]>
granicus.if.org Git - php/log
Anatol Belski [Mon, 7 Sep 2015 15:29:55 +0000 (17:29 +0200)]
add test for bug #70423
Bob Weinand [Mon, 7 Sep 2015 15:28:29 +0000 (17:28 +0200)]
Fixed bug #70449 (PHP won't compile on 10.4 and 10.5 because of missing constants)
Anatol Belski [Mon, 7 Sep 2015 15:09:19 +0000 (17:09 +0200)]
update NEWS
Anatol Belski [Mon, 7 Sep 2015 13:14:26 +0000 (15:14 +0200)]
remove unnecessary check
as it's unrelated to the size pre calculation
Anatol Belski [Mon, 7 Sep 2015 13:02:33 +0000 (15:02 +0200)]
Fix bug #70423 Warning Internal error: wrong size calculation
Remi Collet [Mon, 7 Sep 2015 12:04:20 +0000 (14:04 +0200)]
ext/zip version is now 1.13.0
Remi Collet [Mon, 7 Sep 2015 11:55:19 +0000 (13:55 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
Fix build
Remi Collet [Mon, 7 Sep 2015 11:52:28 +0000 (13:52 +0200)]
Fix build
php_zip.c:1647:2: warning: suggest parentheses around assignment used as truth value [-Wparentheses]
php_zip.c:1648:3: error: format not a string literal and no format arguments [-Werror=format-security]
Yasuo Ohgaki [Sun, 6 Sep 2015 19:45:20 +0000 (04:45 +0900)]
Make sure closing save handler.
Yasuo Ohgaki [Sun, 6 Sep 2015 08:14:34 +0000 (17:14 +0900)]
Fix #70013: Reference to $_SESSION is lost after a call to session_regenerate_id()
Jakub Zelenka [Sun, 6 Sep 2015 18:13:41 +0000 (19:13 +0100)]
Update NEWS for OpenSSL
Jakub Zelenka [Sun, 6 Sep 2015 18:09:56 +0000 (19:09 +0100)]
Fix request #70438: Add IV parameter for openssl_seal and openssl_open
Jakub Zelenka [Sun, 6 Sep 2015 15:51:06 +0000 (16:51 +0100)]
Fix OpenSSL record in NEWS file
Jakub Zelenka [Sun, 6 Sep 2015 15:42:37 +0000 (16:42 +0100)]
Merge branch 'PHP-5.6'
Jakub Zelenka [Sun, 6 Sep 2015 15:39:59 +0000 (16:39 +0100)]
Fix bug #60632: openssl_seal fails with AES
Christoph M. Becker [Sun, 6 Sep 2015 13:37:35 +0000 (15:37 +0200)]
updated NEWS
Christoph M. Becker [Sun, 6 Sep 2015 13:36:43 +0000 (15:36 +0200)]
Revert "Fix #70029: nodeValue of DOMElement list content of children nodes"
This reverts commit
25a52d98d7cb2d4f3b3636eac45c71a1ae03c760 .
Christoph M. Becker [Sat, 5 Sep 2015 12:51:25 +0000 (14:51 +0200)]
updated NEWS
Christoph M. Becker [Sat, 5 Sep 2015 12:43:19 +0000 (14:43 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
Fix #68291: 404 on urls with '+'
Resolved conflicts:
sapi/cli/php_cli_server.c
Christoph M. Becker [Sat, 5 Sep 2015 12:39:24 +0000 (14:39 +0200)]
updated NEWS
Christoph M. Becker [Sat, 5 Sep 2015 11:52:41 +0000 (13:52 +0200)]
Fix #68291: 404 on urls with '+'
URI paths have to be treated according to RFC 3986 by the CLI web server, not
as application/x-www-form-urlencoded.
Christoph M. Becker [Sat, 5 Sep 2015 01:22:45 +0000 (03:22 +0200)]
updated NEWS
Christoph M. Becker [Sat, 5 Sep 2015 01:19:43 +0000 (03:19 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
Fix #70395: Missing ARG_INFO for openssl_seal()
Christoph M. Becker [Sat, 5 Sep 2015 01:14:56 +0000 (03:14 +0200)]
updated NEWS
Christoph M. Becker [Tue, 1 Sep 2015 23:13:49 +0000 (01:13 +0200)]
Fix #70395: Missing ARG_INFO for openssl_seal()
This patch adds the missing ARG_INFO for the optional 5th parameter $method.
Christoph M. Becker [Sat, 5 Sep 2015 00:03:23 +0000 (02:03 +0200)]
updated NEWS and UPGRADING
Christoph M. Becker [Fri, 10 Jul 2015 11:42:09 +0000 (13:42 +0200)]
Fix #70029: nodeValue of DOMElement list content of children nodes
According to the W3C DOM Core Level 3 specification DOMElement::nodeValue is
supposed to yield null, but currently the DOM extension yield the result of
calling xmlNodeGetContent(), what is the concatenation of the values of the
children of the element. This patch fixes the non standard behavior.
