]>
granicus.if.org Git - php/log
Pierre Joye [Wed, 8 Jun 2016 04:06:48 +0000 (11:06 +0700)]
prevent invalid color index (palette only), may lead to crash
Lior Kaplan [Tue, 7 Jun 2016 18:45:24 +0000 (21:45 +0300)]
Add CVE to #66387
Anatol Belski [Tue, 7 Jun 2016 16:41:17 +0000 (18:41 +0200)]
add missing NEWS entry
Pierre Joye [Tue, 7 Jun 2016 10:16:40 +0000 (17:16 +0700)]
#72337 invalid dimensions can lead to segv
Anatol Belski [Mon, 6 Jun 2016 19:06:06 +0000 (21:06 +0200)]
Add test for bug #53735
Anatol Belski [Mon, 6 Jun 2016 06:56:40 +0000 (08:56 +0200)]
fix typo
Anatol Belski [Mon, 6 Jun 2016 06:20:01 +0000 (08:20 +0200)]
fix broken skipif and add xfail for now
Anatol Belski [Mon, 6 Jun 2016 05:27:45 +0000 (07:27 +0200)]
missing return
Jakub Zelenka [Sun, 5 Jun 2016 16:27:47 +0000 (17:27 +0100)]
Add new test for openssl_pkey_new
Jakub Zelenka [Sun, 5 Jun 2016 16:23:05 +0000 (17:23 +0100)]
Add test for openssl_error_string
This test is important for making sure that the error strings
from OpenSSL works as expected and we can safely add a fix
for storing the strings that is prepared.
Jakub Zelenka [Sun, 5 Jun 2016 15:28:50 +0000 (16:28 +0100)]
Remove openssl_x509_parse for OpenSSL 0.9.x
The test is unstable and it actually fails with latest 0.9.8
Anatol Belski [Thu, 2 Jun 2016 10:18:33 +0000 (12:18 +0200)]
update NEWS
Anatol Belski [Mon, 11 Apr 2016 13:00:58 +0000 (15:00 +0200)]
Fixed bug #70484 selectordinal doesn't work with named parameters
Elizabeth Marie Smith [Thu, 14 Jan 2016 12:19:20 +0000 (13:19 +0100)]
Fix ODBC bug for varchars returning with length zero
Ferenc Kovacs [Thu, 26 May 2016 01:05:06 +0000 (03:05 +0200)]
update NEWS
Adam Harvey [Wed, 25 May 2016 17:47:16 +0000 (12:47 -0500)]
Fix typo in phpdbg help.
Sorry, I would have included this in the last push had I spotted it a
minute earlier.
Adam Harvey [Wed, 25 May 2016 17:38:41 +0000 (12:38 -0500)]
Add missing newlines to phpdbg's help for the run command.
This is not at all related to needing screenshots for a talk I'm giving
in two days. No sir. Not at all.
Remi Collet [Wed, 25 May 2016 14:17:12 +0000 (16:17 +0200)]
Skip test which is 64bits only
Diff from test output
001+ Warning: fread(): Length parameter must be greater than 0 in ...
001- Warning: fread(): Length parameter must be no more than
2147483647 in ...
Anatol Belski [Wed, 25 May 2016 09:19:19 +0000 (11:19 +0200)]
fix test portability
Stanislav Malyshev [Wed, 25 May 2016 00:21:22 +0000 (17:21 -0700)]
Merge branch 'PHP-5.6.22' into PHP-5.6
* PHP-5.6.22:
Fix memory leak in imagescale()
Update NEWS
Better fix for bug #72135
Fixed bug #72227: imagescale out-of-bounds read
Fix bug #72241: get_icu_value_internal out-of-bounds read
Fix bug #72135 - don't create strings with lengths outside int range
prepare for 5.6.22RC1
Add check for string overflow to all string add operations
Fix bug #72114 - int/size_t confusion in fread
Updated NEWS
Fixed bug #71331 - Uninitialized pointer in phar_make_dirstream()
Conflicts:
configure.in
main/php_version.h
Stanislav Malyshev [Tue, 24 May 2016 23:35:12 +0000 (16:35 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6.22
* PHP-5.5:
Fix memory leak in imagescale()
Update NEWS
Better fix for bug #72135
Fixed bug #72227: imagescale out-of-bounds read
