]>
granicus.if.org Git - php/log
Stanislav Malyshev [Mon, 13 Apr 2015 06:49:16 +0000 (23:49 -0700)]
Merge branch 'PHP-5.4.40' into PHP-5.5.24
* PHP-5.4.40:
fix memory leak & add test
Fix tests
Stanislav Malyshev [Mon, 13 Apr 2015 05:00:18 +0000 (22:00 -0700)]
fix memory leak & add test
Stanislav Malyshev [Mon, 13 Apr 2015 03:53:09 +0000 (20:53 -0700)]
Fix tests
Stanislav Malyshev [Mon, 13 Apr 2015 03:13:00 +0000 (20:13 -0700)]
Merge branch 'PHP-5.4.40' into PHP-5.5.24
* PHP-5.4.40:
Fix bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability)
Fix test
Stanislav Malyshev [Mon, 13 Apr 2015 03:12:38 +0000 (20:12 -0700)]
Merge branch 'PHP-5.5-security' into PHP-5.5.24
* PHP-5.5-security: (22 commits)
Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
updated NEWS
added test for bug #69354
revert skipif, this should run everywhere
further ODBC 3.0 compliance
more compliance with the ODBC 3.0
test fixes
Prevent GC from changing zval or object 'color' before they are actually inserted into possible roots buffer.
sigh, can't even copypaste without screwing up
oop, put both the error number and message for both db object to the error message
test fixes
Fixed bug #69281 (opcache_is_script_cached no longer works)
Fix typo: unitialized -> uninitialized
Fix typo: unitialized -> uninitialized
Fixed bug #68739 (Missing break / control flow). Fixed bug #68740 (NULL Pointer Dereference). Fixed bug #68677 (Use After Free).
Fixed bug #68739 (Missing break / control flow in curl)
Fixed bug #68740 (NULL Pointer Dereference)
Fixed bug #68677 (Use After Free in OPcache)
...
Conflicts:
configure.in
ext/curl/tests/bug69316.phpt
main/php_version.h
Stanislav Malyshev [Sun, 12 Apr 2015 08:30:33 +0000 (01:30 -0700)]
Fix bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability)
Stanislav Malyshev [Sun, 12 Apr 2015 07:56:02 +0000 (00:56 -0700)]
Fix test
Stanislav Malyshev [Sat, 11 Apr 2015 23:56:12 +0000 (16:56 -0700)]
Merge branch 'PHP-5.4.40' into PHP-5.5.24
* PHP-5.4.40:
Additional fix for bug #69324
More fixes for bug #69152
Fixed bug #69353 (Missing null byte checks for paths in various PHP extensions)
Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar)
Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
Fixed bug #68901 (use after free)
Fixed bug #68740 (NULL Pointer Dereference)
Fix bug #66550 (SQLite prepared statement use-after-free)
Better fix for #68601 for perf https://bitbucket.org/libgd/gd-libgd/commits/
81e9a993f2893d651d225646378e3fd1b7465467
Fix bug #68601 buffer read overflow in gd_gif_in.c
Revert "Merge branch 'PHP-5.4' of https://git.php.net/repository/php-src into PHP-5.4"
Fixed bug #69293
Add ZEND_ARG_CALLABLE_INFO to allow internal function to type hint against callable.
Stanislav Malyshev [Sat, 11 Apr 2015 23:42:16 +0000 (16:42 -0700)]
Additional fix for bug #69324
Not so happy about duplication but needed due to bug #69429
Stanislav Malyshev [Mon, 6 Apr 2015 00:30:59 +0000 (17:30 -0700)]
More fixes for bug #69152
Stanislav Malyshev [Sun, 5 Apr 2015 23:01:24 +0000 (16:01 -0700)]
Fixed bug #69353 (Missing null byte checks for paths in various PHP extensions)
Stanislav Malyshev [Sun, 5 Apr 2015 22:07:36 +0000 (15:07 -0700)]
Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar)
Stanislav Malyshev [Sat, 4 Apr 2015 22:58:27 +0000 (15:58 -0700)]
Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
Stanislav Malyshev [Sat, 4 Apr 2015 22:03:46 +0000 (15:03 -0700)]
Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
Stanislav Malyshev [Sat, 4 Apr 2015 22:01:37 +0000 (15:01 -0700)]
Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
Xinchen Hui [Wed, 28 Jan 2015 16:00:09 +0000 (00:00 +0800)]
Fixed bug #68901 (use after free)
Xinchen Hui [Tue, 31 Mar 2015 21:41:46 +0000 (00:41 +0300)]
Fixed bug #68740 (NULL Pointer Dereference)
(cherry picked from commit
124fb22a13fafa3648e4e15b4f207c7096d8155e )
Stanislav Malyshev [Mon, 6 Apr 2015 05:27:02 +0000 (22:27 -0700)]
Fix bug #66550 (SQLite prepared statement use-after-free)
Remi Collet [Wed, 17 Dec 2014 09:59:36 +0000 (10:59 +0100)]
Better fix for #68601 for perf
https://bitbucket.org/libgd/gd-libgd/commits/
81e9a993f2893d651d225646378e3fd1b7465467
Remi Collet [Sat, 13 Dec 2014 08:03:44 +0000 (09:03 +0100)]
Fix bug #68601 buffer read overflow in gd_gif_in.c
Stanislav Malyshev [Sun, 5 Apr 2015 07:36:57 +0000 (00:36 -0700)]
Merge branch 'PHP-5.4.40' into PHP-5.5-security
* PHP-5.4.40:
Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
Revert "Merge branch 'PHP-5.4' of https://git.php.net/repository/php-src into PHP-5.4"
Fixed bug #69293
Add ZEND_ARG_CALLABLE_INFO to allow internal function to type hint against callable.
