]> granicus.if.org Git - php/log
php
9 years agoFix bug #64172
Daniel Persson [Sat, 26 Sep 2015 19:28:23 +0000 (21:28 +0200)]
Fix bug #64172

Check if the SQLSTATE error code is equal to PDO_ERR_NONE before we ask the driver.
And if no error is reported skip the extra call to the driver.

9 years agoSkip some tests for platforms different than x86
Fábio Perez [Fri, 16 Oct 2015 16:01:25 +0000 (13:01 -0300)]
Skip some tests for platforms different than x86

These tests are verifying undefined behaviour such as shifting by more than 63
bits and by negative numbers.

9 years agoSkip serialize test if ext/session is not loaded
Stanislav Malyshev [Sun, 18 Oct 2015 22:43:03 +0000 (15:43 -0700)]
Skip serialize test if ext/session is not loaded

9 years agoRemove wrong argument $session from SNMP::setSecurity()
jubianchi [Fri, 11 Sep 2015 16:13:23 +0000 (18:13 +0200)]
Remove wrong argument $session from SNMP::setSecurity()

9 years agoFix SNMP::setSecurity() arginfo (Fixes bug #70476)
jubianchi [Fri, 11 Sep 2015 15:54:31 +0000 (17:54 +0200)]
Fix SNMP::setSecurity() arginfo (Fixes bug #70476)

9 years agoupdate NEWS
Anatol Belski [Sun, 18 Oct 2015 09:34:42 +0000 (11:34 +0200)]
update NEWS

9 years agoC89 compat
Anatol Belski [Sun, 18 Oct 2015 09:14:30 +0000 (11:14 +0200)]
C89 compat

9 years agouse spprintf instead (no need to estrdup afterwards).
MiRacLe.RPZ [Sat, 17 Oct 2015 21:31:38 +0000 (00:31 +0300)]
use spprintf instead (no need to estrdup afterwards).

9 years agodblib's dbcolname can return null in some cases
MiRacLe.RPZ [Wed, 2 Sep 2015 19:36:14 +0000 (22:36 +0300)]
dblib's dbcolname can return null in some cases

9 years agotestcase fot bug #69757
MiRacLe.RPZ [Mon, 6 Jul 2015 20:31:57 +0000 (23:31 +0300)]
testcase fot bug #69757

9 years agoSegmentation fault on pdo_dblib::nextRowset (bug #69757)
MiRacLe.RPZ [Fri, 3 Jul 2015 07:28:06 +0000 (10:28 +0300)]
Segmentation fault on pdo_dblib::nextRowset (bug #69757)

9 years agoprepare for 5.6.15RC1
Ferenc Kovacs [Wed, 14 Oct 2015 22:22:12 +0000 (00:22 +0200)]
prepare for 5.6.15RC1

9 years agofix test
Anatol Belski [Wed, 30 Sep 2015 10:18:32 +0000 (12:18 +0200)]
fix test

9 years agoFixed bug #70685
Nikita Popov [Sat, 10 Oct 2015 12:54:14 +0000 (14:54 +0200)]
Fixed bug #70685

Doing a less intrusive variant of the PHP 7.0 fix for 5.6.

9 years agoImprove previous fix
Nikita Popov [Fri, 9 Oct 2015 21:28:24 +0000 (23:28 +0200)]
Improve previous fix

Don't forbid null binding on plain functions.

9 years agoFixed bug #70681
Nikita Popov [Fri, 9 Oct 2015 21:01:23 +0000 (23:01 +0200)]
Fixed bug #70681

9 years agoupdate NEWS
Anatol Belski [Fri, 9 Oct 2015 10:35:06 +0000 (12:35 +0200)]
update NEWS

9 years agofix coverage report for datelib
Nuno Lopes [Sun, 4 Oct 2015 09:45:05 +0000 (05:45 -0400)]
fix coverage report for datelib

9 years agoFixed bug #70632 (Third one of segfault in gc_remove_from_buffer)
Xinchen Hui [Sun, 4 Oct 2015 03:33:24 +0000 (20:33 -0700)]
Fixed bug #70632 (Third one of segfault in gc_remove_from_buffer)

9 years agoFixed the third one of (segfault in gc_remove_from_buffer())
Xinchen Hui [Sun, 4 Oct 2015 03:14:55 +0000 (20:14 -0700)]
Fixed the third one of (segfault in gc_remove_from_buffer())

