]> granicus.if.org Git - php/log
php
8 years agoprevent invalid color index (palette only), may lead to crash
Pierre Joye [Wed, 8 Jun 2016 04:06:48 +0000 (11:06 +0700)]
prevent invalid color index (palette only), may lead to crash

8 years agoAdd CVE to #66387
Lior Kaplan [Tue, 7 Jun 2016 18:45:24 +0000 (21:45 +0300)]
Add CVE to #66387

8 years agoadd missing NEWS entry
Anatol Belski [Tue, 7 Jun 2016 16:41:17 +0000 (18:41 +0200)]
add missing NEWS entry

8 years ago#72337 invalid dimensions can lead to segv
Pierre Joye [Tue, 7 Jun 2016 10:16:40 +0000 (17:16 +0700)]
#72337 invalid dimensions can lead to segv

8 years agoAdd test for bug #53735
Anatol Belski [Mon, 6 Jun 2016 19:06:06 +0000 (21:06 +0200)]
Add test for bug #53735

8 years agofix typo
Anatol Belski [Mon, 6 Jun 2016 06:56:40 +0000 (08:56 +0200)]
fix typo

8 years agofix broken skipif and add xfail for now
Anatol Belski [Mon, 6 Jun 2016 06:20:01 +0000 (08:20 +0200)]
fix broken skipif and add xfail for now

8 years agomissing return
Anatol Belski [Mon, 6 Jun 2016 05:27:45 +0000 (07:27 +0200)]
missing return

8 years agoAdd new test for openssl_pkey_new
Jakub Zelenka [Sun, 5 Jun 2016 16:27:47 +0000 (17:27 +0100)]
Add new test for openssl_pkey_new

8 years agoAdd test for openssl_error_string
Jakub Zelenka [Sun, 5 Jun 2016 16:23:05 +0000 (17:23 +0100)]
Add test for openssl_error_string

This test is important for making sure that the error strings
from OpenSSL works as expected and we can safely add a fix
for storing the strings that is prepared.

8 years agoRemove openssl_x509_parse for OpenSSL 0.9.x
Jakub Zelenka [Sun, 5 Jun 2016 15:28:50 +0000 (16:28 +0100)]
Remove openssl_x509_parse for OpenSSL 0.9.x

The test is unstable and it actually fails with latest 0.9.8

8 years agoupdate NEWS
Anatol Belski [Thu, 2 Jun 2016 10:18:33 +0000 (12:18 +0200)]
update NEWS

8 years agoFixed bug #70484 selectordinal doesn't work with named parameters
Anatol Belski [Mon, 11 Apr 2016 13:00:58 +0000 (15:00 +0200)]
Fixed bug #70484 selectordinal doesn't work with named parameters

8 years agoFix ODBC bug for varchars returning with length zero
Elizabeth Marie Smith [Thu, 14 Jan 2016 12:19:20 +0000 (13:19 +0100)]
Fix ODBC bug for varchars returning with length zero

8 years agoupdate NEWS
Ferenc Kovacs [Thu, 26 May 2016 01:05:06 +0000 (03:05 +0200)]
update NEWS

8 years agoFix typo in phpdbg help.
Adam Harvey [Wed, 25 May 2016 17:47:16 +0000 (12:47 -0500)]
Fix typo in phpdbg help.

Sorry, I would have included this in the last push had I spotted it a
minute earlier.

8 years agoAdd missing newlines to phpdbg's help for the run command.
Adam Harvey [Wed, 25 May 2016 17:38:41 +0000 (12:38 -0500)]
Add missing newlines to phpdbg's help for the run command.

This is not at all related to needing screenshots for a talk I'm giving
in two days. No sir. Not at all.

8 years agoSkip test which is 64bits only
Remi Collet [Wed, 25 May 2016 14:17:12 +0000 (16:17 +0200)]
Skip test which is 64bits only

Diff from test output
001+ Warning: fread(): Length parameter must be greater than 0 in ...
001- Warning: fread(): Length parameter must be no more than 2147483647 in ...

