]>
granicus.if.org Git - php/log
Daniel Persson [Sat, 26 Sep 2015 19:28:23 +0000 (21:28 +0200)]
Fix bug #64172
Check if the SQLSTATE error code is equal to PDO_ERR_NONE before we ask the driver.
And if no error is reported skip the extra call to the driver.
Fábio Perez [Fri, 16 Oct 2015 16:01:25 +0000 (13:01 -0300)]
Skip some tests for platforms different than x86
These tests are verifying undefined behaviour such as shifting by more than 63
bits and by negative numbers.
Stanislav Malyshev [Sun, 18 Oct 2015 22:43:03 +0000 (15:43 -0700)]
Skip serialize test if ext/session is not loaded
jubianchi [Fri, 11 Sep 2015 16:13:23 +0000 (18:13 +0200)]
Remove wrong argument $session from SNMP::setSecurity()
jubianchi [Fri, 11 Sep 2015 15:54:31 +0000 (17:54 +0200)]
Fix SNMP::setSecurity() arginfo (Fixes bug #70476)
Anatol Belski [Sun, 18 Oct 2015 09:34:42 +0000 (11:34 +0200)]
update NEWS
Anatol Belski [Sun, 18 Oct 2015 09:14:30 +0000 (11:14 +0200)]
C89 compat
MiRacLe.RPZ [Sat, 17 Oct 2015 21:31:38 +0000 (00:31 +0300)]
use spprintf instead (no need to estrdup afterwards).
MiRacLe.RPZ [Wed, 2 Sep 2015 19:36:14 +0000 (22:36 +0300)]
dblib's dbcolname can return null in some cases
MiRacLe.RPZ [Mon, 6 Jul 2015 20:31:57 +0000 (23:31 +0300)]
testcase fot bug #69757
MiRacLe.RPZ [Fri, 3 Jul 2015 07:28:06 +0000 (10:28 +0300)]
Segmentation fault on pdo_dblib::nextRowset (bug #69757)
Ferenc Kovacs [Wed, 14 Oct 2015 22:22:12 +0000 (00:22 +0200)]
prepare for 5.6.15RC1
Anatol Belski [Wed, 30 Sep 2015 10:18:32 +0000 (12:18 +0200)]
fix test
Nikita Popov [Sat, 10 Oct 2015 12:54:14 +0000 (14:54 +0200)]
Fixed bug #70685
Doing a less intrusive variant of the PHP 7.0 fix for 5.6.
Nikita Popov [Fri, 9 Oct 2015 21:28:24 +0000 (23:28 +0200)]
Improve previous fix
Don't forbid null binding on plain functions.
Nikita Popov [Fri, 9 Oct 2015 21:01:23 +0000 (23:01 +0200)]
Fixed bug #70681
Anatol Belski [Fri, 9 Oct 2015 10:35:06 +0000 (12:35 +0200)]
update NEWS
Nuno Lopes [Sun, 4 Oct 2015 09:45:05 +0000 (05:45 -0400)]
fix coverage report for datelib
Xinchen Hui [Sun, 4 Oct 2015 03:33:24 +0000 (20:33 -0700)]
Fixed bug #70632 (Third one of segfault in gc_remove_from_buffer)
Xinchen Hui [Sun, 4 Oct 2015 03:14:55 +0000 (20:14 -0700)]
Fixed the third one of (segfault in gc_remove_from_buffer())
This one maybe only used in debug mode, so no bug report and no test
script provided
Xinchen Hui [Sun, 4 Oct 2015 03:08:21 +0000 (20:08 -0700)]
Fixed bug #70631 (Another Segfault in gc_remove_from_buffer())
Xinchen Hui [Sun, 4 Oct 2015 02:50:38 +0000 (19:50 -0700)]
Do not edit the zval cause it might be in shared memory
Xinchen Hui [Sun, 4 Oct 2015 02:38:56 +0000 (19:38 -0700)]
Fixed bug #70601 (Segfault in gc_remove_from_buffer())
Anatol Belski [Sat, 3 Oct 2015 08:44:43 +0000 (10:44 +0200)]
fix win10 support
dwMajorVersion == 10 there, and generally this check is obsolete