This one maybe only used in debug mode, so no bug report and no test
script provided

9 years agoFixed bug #70631 (Another Segfault in gc_remove_from_buffer())
Xinchen Hui [Sun, 4 Oct 2015 03:08:21 +0000 (20:08 -0700)]
Fixed bug #70631 (Another Segfault in gc_remove_from_buffer())

9 years agoDo not edit the zval cause it might be in shared memory
Xinchen Hui [Sun, 4 Oct 2015 02:50:38 +0000 (19:50 -0700)]
Do not edit the zval cause it might be  in shared memory

9 years agoFixed bug #70601 (Segfault in gc_remove_from_buffer())
Xinchen Hui [Sun, 4 Oct 2015 02:38:56 +0000 (19:38 -0700)]
Fixed bug #70601 (Segfault in gc_remove_from_buffer())

9 years agofix win10 support
Anatol Belski [Sat, 3 Oct 2015 08:44:43 +0000 (10:44 +0200)]
fix win10 support

dwMajorVersion == 10 there, and generally this check is obsolete
as we don't support dwMajorVersion < 6 since 5.5

9 years agoFixed bug #70625
Nikita Popov [Sat, 3 Oct 2015 08:12:11 +0000 (10:12 +0200)]
Fixed bug #70625

9 years agoMerge branch 'pr-1544' into PHP-5.6
Ferenc Kovacs [Fri, 2 Oct 2015 19:48:33 +0000 (21:48 +0200)]
Merge branch 'pr-1544' into PHP-5.6

* pr-1544:
  Update NEWS file with LDAP fixes

9 years agoUpdated to version 2015.7 (2015g)
Derick Rethans [Fri, 2 Oct 2015 17:12:16 +0000 (18:12 +0100)]
Updated to version 2015.7 (2015g)

9 years agoFixed bug #70619 (DateTimeImmutable segfault)
Xinchen Hui [Fri, 2 Oct 2015 14:19:21 +0000 (07:19 -0700)]
Fixed bug #70619 (DateTimeImmutable segfault)

9 years agoMerge branch 'PHP-5.5' into PHP-5.6
Julien Pauli [Wed, 30 Sep 2015 11:19:18 +0000 (13:19 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  Fixed test
  5.5.31 now

Conflicts:
configure.in
main/php_version.h

9 years agoFixed test
Julien Pauli [Wed, 30 Sep 2015 11:18:16 +0000 (13:18 +0200)]
Fixed test

9 years ago5.5.31 now
Julien Pauli [Wed, 30 Sep 2015 11:01:11 +0000 (13:01 +0200)]
5.5.31 now

9 years agoAdd JSON as exported type, if available. mysqlnd has it, libmysql doesn't export...
Andrey Hristov [Wed, 30 Sep 2015 07:02:11 +0000 (09:02 +0200)]
Add JSON as exported type, if available. mysqlnd has it, libmysql doesn't export it (for now).

9 years agoupdate NEWS, these missed 5.6.14RC1 as I was not asked to include them so delaying...
Ferenc Kovacs [Tue, 29 Sep 2015 23:28:39 +0000 (01:28 +0200)]
update NEWS, these missed 5.6.14RC1 as I was not asked to include them so delaying for the next release

9 years agoadd NEWS entries
Ferenc Kovacs [Tue, 29 Sep 2015 23:16:43 +0000 (01:16 +0200)]
add NEWS entries

9 years agoMerge branch 'PHP-5.5' into PHP-5.6
Ferenc Kovacs [Tue, 29 Sep 2015 23:15:54 +0000 (01:15 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  add NEWS entries

9 years agoadd NEWS entries
Ferenc Kovacs [Tue, 29 Sep 2015 23:15:24 +0000 (01:15 +0200)]
add NEWS entries

9 years agoMerge branch 'PHP-5.5' into PHP-5.6
Stanislav Malyshev [Tue, 29 Sep 2015 04:42:08 +0000 (21:42 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  Better fix for bug #70433

Conflicts:
ext/phar/dirstream.c

9 years agoBetter fix for bug #70433
Stanislav Malyshev [Tue, 29 Sep 2015 04:37:26 +0000 (21:37 -0700)]
Better fix for bug #70433