8 years agofix test portability
Anatol Belski [Wed, 25 May 2016 09:19:19 +0000 (11:19 +0200)]
fix test portability

8 years agoMerge branch 'PHP-5.6.22' into PHP-5.6
Stanislav Malyshev [Wed, 25 May 2016 00:21:22 +0000 (17:21 -0700)]
Merge branch 'PHP-5.6.22' into PHP-5.6

* PHP-5.6.22:
  Fix memory leak in imagescale()
  Update NEWS
  Better fix for bug #72135
  Fixed bug #72227: imagescale out-of-bounds read
  Fix bug #72241: get_icu_value_internal out-of-bounds read
  Fix bug #72135 - don't create strings with lengths outside int range
  prepare for 5.6.22RC1
  Add check for string overflow to all string add operations
  Fix bug #72114 - int/size_t confusion in fread
  Updated NEWS
  Fixed bug #71331 - Uninitialized pointer in phar_make_dirstream()

Conflicts:
configure.in
main/php_version.h

8 years agoMerge branch 'PHP-5.5' into PHP-5.6.22
Stanislav Malyshev [Tue, 24 May 2016 23:35:12 +0000 (16:35 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6.22

* PHP-5.5:
  Fix memory leak in imagescale()
  Update NEWS
  Better fix for bug #72135
  Fixed bug #72227: imagescale out-of-bounds read
  Fix bug #72241: get_icu_value_internal out-of-bounds read
  Fix bug #72135 - don't create strings with lengths outside int range
  Add check for string overflow to all string add operations
  Fix bug #72114 - int/size_t confusion in fread
  Updated NEWS
  Fixed bug #71331 - Uninitialized pointer in phar_make_dirstream()

Conflicts:
Zend/zend_operators.c
ext/phar/dirstream.c
ext/phar/tests/bug71331.phpt

8 years agoFix memory leak in imagescale()
Stanislav Malyshev [Tue, 24 May 2016 23:12:01 +0000 (16:12 -0700)]
Fix memory leak in imagescale()

8 years agoUpdate NEWS
Stanislav Malyshev [Tue, 24 May 2016 22:56:02 +0000 (15:56 -0700)]
Update NEWS

8 years agoBetter fix for bug #72135
Stanislav Malyshev [Tue, 24 May 2016 22:52:15 +0000 (15:52 -0700)]
Better fix for bug #72135

8 years agoFixed bug #72227: imagescale out-of-bounds read
Stanislav Malyshev [Mon, 23 May 2016 07:28:02 +0000 (00:28 -0700)]
Fixed bug #72227: imagescale out-of-bounds read

Ported from https://github.com/libgd/libgd/commit/4f65a3e4eedaffa1efcf9ee1eb08f0b504fbc31a

8 years agoFix bug #72241: get_icu_value_internal out-of-bounds read
Stanislav Malyshev [Mon, 23 May 2016 00:49:02 +0000 (17:49 -0700)]
Fix bug #72241: get_icu_value_internal out-of-bounds read

8 years agoFixed bug #63740 (strtotime seems to use both sunday and monday as start of week)
Derick Rethans [Wed, 18 May 2016 11:19:11 +0000 (12:19 +0100)]
Fixed bug #63740 (strtotime seems to use both sunday and monday as start of week)

8 years agoFix bug #72135 - don't create strings with lengths outside int range
Stanislav Malyshev [Mon, 16 May 2016 06:26:51 +0000 (23:26 -0700)]
Fix bug #72135 - don't create strings with lengths outside int range

8 years agoprepare for 5.6.22RC1 php-5.6.22RC1
Ferenc Kovacs [Wed, 11 May 2016 21:34:15 +0000 (23:34 +0200)]
prepare for 5.6.22RC1

8 years agoprepare for 5.6.22RC1
Ferenc Kovacs [Wed, 11 May 2016 21:30:04 +0000 (23:30 +0200)]
prepare for 5.6.22RC1

8 years agoadd missing NEWS entry
Ferenc Kovacs [Wed, 11 May 2016 21:29:23 +0000 (23:29 +0200)]
add missing NEWS entry

8 years agofix handle leak
Anatol Belski [Tue, 10 May 2016 17:59:21 +0000 (19:59 +0200)]
fix handle leak

8 years agoThe "flock" structure has to be writable on AIX.
Dmitry Stogov [Tue, 10 May 2016 14:50:14 +0000 (17:50 +0300)]
The "flock" structure has to be writable on AIX.

