]>
granicus.if.org Git - php/log
Anatol Belski [Fri, 19 Aug 2016 23:38:56 +0000 (01:38 +0200)]
update NEWS
Anatol Belski [Fri, 19 Aug 2016 23:38:30 +0000 (01:38 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
update NEWS
update NEWS
Fixed bug #72852 imap_mail null dereference
Anatol Belski [Fri, 19 Aug 2016 23:38:01 +0000 (01:38 +0200)]
update NEWS
Anatol Belski [Fri, 19 Aug 2016 23:37:26 +0000 (01:37 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
update NEWS
Fixed bug #72852 imap_mail null dereference
Anatol Belski [Fri, 19 Aug 2016 23:36:37 +0000 (01:36 +0200)]
update NEWS
Anatol Belski [Fri, 19 Aug 2016 23:34:46 +0000 (01:34 +0200)]
Fixed bug #72852 imap_mail null dereference
Christoph M. Becker [Fri, 19 Aug 2016 14:39:56 +0000 (16:39 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Fri, 19 Aug 2016 14:38:53 +0000 (16:38 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Fri, 19 Aug 2016 14:35:31 +0000 (16:35 +0200)]
Revert "Fix dba configuration for Windows"
This reverts commit
ad76e8a529eabf150f17d313bb035b329bc68dec .
After a discussion with Anatol it seems to be better QA wise to not make
this change in stable versions or betas.
Anatol Belski [Fri, 19 Aug 2016 10:52:13 +0000 (12:52 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
Improve fix for bug #72837
Anatol Belski [Fri, 19 Aug 2016 10:48:13 +0000 (12:48 +0200)]
Improve fix for bug #72837
Christoph M. Becker [Fri, 19 Aug 2016 09:49:07 +0000 (11:49 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Fri, 19 Aug 2016 09:47:42 +0000 (11:47 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Fri, 19 Aug 2016 09:42:16 +0000 (11:42 +0200)]
Fix dba configuration for Windows
To be able to build the dba extension on Windows, libdb was required. This
is contrary to *nix where each handler can be configured individually. To
avoid BC breaks, we only do minimal modifications, instead of adjusting the
Windows configuration to match the *nix configuration, for now.
Davey Shafik [Fri, 19 Aug 2016 06:51:53 +0000 (06:51 +0000)]
Update NEWS for 7.1.0RC1
Xinchen Hui [Fri, 19 Aug 2016 03:28:36 +0000 (11:28 +0800)]
Fixed bug #72888 (Segfault on clone on splFileObject)
Davey Shafik [Thu, 18 Aug 2016 22:51:03 +0000 (08:51 +1000)]
Sync NEWS
Nikita Popov [Thu, 18 Aug 2016 22:12:27 +0000 (00:12 +0200)]
Decouple DEBUG_FILE_UPLOAD from ZEND_DEBUG
Enabling ZEND_DEBUG should not result in intrusive program
behavior changes.
Christoph M. Becker [Thu, 18 Aug 2016 16:03:15 +0000 (18:03 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Thu, 18 Aug 2016 15:56:16 +0000 (17:56 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Thu, 18 Aug 2016 15:53:57 +0000 (17:53 +0200)]
Fix broken test include
To avoid that the test stalls, we must always use `t` mode.