9 years agoMerge branch 'PHP-5.5' into PHP-5.6
Stanislav Malyshev [Tue, 29 Sep 2015 03:44:28 +0000 (20:44 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  fix memory leak
  FIx bug #70433 - Uninitialized pointer in phar_make_dirstream when zip entry filename is "/"

Conflicts:
ext/phar/dirstream.c

9 years agofix memory leak
Stanislav Malyshev [Tue, 29 Sep 2015 03:43:18 +0000 (20:43 -0700)]
fix memory leak

9 years agoFIx bug #70433 - Uninitialized pointer in phar_make_dirstream when zip entry filename...
Stanislav Malyshev [Tue, 29 Sep 2015 00:12:35 +0000 (17:12 -0700)]
FIx bug #70433 - Uninitialized pointer in phar_make_dirstream when zip entry filename is "/"

9 years agoMerge branch 'PHP-5.5' into PHP-5.6
Stanislav Malyshev [Mon, 28 Sep 2015 23:59:46 +0000 (16:59 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  Fix bug #69720: Null pointer dereference in phar_get_fp_offset()

9 years agoFix bug #69720: Null pointer dereference in phar_get_fp_offset()
Stanislav Malyshev [Mon, 28 Sep 2015 22:51:59 +0000 (15:51 -0700)]
Fix bug #69720: Null pointer dereference in phar_get_fp_offset()

9 years agoUpdate NEWS file with LDAP fixes
Misha Nasledov [Mon, 28 Sep 2015 19:59:16 +0000 (12:59 -0700)]
Update NEWS file with LDAP fixes

9 years agoFix bug #70480 (php_url_parse_ex() buffer overflow read)
Stanislav Malyshev [Mon, 28 Sep 2015 18:31:14 +0000 (11:31 -0700)]
Fix bug #70480 (php_url_parse_ex() buffer overflow read)

9 years agoFixed bug #70572 segfault in mysqlnd_connect
Andrey Hristov [Fri, 25 Sep 2015 12:06:28 +0000 (14:06 +0200)]
Fixed bug #70572 segfault in mysqlnd_connect

9 years agoSpread the news about 70384
Andrey Hristov [Wed, 23 Sep 2015 16:35:45 +0000 (18:35 +0200)]
Spread the news about 70384

9 years agoupdate NEWS
Anatol Belski [Wed, 23 Sep 2015 18:00:38 +0000 (20:00 +0200)]
update NEWS

9 years agoadd test
Anatol Belski [Wed, 23 Sep 2015 06:56:26 +0000 (08:56 +0200)]
add test

9 years agoexpose openssl config path so it can be tested
Anatol Belski [Wed, 23 Sep 2015 06:41:33 +0000 (08:41 +0200)]
expose openssl config path so it can be tested

9 years agoFix for Bug #70384 mysqli_real_query(): Unknown type 245 sent by the server
Andrey Hristov [Wed, 23 Sep 2015 15:27:18 +0000 (17:27 +0200)]
Fix for Bug #70384  mysqli_real_query(): Unknown type 245 sent by the server

9 years agoadd missing header
Anatol Belski [Wed, 23 Sep 2015 12:01:59 +0000 (14:01 +0200)]
add missing header

For PRIu32 and maybe more, that fixes build

9 years agosilence mkdir to fix fails after unclean test run
Anatol Belski [Thu, 17 Sep 2015 06:39:38 +0000 (08:39 +0200)]
silence mkdir to fix fails after unclean test run

9 years agoUpdate timelib to 2015.02
Derick Rethans [Tue, 22 Sep 2015 07:59:45 +0000 (08:59 +0100)]
Update timelib to 2015.02

9 years agoFixed test cases due to changes in rules
Derick Rethans [Tue, 22 Sep 2015 07:42:12 +0000 (08:42 +0100)]
Fixed test cases due to changes in rules

9 years agoBumb timelib version to 2015.01
Derick Rethans [Tue, 22 Sep 2015 07:41:56 +0000 (08:41 +0100)]
Bumb timelib version to 2015.01

9 years agoUse tabs for arg info indent in openssl.c
Jakub Zelenka [Sun, 20 Sep 2015 11:34:35 +0000 (12:34 +0100)]
Use tabs for arg info indent in openssl.c

9 years agoprepare for PHP-5.6.14RC1
Ferenc Kovacs [Wed, 16 Sep 2015 23:48:02 +0000 (01:48 +0200)]
prepare for PHP-5.6.14RC1