as we don't support dwMajorVersion < 6 since 5.5
Nikita Popov [Sat, 3 Oct 2015 08:12:11 +0000 (10:12 +0200)]
Fixed bug #70625
Ferenc Kovacs [Fri, 2 Oct 2015 19:48:33 +0000 (21:48 +0200)]
Merge branch 'pr-1544' into PHP-5.6
* pr-1544:
Update NEWS file with LDAP fixes
Derick Rethans [Fri, 2 Oct 2015 17:12:16 +0000 (18:12 +0100)]
Updated to version 2015.7 (2015g)
Xinchen Hui [Fri, 2 Oct 2015 14:19:21 +0000 (07:19 -0700)]
Fixed bug #70619 (DateTimeImmutable segfault)
Julien Pauli [Wed, 30 Sep 2015 11:19:18 +0000 (13:19 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Fixed test
5.5.31 now
Conflicts:
configure.in
main/php_version.h
Julien Pauli [Wed, 30 Sep 2015 11:18:16 +0000 (13:18 +0200)]
Fixed test
Julien Pauli [Wed, 30 Sep 2015 11:01:11 +0000 (13:01 +0200)]
5.5.31 now
Andrey Hristov [Wed, 30 Sep 2015 07:02:11 +0000 (09:02 +0200)]
Add JSON as exported type, if available. mysqlnd has it, libmysql doesn't export it (for now).
Ferenc Kovacs [Tue, 29 Sep 2015 23:28:39 +0000 (01:28 +0200)]
update NEWS, these missed 5.6.14RC1 as I was not asked to include them so delaying for the next release
Ferenc Kovacs [Tue, 29 Sep 2015 23:16:43 +0000 (01:16 +0200)]
add NEWS entries
Ferenc Kovacs [Tue, 29 Sep 2015 23:15:54 +0000 (01:15 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
add NEWS entries
Ferenc Kovacs [Tue, 29 Sep 2015 23:15:24 +0000 (01:15 +0200)]
add NEWS entries
Stanislav Malyshev [Tue, 29 Sep 2015 04:42:08 +0000 (21:42 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Better fix for bug #70433
Conflicts:
ext/phar/dirstream.c
Stanislav Malyshev [Tue, 29 Sep 2015 04:37:26 +0000 (21:37 -0700)]
Better fix for bug #70433
Stanislav Malyshev [Tue, 29 Sep 2015 03:44:28 +0000 (20:44 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
fix memory leak
FIx bug #70433 - Uninitialized pointer in phar_make_dirstream when zip entry filename is "/"
Conflicts:
ext/phar/dirstream.c
Stanislav Malyshev [Tue, 29 Sep 2015 03:43:18 +0000 (20:43 -0700)]
fix memory leak
Stanislav Malyshev [Tue, 29 Sep 2015 00:12:35 +0000 (17:12 -0700)]
FIx bug #70433 - Uninitialized pointer in phar_make_dirstream when zip entry filename is "/"
Stanislav Malyshev [Mon, 28 Sep 2015 23:59:46 +0000 (16:59 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Fix bug #69720: Null pointer dereference in phar_get_fp_offset()
Stanislav Malyshev [Mon, 28 Sep 2015 22:51:59 +0000 (15:51 -0700)]
Fix bug #69720: Null pointer dereference in phar_get_fp_offset()
Misha Nasledov [Mon, 28 Sep 2015 19:59:16 +0000 (12:59 -0700)]
Update NEWS file with LDAP fixes
Stanislav Malyshev [Mon, 28 Sep 2015 18:31:14 +0000 (11:31 -0700)]
Fix bug #70480 (php_url_parse_ex() buffer overflow read)
Andrey Hristov [Fri, 25 Sep 2015 12:06:28 +0000 (14:06 +0200)]
Fixed bug #70572 segfault in mysqlnd_connect
Andrey Hristov [Wed, 23 Sep 2015 16:35:45 +0000 (18:35 +0200)]