8 years agoAdd check for string overflow to all string add operations
Stanislav Malyshev [Tue, 10 May 2016 05:17:20 +0000 (22:17 -0700)]
Add check for string overflow to all string add operations

8 years agoFix bug #72114 - int/size_t confusion in fread
Stanislav Malyshev [Tue, 10 May 2016 04:55:29 +0000 (21:55 -0700)]
Fix bug #72114 - int/size_t confusion in fread

8 years agoupdate NEWS
Anatol Belski [Mon, 9 May 2016 16:50:40 +0000 (18:50 +0200)]
update NEWS

8 years agoRevert "Backport patch for bug #71820"
Anatol Belski [Mon, 9 May 2016 15:15:40 +0000 (17:15 +0200)]
Revert "Backport patch for bug #71820"

This reverts commit 1b632cfe834bfd87d182566d7d960df7d10ded72.

This fixed bug #72151, and reverts the fix for bug #71820.
See also bug #50636 and #49521 for the history.

8 years agoFixed bug #64524 Add intl.use_exceptions to php.ini-*
Anatol Belski [Sun, 8 May 2016 13:09:50 +0000 (15:09 +0200)]
Fixed bug #64524 Add intl.use_exceptions to php.ini-*

8 years agoFixed bug #72172 (zend_hex_strtod should not use strlen)
Xinchen Hui [Sat, 7 May 2016 06:52:06 +0000 (23:52 -0700)]
Fixed bug #72172 (zend_hex_strtod should not use strlen)

8 years agoadd test fo rbug 71805
Anatol Belski [Tue, 3 May 2016 17:09:11 +0000 (19:09 +0200)]
add test fo rbug 71805

8 years agoupate libs versions
Anatol Belski [Tue, 3 May 2016 16:24:35 +0000 (18:24 +0200)]
upate libs versions

8 years agoUpdated NEWS
Julien Pauli [Mon, 2 May 2016 14:52:58 +0000 (16:52 +0200)]
Updated NEWS

8 years agoBackport of fixed for bug #71331 - Uninitialized pointer in phar_make_dirstream()
Julien Pauli [Mon, 2 May 2016 14:49:47 +0000 (16:49 +0200)]
Backport of fixed for bug #71331 - Uninitialized pointer in phar_make_dirstream()

8 years agoMerge branch 'PHP-5.5' into PHP-5.6
Anatol Belski [Sun, 1 May 2016 11:18:24 +0000 (13:18 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  Update PHP 5.5 NEWS entries with CVE info
  Added CVE
  Updated NEWS

8 years agoUpdate PHP 5.5 NEWS entries with CVE info
Lior Kaplan [Sun, 1 May 2016 11:14:57 +0000 (13:14 +0200)]
Update PHP 5.5 NEWS entries with CVE info

8 years agoAdd CVE to bug #69719 (PHP 5.6.10)
Lior Kaplan [Fri, 29 Apr 2016 10:23:41 +0000 (13:23 +0300)]
Add CVE to bug #69719 (PHP 5.6.10)

8 years agoAdd CVE IDs PHP 5.6.12
Lior Kaplan [Fri, 29 Apr 2016 10:21:35 +0000 (13:21 +0300)]
Add CVE IDs PHP 5.6.12

8 years agoAdd CVE IDs PHP 5.6.13
Lior Kaplan [Fri, 29 Apr 2016 10:19:46 +0000 (13:19 +0300)]
Add CVE IDs PHP 5.6.13