Anatol Belski [Thu, 18 Aug 2016 15:53:08 +0000 (17:53 +0200)]
update NEWS
Anatol Belski [Thu, 18 Aug 2016 15:51:18 +0000 (17:51 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
update NEWS
Anatol Belski [Thu, 18 Aug 2016 15:50:17 +0000 (17:50 +0200)]
update NEWS
Anatol Belski [Thu, 18 Aug 2016 14:29:46 +0000 (16:29 +0200)]
fix format
Anatol Belski [Thu, 18 Aug 2016 14:01:23 +0000 (16:01 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
avoid other efforts if memory mapping fails
Anatol Belski [Thu, 18 Aug 2016 13:58:33 +0000 (15:58 +0200)]
avoid other efforts if memory mapping fails
Julien Pauli [Thu, 18 Aug 2016 13:46:00 +0000 (15:46 +0200)]
Updated UPGRADING about function call args
Anatol Belski [Thu, 18 Aug 2016 13:36:07 +0000 (15:36 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
fix test
Anatol Belski [Thu, 18 Aug 2016 13:35:26 +0000 (15:35 +0200)]
fix test
Anatol Belski [Thu, 18 Aug 2016 13:26:24 +0000 (15:26 +0200)]
map ell the err code
Anatol Belski [Thu, 18 Aug 2016 12:40:20 +0000 (14:40 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
Fixed bug #72858 shm_attach null dereference
Anatol Belski [Thu, 18 Aug 2016 12:15:10 +0000 (14:15 +0200)]
Fixed bug #72858 shm_attach null dereference
Ferenc Kovacs [Thu, 18 Aug 2016 11:04:43 +0000 (13:04 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Ferenc Kovacs [Thu, 18 Aug 2016 11:03:14 +0000 (13:03 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Ferenc Kovacs [Thu, 18 Aug 2016 11:01:53 +0000 (13:01 +0200)]
fix NEWS
Xinchen Hui [Thu, 18 Aug 2016 07:44:33 +0000 (15:44 +0800)]
Remove leftover of previous change
Xinchen Hui [Thu, 18 Aug 2016 07:37:39 +0000 (15:37 +0800)]
Xinchen Hui [Thu, 18 Aug 2016 07:37:15 +0000 (15:37 +0800)]
Remove outdate checks
Christopher Jones [Thu, 18 Aug 2016 05:47:47 +0000 (15:47 +1000)]
Merge branch 'PHP-7.0' into PHP-7.1
Christopher Jones [Thu, 18 Aug 2016 05:47:36 +0000 (15:47 +1000)]
Merge branch 'PHP-5.6' into PHP-7.0
Christopher Jones [Thu, 18 Aug 2016 05:47:25 +0000 (15:47 +1000)]
Add myself as PDO_OCI maintainer
Christopher Jones [Thu, 18 Aug 2016 03:50:36 +0000 (13:50 +1000)]
Prepare for OCI8 PECL release
Christopher Jones [Thu, 18 Aug 2016 03:52:56 +0000 (13:52 +1000)]
Merge branch 'PHP-7.0' into PHP-7.1
Christopher Jones [Thu, 18 Aug 2016 03:52:50 +0000 (13:52 +1000)]
Prepare for OCI8 PECL release
Christopher Jones [Thu, 18 Aug 2016 03:50:36 +0000 (13:50 +1000)]
Prepare for OCI8 PECL release
Anatol Belski [Wed, 17 Aug 2016 22:18:26 +0000 (00:18 +0200)]
fix test
The improvements to the base64 functionality allows now to loosen
strictness. Strict mode still can be activated later, if there are
any issues.
Anatol Belski [Wed, 17 Aug 2016 22:16:50 +0000 (00:16 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
sync NEWS
Anatol Belski [Wed, 17 Aug 2016 22:15:54 +0000 (00:15 +0200)]
sync NEWS
Christoph M. Becker [Wed, 17 Aug 2016 20:13:57 +0000 (22:13 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Wed, 17 Aug 2016 20:12:01 +0000 (22:12 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Wed, 17 Aug 2016 12:04:08 +0000 (14:04 +0200)]
Skip tests that are supposed to fail due to bugs in old external libgd
Kalle Sommer Nielsen [Wed, 17 Aug 2016 18:27:46 +0000 (20:27 +0200)]
Merge branch 'PHP-7.1' of git.php.net:php-src into PHP-7.1
Kalle Sommer Nielsen [Wed, 17 Aug 2016 18:26:32 +0000 (20:26 +0200)]
Fixed 7.1 build, decls first please!
Christoph M. Becker [Wed, 17 Aug 2016 17:09:31 +0000 (19:09 +0200)]
Make this test also a little more resilient
See <http://git.php.net/?p=php-src.git;a=commit;h=
a3159d29bb24d5c946c14b7aa33e96bebcd56e59 >.
Christoph M. Becker [Wed, 17 Aug 2016 16:25:45 +0000 (18:25 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Wed, 17 Aug 2016 16:13:41 +0000 (18:13 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Wed, 17 Aug 2016 15:59:33 +0000 (17:59 +0200)]
Make tests a little more resilient
PNG allows identical images to be stored differently what makes nearly all
tests checking the MD5 hash of the PNG representation fail with external
libgd. For now, we use the GD format instead, which doesn't allow for such
differences.
