]>
granicus.if.org Git - php/log
Ilia Alshanetsky [Tue, 2 Jan 2007 14:40:32 +0000 (14:40 +0000)]
Added length parameter validator to zip_entry_read()
Nuno Lopes [Mon, 1 Jan 2007 20:11:00 +0000 (20:11 +0000)]
MFB
Sebastian Bergmann [Mon, 1 Jan 2007 09:47:28 +0000 (09:47 +0000)]
MFH: Bump year.
Ilia Alshanetsky [Sun, 31 Dec 2006 22:26:25 +0000 (22:26 +0000)]
MFH: Added boundary checks to php_binary deserializer
Ilia Alshanetsky [Sat, 30 Dec 2006 20:50:50 +0000 (20:50 +0000)]
MFH: Added missing resource validation checks
Ilia Alshanetsky [Sat, 30 Dec 2006 20:21:39 +0000 (20:21 +0000)]
MFH: Added missing resource type checks
Ilia Alshanetsky [Fri, 29 Dec 2006 00:35:25 +0000 (00:35 +0000)]
MFH: Fixed bug #39971 (pg_insert/pg_update do not allow now() to be used for
timestamp fields).
Antony Dovgal [Thu, 28 Dec 2006 22:36:59 +0000 (22:36 +0000)]
MFH
Antony Dovgal [Thu, 28 Dec 2006 20:45:36 +0000 (20:45 +0000)]
MFH
Ilia Alshanetsky [Thu, 28 Dec 2006 15:21:41 +0000 (15:21 +0000)]
MFH: Added buffer length checks
Antony Dovgal [Thu, 28 Dec 2006 13:30:34 +0000 (13:30 +0000)]
MFH
Antony Dovgal [Thu, 28 Dec 2006 12:19:21 +0000 (12:19 +0000)]
MFH
Antony Dovgal [Thu, 28 Dec 2006 12:02:59 +0000 (12:02 +0000)]
MFH
Ilia Alshanetsky [Tue, 26 Dec 2006 17:33:13 +0000 (17:33 +0000)]
MFB: safety checks
Ilia Alshanetsky [Tue, 26 Dec 2006 17:23:33 +0000 (17:23 +0000)]
MFH: Session deserializer protection.
Antony Dovgal [Mon, 25 Dec 2006 21:18:11 +0000 (21:18 +0000)]
MF52
Antony Dovgal [Mon, 25 Dec 2006 21:08:13 +0000 (21:08 +0000)]
MFH
Antony Dovgal [Mon, 25 Dec 2006 20:54:58 +0000 (20:54 +0000)]
MFH
Antony Dovgal [Mon, 25 Dec 2006 20:04:23 +0000 (20:04 +0000)]
MFH
Antony Dovgal [Mon, 25 Dec 2006 15:42:35 +0000 (15:42 +0000)]
MFH: fix bug #39890 (using autoconf 2.6x and --with-layout=GNU breaks PEAR install path)
Antony Dovgal [Mon, 25 Dec 2006 15:29:10 +0000 (15:29 +0000)]
MFH
Ilia Alshanetsky [Mon, 25 Dec 2006 14:23:32 +0000 (14:23 +0000)]
MFH: Define SENDBUFLEN for older c-client libs
Antony Dovgal [Mon, 25 Dec 2006 11:51:20 +0000 (11:51 +0000)]
MFH
Ilia Alshanetsky [Sun, 24 Dec 2006 22:15:30 +0000 (22:15 +0000)]
MFH: Fixed buffer boundary protection
Ilia Alshanetsky [Sat, 23 Dec 2006 18:56:42 +0000 (18:56 +0000)]
MFB: Added checks for negative max length and overflow checks for
overly long strings.
Seiji Masugata [Thu, 21 Dec 2006 17:28:57 +0000 (17:28 +0000)]
Fixed bug #39361, #39400 (mbstring function overloading problem).
