016 09:40:08 +0000 (12:40 +0300)]
base64_decode: strict: Fail on excessive padding
Lauri Kenttä [Mon, 11 Jul 2016 09:40:07 +0000 (12:40 +0300)]
base64_decode: strict: Fail on truncated input
Lauri Kenttä [Mon, 11 Jul 2016 09:40:05 +0000 (12:40 +0300)]
base64_decode: Avoid code duplication in failures
Lauri Kenttä [Mon, 11 Jul 2016 09:40:03 +0000 (12:40 +0300)]
Require strict base64 in data URI
As the tests already show, the data URI wrapper is supposed to fail
for corrupt input, but for some reason, one case of invalid input is
still allowed to pass?! Strict base64 makes a lot more sense here.
Also, Chromium and Firefox fail on invalid base64, so it's a logical
choice for PHP as well.
Lauri Kenttä [Mon, 11 Jul 2016 09:40:01 +0000 (12:40 +0300)]
Require strict base64 in openssl_decode
Using invalid data in a security-related context makes no sense,
and there's even a test which depends on invalid base64 data failing,
even though it currently fails for the wrong reasons by sheer luck.
Lauri Kenttä [Mon, 11 Jul 2016 09:39:57 +0000 (12:39 +0300)]
Fix test: Use valid base64 even for invalid OpenSSL data
Nikita Popov [Fri, 22 Jul 2016 15:22:29 +0000 (17:22 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Nikita Popov [Fri, 22 Jul 2016 15:22:13 +0000 (17:22 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Nikita Popov [Fri, 22 Jul 2016 15:20:56 +0000 (17:20 +0200)]
Make IntlCalendar::getNow() test more tolerant
Due to the *1000 factor the two values may be off-by-1000 even
without any actual delay, so increase the check to 2000.
Xinchen Hui [Fri, 22 Jul 2016 15:15:24 +0000 (23:15 +0800)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
Fixed bug #72647 (xmlrpc_encode() unexpected output after referencing array elements)
Xinchen Hui [Fri, 22 Jul 2016 15:13:42 +0000 (23:13 +0800)]
Fixed bug #72647 (xmlrpc_encode() unexpected output after referencing array elements)
Xinchen Hui [Fri, 22 Jul 2016 15:14:51 +0000 (23:14 +0800)]
Update NEWs
Xinchen Hui [Fri, 22 Jul 2016 15:14:28 +0000 (23:14 +0800)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
Fixed bug #72647 (xmlrpc_encode() unexpected output after referencing array elements)
Xinchen Hui [Fri, 22 Jul 2016 15:13:42 +0000 (23:13 +0800)]
Fixed bug #72647 (xmlrpc_encode() unexpected output after referencing array elements)
Christoph M. Becker [Fri, 22 Jul 2016 13:28:42 +0000 (15:28 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Fri, 22 Jul 2016 13:27:16 +0000 (15:27 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
# Resolved conflicts:
# ext/spl/spl_directory.c
Christoph M. Becker [Fri, 22 Jul 2016 12:55:13 +0000 (14:55 +0200)]
Fix #72646: SplFileObject::getCsvControl does not return the escape character
This has obviously been missed when adding the $escape parameter to
SplFileObject::setCsvControl() in PHP 5.3, so we catch up on this.
Remi Collet [Fri, 22 Jul 2016 07:37:00 +0000 (09:37 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
FPM: add test for CVE-2016-5385
Remi Collet [Fri, 22 Jul 2016 07:36:36 +0000 (09:36 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
FPM: add test for CVE-2016-5385
Remi Collet [Fri, 22 Jul 2016 07:35:09 +0000 (09:35 +0200)]
FPM: add test for CVE-2016-5385
Christoph M. Becker [Thu, 21 Jul 2016 16:53:00 +0000 (18:53 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Thu, 21 Jul 2016 16:38:44 +0000 (18:38 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Thu, 21 Jul 2016 16:36:12 +0000 (18:36 +0200)]
Fix #72330: CSV fields incorrectly split if escape char followed by UTF chars
We must not forget to properly reset the state for multibyte characters
following an escape character.