9 years agoAdd test XFAIL for bug #70470
Xinchen Hui [Fri, 11 Sep 2015 05:45:18 +0000 (13:45 +0800)]
Add test XFAIL for bug #70470

9 years agoAdded support of LDAP_OPT_TIMEOUT, fixes #69574
Côme Bernigaud [Wed, 9 Sep 2015 16:02:10 +0000 (18:02 +0200)]
Added support of LDAP_OPT_TIMEOUT, fixes #69574

9 years agoAdd entry for #70284 in 5.6.13
Lior Kaplan [Wed, 9 Sep 2015 11:20:04 +0000 (14:20 +0300)]
Add entry for #70284 in 5.6.13

9 years agoMerge branch 'PHP-5.5' into PHP-5.6
Côme Bernigaud [Wed, 9 Sep 2015 08:34:46 +0000 (10:34 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  Fix bug in LDAP extensions' saving TIMELIMIT and DEREF

9 years agoMerge branch 'pull-request/1512' into PHP-5.5
Côme Bernigaud [Wed, 9 Sep 2015 08:30:17 +0000 (10:30 +0200)]
Merge branch 'pull-request/1512' into PHP-5.5

* pull-request/1512:
  Fix bug in LDAP extensions' saving TIMELIMIT and DEREF

9 years agoSkip test for old glibc iconv
Christoph M. Becker [Wed, 9 Sep 2015 02:27:28 +0000 (04:27 +0200)]
Skip test for old glibc iconv

bug32001.phpt has a high failure rate for the submitted reports. According to
several samples it seems the iconv implementation of glibc 2.12 (released
2010-05) is the culprit. It seems appropriate to skip the test for such old
versions.

9 years agoFix bug in LDAP extensions' saving TIMELIMIT and DEREF
Tyson Andre [Tue, 8 Sep 2015 22:24:09 +0000 (15:24 -0700)]
Fix bug in LDAP extensions' saving TIMELIMIT and DEREF

LDAP_OPT_TIMELIMIT and LDAP_OPT_DEREF's original values weren't
saved properly because of a bug introduced when copy and pasting.

This lead to the original timeout being changed
when specifying a temporary override (e.g. for ldap_search(..., $timeout))

9 years agoupdated NEWS
Christoph M. Becker [Wed, 9 Sep 2015 01:12:59 +0000 (03:12 +0200)]
updated NEWS

9 years agoFix #70456: mysqlnd doesn't activate TCP keep-alive when connecting to a server
Sergei Turchanov [Thu, 3 Sep 2015 07:24:34 +0000 (17:24 +1000)]
Fix #70456: mysqlnd doesn't activate TCP keep-alive when connecting to a server

libmysqlclient activates TCP keep-alive when connecting to a server. PHP
mysqlnd extension must do the same to maintain compatibility.

9 years agoFix build
Remi Collet [Mon, 7 Sep 2015 11:52:28 +0000 (13:52 +0200)]
Fix build

php_zip.c:1647:2: warning: suggest parentheses around assignment used as truth value [-Wparentheses]
php_zip.c:1648:3: error: format not a string literal and no format arguments [-Werror=format-security]

9 years agoFix bug #60632: openssl_seal fails with AES
Jakub Zelenka [Sun, 6 Sep 2015 15:39:59 +0000 (16:39 +0100)]
Fix bug #60632: openssl_seal fails with AES

9 years agoupdated NEWS
Christoph M. Becker [Sat, 5 Sep 2015 12:39:24 +0000 (14:39 +0200)]
updated NEWS

9 years agoFix #68291: 404 on urls with '+'
Christoph M. Becker [Sat, 5 Sep 2015 11:52:41 +0000 (13:52 +0200)]
Fix #68291: 404 on urls with '+'

URI paths have to be treated according to RFC 3986 by the CLI web server, not
as application/x-www-form-urlencoded.

9 years agoupdated NEWS
Christoph M. Becker [Sat, 5 Sep 2015 01:14:56 +0000 (03:14 +0200)]
updated NEWS

9 years agoFix #70395: Missing ARG_INFO for openssl_seal()
Christoph M. Becker [Tue, 1 Sep 2015 23:13:49 +0000 (01:13 +0200)]
Fix #70395: Missing ARG_INFO for openssl_seal()

This patch adds the missing ARG_INFO for the optional 5th parameter $method.