Fix bug #72241: get_icu_value_internal out-of-bounds read
Fix bug #72135 - don't create strings with lengths outside int range
Add check for string overflow to all string add operations
Fix bug #72114 - int/size_t confusion in fread
Updated NEWS
Fixed bug #71331 - Uninitialized pointer in phar_make_dirstream()
Conflicts:
Zend/zend_operators.c
ext/phar/dirstream.c
ext/phar/tests/bug71331.phpt
Stanislav Malyshev [Tue, 24 May 2016 23:12:01 +0000 (16:12 -0700)]
Fix memory leak in imagescale()
Stanislav Malyshev [Tue, 24 May 2016 22:56:02 +0000 (15:56 -0700)]
Update NEWS
Stanislav Malyshev [Tue, 24 May 2016 22:52:15 +0000 (15:52 -0700)]
Better fix for bug #72135
Stanislav Malyshev [Mon, 23 May 2016 07:28:02 +0000 (00:28 -0700)]
Fixed bug #72227: imagescale out-of-bounds read
Ported from https://github.com/libgd/libgd/commit/
4f65a3e4eedaffa1efcf9ee1eb08f0b504fbc31a
Stanislav Malyshev [Mon, 23 May 2016 00:49:02 +0000 (17:49 -0700)]
Fix bug #72241: get_icu_value_internal out-of-bounds read
Derick Rethans [Wed, 18 May 2016 11:19:11 +0000 (12:19 +0100)]
Fixed bug #63740 (strtotime seems to use both sunday and monday as start of week)
Stanislav Malyshev [Mon, 16 May 2016 06:26:51 +0000 (23:26 -0700)]
Fix bug #72135 - don't create strings with lengths outside int range
Ferenc Kovacs [Wed, 11 May 2016 21:34:15 +0000 (23:34 +0200)]
prepare for 5.6.22RC1
Ferenc Kovacs [Wed, 11 May 2016 21:30:04 +0000 (23:30 +0200)]
prepare for 5.6.22RC1
Ferenc Kovacs [Wed, 11 May 2016 21:29:23 +0000 (23:29 +0200)]
add missing NEWS entry
Anatol Belski [Tue, 10 May 2016 17:59:21 +0000 (19:59 +0200)]
fix handle leak
Dmitry Stogov [Tue, 10 May 2016 14:50:14 +0000 (17:50 +0300)]
The "flock" structure has to be writable on AIX.
Stanislav Malyshev [Tue, 10 May 2016 05:17:20 +0000 (22:17 -0700)]
Add check for string overflow to all string add operations
Stanislav Malyshev [Tue, 10 May 2016 04:55:29 +0000 (21:55 -0700)]
Fix bug #72114 - int/size_t confusion in fread
Anatol Belski [Mon, 9 May 2016 16:50:40 +0000 (18:50 +0200)]
update NEWS
Anatol Belski [Mon, 9 May 2016 15:15:40 +0000 (17:15 +0200)]
Revert "Backport patch for bug #71820"
This reverts commit
1b632cfe834bfd87d182566d7d960df7d10ded72 .
This fixed bug #72151, and reverts the fix for bug #71820.
See also bug #50636 and #49521 for the history.
Anatol Belski [Sun, 8 May 2016 13:09:50 +0000 (15:09 +0200)]
Fixed bug #64524 Add intl.use_exceptions to php.ini-*
Xinchen Hui [Sat, 7 May 2016 06:52:06 +0000 (23:52 -0700)]
Fixed bug #72172 (zend_hex_strtod should not use strlen)
Anatol Belski [Tue, 3 May 2016 17:09:11 +0000 (19:09 +0200)]
add test fo rbug 71805
Anatol Belski [Tue, 3 May 2016 16:24:35 +0000 (18:24 +0200)]
upate libs versions
Julien Pauli [Mon, 2 May 2016 14:52:58 +0000 (16:52 +0200)]
Updated NEWS
Julien Pauli [Mon, 2 May 2016 14:49:47 +0000 (16:49 +0200)]
Backport of fixed for bug #71331 - Uninitialized pointer in phar_make_dirstream()
Anatol Belski [Sun, 1 May 2016 11:18:24 +0000 (13:18 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Update PHP 5.5 NEWS entries with CVE info
Added CVE
Updated NEWS
Lior Kaplan [Sun, 1 May 2016 11:14:57 +0000 (13:14 +0200)]
Update PHP 5.5 NEWS entries with CVE info
Lior Kaplan [Fri, 29 Apr 2016 10:23:41 +0000 (13:23 +0300)]
Add CVE to bug #69719 (PHP 5.6.10)