Christoph M. Becker [Thu, 21 Jul 2016 14:51:19 +0000 (16:51 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Thu, 21 Jul 2016 14:50:37 +0000 (16:50 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Pieter Hordijk [Fri, 15 Jul 2016 19:58:13 +0000 (21:58 +0200)]
Removed incorrect (leftover?) sentence in ini
about mbstring or iconv output handler
Christoph M. Becker [Thu, 21 Jul 2016 14:33:06 +0000 (16:33 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Thu, 21 Jul 2016 14:31:16 +0000 (16:31 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Pieter Hordijk [Fri, 15 Jul 2016 19:58:13 +0000 (21:58 +0200)]
Removed incorrect (leftover?) sentence in ini
about mbstring or iconv output handler
Davey Shafik [Thu, 21 Jul 2016 08:49:15 +0000 (01:49 -0700)]
Update NEWS for 7.1.0beta1
Remi Collet [Thu, 21 Jul 2016 06:42:53 +0000 (08:42 +0200)]
bump zip extension version
Remi Collet [Thu, 21 Jul 2016 06:43:49 +0000 (08:43 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
bump zip extension version
Remi Collet [Thu, 21 Jul 2016 06:42:53 +0000 (08:42 +0200)]
bump zip extension version
Xinchen Hui [Thu, 21 Jul 2016 06:25:54 +0000 (14:25 +0800)]
Update NEWS
Xinchen Hui [Thu, 21 Jul 2016 06:25:36 +0000 (14:25 +0800)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
Fixed bug #72639 (Segfault when instantiating class that extends IntlCalendar and adds a property)
Xinchen Hui [Thu, 21 Jul 2016 06:25:15 +0000 (14:25 +0800)]
Fixed bug #72639 (Segfault when instantiating class that extends IntlCalendar and adds a property)
Davey Shafik [Thu, 21 Jul 2016 03:05:58 +0000 (20:05 -0700)]
Prepare NEWS for beta2
Anatol Belski [Wed, 20 Jul 2016 23:56:55 +0000 (01:56 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
update libs_version.txt
update libs_versions.txt
Anatol Belski [Wed, 20 Jul 2016 23:55:42 +0000 (01:55 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
update libs_versions.txt
Anatol Belski [Wed, 20 Jul 2016 23:54:53 +0000 (01:54 +0200)]
update libs_version.txt
Anatol Belski [Wed, 20 Jul 2016 23:52:03 +0000 (01:52 +0200)]
update libs_versions.txt
Ferenc Kovacs [Wed, 20 Jul 2016 22:38:11 +0000 (00:38 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Ferenc Kovacs [Wed, 20 Jul 2016 22:37:41 +0000 (00:37 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Ferenc Kovacs [Wed, 20 Jul 2016 22:36:07 +0000 (00:36 +0200)]
update NEWs
Davey Shafik [Wed, 20 Jul 2016 21:48:15 +0000 (14:48 -0700)]
Update NEWS for RFC: Additional Context in pcntl_signal Handler
Davey Shafik [Wed, 20 Jul 2016 21:17:04 +0000 (14:17 -0700)]
Merge RFC Additional Context in pcntl_signal Handler
Jakub Zelenka [Wed, 20 Jul 2016 18:34:30 +0000 (19:34 +0100)]
Update NEWS with fixed OpenSSL 1.1 build
Jakub Zelenka [Wed, 20 Jul 2016 18:32:07 +0000 (19:32 +0100)]
Merge branch 'openssl_1_1_port'
Christoph M. Becker [Wed, 20 Jul 2016 17:26:29 +0000 (19:26 +0200)]
Add test case for imagecopyresampled() with alpha
Anatol Belski [Wed, 20 Jul 2016 16:01:41 +0000 (18:01 +0200)]
Merge branch 'PHP-7.0'
* PHP-7.0:
regenerate date parser with re2c 0.13.5 to fix OSX issues
Anatol Belski [Wed, 20 Jul 2016 16:00:53 +0000 (18:00 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
regenerate date parser with re2c 0.13.5 to fix OSX issues
Anatol Belski [Wed, 20 Jul 2016 15:57:39 +0000 (17:57 +0200)]
regenerate date parser with re2c 0.13.5 to fix OSX issues
Anatol Belski [Wed, 20 Jul 2016 11:37:17 +0000 (13:37 +0200)]
Merge branch 'PHP-7.0'
* PHP-7.0:
regenerate date parser with re2c 0.13.5
Anatol Belski [Wed, 20 Jul 2016 11:32:53 +0000 (13:32 +0200)]
regenerate date parser with re2c 0.13.5
Xinchen Hui [Wed, 20 Jul 2016 10:09:17 +0000 (18:09 +0800)]
Fixed arginfo
Xinchen Hui [Wed, 20 Jul 2016 10:08:48 +0000 (18:08 +0800)]
Merge branch 'PHP-7.0'
* PHP-7.0:
Fixed arginfo
Xinchen Hui [Wed, 20 Jul 2016 10:07:18 +0000 (18:07 +0800)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
Fixed arginfo
Xinchen Hui [Wed, 20 Jul 2016 10:07:02 +0000 (18:07 +0800)]
Fixed arginfo
Derick Rethans [Wed, 20 Jul 2016 09:21:19 +0000 (10:21 +0100)]
Merge branch 'PHP-7.0'
Derick Rethans [Wed, 20 Jul 2016 09:21:03 +0000 (10:21 +0100)]
Merge branch 'PHP-5.6' into PHP-7.0
Derick Rethans [Wed, 20 Jul 2016 09:19:53 +0000 (10:19 +0100)]
Regenerate with the -b flag, as we used to do.
