]> granicus.if.org Git - php/log
php
8 years agoMerge branch 'PHP-7.1'
Christopher Jones [Thu, 18 Aug 2016 05:47:55 +0000 (15:47 +1000)]
Merge branch 'PHP-7.1'

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Christopher Jones [Thu, 18 Aug 2016 05:47:47 +0000 (15:47 +1000)]
Merge branch 'PHP-7.0' into PHP-7.1

8 years agoMerge branch 'PHP-5.6' into PHP-7.0
Christopher Jones [Thu, 18 Aug 2016 05:47:36 +0000 (15:47 +1000)]
Merge branch 'PHP-5.6' into PHP-7.0

8 years agoAdd myself as PDO_OCI maintainer
Christopher Jones [Thu, 18 Aug 2016 05:47:25 +0000 (15:47 +1000)]
Add myself as PDO_OCI maintainer

8 years agoPrepare for OCI8 PECL release
Christopher Jones [Thu, 18 Aug 2016 03:50:36 +0000 (13:50 +1000)]
Prepare for OCI8 PECL release

8 years agoMerge branch 'PHP-7.1'
Christopher Jones [Thu, 18 Aug 2016 03:54:40 +0000 (13:54 +1000)]
Merge branch 'PHP-7.1'

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Christopher Jones [Thu, 18 Aug 2016 03:52:56 +0000 (13:52 +1000)]
Merge branch 'PHP-7.0' into PHP-7.1

8 years agoPrepare for OCI8 PECL release
Christopher Jones [Thu, 18 Aug 2016 03:52:50 +0000 (13:52 +1000)]
Prepare for OCI8 PECL release

8 years agoPrepare for OCI8 PECL release
Christopher Jones [Thu, 18 Aug 2016 03:50:36 +0000 (13:50 +1000)]
Prepare for OCI8 PECL release

8 years agoMerge branch 'PHP-7.1'
Anatol Belski [Wed, 17 Aug 2016 22:20:48 +0000 (00:20 +0200)]
Merge branch 'PHP-7.1'

* PHP-7.1:
  fix test

8 years agofix test
Anatol Belski [Wed, 17 Aug 2016 22:18:26 +0000 (00:18 +0200)]
fix test

The improvements to the base64 functionality allows now to loosen
strictness. Strict mode still can be activated later, if there are
any issues.

8 years agoMerge branch 'PHP-7.1'
Anatol Belski [Wed, 17 Aug 2016 22:17:13 +0000 (00:17 +0200)]
Merge branch 'PHP-7.1'

* PHP-7.1:
  sync NEWS

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Anatol Belski [Wed, 17 Aug 2016 22:16:50 +0000 (00:16 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
  sync NEWS

8 years agosync NEWS
Anatol Belski [Wed, 17 Aug 2016 22:15:54 +0000 (00:15 +0200)]
sync NEWS

8 years agoMake this inline like the many other variants we got of this function (win32/time...
Kalle Sommer Nielsen [Wed, 17 Aug 2016 21:52:44 +0000 (23:52 +0200)]
Make this inline like the many other variants we got of this function (win32/time.c, Zend/zend_virtual_cwd.c, ...)

8 years agoMerge branch 'PHP-7.1'
Christoph M. Becker [Wed, 17 Aug 2016 20:14:33 +0000 (22:14 +0200)]
Merge branch 'PHP-7.1'

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Wed, 17 Aug 2016 20:13:57 +0000 (22:13 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1

8 years agoMerge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Wed, 17 Aug 2016 20:12:01 +0000 (22:12 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0

8 years agoSkip tests that are supposed to fail due to bugs in old external libgd
Christoph M. Becker [Wed, 17 Aug 2016 12:04:08 +0000 (14:04 +0200)]
Skip tests that are supposed to fail due to bugs in old external libgd

8 years agoMerge branch 'PHP-7.1'
Kalle Sommer Nielsen [Wed, 17 Aug 2016 19:09:46 +0000 (21:09 +0200)]
Merge branch 'PHP-7.1'

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Kalle Sommer Nielsen [Wed, 17 Aug 2016 19:01:05 +0000 (21:01 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
  Further fix bug #72627 from Stas

8 years agoFurther fix bug #72627 from Stas
Kalle Sommer Nielsen [Wed, 17 Aug 2016 18:51:50 +0000 (20:51 +0200)]
Further fix bug #72627 from Stas

There is another code path with almost the same identical code that also leaks memory in case of invalid reads, fix this as well

8 years agoFixed master build, decls first please!
Kalle Sommer Nielsen [Wed, 17 Aug 2016 18:33:07 +0000 (20:33 +0200)]
Fixed master build, decls first please!