Of course, this md5() checking should be replaced by a image diffing feature
in the long run.
Kalle Sommer Nielsen [Wed, 17 Aug 2016 14:34:22 +0000 (16:34 +0200)]
Seems like I did a bad merge earlier, this should make PHP-7.0 sync with 7.1/master properly now
Kalle Sommer Nielsen [Wed, 17 Aug 2016 12:15:09 +0000 (14:15 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
Fix build as done in master in commit
040331c36462eac94308bbef3200ee11389ca444
Fixed C89 build
Kalle Sommer Nielsen [Wed, 17 Aug 2016 12:10:24 +0000 (14:10 +0200)]
Fix build as done in master in commit
040331c36462eac94308bbef3200ee11389ca444
The reason why we cannot use round() here, is that it does not come with the standard C library on Windows, I don't think this affects other systems.
At the same time, also expose _php_math_round()
Kalle Sommer Nielsen [Wed, 17 Aug 2016 11:43:50 +0000 (13:43 +0200)]
Fixed C89 build
Anatol Belski [Wed, 17 Aug 2016 11:23:31 +0000 (13:23 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
fix char * vs zend_string *
Anatol Belski [Wed, 17 Aug 2016 11:22:02 +0000 (13:22 +0200)]
fix char * vs zend_string *
Christoph M. Becker [Wed, 17 Aug 2016 10:48:05 +0000 (12:48 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Wed, 17 Aug 2016 10:45:43 +0000 (12:45 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Wed, 17 Aug 2016 10:43:29 +0000 (12:43 +0200)]
Fix #68302: impossible to compile php with zip support
We should not let configure succeed, if SIZEOF_OFF_T == 0, just to let the
compilation fail later. Instead we bail out early, giving a hint regarding
the potential issue, namely misconfigured libraries.
Anatol Belski [Wed, 17 Aug 2016 10:41:38 +0000 (12:41 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
fix tests
Anatol Belski [Wed, 17 Aug 2016 10:39:35 +0000 (12:39 +0200)]
fix tests
The 70436 test is just a bonus for the hardening in 72633.
Xinchen Hui [Wed, 17 Aug 2016 10:19:59 +0000 (18:19 +0800)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
Avoid duplicating string
Xinchen Hui [Wed, 17 Aug 2016 10:19:14 +0000 (18:19 +0800)]
Avoid duplicating string
Anatol Belski [Wed, 17 Aug 2016 10:07:39 +0000 (12:07 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
Revert "fix tests"
Anatol Belski [Wed, 17 Aug 2016 10:04:03 +0000 (12:04 +0200)]
Revert "fix tests"
This reverts commit
a47df5be1999b30df0d6d9161e57e760443c9eec .
Looks like some environment issue, as some system throws the notice,
some don't. Revert for now.
Anatol Belski [Wed, 17 Aug 2016 09:53:00 +0000 (11:53 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0:
fix leak
Anatol Belski [Wed, 17 Aug 2016 09:51:56 +0000 (11:51 +0200)]
fix leak
Xinchen Hui [Wed, 17 Aug 2016 09:14:53 +0000 (17:14 +0800)]
Update NEWs
Xinchen Hui [Wed, 17 Aug 2016 09:14:30 +0000 (17:14 +0800)]
Merge branch 'PHP-7.0' into PHP-7.1
* PHP-7.0: (48 commits)
Update NEWs
Unused label
Fixed bug #72853 (stream_set_blocking doesn't work)
fix test
Bug #72663 - part 3
Bug #72663 - part 2
Bug #72663 - part 1
Update NEWS
BLock test with memory leak
fix tests
Fix TSRM build
Fix bug #72850 - integer overflow in uuencode
Fixed bug #72849 - integer overflow in urlencode
Fix bug #72848 - integer overflow in quoted_printable_encode caused heap corruption
Fix bug #72838 - Integer overflow lead to heap corruption in sql_regcase
Fix bug #72837 - integer overflow in bzdecompress caused heap corruption
Fix bug #72836 - integer overflow in base64_decode caused heap corruption
Fix for bug #72807 - do not produce strings with negative length
Fix for bug #72790 and bug #72799
Fix bug #72730 - imagegammacorrect allows arbitrary write access
...