Antony Dovgal [Thu, 21 Dec 2006 01:03:54 +0000 (01:03 +0000)]
MFH fix leaks on errors
Antony Dovgal [Thu, 21 Dec 2006 00:43:30 +0000 (00:43 +0000)]
MFH
Antony Dovgal [Wed, 20 Dec 2006 23:37:27 +0000 (23:37 +0000)]
MFH
Antony Dovgal [Wed, 20 Dec 2006 19:31:40 +0000 (19:31 +0000)]
protect _SESSION, HTTP_SESSION_VARS and GLOBALS
maintain an internal reference of _SESSION, so that it won't be possible to destroy it from userspace
Antony Dovgal [Wed, 20 Dec 2006 15:14:37 +0000 (15:14 +0000)]
MFH
Nuno Lopes [Fri, 1 Dec 2006 17:11:07 +0000 (17:11 +0000)]
MFH: fix bug #39458
Ilia Alshanetsky [Fri, 1 Dec 2006 00:28:43 +0000 (00:28 +0000)]
MFH: Disallow \0 chars inside session.save_path
Antony Dovgal [Thu, 30 Nov 2006 22:13:57 +0000 (22:13 +0000)]
MFH missing fixes required by autoconf 2.6x
fixes bug #39696
Antony Dovgal [Tue, 28 Nov 2006 11:41:35 +0000 (11:41 +0000)]
MFH
Ilia Alshanetsky [Sun, 26 Nov 2006 16:45:29 +0000 (16:45 +0000)]
MFH: Added a meta tag to phpinfo() output to prevent search engines from
indexing the page.
Antony Dovgal [Fri, 24 Nov 2006 12:40:39 +0000 (12:40 +0000)]
MFH: fix #39583 (ftp_put() does not change transfer mode to ASCII)
Derick Rethans [Tue, 14 Nov 2006 14:43:16 +0000 (14:43 +0000)]
- MFH: No idea if we actually support 16 bit systems, but this just looked wrong
Hannes Magnusson [Sun, 12 Nov 2006 01:16:41 +0000 (01:16 +0000)]
MFH: Fixed bug#36975 (natcasesort() causes array_pop() to misbehave)
Ilia Alshanetsky [Thu, 9 Nov 2006 19:10:56 +0000 (19:10 +0000)]
MFH: Fixed bug #38456 (Apache2 segfaults when virtual() is called in .php
ErrorDocument).
Ilia Alshanetsky [Tue, 7 Nov 2006 18:29:20 +0000 (18:29 +0000)]
revert incorrect patch for bug #39129
Ilia Alshanetsky [Fri, 3 Nov 2006 14:55:59 +0000 (14:55 +0000)]
MFH: Fixed bug #39354 (Allow building of curl extension against libcurl
7.16.0)
Rui Hirokawa [Fri, 3 Nov 2006 02:24:50 +0000 (02:24 +0000)]
fixed illegal encoding detection when mbstring.encoding_translation is enabled.(made by komura)
Ilia Alshanetsky [Wed, 1 Nov 2006 01:56:46 +0000 (01:56 +0000)]
MFH: Added missing boundary checks.
Stefan Esser [Fri, 27 Oct 2006 08:35:25 +0000 (08:35 +0000)]
Manual commit without invoking re2c
Stefan Esser [Fri, 27 Oct 2006 08:33:55 +0000 (08:33 +0000)]
Do not allow more than 65500 references
Hannes Magnusson [Thu, 19 Oct 2006 11:27:36 +0000 (11:27 +0000)]
BFN
Antony Dovgal [Wed, 18 Oct 2006 20:59:38 +0000 (20:59 +0000)]
MFH: fix bug #38882 (ldap_connect causes segfault with newer versions of OpenLDAP)
Ilia Alshanetsky [Sun, 15 Oct 2006 17:06:42 +0000 (17:06 +0000)]
BFN
Ilia Alshanetsky [Fri, 13 Oct 2006 01:12:11 +0000 (01:12 +0000)]
MFH: Improve open_basedir checks
Ilia Alshanetsky [Tue, 10 Oct 2006 23:17:05 +0000 (23:17 +0000)]
MFH: Fixed bug #39034 (curl_exec() with return transfer returns TRUE on
empty files).