8 years agoMerge branch 'PHP-7.1' of git.php.net:php-src into PHP-7.1
Kalle Sommer Nielsen [Wed, 17 Aug 2016 18:27:46 +0000 (20:27 +0200)]
Merge branch 'PHP-7.1' of git.php.net:php-src into PHP-7.1

8 years agoFixed 7.1 build, decls first please!
Kalle Sommer Nielsen [Wed, 17 Aug 2016 18:26:32 +0000 (20:26 +0200)]
Fixed 7.1 build, decls first please!

8 years agoMerge branch 'PHP-7.1'
Christoph M. Becker [Wed, 17 Aug 2016 17:10:13 +0000 (19:10 +0200)]
Merge branch 'PHP-7.1'

8 years agoMake this test also a little more resilient
Christoph M. Becker [Wed, 17 Aug 2016 17:09:31 +0000 (19:09 +0200)]
Make this test also a little more resilient

See <http://git.php.net/?p=php-src.git;a=commit;h=a3159d29bb24d5c946c14b7aa33e96bebcd56e59>.

8 years agoMerge branch 'PHP-7.1'
Christoph M. Becker [Wed, 17 Aug 2016 16:37:55 +0000 (18:37 +0200)]
Merge branch 'PHP-7.1'

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Wed, 17 Aug 2016 16:25:45 +0000 (18:25 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1

8 years agoMerge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Wed, 17 Aug 2016 16:13:41 +0000 (18:13 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0

8 years agoMake tests a little more resilient
Christoph M. Becker [Wed, 17 Aug 2016 15:59:33 +0000 (17:59 +0200)]
Make tests a little more resilient

PNG allows identical images to be stored differently what makes nearly all
tests checking the MD5 hash of the PNG representation fail with external
libgd. For now, we use the GD format instead, which doesn't allow for such
differences.

Of course, this md5() checking should be replaced by a image diffing feature
in the long run.

8 years agoSeems like I did a bad merge earlier, this should make PHP-7.0 sync with 7.1/master...
Kalle Sommer Nielsen [Wed, 17 Aug 2016 14:34:22 +0000 (16:34 +0200)]
Seems like I did a bad merge earlier, this should make PHP-7.0 sync with 7.1/master properly now

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Kalle Sommer Nielsen [Wed, 17 Aug 2016 12:15:09 +0000 (14:15 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
  Fix build as done in master in commit 040331c36462eac94308bbef3200ee11389ca444
  Fixed C89 build

8 years agoFix build as done in master in commit 040331c36462eac94308bbef3200ee11389ca444
Kalle Sommer Nielsen [Wed, 17 Aug 2016 12:10:24 +0000 (14:10 +0200)]
Fix build as done in master in commit 040331c36462eac94308bbef3200ee11389ca444

The reason why we cannot use round() here, is that it does not come with the standard C library on Windows, I don't think this affects other systems.

At the same time, also expose _php_math_round()

8 years agoFixed C89 build
Kalle Sommer Nielsen [Wed, 17 Aug 2016 11:43:50 +0000 (13:43 +0200)]
Fixed C89 build

8 years agoMerge branch 'PHP-7.1'
Anatol Belski [Wed, 17 Aug 2016 11:24:07 +0000 (13:24 +0200)]
Merge branch 'PHP-7.1'

* PHP-7.1:
  fix char * vs zend_string *

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Anatol Belski [Wed, 17 Aug 2016 11:23:31 +0000 (13:23 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
  fix char * vs zend_string *