8 years agoAdd CVE IDs PHP 5.6.14
Lior Kaplan [Fri, 29 Apr 2016 10:17:34 +0000 (13:17 +0300)]
Add CVE IDs PHP 5.6.14

8 years agoAdd CVE to bug #70976 (PHP 5.6.17)
Lior Kaplan [Fri, 29 Apr 2016 10:16:27 +0000 (13:16 +0300)]
Add CVE to bug #70976 (PHP 5.6.17)

8 years agoAdd CVE IDs PHP 5.6.18
Lior Kaplan [Fri, 29 Apr 2016 10:15:30 +0000 (13:15 +0300)]
Add CVE IDs PHP 5.6.18

8 years agoAdd CVE IDs PHP 5.6.20
Lior Kaplan [Fri, 29 Apr 2016 10:11:54 +0000 (13:11 +0300)]
Add CVE IDs PHP 5.6.20

8 years agoAdd CVE to bug #71912 (PHP 5.6.21)
Lior Kaplan [Fri, 29 Apr 2016 10:10:13 +0000 (13:10 +0300)]
Add CVE to bug #71912 (PHP 5.6.21)

8 years agoAdded CVE
Julien Pauli [Fri, 29 Apr 2016 07:12:27 +0000 (09:12 +0200)]
Added CVE

8 years agoFixed bug #71331 - Uninitialized pointer in phar_make_dirstream()
Stanislav Malyshev [Fri, 15 Jan 2016 06:58:40 +0000 (22:58 -0800)]
Fixed bug #71331 - Uninitialized pointer in phar_make_dirstream()

8 years agoAdd NEWS entry for bug #71331 (fixed in PHP 5.6.18)
Lior Kaplan [Thu, 28 Apr 2016 17:46:29 +0000 (20:46 +0300)]
Add NEWS entry for bug #71331 (fixed in PHP 5.6.18)

8 years agosmall whitespace fix
Ferenc Kovacs [Thu, 28 Apr 2016 00:32:45 +0000 (02:32 +0200)]
small whitespace fix

8 years agoupdate NEWS
Anatol Belski [Wed, 27 Apr 2016 12:50:46 +0000 (14:50 +0200)]
update NEWS

8 years agofix/improve tests
Anatol Belski [Wed, 27 Apr 2016 11:16:57 +0000 (13:16 +0200)]
fix/improve tests

8 years agoUpdated NEWS
Julien Pauli [Wed, 27 Apr 2016 09:55:05 +0000 (11:55 +0200)]
Updated NEWS

8 years agoMerge branch 'PHP-5.5' into PHP-5.6
Stanislav Malyshev [Wed, 27 Apr 2016 06:48:41 +0000 (23:48 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  Fix memory leak
  Fix bug #72099: xml_parse_into_struct segmentation fault
  5.5.36 now
  Fix bug #72094 - Out of bounds heap read access in exif header processing
  Fix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definition
  Fix bug #72061 - Out-of-bounds reads in zif_grapheme_stripos with negative offset
  Fix for bug #71912 (libgd: signedness vulnerability)
  Typo in NEWS

Conflicts:
configure.in
main/php_version.h

8 years agoFix memory leak
Stanislav Malyshev [Wed, 27 Apr 2016 05:54:58 +0000 (22:54 -0700)]
Fix memory leak

8 years agoFix bug #72099: xml_parse_into_struct segmentation fault
Stanislav Malyshev [Mon, 25 Apr 2016 06:50:57 +0000 (23:50 -0700)]
Fix bug #72099: xml_parse_into_struct segmentation fault

8 years ago5.5.36 now
Julien Pauli [Tue, 26 Apr 2016 20:34:00 +0000 (22:34 +0200)]
5.5.36 now

8 years agoFixed test on 32-bit platforms (split into 32-bit and 64-bit versions)
Dmitry Stogov [Tue, 26 Apr 2016 10:43:18 +0000 (13:43 +0300)]
Fixed test on 32-bit platforms (split into 32-bit and 64-bit versions)

8 years agoFix bug #72094 - Out of bounds heap read access in exif header processing
Stanislav Malyshev [Mon, 25 Apr 2016 02:33:52 +0000 (19:33 -0700)]
Fix bug #72094 - Out of bounds heap read access in exif header processing

8 years agoFix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definition
Stanislav Malyshev [Mon, 25 Apr 2016 01:33:32 +0000 (18:33 -0700)]
Fix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definition

We can not modify result since it can be copy of _zero_ or _one_, etc. and
"copy" in bcmath is just bumping the refcount.