Spread the news about 70384
Anatol Belski [Wed, 23 Sep 2015 18:00:38 +0000 (20:00 +0200)]
update NEWS
Anatol Belski [Wed, 23 Sep 2015 06:56:26 +0000 (08:56 +0200)]
add test
Anatol Belski [Wed, 23 Sep 2015 06:41:33 +0000 (08:41 +0200)]
expose openssl config path so it can be tested
Andrey Hristov [Wed, 23 Sep 2015 15:27:18 +0000 (17:27 +0200)]
Fix for Bug #70384 mysqli_real_query(): Unknown type 245 sent by the server
Anatol Belski [Wed, 23 Sep 2015 12:01:59 +0000 (14:01 +0200)]
add missing header
For PRIu32 and maybe more, that fixes build
Anatol Belski [Thu, 17 Sep 2015 06:39:38 +0000 (08:39 +0200)]
silence mkdir to fix fails after unclean test run
Derick Rethans [Tue, 22 Sep 2015 07:59:45 +0000 (08:59 +0100)]
Update timelib to 2015.02
Derick Rethans [Tue, 22 Sep 2015 07:42:12 +0000 (08:42 +0100)]
Fixed test cases due to changes in rules
Derick Rethans [Tue, 22 Sep 2015 07:41:56 +0000 (08:41 +0100)]
Bumb timelib version to 2015.01
Jakub Zelenka [Sun, 20 Sep 2015 11:34:35 +0000 (12:34 +0100)]
Use tabs for arg info indent in openssl.c
Ferenc Kovacs [Wed, 16 Sep 2015 23:48:02 +0000 (01:48 +0200)]
prepare for PHP-5.6.14RC1
Xinchen Hui [Fri, 11 Sep 2015 05:45:18 +0000 (13:45 +0800)]
Add test XFAIL for bug #70470
Côme Bernigaud [Wed, 9 Sep 2015 16:02:10 +0000 (18:02 +0200)]
Added support of LDAP_OPT_TIMEOUT, fixes #69574
Lior Kaplan [Wed, 9 Sep 2015 11:20:04 +0000 (14:20 +0300)]
Add entry for #70284 in 5.6.13
Côme Bernigaud [Wed, 9 Sep 2015 08:34:46 +0000 (10:34 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Fix bug in LDAP extensions' saving TIMELIMIT and DEREF
Côme Bernigaud [Wed, 9 Sep 2015 08:30:17 +0000 (10:30 +0200)]
Merge branch 'pull-request/1512' into PHP-5.5
* pull-request/1512:
Fix bug in LDAP extensions' saving TIMELIMIT and DEREF
Christoph M. Becker [Wed, 9 Sep 2015 02:27:28 +0000 (04:27 +0200)]
Skip test for old glibc iconv
bug32001.phpt has a high failure rate for the submitted reports. According to
several samples it seems the iconv implementation of glibc 2.12 (released
2010-05) is the culprit. It seems appropriate to skip the test for such old
versions.
Tyson Andre [Tue, 8 Sep 2015 22:24:09 +0000 (15:24 -0700)]
Fix bug in LDAP extensions' saving TIMELIMIT and DEREF
LDAP_OPT_TIMELIMIT and LDAP_OPT_DEREF's original values weren't
saved properly because of a bug introduced when copy and pasting.
This lead to the original timeout being changed
when specifying a temporary override (e.g. for ldap_search(..., $timeout))
Christoph M. Becker [Wed, 9 Sep 2015 01:12:59 +0000 (03:12 +0200)]
updated NEWS
Sergei Turchanov [Thu, 3 Sep 2015 07:24:34 +0000 (17:24 +1000)]
Fix #70456: mysqlnd doesn't activate TCP keep-alive when connecting to a server
libmysqlclient activates TCP keep-alive when connecting to a server. PHP
mysqlnd extension must do the same to maintain compatibility.