8 years agofix char * vs zend_string *
Anatol Belski [Wed, 17 Aug 2016 11:22:02 +0000 (13:22 +0200)]
fix char * vs zend_string *

8 years agoMerge branch 'PHP-7.1'
Christoph M. Becker [Wed, 17 Aug 2016 10:50:16 +0000 (12:50 +0200)]
Merge branch 'PHP-7.1'

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Christoph M. Becker [Wed, 17 Aug 2016 10:48:05 +0000 (12:48 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1

8 years agoMerge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Wed, 17 Aug 2016 10:45:43 +0000 (12:45 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0

8 years agoFix #68302: impossible to compile php with zip support
Christoph M. Becker [Wed, 17 Aug 2016 10:43:29 +0000 (12:43 +0200)]
Fix #68302: impossible to compile php with zip support

We should not let configure succeed, if SIZEOF_OFF_T == 0, just to let the
compilation fail later. Instead we bail out early, giving a hint regarding
the potential issue, namely misconfigured libraries.

8 years agoMerge branch 'PHP-7.1'
Anatol Belski [Wed, 17 Aug 2016 10:41:54 +0000 (12:41 +0200)]
Merge branch 'PHP-7.1'

* PHP-7.1:
  fix tests

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Anatol Belski [Wed, 17 Aug 2016 10:41:38 +0000 (12:41 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
  fix tests

8 years agofix tests
Anatol Belski [Wed, 17 Aug 2016 10:39:35 +0000 (12:39 +0200)]
fix tests

The 70436 test is just a bonus for the hardening in 72633.

8 years agoMerge branch 'PHP-7.1'
Xinchen Hui [Wed, 17 Aug 2016 10:20:07 +0000 (18:20 +0800)]
Merge branch 'PHP-7.1'

* PHP-7.1:
  Avoid duplicating string

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Xinchen Hui [Wed, 17 Aug 2016 10:19:59 +0000 (18:19 +0800)]
Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
  Avoid duplicating string

8 years agoAvoid duplicating string
Xinchen Hui [Wed, 17 Aug 2016 10:19:14 +0000 (18:19 +0800)]
Avoid duplicating string

8 years agoMerge branch 'PHP-7.1'
Anatol Belski [Wed, 17 Aug 2016 10:08:19 +0000 (12:08 +0200)]
Merge branch 'PHP-7.1'

* PHP-7.1:
  Revert "fix tests"

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Anatol Belski [Wed, 17 Aug 2016 10:07:39 +0000 (12:07 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
  Revert "fix tests"

8 years agoRevert "fix tests"
Anatol Belski [Wed, 17 Aug 2016 10:04:03 +0000 (12:04 +0200)]
Revert "fix tests"

This reverts commit a47df5be1999b30df0d6d9161e57e760443c9eec.

Looks like some environment issue, as some system throws the notice,
some don't. Revert for now.

8 years agoMerge branch 'PHP-7.1'
Anatol Belski [Wed, 17 Aug 2016 09:53:14 +0000 (11:53 +0200)]
Merge branch 'PHP-7.1'

* PHP-7.1:
  fix leak

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Anatol Belski [Wed, 17 Aug 2016 09:53:00 +0000 (11:53 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
  fix leak

8 years agofix leak
Anatol Belski [Wed, 17 Aug 2016 09:51:56 +0000 (11:51 +0200)]
fix leak

8 years agoMerge branch 'PHP-7.1'
Xinchen Hui [Wed, 17 Aug 2016 09:15:11 +0000 (17:15 +0800)]
Merge branch 'PHP-7.1'

* PHP-7.1: (49 commits)
  Update NEWs
  Update NEWs
  Unused label
  Fixed bug #72853 (stream_set_blocking doesn't work)
  fix test
  Bug #72663 - part 3
  Bug #72663 - part 2
  Bug #72663 - part 1
  Update NEWS
  BLock test with memory leak
  fix tests
  Fix TSRM build
  Fix bug #72850 - integer overflow in uuencode
  Fixed bug #72849 - integer overflow in urlencode
  Fix bug #72848 - integer overflow in quoted_printable_encode caused heap corruption
  Fix bug #72838 -  Integer overflow lead to heap corruption in sql_regcase
  Fix bug #72837 - integer overflow in bzdecompress caused heap corruption
  Fix bug #72836 - integer overflow in base64_decode caused heap corruption
  Fix for bug #72807 - do not produce strings with negative length
  Fix for bug #72790 and bug #72799
  ...