Conflicts:
ext/standard/var_unserializer.c
Xinchen Hui [Wed, 17 Aug 2016 08:56:58 +0000 (16:56 +0800)]
Update NEWs
Xinchen Hui [Wed, 17 Aug 2016 08:56:20 +0000 (16:56 +0800)]
Unused label
Xinchen Hui [Wed, 17 Aug 2016 08:56:02 +0000 (16:56 +0800)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
Fixed bug #72853 (stream_set_blocking doesn't work)
Conflicts:
main/streams/plain_wrapper.c
Xinchen Hui [Wed, 17 Aug 2016 08:54:21 +0000 (16:54 +0800)]
Fixed bug #72853 (stream_set_blocking doesn't work)
Implemented PHP_STREAM_OPTION_META_DATA_API for plain_wrappers
Stanislav Malyshev [Wed, 17 Aug 2016 08:12:33 +0000 (01:12 -0700)]
fix test
Nikita Popov [Wed, 10 Aug 2016 12:46:38 +0000 (14:46 +0200)]
Bug #72663 - part 3
When using the php_serialize session serialization handler, do
not use the result of the unserialization if it failed.
Nikita Popov [Wed, 10 Aug 2016 12:30:16 +0000 (14:30 +0200)]
Bug #72663 - part 2
If a (nested) unserialize() call fails, we remove all the values
that were inserted into var_hash during that call. This prevents
their use in other unserializations in the same context.
Nikita Popov [Mon, 8 Aug 2016 16:05:29 +0000 (18:05 +0200)]
Bug #72663 - part 1
Don't call __destruct() on an unserialized object that has a
__wakeup() method if either
a) unserialization of its properties fails or
b) the __wakeup() call fails (e.g. by throwing).
This basically treats __wakeup() as a form of constructor and
aligns us with the usual behavior that if the constructor call
fails the destructor should not be called.
The security aspect here is that people use __wakeup() to prevent
unserialization of objects with dangerous __destruct() methods,
but this is ineffective if __destruct() can still be called while
__wakeup() was skipped.
Stanislav Malyshev [Wed, 17 Aug 2016 07:23:51 +0000 (00:23 -0700)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6: (24 commits)
Update NEWS
BLock test with memory leak
fix tests
Fix TSRM build
Fix bug #72850 - integer overflow in uuencode
Fixed bug #72849 - integer overflow in urlencode
Fix bug #72848 - integer overflow in quoted_printable_encode caused heap corruption
Fix bug #72838 - Integer overflow lead to heap corruption in sql_regcase
Fix bug #72837 - integer overflow in bzdecompress caused heap corruption
Fix bug #72836 - integer overflow in base64_decode caused heap corruption
Fix for bug #72807 - do not produce strings with negative length
Fix for bug #72790 and bug #72799
Fix bug #72730 - imagegammacorrect allows arbitrary write access
Fix bug#72697 - select_colors write out-of-bounds
Fixed bug #72627: Memory Leakage In exif_process_IFD_in_TIFF
Fix bug #72750: wddx_deserialize null dereference
Fix bug #72771: ftps:// opendir wrapper is vulnerable to protocol downgrade attack
Improve fix for #72663
Fix bug #70436: Use After Free Vulnerability in unserialize()
Fix bug #72749: wddx_deserialize allows illegal memory access
...