Remi Collet [Mon, 7 Sep 2015 11:52:28 +0000 (13:52 +0200)]
Fix build
php_zip.c:1647:2: warning: suggest parentheses around assignment used as truth value [-Wparentheses]
php_zip.c:1648:3: error: format not a string literal and no format arguments [-Werror=format-security]
Jakub Zelenka [Sun, 6 Sep 2015 15:39:59 +0000 (16:39 +0100)]
Fix bug #60632: openssl_seal fails with AES
Christoph M. Becker [Sat, 5 Sep 2015 12:39:24 +0000 (14:39 +0200)]
updated NEWS
Christoph M. Becker [Sat, 5 Sep 2015 11:52:41 +0000 (13:52 +0200)]
Fix #68291: 404 on urls with '+'
URI paths have to be treated according to RFC 3986 by the CLI web server, not
as application/x-www-form-urlencoded.
Christoph M. Becker [Sat, 5 Sep 2015 01:14:56 +0000 (03:14 +0200)]
updated NEWS
Christoph M. Becker [Tue, 1 Sep 2015 23:13:49 +0000 (01:13 +0200)]
Fix #70395: Missing ARG_INFO for openssl_seal()
This patch adds the missing ARG_INFO for the optional 5th parameter $method.
Christoph M. Becker [Fri, 4 Sep 2015 23:27:59 +0000 (01:27 +0200)]
updated NEWS
Christoph M. Becker [Tue, 7 Jul 2015 12:55:00 +0000 (14:55 +0200)]
Fix #70001: Assigning to DOMNode::textContent does additional entity encoding
Assigning to DOMNode::textContent encodes entities, what does not match the
behavior of DOMText::__construct() and DOMDocument::createTextNode. This patch
changes the behavior of DOMNode::textContent in this regard.
Christoph M. Becker [Fri, 4 Sep 2015 22:37:08 +0000 (00:37 +0200)]
updated NEWS
Christoph M. Becker [Fri, 21 Aug 2015 20:26:26 +0000 (22:26 +0200)]
Fix #70322: ZipArchive::close() doesn't indicate errors
If an archive can't be written, ZipArchive::close() nonetheless returns TRUE.
We fix the return value to properly return success, and additionally raise a
warning on failure.
Niklas Keller [Tue, 25 Aug 2015 18:07:20 +0000 (20:07 +0200)]
Fix #70361: HTTP stream wrapper doesn't close keep-alive connections
Ferenc Kovacs [Wed, 2 Sep 2015 23:58:13 +0000 (01:58 +0200)]
move the phpdbg NEWS entry to the correct version
Ferenc Kovacs [Wed, 2 Sep 2015 23:46:38 +0000 (01:46 +0200)]
add missing news entries
Julien Pauli [Wed, 2 Sep 2015 15:55:57 +0000 (17:55 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Merge branch 'PHP-5.6'
bump version
Julien Pauli [Wed, 2 Sep 2015 15:55:20 +0000 (17:55 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Merge branch 'PHP-5.6'
bump version
Conflicts:
configure.in
main/php_version.h
Matteo Beccati [Sat, 29 Aug 2015 08:48:53 +0000 (10:48 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
Added missing skipif for phar+zlib test
Julien Pauli [Wed, 2 Sep 2015 15:42:00 +0000 (17:42 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
5.5.30 next
Conflicts:
configure.in
main/php_version.h
Julien Pauli [Wed, 2 Sep 2015 15:40:56 +0000 (17:40 +0200)]
5.5.30 next
Stanislav Malyshev [Tue, 1 Sep 2015 20:12:16 +0000 (13:12 -0700)]
bump version
Stanislav Malyshev [Tue, 1 Sep 2015 19:51:48 +0000 (12:51 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
More fixes for bug #70219
Stanislav Malyshev [Tue, 1 Sep 2015 19:24:14 +0000 (12:24 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
fix unit tests
Stanislav Malyshev [Tue, 1 Sep 2015 19:24:06 +0000 (12:24 -0700)]
Merge branch 'PHP-5.5' into PHP-5.5.29
* PHP-5.5:
fix unit tests
Stanislav Malyshev [Tue, 1 Sep 2015 19:23:55 +0000 (12:23 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