8 years agoUpdate NEWs
Xinchen Hui [Wed, 17 Aug 2016 09:14:53 +0000 (17:14 +0800)]
Update NEWs

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Xinchen Hui [Wed, 17 Aug 2016 09:14:30 +0000 (17:14 +0800)]
Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0: (48 commits)
  Update NEWs
  Unused label
  Fixed bug #72853 (stream_set_blocking doesn't work)
  fix test
  Bug #72663 - part 3
  Bug #72663 - part 2
  Bug #72663 - part 1
  Update NEWS
  BLock test with memory leak
  fix tests
  Fix TSRM build
  Fix bug #72850 - integer overflow in uuencode
  Fixed bug #72849 - integer overflow in urlencode
  Fix bug #72848 - integer overflow in quoted_printable_encode caused heap corruption
  Fix bug #72838 -  Integer overflow lead to heap corruption in sql_regcase
  Fix bug #72837 - integer overflow in bzdecompress caused heap corruption
  Fix bug #72836 - integer overflow in base64_decode caused heap corruption
  Fix for bug #72807 - do not produce strings with negative length
  Fix for bug #72790 and bug #72799
  Fix bug #72730 - imagegammacorrect allows arbitrary write access
  ...

Conflicts:
ext/standard/var_unserializer.c

8 years agoUpdate NEWs
Xinchen Hui [Wed, 17 Aug 2016 08:56:58 +0000 (16:56 +0800)]
Update NEWs

8 years agoUnused label
Xinchen Hui [Wed, 17 Aug 2016 08:56:20 +0000 (16:56 +0800)]
Unused label

8 years agoMerge branch 'PHP-5.6' into PHP-7.0
Xinchen Hui [Wed, 17 Aug 2016 08:56:02 +0000 (16:56 +0800)]
Merge branch 'PHP-5.6' into PHP-7.0

* PHP-5.6:
  Fixed bug #72853 (stream_set_blocking doesn't work)

Conflicts:
main/streams/plain_wrapper.c

8 years agoFixed bug #72853 (stream_set_blocking doesn't work)
Xinchen Hui [Wed, 17 Aug 2016 08:54:21 +0000 (16:54 +0800)]
Fixed bug #72853 (stream_set_blocking doesn't work)

Implemented  PHP_STREAM_OPTION_META_DATA_API for plain_wrappers

8 years agofix test
Stanislav Malyshev [Wed, 17 Aug 2016 08:12:33 +0000 (01:12 -0700)]
fix test

8 years agoBug #72663 - part 3
Nikita Popov [Wed, 10 Aug 2016 12:46:38 +0000 (14:46 +0200)]
Bug #72663 - part 3

When using the php_serialize session serialization handler, do
not use the result of the unserialization if it failed.

8 years agoBug #72663 - part 2
Nikita Popov [Wed, 10 Aug 2016 12:30:16 +0000 (14:30 +0200)]
Bug #72663 - part 2

If a (nested) unserialize() call fails, we remove all the values
that were inserted into var_hash during that call. This prevents
their use in other unserializations in the same context.

8 years agoBug #72663 - part 1
Nikita Popov [Mon, 8 Aug 2016 16:05:29 +0000 (18:05 +0200)]
Bug #72663 - part 1

Don't call __destruct() on an unserialized object that has a
__wakeup() method if either
a) unserialization of its properties fails or
b) the __wakeup() call fails (e.g. by throwing).

This basically treats __wakeup() as a form of constructor and
aligns us with the usual behavior that if the constructor call
fails the destructor should not be called.

The security aspect here is that people use __wakeup() to prevent
unserialization of objects with dangerous __destruct() methods,
but this is ineffective if __destruct() can still be called while
__wakeup() was skipped.