9 years agoupdated NEWS
Christoph M. Becker [Fri, 4 Sep 2015 23:27:59 +0000 (01:27 +0200)]
updated NEWS

9 years agoFix #70001: Assigning to DOMNode::textContent does additional entity encoding
Christoph M. Becker [Tue, 7 Jul 2015 12:55:00 +0000 (14:55 +0200)]
Fix #70001: Assigning to DOMNode::textContent does additional entity encoding

Assigning to DOMNode::textContent encodes entities, what does not match the
behavior of DOMText::__construct() and DOMDocument::createTextNode. This patch
changes the behavior of DOMNode::textContent in this regard.

9 years agoupdated NEWS
Christoph M. Becker [Fri, 4 Sep 2015 22:37:08 +0000 (00:37 +0200)]
updated NEWS

9 years agoFix #70322: ZipArchive::close() doesn't indicate errors
Christoph M. Becker [Fri, 21 Aug 2015 20:26:26 +0000 (22:26 +0200)]
Fix #70322: ZipArchive::close() doesn't indicate errors

If an archive can't be written, ZipArchive::close() nonetheless returns TRUE.
We fix the return value to properly return success, and additionally raise a
warning on failure.

9 years agoFix #70361: HTTP stream wrapper doesn't close keep-alive connections
Niklas Keller [Tue, 25 Aug 2015 18:07:20 +0000 (20:07 +0200)]
Fix #70361: HTTP stream wrapper doesn't close keep-alive connections

9 years agomove the phpdbg NEWS entry to the correct version
Ferenc Kovacs [Wed, 2 Sep 2015 23:58:13 +0000 (01:58 +0200)]
move the phpdbg NEWS entry to the correct version

9 years agoadd missing news entries
Ferenc Kovacs [Wed, 2 Sep 2015 23:46:38 +0000 (01:46 +0200)]
add missing news entries

9 years agoMerge branch 'PHP-5.5' into PHP-5.6
Julien Pauli [Wed, 2 Sep 2015 15:55:57 +0000 (17:55 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  Merge branch 'PHP-5.6'
  bump version

9 years agoMerge branch 'PHP-5.4' into PHP-5.5
Julien Pauli [Wed, 2 Sep 2015 15:55:20 +0000 (17:55 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  Merge branch 'PHP-5.6'
  bump version

Conflicts:
configure.in
main/php_version.h

9 years agoMerge branch 'PHP-5.6' PHP-5.4
Matteo Beccati [Sat, 29 Aug 2015 08:48:53 +0000 (10:48 +0200)]
Merge branch 'PHP-5.6'

* PHP-5.6:
  Added missing skipif for phar+zlib test

9 years agoMerge branch 'PHP-5.5' into PHP-5.6
Julien Pauli [Wed, 2 Sep 2015 15:42:00 +0000 (17:42 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  5.5.30 next

Conflicts:
configure.in
main/php_version.h

9 years ago5.5.30 next
Julien Pauli [Wed, 2 Sep 2015 15:40:56 +0000 (17:40 +0200)]
5.5.30 next

9 years agobump version
Stanislav Malyshev [Tue, 1 Sep 2015 20:12:16 +0000 (13:12 -0700)]
bump version

9 years agoMerge branch 'PHP-5.5' into PHP-5.6
Stanislav Malyshev [Tue, 1 Sep 2015 19:51:48 +0000 (12:51 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  More fixes for bug #70219

9 years agoMerge branch 'PHP-5.5' into PHP-5.6
Stanislav Malyshev [Tue, 1 Sep 2015 19:24:14 +0000 (12:24 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  fix unit tests

9 years agoMerge branch 'PHP-5.5' into PHP-5.5.29
Stanislav Malyshev [Tue, 1 Sep 2015 19:24:06 +0000 (12:24 -0700)]
Merge branch 'PHP-5.5' into PHP-5.5.29

* PHP-5.5:
  fix unit tests

9 years agoMerge branch 'PHP-5.4' into PHP-5.5
Stanislav Malyshev [Tue, 1 Sep 2015 19:23:55 +0000 (12:23 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  fix unit tests

9 years agofix unit tests
Stanislav Malyshev [Tue, 1 Sep 2015 19:23:22 +0000 (12:23 -0700)]
fix unit tests