Ilia Alshanetsky [Wed, 4 Oct 2006 23:20:02 +0000 (23:20 +0000)]
MFB: Fixed missing open_basedir check inside chdir() function.
Antony Dovgal [Mon, 2 Oct 2006 20:53:05 +0000 (20:53 +0000)]
MFH: the last part of the fix for #39004
Antony Dovgal [Mon, 2 Oct 2006 20:52:46 +0000 (20:52 +0000)]
fix compile warning
Antony Dovgal [Mon, 2 Oct 2006 19:22:45 +0000 (19:22 +0000)]
MFH: fix bug #39004
Ilia Alshanetsky [Thu, 28 Sep 2006 15:16:40 +0000 (15:16 +0000)]
MFH: Fixed bug #38859 (parse_url() fails if passing '@' in passwd).
Antony Dovgal [Thu, 28 Sep 2006 08:26:45 +0000 (08:26 +0000)]
MFH
Ilia Alshanetsky [Wed, 27 Sep 2006 23:45:36 +0000 (23:45 +0000)]
MFH: Fixed bug #38963 (Fixed a possible open_basedir bypass in tempnam()).
Antony Dovgal [Tue, 19 Sep 2006 09:39:14 +0000 (09:39 +0000)]
support objects in array_walk()
Antony Dovgal [Tue, 19 Sep 2006 09:06:37 +0000 (09:06 +0000)]
MFH: fix #34066 (recursive array_walk causes segfault)
add test
Antony Dovgal [Tue, 12 Sep 2006 17:27:08 +0000 (17:27 +0000)]
MFH: improve spelling (fixes #38780)
Edin Kadribasic [Wed, 6 Sep 2006 22:08:04 +0000 (22:08 +0000)]
Slightly different definiton for php4
Edin Kadribasic [Wed, 6 Sep 2006 21:55:26 +0000 (21:55 +0000)]
MFOB: Fixed bug #38190 (threading issues on windows 2003)
Derick Rethans [Wed, 6 Sep 2006 17:03:05 +0000 (17:03 +0000)]
- MFH: fix memleak of pcre study data (Patch by Nuno).
Antony Dovgal [Wed, 6 Sep 2006 16:30:45 +0000 (16:30 +0000)]
fix test
Ilia Alshanetsky [Fri, 1 Sep 2006 14:20:20 +0000 (14:20 +0000)]
PCRE constants
Ilia Alshanetsky [Wed, 30 Aug 2006 20:07:55 +0000 (20:07 +0000)]
pcre news
Ilia Alshanetsky [Wed, 30 Aug 2006 20:06:53 +0000 (20:06 +0000)]
MFH: Upgrade PCRE lib to 6.7
Antony Dovgal [Mon, 28 Aug 2006 19:59:31 +0000 (19:59 +0000)]
BFN
though, the leak is still there, we can't fix that in 4_4
Antony Dovgal [Mon, 28 Aug 2006 19:03:32 +0000 (19:03 +0000)]
MFH: set BG(locale_string) to NULL on shutdown (partly fixes #38534)
Hannes Magnusson [Sun, 27 Aug 2006 15:10:32 +0000 (15:10 +0000)]
fix tests on freebsd
Hannes Magnusson [Sat, 26 Aug 2006 14:15:07 +0000 (14:15 +0000)]
Fixed bug #37812 aggregate_methods_by_list fails to take certain methods
Add test
Pierre Joye [Fri, 25 Aug 2006 13:37:10 +0000 (13:37 +0000)]
- updated list
Antony Dovgal [Thu, 24 Aug 2006 08:42:16 +0000 (08:42 +0000)]
fix #38450 (constructor is not called for classes used in userspace stream wrappers)
Antony Dovgal [Thu, 24 Aug 2006 08:30:28 +0000 (08:30 +0000)]
fix #38378 (wddx_serialize_value() generates no wellformed xml)
Andrei Zmievski [Wed, 23 Aug 2006 20:40:39 +0000 (20:40 +0000)]
MFB
Pierre Joye [Fri, 18 Aug 2006 12:44:27 +0000 (12:44 +0000)]
- add this script to the 4.4 branche, may help...