8 years agoMerge branch 'PHP-5.6' into PHP-7.0
Stanislav Malyshev [Wed, 17 Aug 2016 07:23:51 +0000 (00:23 -0700)]
Merge branch 'PHP-5.6' into PHP-7.0

* PHP-5.6: (24 commits)
  Update NEWS
  BLock test with memory leak
  fix tests
  Fix TSRM build
  Fix bug #72850 - integer overflow in uuencode
  Fixed bug #72849 - integer overflow in urlencode
  Fix bug #72848 - integer overflow in quoted_printable_encode caused heap corruption
  Fix bug #72838 -  Integer overflow lead to heap corruption in sql_regcase
  Fix bug #72837 - integer overflow in bzdecompress caused heap corruption
  Fix bug #72836 - integer overflow in base64_decode caused heap corruption
  Fix for bug #72807 - do not produce strings with negative length
  Fix for bug #72790 and bug #72799
  Fix bug #72730 - imagegammacorrect allows arbitrary write access
  Fix bug#72697 - select_colors write out-of-bounds
  Fixed bug #72627: Memory Leakage In exif_process_IFD_in_TIFF
  Fix bug #72750: wddx_deserialize null dereference
  Fix bug #72771: ftps:// opendir wrapper is vulnerable to protocol downgrade attack
  Improve fix for #72663
  Fix bug #70436: Use After Free Vulnerability in unserialize()
  Fix bug #72749: wddx_deserialize allows illegal memory access
  ...

Conflicts:
Zend/zend_API.h
ext/bz2/bz2.c
ext/curl/interface.c
ext/ereg/ereg.c
ext/exif/exif.c
ext/gd/gd.c
ext/gd/tests/imagetruecolortopalette_error3.phpt
ext/gd/tests/imagetruecolortopalette_error4.phpt
ext/session/session.c
ext/snmp/snmp.c
ext/standard/base64.c
ext/standard/ftp_fopen_wrapper.c
ext/standard/quot_print.c
ext/standard/url.c
ext/standard/uuencode.c
ext/standard/var.c
ext/standard/var_unserializer.c
ext/standard/var_unserializer.re
ext/wddx/tests/bug72790.phpt
ext/wddx/tests/bug72799.phpt
ext/wddx/wddx.c
sapi/cli/generate_mime_type_map.php

8 years agoMerge branch 'PHP-7.0.10' into PHP-7.0
Stanislav Malyshev [Wed, 17 Aug 2016 06:52:22 +0000 (23:52 -0700)]
Merge branch 'PHP-7.0.10' into PHP-7.0

* PHP-7.0.10:
  Fix bug #72749: wddx_deserialize allows illegal memory access
  Fixed bug #72627: Memory Leakage In exif_process_IFD_in_TIFF
  fix tests
  Fix bug#72697 - select_colors write out-of-bounds
  Fix bug #72708 - php_snmp_parse_oid integer overflow in memory allocation
  Fix bug #72730 - imagegammacorrect allows arbitrary write access
  Fix bug #72750: wddx_deserialize null dereference
  Fix bug #72771: ftps:// opendir wrapper is vulnerable to protocol downgrade attack
  fix tests
  add missing skipif section
  Fix for bug #72790 and bug #72799
  Fix bug #72837 - integer overflow in bzdecompress caused heap corruption
  Fix bug #72742 - memory allocator fails to realloc small block to large one
  Use size_t for path length
  Check for string overflow
  Fix for bug #72782: mcrypt accepts only ints, so don't pass anything else
  Fix bug #72674 - check both curl_escape and curl_unescape

8 years agoMerge branch 'PHP-7.0' into PHP-7.0.10
Stanislav Malyshev [Wed, 17 Aug 2016 06:50:42 +0000 (23:50 -0700)]
Merge branch 'PHP-7.0' into PHP-7.0.10