Lior Kaplan [Fri, 29 Apr 2016 10:21:35 +0000 (13:21 +0300)]
Add CVE IDs PHP 5.6.12
Lior Kaplan [Fri, 29 Apr 2016 10:19:46 +0000 (13:19 +0300)]
Add CVE IDs PHP 5.6.13
Lior Kaplan [Fri, 29 Apr 2016 10:17:34 +0000 (13:17 +0300)]
Add CVE IDs PHP 5.6.14
Lior Kaplan [Fri, 29 Apr 2016 10:16:27 +0000 (13:16 +0300)]
Add CVE to bug #70976 (PHP 5.6.17)
Lior Kaplan [Fri, 29 Apr 2016 10:15:30 +0000 (13:15 +0300)]
Add CVE IDs PHP 5.6.18
Lior Kaplan [Fri, 29 Apr 2016 10:11:54 +0000 (13:11 +0300)]
Add CVE IDs PHP 5.6.20
Lior Kaplan [Fri, 29 Apr 2016 10:10:13 +0000 (13:10 +0300)]
Add CVE to bug #71912 (PHP 5.6.21)
Julien Pauli [Fri, 29 Apr 2016 07:12:27 +0000 (09:12 +0200)]
Added CVE
Stanislav Malyshev [Fri, 15 Jan 2016 06:58:40 +0000 (22:58 -0800)]
Fixed bug #71331 - Uninitialized pointer in phar_make_dirstream()
Lior Kaplan [Thu, 28 Apr 2016 17:46:29 +0000 (20:46 +0300)]
Add NEWS entry for bug #71331 (fixed in PHP 5.6.18)
Ferenc Kovacs [Thu, 28 Apr 2016 00:32:45 +0000 (02:32 +0200)]
small whitespace fix
Anatol Belski [Wed, 27 Apr 2016 12:50:46 +0000 (14:50 +0200)]
update NEWS
Anatol Belski [Wed, 27 Apr 2016 11:16:57 +0000 (13:16 +0200)]
fix/improve tests
Julien Pauli [Wed, 27 Apr 2016 09:55:05 +0000 (11:55 +0200)]
Updated NEWS
Stanislav Malyshev [Wed, 27 Apr 2016 06:48:41 +0000 (23:48 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Fix memory leak
Fix bug #72099: xml_parse_into_struct segmentation fault
5.5.36 now
Fix bug #72094 - Out of bounds heap read access in exif header processing
Fix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definition
Fix bug #72061 - Out-of-bounds reads in zif_grapheme_stripos with negative offset
Fix for bug #71912 (libgd: signedness vulnerability)
Typo in NEWS
Conflicts:
configure.in
main/php_version.h
Stanislav Malyshev [Wed, 27 Apr 2016 05:54:58 +0000 (22:54 -0700)]
Fix memory leak
Stanislav Malyshev [Mon, 25 Apr 2016 06:50:57 +0000 (23:50 -0700)]
Fix bug #72099: xml_parse_into_struct segmentation fault
Julien Pauli [Tue, 26 Apr 2016 20:34:00 +0000 (22:34 +0200)]
5.5.36 now
Dmitry Stogov [Tue, 26 Apr 2016 10:43:18 +0000 (13:43 +0300)]
Fixed test on 32-bit platforms (split into 32-bit and 64-bit versions)
Stanislav Malyshev [Mon, 25 Apr 2016 02:33:52 +0000 (19:33 -0700)]
Fix bug #72094 - Out of bounds heap read access in exif header processing
Stanislav Malyshev [Mon, 25 Apr 2016 01:33:32 +0000 (18:33 -0700)]
Fix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definition
We can not modify result since it can be copy of _zero_ or _one_, etc. and
"copy" in bcmath is just bumping the refcount.
Stanislav Malyshev [Sun, 24 Apr 2016 19:49:01 +0000 (12:49 -0700)]
Fix bug #72061 - Out-of-bounds reads in zif_grapheme_stripos with negative offset
Adam Harvey [Tue, 19 Apr 2016 02:20:35 +0000 (19:20 -0700)]
Fix ZTS builds by adding a missing TSRMLS_FETCH().
Stanislav Malyshev [Wed, 20 Apr 2016 06:44:00 +0000 (23:44 -0700)]
Better fix for #71952
Stanislav Malyshev [Tue, 19 Apr 2016 06:31:03 +0000 (23:31 -0700)]
Fix bug #71952: Corruption inside imageaffinematrixget
Stanislav Malyshev [Tue, 19 Apr 2016 05:20:22 +0000 (22:20 -0700)]
Fix for bug #71912 (libgd: signedness vulnerability)
Dmitry Stogov [Mon, 18 Apr 2016 22:31:49 +0000 (01:31 +0300)]
Prevent usage in GC after free.