fix unit tests
Stanislav Malyshev [Tue, 1 Sep 2015 19:23:22 +0000 (12:23 -0700)]
fix unit tests
Stanislav Malyshev [Tue, 1 Sep 2015 19:06:41 +0000 (12:06 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
update NEWS
add NEWS for fixes
Improve fix for #70172
Fix bug #70312 - HAVAL gives wrong hashes in specific cases
fix test
add test
Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
Fix bug #70172 - Use After Free Vulnerability in unserialize()
Fix bug #70388 - SOAP serialize_function_call() type confusion
Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
Improve fix for #70385
Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
Fix bug #70219 (Use after free vulnerability in session deserializer)
Fix for bug #69782
Add CVE IDs asigned (post release) to PHP 5.4.43
Add CVE IDs asigned to #69085 (PHP 5.4.39)
5.4.45 next
Conflicts:
ext/pcre/php_pcre.c
ext/standard/var_unserializer.c
ext/standard/var_unserializer.re
ext/zip/php_zip.c
Stanislav Malyshev [Tue, 1 Sep 2015 19:05:02 +0000 (12:05 -0700)]
Merge branch '70284' into PHP-5.6
* 70284:
Fix bug ##70284 (Use after free vulnerability in unserialize() with GMP)
Stanislav Malyshev [Tue, 1 Sep 2015 19:04:04 +0000 (12:04 -0700)]
Merge branch 'PHP-5.5' into PHP-5.5.29
* PHP-5.5:
update NEWS
add NEWS for fixes
Stanislav Malyshev [Tue, 1 Sep 2015 19:03:48 +0000 (12:03 -0700)]
update NEWS
Stanislav Malyshev [Tue, 1 Sep 2015 19:00:30 +0000 (12:00 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
add NEWS for fixes
Stanislav Malyshev [Tue, 1 Sep 2015 18:53:59 +0000 (11:53 -0700)]
add NEWS for fixes
Stanislav Malyshev [Tue, 1 Sep 2015 18:43:27 +0000 (11:43 -0700)]
Merge branch 'PHP-5.5' into PHP-5.5.29
* PHP-5.5:
Improve fix for #70172
Add CVE IDs asigned (post release) to PHP 5.4.43
Add CVE IDs asigned to #69085 (PHP 5.4.39)
Conflicts:
ext/pcre/php_pcre.c
Stanislav Malyshev [Tue, 1 Sep 2015 18:42:19 +0000 (11:42 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Improve fix for #70172
Fix bug #70312 - HAVAL gives wrong hashes in specific cases
fix test
add test
Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
Fix bug #70172 - Use After Free Vulnerability in unserialize()
Fix bug #70388 - SOAP serialize_function_call() type confusion
Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
Improve fix for #70385
Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
Fix bug #70219 (Use after free vulnerability in session deserializer)
Fix for bug #69782
Add CVE IDs asigned (post release) to PHP 5.4.43
Add CVE IDs asigned to #69085 (PHP 5.4.39)
5.4.45 next
Conflicts:
configure.in
ext/pcre/php_pcre.c
ext/standard/var_unserializer.c
ext/standard/var_unserializer.re
main/php_version.h
Stanislav Malyshev [Tue, 1 Sep 2015 18:40:15 +0000 (11:40 -0700)]
Merge branch 'PHP-5.4.45' into PHP-5.4
* PHP-5.4.45:
Improve fix for #70172
Fix bug #70312 - HAVAL gives wrong hashes in specific cases
fix test
add test
Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
Fix bug #70172 - Use After Free Vulnerability in unserialize()
Fix bug #70388 - SOAP serialize_function_call() type confusion
Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
Improve fix for #70385
Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
Fix bug #70219 (Use after free vulnerability in session deserializer)
Fix for bug #69782