* PHP-7.0: (34 commits)
  Fix URL rewriter partially
  Support "git worktree"
  Add NEWS
  Fix ASSERT logic
  Bugfix 72791: fix memory leak in PDO persistent connections
  Don't copy mime types in CLI server
  Remove obsolete Id tags
  Bump version in OCI8 test
  Fixed bug #72788 (Invalid memory access when using persistent PDO connection)
  Remove typo'd commit
  Fix bug 72788: Invalid memory access when database_object_handle is undefined. Also fix memory leak in dbh_free when using persistent PDO connections.
  Replace dead branch with ZEND_ASSERT()
  Add test for bug #69107: finfo no longer detects PHP files
  Fix bug #55451
  Fix stream_socket_enable_crypto() test
  Remove old $Id$ tags
  Sync with 7.1 branch changes from Nikita & Dimitri to keep OCI8 code identical
  Fix bug #72524 (Binding null values triggers ORA-24816 error)
  Fix the fix (Nikita), thanks!
  Check the return value of dbconvert() in mssql_guid_string(), as it may return -1 in case the conversion failed. In that case false is returned.
  ...

Conflicts:
ext/standard/ftp_fopen_wrapper.c

8 years agoUpdate NEWS
Stanislav Malyshev [Wed, 17 Aug 2016 06:44:59 +0000 (23:44 -0700)]
Update NEWS

8 years agoBLock test with memory leak
Stanislav Malyshev [Wed, 17 Aug 2016 05:49:06 +0000 (22:49 -0700)]
BLock test with memory leak

8 years agofix tests
Stanislav Malyshev [Tue, 16 Aug 2016 23:47:53 +0000 (16:47 -0700)]
fix tests

8 years agoFix TSRM build
Stanislav Malyshev [Tue, 16 Aug 2016 23:34:35 +0000 (16:34 -0700)]
Fix TSRM build

8 years agoFix bug #72850 - integer overflow in uuencode
Stanislav Malyshev [Tue, 16 Aug 2016 23:03:44 +0000 (16:03 -0700)]
Fix bug #72850 - integer overflow in uuencode

8 years agoFixed bug #72849 - integer overflow in urlencode
Stanislav Malyshev [Tue, 16 Aug 2016 22:58:05 +0000 (15:58 -0700)]
Fixed bug #72849 - integer overflow in urlencode

8 years agoFix bug #72848 - integer overflow in quoted_printable_encode caused heap corruption
Stanislav Malyshev [Tue, 16 Aug 2016 22:48:31 +0000 (15:48 -0700)]
Fix bug #72848 - integer overflow in quoted_printable_encode caused heap corruption

8 years agoFix bug #72838 - Integer overflow lead to heap corruption in sql_regcase
Stanislav Malyshev [Tue, 16 Aug 2016 06:43:59 +0000 (23:43 -0700)]
Fix bug #72838 -  Integer overflow lead to heap corruption in sql_regcase

8 years agoFix bug #72837 - integer overflow in bzdecompress caused heap corruption
Stanislav Malyshev [Tue, 16 Aug 2016 06:17:26 +0000 (23:17 -0700)]
Fix bug #72837 - integer overflow in bzdecompress caused heap corruption

8 years agoFix bug #72836 - integer overflow in base64_decode caused heap corruption
Stanislav Malyshev [Mon, 15 Aug 2016 06:13:30 +0000 (23:13 -0700)]
Fix bug #72836 - integer overflow in base64_decode caused heap corruption

8 years agoFix for bug #72807 - do not produce strings with negative length
Stanislav Malyshev [Fri, 12 Aug 2016 06:36:25 +0000 (23:36 -0700)]
Fix for bug #72807 - do not produce strings with negative length

8 years agoFix for bug #72790 and bug #72799
Stanislav Malyshev [Thu, 11 Aug 2016 06:43:56 +0000 (23:43 -0700)]
Fix for bug #72790 and bug #72799

8 years agoFix bug #72730 - imagegammacorrect allows arbitrary write access
Stanislav Malyshev [Wed, 10 Aug 2016 07:14:58 +0000 (00:14 -0700)]
Fix bug #72730 - imagegammacorrect allows arbitrary write access

8 years agoFix bug#72697 - select_colors write out-of-bounds
Stanislav Malyshev [Wed, 10 Aug 2016 07:00:14 +0000 (00:00 -0700)]
Fix bug#72697 - select_colors write out-of-bounds