Christoph M. Becker [Fri, 4 Sep 2015 23:35:16 +0000 (01:35 +0200)]
updated NEWS
Christoph M. Becker [Fri, 4 Sep 2015 23:32:08 +0000 (01:32 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
Fix #70001: Assigning to DOMNode::textContent does additional entity encoding
Resolved conflicts:
ext/dom/node.c
Christoph M. Becker [Fri, 4 Sep 2015 23:27:59 +0000 (01:27 +0200)]
updated NEWS
Christoph M. Becker [Tue, 7 Jul 2015 12:55:00 +0000 (14:55 +0200)]
Fix #70001: Assigning to DOMNode::textContent does additional entity encoding
Assigning to DOMNode::textContent encodes entities, what does not match the
behavior of DOMText::__construct() and DOMDocument::createTextNode. This patch
changes the behavior of DOMNode::textContent in this regard.
Christoph M. Becker [Fri, 4 Sep 2015 22:47:09 +0000 (00:47 +0200)]
updated NEWS
Christoph M. Becker [Fri, 4 Sep 2015 22:43:41 +0000 (00:43 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
Fix #70322: ZipArchive::close() doesn't indicate errors
Christoph M. Becker [Fri, 4 Sep 2015 22:37:08 +0000 (00:37 +0200)]
updated NEWS
Christoph M. Becker [Fri, 21 Aug 2015 20:26:26 +0000 (22:26 +0200)]
Fix #70322: ZipArchive::close() doesn't indicate errors
If an archive can't be written, ZipArchive::close() nonetheless returns TRUE.
We fix the return value to properly return success, and additionally raise a
warning on failure.
Jakub Zelenka [Fri, 4 Sep 2015 19:00:29 +0000 (20:00 +0100)]
Simplify JSON constants registration
Jakub Zelenka [Fri, 4 Sep 2015 18:56:59 +0000 (19:56 +0100)]
Add my name to authors for previous refactoring
Related to jsond changes
Jakub Zelenka [Fri, 4 Sep 2015 18:37:05 +0000 (19:37 +0100)]
Move json_decode options macros bellow encode options
Ryan McCullagh [Fri, 4 Sep 2015 02:13:10 +0000 (21:13 -0500)]
json: fix formating of PHP_JSON* option bitshifts
Kalle Sommer Nielsen [Fri, 4 Sep 2015 15:59:06 +0000 (17:59 +0200)]
Merge branch 'pull-request/1497'
Kalle Sommer Nielsen [Fri, 4 Sep 2015 15:49:48 +0000 (17:49 +0200)]
Fix build on Windows
Bob Weinand [Fri, 4 Sep 2015 14:35:15 +0000 (16:35 +0200)]
Merge remote-tracking branch 'origin/PHP-5.6'
Niklas Keller [Tue, 25 Aug 2015 18:07:20 +0000 (20:07 +0200)]
Fix #70361: HTTP stream wrapper doesn't close keep-alive connections
Márcio Almada [Fri, 4 Sep 2015 03:45:49 +0000 (00:45 -0300)]
adds missing tokens to list of semi-reserved words and regenerates test suite
Joe Watkins [Thu, 3 Sep 2015 18:28:34 +0000 (19:28 +0100)]
these need to be exported for extensions that use json
Anatol Belski [Thu, 3 Sep 2015 17:04:39 +0000 (19:04 +0200)]
prepare NEWS for next
Lior Kaplan [Thu, 3 Sep 2015 16:49:07 +0000 (19:49 +0300)]
Align NEWS entries format
Lior Kaplan [Thu, 3 Sep 2015 16:46:41 +0000 (19:46 +0300)]
Align NEWS entries format
Anatol Belski [Thu, 3 Sep 2015 16:25:14 +0000 (18:25 +0200)]
sync NEWS
Lior Kaplan [Thu, 3 Sep 2015 15:46:07 +0000 (18:46 +0300)]
Add missing variable from birdstep_commit() which got removed in
e8fcd52ef
Lior Kaplan [Thu, 3 Sep 2015 14:53:53 +0000 (17:53 +0300)]
Align NEWS entries format
Lior Kaplan [Thu, 3 Sep 2015 14:51:07 +0000 (17:51 +0300)]
Add CVE for #70140 (PHP 7.0.0 Beta 3)
Xinchen Hui [Thu, 3 Sep 2015 06:15:57 +0000 (23:15 -0700)]
Seems master is not affected
Xinchen Hui [Thu, 3 Sep 2015 05:14:48 +0000 (22:14 -0700)]
We should keep one refcount to resource
Xinchen Hui [Thu, 3 Sep 2015 05:07:29 +0000 (22:07 -0700)]
Fixed bug #70398 (SIGSEGV, Segmentation fault zend_ast_destroy_ex)
Xinchen Hui [Thu, 3 Sep 2015 04:59:36 +0000 (21:59 -0700)]
Fixed test
Levi Morrison [Thu, 3 Sep 2015 00:23:26 +0000 (18:23 -0600)]
Partially fix bug #67167 - Wrong return value...