Apparently, Apple's LLVM can't handle it otherwise o_O.
Xinchen Hui [Wed, 20 Jul 2016 09:01:53 +0000 (17:01 +0800)]
Merge branch 'PHP-7.0'
* PHP-7.0:
Fixed typo
Xinchen Hui [Wed, 20 Jul 2016 09:01:42 +0000 (17:01 +0800)]
Fixed typo
Xinchen Hui [Wed, 20 Jul 2016 09:00:30 +0000 (17:00 +0800)]
Update NEWs
Xinchen Hui [Wed, 20 Jul 2016 09:00:09 +0000 (17:00 +0800)]
Merge branch 'PHP-7.0'
* PHP-7.0:
Fixed bug #72629 (Caught exception assignment to variables ignores references).
Conflicts:
main/php_version.h
Xinchen Hui [Wed, 20 Jul 2016 08:59:14 +0000 (16:59 +0800)]
Fixed bug #72629 (Caught exception assignment to variables ignores references).
Xinchen Hui [Wed, 20 Jul 2016 08:13:21 +0000 (16:13 +0800)]
Update NEWS
Xinchen Hui [Wed, 20 Jul 2016 08:12:49 +0000 (16:12 +0800)]
Merge branch 'PHP-7.0'
* PHP-7.0:
Fixed bug #72622 (array_walk + array_replace_recursive create references from nothing)
Xinchen Hui [Wed, 20 Jul 2016 08:12:37 +0000 (16:12 +0800)]
Fixed bug #72622 (array_walk + array_replace_recursive create references from nothing)
Stanislav Malyshev [Wed, 20 Jul 2016 05:38:54 +0000 (22:38 -0700)]
Merge branch 'PHP-7.0'
* PHP-7.0:
Improve fix for #72520
#72482, revert for 5.6 for now
Stanislav Malyshev [Wed, 20 Jul 2016 05:38:35 +0000 (22:38 -0700)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
Improve fix for #72520
#72482, revert for 5.6 for now
Conflicts:
ext/zip/zip_stream.c
Stanislav Malyshev [Wed, 20 Jul 2016 05:37:44 +0000 (22:37 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Improve fix for #72520
Stanislav Malyshev [Wed, 20 Jul 2016 05:37:03 +0000 (22:37 -0700)]
Improve fix for #72520
Jakub Zelenka [Tue, 19 Jul 2016 19:12:28 +0000 (20:12 +0100)]
Add missing X509_get_signature_nid for 1.0.1
Jakub Zelenka [Tue, 19 Jul 2016 19:01:20 +0000 (20:01 +0100)]
Use always non const SSL cipher version string
Anatol Belski [Tue, 19 Jul 2016 18:35:04 +0000 (20:35 +0200)]
Merge branch 'PHP-7.0'
* PHP-7.0:
update UPGRADING
Anatol Belski [Tue, 19 Jul 2016 18:34:22 +0000 (20:34 +0200)]
update UPGRADING
Anatol Belski [Tue, 19 Jul 2016 18:28:05 +0000 (20:28 +0200)]
Merge branch 'PHP-7.0'
* PHP-7.0:
sync NEWS
Anatol Belski [Tue, 19 Jul 2016 18:27:30 +0000 (20:27 +0200)]
sync NEWS
Pierre Joye [Tue, 19 Jul 2016 17:18:56 +0000 (00:18 +0700)]
Merge branch 'PHP-5.6' of git.php.net:php-src into PHP-5.6
Pierre Joye [Tue, 19 Jul 2016 17:18:25 +0000 (00:18 +0700)]
#72482, revert for 5.6 for now
Christoph M. Becker [Tue, 19 Jul 2016 16:01:49 +0000 (18:01 +0200)]
Merge branch 'PHP-7.0'
Christoph M. Becker [Tue, 19 Jul 2016 16:00:20 +0000 (18:00 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Tue, 19 Jul 2016 15:58:29 +0000 (17:58 +0200)]
Update NEWS
Christoph M. Becker [Tue, 19 Jul 2016 15:50:45 +0000 (17:50 +0200)]
Merge branch 'PHP-7.0'
Christoph M. Becker [Tue, 19 Jul 2016 15:41:16 +0000 (17:41 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Sat, 16 Jul 2016 18:42:47 +0000 (20:42 +0200)]
Fix #43828: broken transparency of imagearc for truecolor in blendingmode
No pixel of a filled arc must ever be drawn multiple times. Otherwise we get
artifacts regarding transparency. That happens with the current
implementation of gdImageFilledArc() unless gdChord or gdNoFill are set.