Stanislav Malyshev [Sat, 4 Apr 2015 22:58:27 +0000 (15:58 -0700)]
Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
Stanislav Malyshev [Sat, 4 Apr 2015 22:03:46 +0000 (15:03 -0700)]
Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
Stanislav Malyshev [Sat, 4 Apr 2015 22:01:37 +0000 (15:01 -0700)]
Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
Anatol Belski [Sat, 4 Apr 2015 19:49:09 +0000 (21:49 +0200)]
updated NEWS
fixes for bug #69354 was cherrypicked from master
Anatol Belski [Thu, 2 Apr 2015 16:50:16 +0000 (18:50 +0200)]
added test for bug #69354
Anatol Belski [Thu, 2 Apr 2015 13:37:08 +0000 (15:37 +0200)]
revert skipif, this should run everywhere
Anatol Belski [Thu, 2 Apr 2015 13:30:31 +0000 (15:30 +0200)]
further ODBC 3.0 compliance
Anatol Belski [Thu, 2 Apr 2015 12:23:23 +0000 (14:23 +0200)]
more compliance with the ODBC 3.0
Anatol Belski [Thu, 2 Apr 2015 12:22:56 +0000 (14:22 +0200)]
test fixes
Dmitry Stogov [Thu, 2 Apr 2015 09:29:15 +0000 (12:29 +0300)]
Prevent GC from changing zval or object 'color' before they are actually inserted into possible roots buffer.
Stanislav Malyshev [Thu, 2 Apr 2015 06:43:33 +0000 (23:43 -0700)]
Revert "Merge branch 'PHP-5.4' of https://git.php.net/repository/php-src into PHP-5.4"
This reverts commit
fe0ca2745f00940a27bfc8e87db534541a19af70 , reversing
changes made to
968fbc6acf0bc27be17c0209be7f966e89a55943 .
Xinchen Hui [Thu, 2 Apr 2015 01:06:38 +0000 (09:06 +0800)]
Merge branch 'PHP-5.5' of https://git.php.net/repository/php-src into PHP-5.5
Ferenc Kovacs [Wed, 1 Apr 2015 22:07:00 +0000 (00:07 +0200)]
sigh, can't even copypaste without screwing up
Ferenc Kovacs [Wed, 1 Apr 2015 21:06:04 +0000 (23:06 +0200)]
oop, put both the error number and message for both db object to the error message
Ferenc Kovacs [Wed, 1 Apr 2015 20:03:19 +0000 (22:03 +0200)]
test fixes
Ferenc Kovacs [Wed, 1 Apr 2015 16:05:36 +0000 (18:05 +0200)]
Merge branch 'pr-1212' into PHP-5.5
* pr-1212:
Fix typo: unitialized -> uninitialized
Danack [Wed, 1 Apr 2015 15:58:22 +0000 (23:58 +0800)]
Fixed bug #69281 (opcache_is_script_cached no longer works)
Lior Kaplan [Wed, 1 Apr 2015 15:19:09 +0000 (18:19 +0300)]
Fix typo: unitialized -> uninitialized
Lior Kaplan [Wed, 1 Apr 2015 15:07:37 +0000 (18:07 +0300)]
Fix typo: unitialized -> uninitialized
Lior Kaplan [Tue, 31 Mar 2015 22:45:34 +0000 (01:45 +0300)]
Fixed bug #68739 (Missing break / control flow).
Fixed bug #68740 (NULL Pointer Dereference).
Fixed bug #68677 (Use After Free).
