]>
granicus.if.org Git - php/log
Stanislav Malyshev [Thu, 26 Jun 2014 17:36:38 +0000 (10:36 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
more extensive note on unserialize() change
Stanislav Malyshev [Thu, 26 Jun 2014 17:35:47 +0000 (10:35 -0700)]
more extensive note on unserialize() change
Stanislav Malyshev [Tue, 24 Jun 2014 18:23:02 +0000 (11:23 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Fix test - because of big #67397 we don't allow overlong locales anymore
Stanislav Malyshev [Tue, 24 Jun 2014 18:21:43 +0000 (11:21 -0700)]
Fix test - because of big #67397 we don't allow overlong locales anymore
Stanislav Malyshev [Tue, 24 Jun 2014 17:25:09 +0000 (10:25 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
5.4.30
Better fix for bug #67072 with more BC provisions
Fix bug #67498 - phpinfo() Type Confusion Information Leak Vulnerability
update CVE
Fix bug #67492: unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion
Fix bug #67397 (Buffer overflow in locale_get_display_name->uloc_getDisplayName (libicu 4.8.1))
Fix bug #67349: Locale::parseLocale Double Free
add CVEs
Fix potential segfault in dns_get_record()
Fix bug #66127 (Segmentation fault with ArrayObject unset)
5.4.30 rc1
Conflicts:
ext/intl/locale/locale_methods.c
Stanislav Malyshev [Tue, 24 Jun 2014 17:23:36 +0000 (10:23 -0700)]
Merge branch 'PHP-5.4.30' into PHP-5.4
* PHP-5.4.30:
5.4.30
Better fix for bug #67072 with more BC provisions
Fix bug #67498 - phpinfo() Type Confusion Information Leak Vulnerability
update CVE
Fix bug #67492: unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion
Fix bug #67397 (Buffer overflow in locale_get_display_name->uloc_getDisplayName (libicu 4.8.1))
Fix bug #67349: Locale::parseLocale Double Free
add CVEs
Fix potential segfault in dns_get_record()
Fix bug #66127 (Segmentation fault with ArrayObject unset)
5.4.30 rc1
Conflicts:
configure.in
main/php_version.h
Stanislav Malyshev [Tue, 24 Jun 2014 17:20:51 +0000 (10:20 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
update NEWS
Stanislav Malyshev [Tue, 24 Jun 2014 17:20:33 +0000 (10:20 -0700)]
update NEWS
Stanislav Malyshev [Tue, 24 Jun 2014 17:17:34 +0000 (10:17 -0700)]
5.4.30
Stanislav Malyshev [Sun, 22 Jun 2014 04:28:33 +0000 (21:28 -0700)]
Better fix for bug #67072 with more BC provisions
Stanislav Malyshev [Tue, 24 Jun 2014 05:13:32 +0000 (22:13 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Better fix for bug #67072 with more BC provisions
Stanislav Malyshev [Mon, 23 Jun 2014 07:19:37 +0000 (00:19 -0700)]
Fix bug #67498 - phpinfo() Type Confusion Information Leak Vulnerability
Stanislav Malyshev [Mon, 23 Jun 2014 07:07:08 +0000 (00:07 -0700)]
update CVE
Stanislav Malyshev [Sun, 22 Jun 2014 04:28:33 +0000 (21:28 -0700)]
Better fix for bug #67072 with more BC provisions
Stanislav Malyshev [Sun, 22 Jun 2014 04:28:33 +0000 (21:28 -0700)]
Better fix for bug #67072 with more BC provisions
Stanislav Malyshev [Sun, 22 Jun 2014 02:46:16 +0000 (19:46 -0700)]
Fix bug #67492: unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion
Stanislav Malyshev [Sun, 8 Jun 2014 20:44:40 +0000 (13:44 -0700)]
Fix bug #67397 (Buffer overflow in locale_get_display_name->uloc_getDisplayName (libicu 4.8.1))