When gdPie is set, however, the filled arc is drawn in wedges, which are
polygons of three points, and so some overlap is natural.
To resolve the issue, we stick with the current algorithm of calculating the
wedges, but instead of drawing each polygon separately, we put the relevant
points in a large array, and draw a single polygon. That also is supposed to
improve the performance considerably.
Note that this modification will change the results when gdImageSetStyle()
or gdImageSetBrush() are used, but we believe that this modification is also
an improvement in this regard, even though it still might not make much
sense to use these functions with gdImageFilledArc().
The respective fix for libgd is
<https://github.com/libgd/libgd/commit/
e7e20d6 >.
Anatol Belski [Tue, 19 Jul 2016 15:23:51 +0000 (17:23 +0200)]
Merge branch 'PHP-7.0'
* PHP-7.0:
Fix for bug #72513
Stanislav Malyshev [Wed, 13 Jul 2016 04:52:27 +0000 (21:52 -0700)]
Fix for bug #72513
This is applicable to 7 as well, but was somehow missing from the merge.
Anatol Belski [Tue, 19 Jul 2016 13:07:10 +0000 (15:07 +0200)]
Merge branch 'PHP-7.0'
* PHP-7.0:
fix test out
Anatol Belski [Tue, 19 Jul 2016 13:05:14 +0000 (15:05 +0200)]
fix test out
this test also affected by #70313 which is not in the release branch
Anatol Belski [Tue, 19 Jul 2016 12:51:26 +0000 (14:51 +0200)]
Merge branch 'PHP-7.0'
* PHP-7.0:
fix test portability and expectation
Anatol Belski [Tue, 19 Jul 2016 12:50:45 +0000 (14:50 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
fix test portability and expectation
Anatol Belski [Tue, 19 Jul 2016 12:45:23 +0000 (14:45 +0200)]
fix test portability and expectation
The test images for #72603 and #72618 are broken, that seems to be
the cause of different test output. Seems also to be platform dependent,
so it's not reliable to depend on the exact error output.
Pierre Joye [Tue, 19 Jul 2016 12:35:40 +0000 (19:35 +0700)]
Merge branch 'PHP-7.0'
* PHP-7.0:
#72482, Ilegal write/read access caused by gdImageAALine overflow
fix #72494, improve input color check and prevent issues when old gd are used, done before gd call
improve fix #72558, free contribRow as well
Pierre Joye [Tue, 19 Jul 2016 12:34:51 +0000 (19:34 +0700)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
#72482, Ilegal write/read access caused by gdImageAALine overflow
Pierre Joye [Tue, 19 Jul 2016 12:34:07 +0000 (19:34 +0700)]
#72482, Ilegal write/read access caused by gdImageAALine overflow
Pierre Joye [Tue, 19 Jul 2016 11:55:09 +0000 (18:55 +0700)]
merge conflict
Pierre Joye [Tue, 19 Jul 2016 11:23:51 +0000 (18:23 +0700)]
fix #72494, improve input color check and prevent issues when old gd are used, done before gd call
Pierre Joye [Tue, 19 Jul 2016 09:34:55 +0000 (16:34 +0700)]
Merge branch 'PHP-5.6' of git.php.net:php-src into PHP-5.6