9 years agoMerge branch 'PHP-5.5' into PHP-5.6
Stanislav Malyshev [Tue, 1 Sep 2015 19:06:41 +0000 (12:06 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  update NEWS
  add NEWS for fixes
  Improve fix for #70172
  Fix bug #70312 - HAVAL gives wrong hashes in specific cases
  fix test
  add test
  Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
  Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
  Fix bug #70172 - Use After Free Vulnerability in unserialize()
  Fix bug #70388 - SOAP serialize_function_call() type confusion
  Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
  Improve fix for #70385
  Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
  Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
  Fix bug #70219 (Use after free vulnerability in session deserializer)
  Fix for bug #69782
  Add CVE IDs asigned (post release) to PHP 5.4.43
  Add CVE IDs asigned to #69085 (PHP 5.4.39)
  5.4.45 next

Conflicts:
ext/pcre/php_pcre.c
ext/standard/var_unserializer.c
ext/standard/var_unserializer.re
ext/zip/php_zip.c

9 years agoMerge branch '70284' into PHP-5.6
Stanislav Malyshev [Tue, 1 Sep 2015 19:05:02 +0000 (12:05 -0700)]
Merge branch '70284' into PHP-5.6

* 70284:
  Fix bug ##70284 (Use after free vulnerability in unserialize() with GMP)

9 years agoMerge branch 'PHP-5.5' into PHP-5.5.29
Stanislav Malyshev [Tue, 1 Sep 2015 19:04:04 +0000 (12:04 -0700)]
Merge branch 'PHP-5.5' into PHP-5.5.29

* PHP-5.5:
  update NEWS
  add NEWS for fixes

9 years agoupdate NEWS
Stanislav Malyshev [Tue, 1 Sep 2015 19:03:48 +0000 (12:03 -0700)]
update NEWS

9 years agoMerge branch 'PHP-5.4' into PHP-5.5
Stanislav Malyshev [Tue, 1 Sep 2015 19:00:30 +0000 (12:00 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  add NEWS for fixes

9 years agoadd NEWS for fixes
Stanislav Malyshev [Tue, 1 Sep 2015 18:53:59 +0000 (11:53 -0700)]
add NEWS for fixes

9 years agoMerge branch 'PHP-5.5' into PHP-5.5.29
Stanislav Malyshev [Tue, 1 Sep 2015 18:43:27 +0000 (11:43 -0700)]
Merge branch 'PHP-5.5' into PHP-5.5.29

* PHP-5.5:
  Improve fix for #70172
  Add CVE IDs asigned (post release) to PHP 5.4.43
  Add CVE IDs asigned to #69085 (PHP 5.4.39)

Conflicts:
ext/pcre/php_pcre.c

9 years agoMerge branch 'PHP-5.4' into PHP-5.5
Stanislav Malyshev [Tue, 1 Sep 2015 18:42:19 +0000 (11:42 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  Improve fix for #70172
  Fix bug #70312 - HAVAL gives wrong hashes in specific cases
  fix test
  add test
  Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
  Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
  Fix bug #70172 - Use After Free Vulnerability in unserialize()
  Fix bug #70388 - SOAP serialize_function_call() type confusion
  Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
  Improve fix for #70385
  Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
  Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
  Fix bug #70219 (Use after free vulnerability in session deserializer)
  Fix for bug #69782
  Add CVE IDs asigned (post release) to PHP 5.4.43
  Add CVE IDs asigned to #69085 (PHP 5.4.39)
  5.4.45 next

Conflicts:
configure.in
ext/pcre/php_pcre.c
ext/standard/var_unserializer.c
ext/standard/var_unserializer.re
main/php_version.h

9 years agoMerge branch 'PHP-5.4.45' into PHP-5.4
Stanislav Malyshev [Tue, 1 Sep 2015 18:40:15 +0000 (11:40 -0700)]
Merge branch 'PHP-5.4.45' into PHP-5.4

* PHP-5.4.45:
  Improve fix for #70172
  Fix bug #70312 - HAVAL gives wrong hashes in specific cases
  fix test
  add test
  Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
  Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
  Fix bug #70172 - Use After Free Vulnerability in unserialize()
  Fix bug #70388 - SOAP serialize_function_call() type confusion
  Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
  Improve fix for #70385
  Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
  Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
  Fix bug #70219 (Use after free vulnerability in session deserializer)
  Fix for bug #69782