Conflicts:
Zend/zend_API.h
ext/bz2/bz2.c
ext/curl/interface.c
ext/ereg/ereg.c
ext/exif/exif.c
ext/gd/gd.c
ext/gd/tests/imagetruecolortopalette_error3.phpt
ext/gd/tests/imagetruecolortopalette_error4.phpt
ext/session/session.c
ext/snmp/snmp.c
ext/standard/base64.c
ext/standard/ftp_fopen_wrapper.c
ext/standard/quot_print.c
ext/standard/url.c
ext/standard/uuencode.c
ext/standard/var.c
ext/standard/var_unserializer.c
ext/standard/var_unserializer.re
ext/wddx/tests/bug72790.phpt
ext/wddx/tests/bug72799.phpt
ext/wddx/wddx.c
sapi/cli/generate_mime_type_map.php
Stanislav Malyshev [Wed, 17 Aug 2016 06:52:22 +0000 (23:52 -0700)]
Merge branch 'PHP-7.0.10' into PHP-7.0
* PHP-7.0.10:
Fix bug #72749: wddx_deserialize allows illegal memory access
Fixed bug #72627: Memory Leakage In exif_process_IFD_in_TIFF
fix tests
Fix bug#72697 - select_colors write out-of-bounds
Fix bug #72708 - php_snmp_parse_oid integer overflow in memory allocation
Fix bug #72730 - imagegammacorrect allows arbitrary write access
Fix bug #72750: wddx_deserialize null dereference
Fix bug #72771: ftps:// opendir wrapper is vulnerable to protocol downgrade attack
fix tests
add missing skipif section
Fix for bug #72790 and bug #72799
Fix bug #72837 - integer overflow in bzdecompress caused heap corruption
Fix bug #72742 - memory allocator fails to realloc small block to large one
Use size_t for path length
Check for string overflow
Fix for bug #72782: mcrypt accepts only ints, so don't pass anything else
Fix bug #72674 - check both curl_escape and curl_unescape
Stanislav Malyshev [Wed, 17 Aug 2016 06:50:42 +0000 (23:50 -0700)]
Merge branch 'PHP-7.0' into PHP-7.0.10
* PHP-7.0: (34 commits)
Fix URL rewriter partially
Support "git worktree"
Add NEWS
Fix ASSERT logic
Bugfix 72791: fix memory leak in PDO persistent connections
Don't copy mime types in CLI server
Remove obsolete Id tags
Bump version in OCI8 test
Fixed bug #72788 (Invalid memory access when using persistent PDO connection)
Remove typo'd commit
Fix bug 72788: Invalid memory access when database_object_handle is undefined. Also fix memory leak in dbh_free when using persistent PDO connections.
Replace dead branch with ZEND_ASSERT()
Add test for bug #69107: finfo no longer detects PHP files
Fix bug #55451
Fix stream_socket_enable_crypto() test
Remove old $Id$ tags
Sync with 7.1 branch changes from Nikita & Dimitri to keep OCI8 code identical
Fix bug #72524 (Binding null values triggers ORA-24816 error)
Fix the fix (Nikita), thanks!
Check the return value of dbconvert() in mssql_guid_string(), as it may return -1 in case the conversion failed. In that case false is returned.
...
Conflicts:
ext/standard/ftp_fopen_wrapper.c
Stanislav Malyshev [Wed, 17 Aug 2016 06:44:59 +0000 (23:44 -0700)]
Update NEWS
Stanislav Malyshev [Wed, 17 Aug 2016 05:49:06 +0000 (22:49 -0700)]
BLock test with memory leak
Stanislav Malyshev [Tue, 16 Aug 2016 23:47:53 +0000 (16:47 -0700)]
fix tests
Stanislav Malyshev [Tue, 16 Aug 2016 23:34:35 +0000 (16:34 -0700)]
Fix TSRM build
Stanislav Malyshev [Tue, 16 Aug 2016 23:03:44 +0000 (16:03 -0700)]
Fix bug #72850 - integer overflow in uuencode
Stanislav Malyshev [Tue, 16 Aug 2016 22:58:05 +0000 (15:58 -0700)]
Fixed bug #72849 - integer overflow in urlencode
Stanislav Malyshev [Tue, 16 Aug 2016 22:48:31 +0000 (15:48 -0700)]
Fix bug #72848 - integer overflow in quoted_printable_encode caused heap corruption
Stanislav Malyshev [Tue, 16 Aug 2016 06:43:59 +0000 (23:43 -0700)]
Fix bug #72838 - Integer overflow lead to heap corruption in sql_regcase
Stanislav Malyshev [Tue, 16 Aug 2016 06:17:26 +0000 (23:17 -0700)]
Fix bug #72837 - integer overflow in bzdecompress caused heap corruption
Stanislav Malyshev [Mon, 15 Aug 2016 06:13:30 +0000 (23:13 -0700)]
Fix bug #72836 - integer overflow in base64_decode caused heap corruption
Stanislav Malyshev [Fri, 12 Aug 2016 06:36:25 +0000 (23:36 -0700)]
Fix for bug #72807 - do not produce strings with negative length
Stanislav Malyshev [Thu, 11 Aug 2016 06:43:56 +0000 (23:43 -0700)]
Fix for bug #72790 and bug #72799