Xinchen Hui [Tue, 31 Mar 2015 21:57:39 +0000 (00:57 +0300)]
Fixed bug #68739 (Missing break / control flow in curl)
(cherry picked from commit
124fb22a13fafa3648e4e15b4f207c7096d8155e )
Xinchen Hui [Tue, 31 Mar 2015 21:41:46 +0000 (00:41 +0300)]
Fixed bug #68740 (NULL Pointer Dereference)
(cherry picked from commit
124fb22a13fafa3648e4e15b4f207c7096d8155e )
Xinchen Hui [Thu, 8 Jan 2015 08:32:20 +0000 (16:32 +0800)]
Fixed bug #68677 (Use After Free in OPcache)
(cherry picked from commit
777c39f4042327eac4b63c7ee87dc1c7a09a3115 )
Julien Pauli [Tue, 31 Mar 2015 15:46:23 +0000 (17:46 +0200)]
Updated NEWS
Derick Rethans [Tue, 31 Mar 2015 15:35:03 +0000 (16:35 +0100)]
Fixed bug #69336 (Issues with "last day of <monthname>").
Derick Rethans [Tue, 31 Mar 2015 15:35:03 +0000 (16:35 +0100)]
Fixed bug #69336 (Issues with "last day of <monthname>").
Julien Pauli [Tue, 31 Mar 2015 14:03:52 +0000 (16:03 +0200)]
5.5.24RC1
Julien Pauli [Tue, 31 Mar 2015 13:51:47 +0000 (15:51 +0200)]
5.5.25 now
Derick Rethans [Tue, 31 Mar 2015 10:08:56 +0000 (11:08 +0100)]
Export date_get_immutable_ce() so that extensions can make use of it too.
Lior Kaplan [Tue, 31 Mar 2015 06:14:06 +0000 (09:14 +0300)]
Align entries format
Lior Kaplan [Tue, 31 Mar 2015 06:12:05 +0000 (09:12 +0300)]
Update CVE for Bug #68976 to CVE-2015-2787 instead of reusing CVE for #68710
Lior Kaplan [Tue, 31 Mar 2015 06:11:21 +0000 (09:11 +0300)]
Add CVE for bug #69207
Michael Wallner [Mon, 30 Mar 2015 14:19:17 +0000 (16:19 +0200)]
Fixed bug #64931
phar_add_file is too restrive on filename
Check for any of '/', '\\', '\0' after ".phar".
Michael Wallner [Mon, 30 Mar 2015 13:39:30 +0000 (15:39 +0200)]
Fixed Bug #65467
Call to undefined method cli_arg_typ_string
Use cli_arg_typ_filecontent instead.
Michael Wallner [Mon, 30 Mar 2015 12:41:30 +0000 (14:41 +0200)]
fix bug #67761
Phar::mapPhar fails for Phars inside a path containing ".tar".
Strengthen the silly .tar file extension check.
Michael Wallner [Mon, 30 Mar 2015 11:09:32 +0000 (13:09 +0200)]
Fixed bug 64343
PharData::extractTo fails for tarball created by BSD tar
Phar did not know about PAX style global/file headers.
Skip them, to be able to read the contents of those archives.
Dmitry Stogov [Fri, 27 Mar 2015 15:40:58 +0000 (18:40 +0300)]
Fixed bug #69293
Leigh [Fri, 27 Mar 2015 12:24:36 +0000 (13:24 +0100)]
Add RAND_egd check for compiling against LibreSSL
Lior Kaplan [Wed, 25 Mar 2015 17:26:40 +0000 (19:26 +0200)]
Add CVE for bug #68901
Anatol Belski [Wed, 25 Mar 2015 12:13:03 +0000 (13:13 +0100)]
Fixed bug #69287 upgrade bundled sqlite to 3.8.8.3
Anatol Belski [Wed, 25 Mar 2015 12:11:27 +0000 (13:11 +0100)]
fix dir separator in test
Remi Collet [Wed, 25 Mar 2015 09:33:08 +0000 (10:33 +0100)]
Xinchen Hui [Wed, 25 Mar 2015 05:54:12 +0000 (13:54 +0800)]
Fixed typo
Xinchen Hui [Wed, 25 Mar 2015 05:05:08 +0000 (13:05 +0800)]
Merge branch 'PHP-5.4' of https://git.php.net/repository/php-src into PHP-5.4
Xinchen Hui [Wed, 25 Mar 2015 04:09:21 +0000 (12:09 +0800)]
UPdate NEWS
Xinchen Hui [Wed, 25 Mar 2015 04:07:25 +0000 (12:07 +0800)]
Bug #69293 NEW segfault when using SoapClient::__setSoapHeader (bisected, regression)
This was a typo introduced in
c8eaca013a3922e8383def6158ece2b63f6ec483
Anatol Belski [Mon, 23 Mar 2015 07:35:36 +0000 (08:35 +0100)]
updated libs versions
Tjerk Meesters [Wed, 17 Sep 2014 13:38:56 +0000 (21:38 +0800)]
Fixed #68021 - get_browser() browser_name_regex
Replaced expression delimiter with tilde (~) and escape where necessary.