Ferenc Kovacs [Mon, 18 Apr 2016 07:04:27 +0000 (09:04 +0200)]
mark frequent intermittent fpm test with XFAIL
Ferenc Kovacs [Mon, 18 Apr 2016 06:14:16 +0000 (08:14 +0200)]
prepare for 5.6.21RC1
Lior Kaplan [Fri, 15 Apr 2016 19:07:47 +0000 (22:07 +0300)]
Align NEWS entry format
Christopher Jones [Thu, 14 Apr 2016 05:08:42 +0000 (15:08 +1000)]
Fix old comment cut-n-paste error
Christopher Jones [Thu, 14 Apr 2016 03:50:01 +0000 (13:50 +1000)]
Fixed bug #71422 (Fix ORA-01438: value larger than specified precision allowed for this column)
Lior Kaplan [Fri, 8 Apr 2016 19:38:07 +0000 (22:38 +0300)]
opcache config.m4: Use = for comparison
Anatol Belski [Tue, 5 Apr 2016 09:52:53 +0000 (11:52 +0200)]
update NEWS
Thomas Punt [Thu, 24 Mar 2016 11:09:59 +0000 (11:09 +0000)]
Use STR_EMPTY_ALLOC macro instead
Thomas Punt [Wed, 23 Mar 2016 23:57:50 +0000 (23:57 +0000)]
Fix DateInterval::format segfault
Matteo Beccati [Mon, 4 Apr 2016 21:45:10 +0000 (23:45 +0200)]
Fixed bug #71447 (Quotes inside comments not properly handled)
Matteo Beccati [Mon, 4 Apr 2016 21:42:52 +0000 (23:42 +0200)]
Fixed a few PDO tests to conform to PDO Common standards
Joe Watkins [Mon, 4 Apr 2016 09:22:13 +0000 (10:22 +0100)]
news entry #69537
Joe Watkins [Sun, 3 Apr 2016 11:40:29 +0000 (12:40 +0100)]
Fix #69537: __debugInfo with empty string for key gives error
Julien Pauli [Thu, 31 Mar 2016 15:45:07 +0000 (17:45 +0200)]
Typo in NEWS
Anatol Belski [Wed, 30 Mar 2016 23:36:47 +0000 (01:36 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
fix borked mainstream patch
5.5.35 now
Anatol Belski [Wed, 30 Mar 2016 23:33:38 +0000 (01:33 +0200)]
fix borked mainstream patch
Anatol Belski [Wed, 30 Mar 2016 23:29:05 +0000 (01:29 +0200)]
fix test to not to cause false positives
Lior Kaplan [Wed, 30 Mar 2016 21:52:53 +0000 (00:52 +0300)]
Align NEWS entry format
Ferenc Kovacs [Wed, 30 Mar 2016 20:28:28 +0000 (22:28 +0200)]
update NEWS
Julien Pauli [Tue, 29 Mar 2016 16:11:03 +0000 (18:11 +0200)]
5.5.35 now
Anatol Belski [Tue, 29 Mar 2016 12:19:35 +0000 (14:19 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
fix dir separator in test
Anatol Belski [Tue, 29 Mar 2016 12:18:25 +0000 (14:18 +0200)]
fix dir separator in test
Anatol Belski [Sun, 27 Mar 2016 22:45:19 +0000 (00:45 +0200)]
Fixed bug #71527 Buffer over-write in finfo_open with malformed magic file
The actual fix is applying the upstream patch from
https://github.com/file/file/commit/
6713ca45e7757297381f4b4cdb9cf5e624a9ad36
Anatol Belski [Tue, 29 Mar 2016 11:11:17 +0000 (13:11 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Fixed bug #71527 Buffer over-write in finfo_open with malformed magic file
Anatol Belski [Sun, 27 Mar 2016 22:45:19 +0000 (00:45 +0200)]
Fixed bug #71527 Buffer over-write in finfo_open with malformed magic file
The actual fix is applying the upstream patch from
https://github.com/file/file/commit/
6713ca45e7757297381f4b4cdb9cf5e624a9ad36
Stanislav Malyshev [Tue, 29 Mar 2016 06:45:15 +0000 (23:45 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Fixed bug #71704 php_snmp_error() Format String Vulnerability
Anatol Belski [Wed, 16 Mar 2016 08:48:40 +0000 (09:48 +0100)]
Fixed bug #71704 php_snmp_error() Format String Vulnerability
Conflicts:
ext/snmp/snmp.c