8 years agoFix bug #72061 - Out-of-bounds reads in zif_grapheme_stripos with negative offset
Stanislav Malyshev [Sun, 24 Apr 2016 19:49:01 +0000 (12:49 -0700)]
Fix bug #72061 - Out-of-bounds reads in zif_grapheme_stripos with negative offset

8 years agoFix ZTS builds by adding a missing TSRMLS_FETCH().
Adam Harvey [Tue, 19 Apr 2016 02:20:35 +0000 (19:20 -0700)]
Fix ZTS builds by adding a missing TSRMLS_FETCH().

8 years agoBetter fix for #71952
Stanislav Malyshev [Wed, 20 Apr 2016 06:44:00 +0000 (23:44 -0700)]
Better fix for #71952

8 years agoFix bug #71952: Corruption inside imageaffinematrixget
Stanislav Malyshev [Tue, 19 Apr 2016 06:31:03 +0000 (23:31 -0700)]
Fix bug #71952: Corruption inside imageaffinematrixget

8 years agoFix for bug #71912 (libgd: signedness vulnerability)
Stanislav Malyshev [Tue, 19 Apr 2016 05:20:22 +0000 (22:20 -0700)]
Fix for bug #71912 (libgd: signedness vulnerability)

8 years agoPrevent usage in GC after free.
Dmitry Stogov [Mon, 18 Apr 2016 22:31:49 +0000 (01:31 +0300)]
Prevent usage in GC after free.

8 years agomark frequent intermittent fpm test with XFAIL
Ferenc Kovacs [Mon, 18 Apr 2016 07:04:27 +0000 (09:04 +0200)]
mark frequent intermittent fpm test with XFAIL

8 years agoprepare for 5.6.21RC1
Ferenc Kovacs [Mon, 18 Apr 2016 06:14:16 +0000 (08:14 +0200)]
prepare for 5.6.21RC1

8 years agoAlign NEWS entry format
Lior Kaplan [Fri, 15 Apr 2016 19:07:47 +0000 (22:07 +0300)]
Align NEWS entry format

8 years agoFix old comment cut-n-paste error
Christopher Jones [Thu, 14 Apr 2016 05:08:42 +0000 (15:08 +1000)]
Fix old comment cut-n-paste error

8 years agoFixed bug #71422 (Fix ORA-01438: value larger than specified precision allowed for...
Christopher Jones [Thu, 14 Apr 2016 03:50:01 +0000 (13:50 +1000)]
Fixed bug #71422 (Fix ORA-01438: value larger than specified precision allowed for this column)

8 years agoopcache config.m4: Use = for comparison
Lior Kaplan [Fri, 8 Apr 2016 19:38:07 +0000 (22:38 +0300)]
opcache config.m4: Use = for comparison

8 years agoupdate NEWS
Anatol Belski [Tue, 5 Apr 2016 09:52:53 +0000 (11:52 +0200)]
update NEWS

8 years agoUse STR_EMPTY_ALLOC macro instead
Thomas Punt [Thu, 24 Mar 2016 11:09:59 +0000 (11:09 +0000)]
Use STR_EMPTY_ALLOC macro instead

8 years agoFix DateInterval::format segfault
Thomas Punt [Wed, 23 Mar 2016 23:57:50 +0000 (23:57 +0000)]
Fix DateInterval::format segfault

8 years agoFixed bug #71447 (Quotes inside comments not properly handled)
Matteo Beccati [Mon, 4 Apr 2016 21:45:10 +0000 (23:45 +0200)]
Fixed bug #71447 (Quotes inside comments not properly handled)