8 years agoFixed bug #72627: Memory Leakage In exif_process_IFD_in_TIFF
Stanislav Malyshev [Mon, 8 Aug 2016 07:49:34 +0000 (00:49 -0700)]
Fixed bug #72627: Memory Leakage In exif_process_IFD_in_TIFF

8 years agoFix bug #72750: wddx_deserialize null dereference
Stanislav Malyshev [Sun, 7 Aug 2016 23:26:52 +0000 (16:26 -0700)]
Fix bug #72750: wddx_deserialize null dereference

8 years agoFix bug #72771: ftps:// opendir wrapper is vulnerable to protocol downgrade attack
Stanislav Malyshev [Sun, 7 Aug 2016 23:17:54 +0000 (16:17 -0700)]
Fix bug #72771: ftps:// opendir wrapper is vulnerable to protocol downgrade attack

8 years agoImprove fix for #72663
Stanislav Malyshev [Sun, 7 Aug 2016 22:33:29 +0000 (15:33 -0700)]
Improve fix for #72663

8 years agoFix bug #70436: Use After Free Vulnerability in unserialize()
Stanislav Malyshev [Sun, 7 Aug 2016 22:16:28 +0000 (15:16 -0700)]
Fix bug #70436: Use After Free Vulnerability in unserialize()

8 years agoFix bug #72749: wddx_deserialize allows illegal memory access
Stanislav Malyshev [Thu, 4 Aug 2016 07:17:42 +0000 (00:17 -0700)]
Fix bug #72749: wddx_deserialize allows illegal memory access

8 years agoUpdate comment
Stanislav Malyshev [Thu, 4 Aug 2016 07:03:31 +0000 (00:03 -0700)]
Update comment

8 years agoFix bug #72708 - php_snmp_parse_oid integer overflow in memory allocation
Stanislav Malyshev [Thu, 4 Aug 2016 05:37:57 +0000 (22:37 -0700)]
Fix bug #72708 - php_snmp_parse_oid integer overflow in memory allocation

8 years agoFix bug #72681 - consume data even if we're not storing them
Stanislav Malyshev [Wed, 3 Aug 2016 07:30:12 +0000 (00:30 -0700)]
Fix bug #72681 - consume data even if we're not storing them

8 years agoFix bug #72663 - destroy broken object when unserializing
Stanislav Malyshev [Tue, 2 Aug 2016 08:08:42 +0000 (01:08 -0700)]
Fix bug #72663 - destroy broken object when unserializing

8 years agoMerge branch 'PHP-7.1'
Xinchen Hui [Wed, 17 Aug 2016 03:18:57 +0000 (11:18 +0800)]
Merge branch 'PHP-7.1'

* PHP-7.1:
  Unused var

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Xinchen Hui [Wed, 17 Aug 2016 03:18:48 +0000 (11:18 +0800)]
Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
  Unused var

8 years agoUnused var
Xinchen Hui [Wed, 17 Aug 2016 03:16:48 +0000 (11:16 +0800)]
Unused var

8 years agoMerge branch 'PHP-7.1'
Anatol Belski [Tue, 16 Aug 2016 23:44:58 +0000 (01:44 +0200)]
Merge branch 'PHP-7.1'

* PHP-7.1:
  update NEWS
  update NEWS

8 years agoupdate NEWS
Anatol Belski [Tue, 16 Aug 2016 23:44:29 +0000 (01:44 +0200)]
update NEWS

8 years agoMerge branch 'PHP-7.0' into PHP-7.1
Anatol Belski [Tue, 16 Aug 2016 23:44:04 +0000 (01:44 +0200)]
Merge branch 'PHP-7.0' into PHP-7.1

* PHP-7.0:
  update NEWS

8 years agoupdate NEWS
Anatol Belski [Tue, 16 Aug 2016 23:37:40 +0000 (01:37 +0200)]
update NEWS

8 years agoMerge branch 'PHP-7.1'
Christoph M. Becker [Tue, 16 Aug 2016 23:23:45 +0000 (01:23 +0200)]
Merge branch 'PHP-7.1'