Antony Dovgal [Fri, 18 Aug 2006 12:38:19 +0000 (12:38 +0000)]
fix typo (bug #38499)
Derick Rethans [Tue, 15 Aug 2006 12:23:08 +0000 (12:23 +0000)]
- Back to dev.
Derick Rethans [Tue, 15 Aug 2006 12:22:14 +0000 (12:22 +0000)]
- Go with 4.4.4.
Derick Rethans [Sat, 12 Aug 2006 15:48:11 +0000 (15:48 +0000)]
- Back to -dev
Derick Rethans [Sat, 12 Aug 2006 15:46:04 +0000 (15:46 +0000)]
- Go with RC1.
Antony Dovgal [Fri, 11 Aug 2006 17:50:01 +0000 (17:50 +0000)]
MFH: fix #38431 (xmlrpc_get_type() crashes PHP on objects)
Ilia Alshanetsky [Fri, 11 Aug 2006 15:07:00 +0000 (15:07 +0000)]
Extend safe_mode/open_basedir checks to imap_reopen() as well.
Ilia Alshanetsky [Fri, 11 Aug 2006 15:04:28 +0000 (15:04 +0000)]
VCWD_ACCESS does not work on win32 :/
Derick Rethans [Fri, 11 Aug 2006 13:04:14 +0000 (13:04 +0000)]
- Fixed a memory corruption error with an invalid foreach() call.
Antony Dovgal [Fri, 11 Aug 2006 10:35:04 +0000 (10:35 +0000)]
fix test
Ilia Alshanetsky [Thu, 10 Aug 2006 17:27:12 +0000 (17:27 +0000)]
MFH: Various security fixes
Antony Dovgal [Thu, 10 Aug 2006 13:42:36 +0000 (13:42 +0000)]
nuke extra line
Nuno Lopes [Wed, 9 Aug 2006 23:29:17 +0000 (23:29 +0000)]
regenerate file so that #line directives become correct (aka fix lcov builds)
Ilia Alshanetsky [Tue, 8 Aug 2006 14:57:04 +0000 (14:57 +0000)]
MFH: Fixed bug #38377 (session_destroy() gives warning after
session_regenerate_id()).
Ilia Alshanetsky [Fri, 4 Aug 2006 20:32:44 +0000 (20:32 +0000)]
MFB: Fixed bug #37265 (Added missing safe_mode & open_basedir checks to
imap_body()).
Antony Dovgal [Fri, 4 Aug 2006 15:01:46 +0000 (15:01 +0000)]
add new test
Antony Dovgal [Fri, 4 Aug 2006 11:59:50 +0000 (11:59 +0000)]
MFH: fix #38322 (reading past array in sscanf() leads to arbitary code execution)
Antony Dovgal [Tue, 1 Aug 2006 12:04:14 +0000 (12:04 +0000)]
re-apply fix for #38251 (socket_select() and invalid arguments)
Antony Dovgal [Tue, 1 Aug 2006 08:39:11 +0000 (08:39 +0000)]
fix test (but it still fails)
Antony Dovgal [Tue, 1 Aug 2006 08:35:06 +0000 (08:35 +0000)]
BFN
Antony Dovgal [Tue, 1 Aug 2006 08:33:13 +0000 (08:33 +0000)]
MFH: fix #38278 (session_cache_expire()'s value does not match phpinfo's session.cache_expire)
Derick Rethans [Tue, 1 Aug 2006 08:06:54 +0000 (08:06 +0000)]
- Back to dev
Derick Rethans [Mon, 31 Jul 2006 15:04:54 +0000 (15:04 +0000)]
- Go with 4.4.3.