8 years agoFixed a few PDO tests to conform to PDO Common standards
Matteo Beccati [Mon, 4 Apr 2016 21:42:52 +0000 (23:42 +0200)]
Fixed a few PDO tests to conform to PDO Common standards

8 years agonews entry #69537
Joe Watkins [Mon, 4 Apr 2016 09:22:13 +0000 (10:22 +0100)]
news entry #69537

8 years agoFix #69537: __debugInfo with empty string for key gives error
Joe Watkins [Sun, 3 Apr 2016 11:40:29 +0000 (12:40 +0100)]
Fix #69537: __debugInfo with empty string for key gives error

8 years agoTypo in NEWS
Julien Pauli [Thu, 31 Mar 2016 15:45:07 +0000 (17:45 +0200)]
Typo in NEWS

8 years agoMerge branch 'PHP-5.5' into PHP-5.6
Anatol Belski [Wed, 30 Mar 2016 23:36:47 +0000 (01:36 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  fix borked mainstream patch
  5.5.35 now

8 years agofix borked mainstream patch
Anatol Belski [Wed, 30 Mar 2016 23:33:38 +0000 (01:33 +0200)]
fix borked mainstream patch

8 years agofix test to not to cause false positives
Anatol Belski [Wed, 30 Mar 2016 23:29:05 +0000 (01:29 +0200)]
fix test to not to cause false positives

8 years agoAlign NEWS entry format
Lior Kaplan [Wed, 30 Mar 2016 21:52:53 +0000 (00:52 +0300)]
Align NEWS entry format

8 years agoupdate NEWS
Ferenc Kovacs [Wed, 30 Mar 2016 20:28:28 +0000 (22:28 +0200)]
update NEWS

8 years ago5.5.35 now
Julien Pauli [Tue, 29 Mar 2016 16:11:03 +0000 (18:11 +0200)]
5.5.35 now

8 years agoMerge branch 'PHP-5.5' into PHP-5.6
Anatol Belski [Tue, 29 Mar 2016 12:19:35 +0000 (14:19 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  fix dir separator in test

8 years agofix dir separator in test
Anatol Belski [Tue, 29 Mar 2016 12:18:25 +0000 (14:18 +0200)]
fix dir separator in test

8 years agoFixed bug #71527 Buffer over-write in finfo_open with malformed magic file
Anatol Belski [Sun, 27 Mar 2016 22:45:19 +0000 (00:45 +0200)]
Fixed bug #71527 Buffer over-write in finfo_open with malformed magic file

The actual fix is applying the upstream patch from
https://github.com/file/file/commit/6713ca45e7757297381f4b4cdb9cf5e624a9ad36

8 years agoMerge branch 'PHP-5.5' into PHP-5.6
Anatol Belski [Tue, 29 Mar 2016 11:11:17 +0000 (13:11 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  Fixed bug #71527 Buffer over-write in finfo_open with malformed magic file

8 years agoFixed bug #71527 Buffer over-write in finfo_open with malformed magic file
Anatol Belski [Sun, 27 Mar 2016 22:45:19 +0000 (00:45 +0200)]
Fixed bug #71527 Buffer over-write in finfo_open with malformed magic file

The actual fix is applying the upstream patch from
https://github.com/file/file/commit/6713ca45e7757297381f4b4cdb9cf5e624a9ad36

8 years agoMerge branch 'PHP-5.5' into PHP-5.6
Stanislav Malyshev [Tue, 29 Mar 2016 06:45:15 +0000 (23:45 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  Fixed bug #71704 php_snmp_error() Format String Vulnerability

8 years agoFixed bug #71704 php_snmp_error() Format String Vulnerability
Anatol Belski [Wed, 16 Mar 2016 08:48:40 +0000 (09:48 +0100)]
Fixed bug #71704 php_snmp_error() Format String Vulnerability

Conflicts:
ext/snmp/snmp.c