...from FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE
The remainer of the fix would require the filter functions to only
convert to string when it makes sense for that particular filter.
Ferenc Kovacs [Wed, 2 Sep 2015 23:58:29 +0000 (01:58 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
move the phpdbg NEWS entry to the correct version
Ferenc Kovacs [Wed, 2 Sep 2015 23:58:13 +0000 (01:58 +0200)]
move the phpdbg NEWS entry to the correct version
Ferenc Kovacs [Wed, 2 Sep 2015 23:47:17 +0000 (01:47 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
add missing news entries
Ferenc Kovacs [Wed, 2 Sep 2015 23:46:38 +0000 (01:46 +0200)]
add missing news entries
Levi Morrison [Wed, 2 Sep 2015 16:12:08 +0000 (10:12 -0600)]
Skip if ext/filter isn't loaded
Julien Pauli [Wed, 2 Sep 2015 15:56:49 +0000 (17:56 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
Merge branch 'PHP-5.6'
bump version
Julien Pauli [Wed, 2 Sep 2015 15:55:57 +0000 (17:55 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Merge branch 'PHP-5.6'
bump version
Julien Pauli [Wed, 2 Sep 2015 15:55:20 +0000 (17:55 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Merge branch 'PHP-5.6'
bump version
Conflicts:
configure.in
main/php_version.h
Matteo Beccati [Sat, 29 Aug 2015 08:48:53 +0000 (10:48 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
Added missing skipif for phar+zlib test
Julien Pauli [Wed, 2 Sep 2015 15:51:02 +0000 (17:51 +0200)]
Merge branch 'PHP-5.6'
* PHP-5.6:
5.5.30 next
More fixes for bug #70219
Conflicts:
ext/pcre/php_pcre.c
ext/session/session.c
Julien Pauli [Wed, 2 Sep 2015 15:42:00 +0000 (17:42 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
5.5.30 next
Conflicts:
configure.in
main/php_version.h
Julien Pauli [Wed, 2 Sep 2015 15:40:56 +0000 (17:40 +0200)]
5.5.30 next
Xinchen Hui [Wed, 2 Sep 2015 15:36:43 +0000 (23:36 +0800)]
Merge branch 'master' of git.php.net:/php-src
Xinchen Hui [Wed, 2 Sep 2015 15:36:13 +0000 (23:36 +0800)]
Use ZSTR_VAL
Xinchen Hui [Wed, 2 Sep 2015 15:28:51 +0000 (23:28 +0800)]
Merge branch 'fix-dtrace-phpdbg' of https://github.com/reeze/php-src
Anatol Belski [Wed, 2 Sep 2015 15:26:35 +0000 (17:26 +0200)]
fix dir separators in test
Anatol Belski [Wed, 2 Sep 2015 15:25:00 +0000 (17:25 +0200)]
use correct api
Anatol Belski [Wed, 2 Sep 2015 15:20:24 +0000 (17:20 +0200)]
fix leak
Anatol Belski [Mon, 31 Aug 2015 20:22:46 +0000 (22:22 +0200)]
cleanup an atavism
no DOS support here )
Anatol Belski [Mon, 31 Aug 2015 19:48:14 +0000 (21:48 +0200)]
add overflow check
Anatol Belski [Mon, 31 Aug 2015 19:43:24 +0000 (21:43 +0200)]
remove unnecessary macros
Dmitry Stogov [Wed, 2 Sep 2015 12:55:41 +0000 (15:55 +0300)]
Use regular huge pages instead of anonymous if available.
Dmitry Stogov [Wed, 2 Sep 2015 10:05:12 +0000 (13:05 +0300)]
Introduced additional check. Its miss might be the reason of bug #70392 (SIGSEGV during PHP shutdown)
Dmitry Stogov [Wed, 2 Sep 2015 10:03:31 +0000 (13:03 +0300)]
Prevent HashTable compaction below HT_MIN_SIZE (this may lead to hash collisions).