Lior Kaplan [Sun, 22 Mar 2015 20:30:32 +0000 (22:30 +0200)]
Print checking message for all ODBC drivers
This makes the output more readble in case no ODBC driver was selected
Lior Kaplan [Sun, 22 Mar 2015 20:28:16 +0000 (22:28 +0200)]
Change default option of ODBC drivers to no to enable bulding standalone ODBC
Masaki Kagaya [Sun, 22 Mar 2015 23:10:06 +0000 (08:10 +0900)]
add CURL_HTTP_VERSION_2_0 and CURL_VERSION_HTTP2
Stanislav Malyshev [Mon, 23 Mar 2015 01:30:21 +0000 (18:30 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Bacport fix bug #68741 - Null pointer dereference
Check that the type is correct
Stanislav Malyshev [Mon, 23 Mar 2015 01:20:59 +0000 (18:20 -0700)]
Bacport fix bug #68741 - Null pointer dereference
Stanislav Malyshev [Mon, 23 Mar 2015 01:17:47 +0000 (18:17 -0700)]
Check that the type is correct
Danack [Tue, 6 Jan 2015 22:09:13 +0000 (22:09 +0000)]
Fix #68760: Fix freeing null segfault. Added test for behaviour.
Anatol Belski [Sun, 22 Mar 2015 23:07:09 +0000 (00:07 +0100)]
cosmetic fix to default odbcver
Rasmus Lerdorf [Sat, 21 Mar 2015 15:23:20 +0000 (08:23 -0700)]
Remove extraneous strlen() call
Derick Rethans [Sat, 21 Mar 2015 13:51:09 +0000 (14:51 +0100)]
- Updated to version 2015.2 (2015b)
Ferenc Kovacs [Fri, 20 Mar 2015 12:34:16 +0000 (13:34 +0100)]
add pear to the travis build
Julien Pauli [Fri, 20 Mar 2015 09:45:36 +0000 (10:45 +0100)]
Updated NEWS
Stanislav Malyshev [Fri, 20 Mar 2015 06:05:34 +0000 (23:05 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
add CVEs
Stanislav Malyshev [Fri, 20 Mar 2015 05:53:29 +0000 (22:53 -0700)]
add CVEs
Lior Kaplan [Thu, 19 Mar 2015 16:23:34 +0000 (18:23 +0200)]
Add CVE ID for #68735
Dmitry Stogov [Thu, 19 Mar 2015 08:42:49 +0000 (11:42 +0300)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Fixed bug #69152
Dmitry Stogov [Thu, 19 Mar 2015 08:36:01 +0000 (11:36 +0300)]
Fixed bug #69152
Lior Kaplan [Thu, 19 Mar 2015 00:35:20 +0000 (02:35 +0200)]
Align entries format
Lior Kaplan [Thu, 19 Mar 2015 00:30:31 +0000 (02:30 +0200)]
Add CVE to bug #69248
Lior Kaplan [Thu, 19 Mar 2015 00:29:43 +0000 (02:29 +0200)]
Add CVE assigned to 5.5.22 bugs after the release
Julien Pauli [Wed, 18 Mar 2015 10:34:45 +0000 (11:34 +0100)]
Updated NEWS
Julien Pauli [Wed, 18 Mar 2015 09:55:32 +0000 (10:55 +0100)]
Updated NEWS
Stanislav Malyshev [Wed, 18 Mar 2015 05:39:10 +0000 (22:39 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
5.4.40 next
Conflicts:
configure.in
main/php_version.h
Stanislav Malyshev [Wed, 18 Mar 2015 05:37:16 +0000 (22:37 -0700)]
5.4.40 next
Stanislav Malyshev [Wed, 18 Mar 2015 05:00:53 +0000 (22:00 -0700)]
update NEWS
Stanislav Malyshev [Wed, 18 Mar 2015 05:00:29 +0000 (22:00 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Fix bug #69253 - ZIP Integer Overflow leads to writing past heap boundary
Stanislav Malyshev [Wed, 18 Mar 2015 04:59:56 +0000 (21:59 -0700)]
Fix bug #69253 - ZIP Integer Overflow leads to writing past heap boundary
Stanislav Malyshev [Wed, 18 Mar 2015 00:07:38 +0000 (17:07 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Fix bug #69248 - heap overflow vulnerability in regcomp.c
add test for bug #68976
Stanislav Malyshev [Wed, 18 Mar 2015 00:04:57 +0000 (17:04 -0700)]
Fix bug #69248 - heap overflow vulnerability in regcomp.c
Merged from https://github.com/garyhouston/regex/commit/
70bc2965604b6b8aaf260049e64c708dddf85334
Stanislav Malyshev [Wed, 18 Mar 2015 00:03:46 +0000 (17:03 -0700)]
add test for bug #68976
Stanislav Malyshev [Tue, 17 Mar 2015 20:24:17 +0000 (13:24 -0700)]
add NEWS