Stanislav Malyshev [Wed, 2 Sep 2015 08:23:40 +0000 (01:23 -0700)]
Temporary add XFAILs, will fix soon
Stanislav Malyshev [Wed, 2 Sep 2015 08:21:47 +0000 (01:21 -0700)]
fix memory leak
Stanislav Malyshev [Wed, 2 Sep 2015 08:00:16 +0000 (01:00 -0700)]
Merge remote-tracking branch 'origin/master'
* origin/master:
Add test for ReflectionMethod::getPrototype_basic()
Added two tests to check the main functionallity of recode extension
Doubles are not refcounted
Fix #32490: constructor of mysqli has wrong name
Stanislav Malyshev [Tue, 1 Sep 2015 19:40:10 +0000 (12:40 -0700)]
Merge branch 'PHP-5.6'
* PHP-5.6: (21 commits)
fix unit tests
update NEWS
add NEWS for fixes
Improve fix for #70172
Fix bug #70312 - HAVAL gives wrong hashes in specific cases
fix test
add test
Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
Fix bug #70172 - Use After Free Vulnerability in unserialize()
Fix bug #70388 - SOAP serialize_function_call() type confusion
Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
Improve fix for #70385
Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
Fix bug #70219 (Use after free vulnerability in session deserializer)
Fix bug ##70284 (Use after free vulnerability in unserialize() with GMP)
Fix for bug #69782
Add CVE IDs asigned (post release) to PHP 5.4.43
Add CVE IDs asigned to #69085 (PHP 5.4.39)
...
Conflicts:
ext/exif/exif.c
ext/gmp/gmp.c
ext/pcre/php_pcre.c
ext/session/session.c
ext/session/tests/session_decode_variation3.phpt
ext/soap/soap.c
ext/spl/spl_observer.c
ext/standard/var.c
ext/standard/var_unserializer.c
ext/standard/var_unserializer.re
ext/xsl/xsltprocessor.c
Davey Shafik [Wed, 2 Sep 2015 04:06:31 +0000 (16:06 +1200)]
Add CURLPIPE_* constants to properly expose HTTP/2 multiplexing
marcosptf [Tue, 25 Aug 2015 04:22:42 +0000 (01:22 -0300)]
Add test for ReflectionMethod::getPrototype_basic()
Daniel Persson [Tue, 1 Sep 2015 19:53:09 +0000 (21:53 +0200)]
Added two tests to check the main functionallity of recode extension
Hannes Magnusson [Tue, 1 Sep 2015 21:52:04 +0000 (14:52 -0700)]
Doubles are not refcounted
Stanislav Malyshev [Tue, 1 Sep 2015 20:12:16 +0000 (13:12 -0700)]
bump version
Stanislav Malyshev [Tue, 1 Sep 2015 19:51:48 +0000 (12:51 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
More fixes for bug #70219
Christoph M. Becker [Tue, 1 Sep 2015 16:38:11 +0000 (18:38 +0200)]
Fix #32490: constructor of mysqli has wrong name
As of PHP 7 old style constructor names are deprecated, so we rename
mysqli::mysqli() to mysqli::__construct().
Stanislav Malyshev [Tue, 1 Sep 2015 19:24:14 +0000 (12:24 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
fix unit tests
Stanislav Malyshev [Tue, 1 Sep 2015 19:24:06 +0000 (12:24 -0700)]
Merge branch 'PHP-5.5' into PHP-5.5.29
* PHP-5.5:
fix unit tests
Stanislav Malyshev [Tue, 1 Sep 2015 19:23:55 +0000 (12:23 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
fix unit tests
Stanislav Malyshev [Tue, 1 Sep 2015 19:23:22 +0000 (12:23 -0700)]
fix unit tests
Stanislav Malyshev [Tue, 1 Sep 2015 19:06:41 +0000 (12:06 -0700)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
update NEWS
add NEWS for fixes
Improve fix for #70172
Fix bug #70312 - HAVAL gives wrong hashes in specific cases
fix test
add test
Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
Fix bug #70172 - Use After Free Vulnerability in unserialize()
Fix bug #70388 - SOAP serialize_function_call() type confusion
Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
Improve fix for #70385
Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
Fix bug #70219 (Use after free vulnerability in session deserializer)
Fix for bug #69782
Add CVE IDs asigned (post release) to PHP 5.4.43
Add CVE IDs asigned to #69085 (PHP 5.4.39)
5.4.45 next
Conflicts:
ext/pcre/php_pcre.c
ext/standard/var_unserializer.c
ext/standard/var_unserializer.re
ext/zip/php_zip.c
Stanislav Malyshev [Tue, 1 Sep 2015 19:05:02 +0000 (12:05 -0700)]
Merge branch '70284' into PHP-5.6
* 70284:
Fix bug ##70284 (Use after free vulnerability in unserialize() with GMP)
Stanislav Malyshev [Tue, 1 Sep 2015 19:04:04 +0000 (12:04 -0700)]
Merge branch 'PHP-5.5' into PHP-5.5.29
* PHP-5.5:
update NEWS
add NEWS for fixes
Stanislav Malyshev [Tue, 1 Sep 2015 19:03:48 +0000 (12:03 -0700)]
update NEWS