Stanislav Malyshev [Wed, 4 Jun 2014 08:06:01 +0000 (01:06 -0700)]
Fix bug #67349: Locale::parseLocale Double Free
Stanislav Malyshev [Sun, 22 Jun 2014 01:37:08 +0000 (18:37 -0700)]
add CVEs
Dmitry Stogov [Fri, 20 Jun 2014 09:57:38 +0000 (13:57 +0400)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Fixed MarinaDB support
Dmitry Stogov [Fri, 20 Jun 2014 09:56:32 +0000 (13:56 +0400)]
Fixed MarinaDB support
Andrey Hristov [Wed, 18 Jun 2014 13:20:14 +0000 (16:20 +0300)]
Suppress test failure with MySQL 5.7
Lior Kaplan [Tue, 17 Jun 2014 21:12:33 +0000 (00:12 +0300)]
Update copyright year to 2014
Lior Kaplan [Tue, 17 Jun 2014 21:11:55 +0000 (00:11 +0300)]
Update copyright year to 2014
Align with online version at http://www.php.net/license/3_01.txt
Lior Kaplan [Tue, 17 Jun 2014 21:11:35 +0000 (00:11 +0300)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Update copyright year to 2014
Update copyright year to 2014
Lior Kaplan [Tue, 17 Jun 2014 20:57:20 +0000 (23:57 +0300)]
Update copyright year to 2014
Lior Kaplan [Tue, 17 Jun 2014 20:56:46 +0000 (23:56 +0300)]
Update copyright year to 2014
Lior Kaplan [Mon, 16 Jun 2014 20:30:44 +0000 (23:30 +0300)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Update copyright year for re2c generated files
Update copyright year to 2014
Update copyright year for re2c files as well
Lior Kaplan [Mon, 16 Jun 2014 20:28:36 +0000 (23:28 +0300)]
Update copyright year for re2c generated files
Lior Kaplan [Mon, 16 Jun 2014 20:27:45 +0000 (23:27 +0300)]
Update copyright year to 2014
Lior Kaplan [Mon, 16 Jun 2014 20:26:50 +0000 (23:26 +0300)]
Update copyright year for re2c files as well
Bob Weinand [Mon, 16 Jun 2014 09:16:33 +0000 (11:16 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
Bob Weinand [Mon, 16 Jun 2014 09:10:50 +0000 (11:10 +0200)]
Fix patch for bug #67436
Bob Weinand [Sun, 15 Jun 2014 22:41:46 +0000 (00:41 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
Bob Weinand [Sun, 15 Jun 2014 22:35:20 +0000 (00:35 +0200)]
Merge branch 'pull-request/695' into PHP-5.4
Levi Morrison [Sun, 15 Jun 2014 22:10:40 +0000 (16:10 -0600)]
Added tests for bug 67436
Bob Weinand [Sun, 15 Jun 2014 21:54:05 +0000 (23:54 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
Bob Weinand [Sun, 15 Jun 2014 21:51:51 +0000 (23:51 +0200)]
Fixed wrong XFAIL test - already fixed
Lior Kaplan [Sun, 15 Jun 2014 21:26:01 +0000 (00:26 +0300)]
Fix typo in Bug #67406 NEWS entry
Lior Kaplan [Sun, 15 Jun 2014 21:26:01 +0000 (00:26 +0300)]
Fix typo in Bug #67406 NEWS entry
Bob Weinand [Sun, 15 Jun 2014 20:36:13 +0000 (22:36 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
Bob Weinand [Sun, 15 Jun 2014 20:32:47 +0000 (22:32 +0200)]
Updated NEWS
Bob Weinand [Sun, 15 Jun 2014 20:24:44 +0000 (22:24 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
Bob Weinand [Sun, 15 Jun 2014 20:18:25 +0000 (22:18 +0200)]
Fix bug #67436
Stanislav Malyshev [Sun, 15 Jun 2014 08:06:46 +0000 (01:06 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
update NEWS
Stanislav Malyshev [Sun, 15 Jun 2014 08:06:37 +0000 (01:06 -0700)]
update NEWS
Sara Golemon [Tue, 10 Jun 2014 18:18:02 +0000 (11:18 -0700)]
Fix potential segfault in dns_get_record()
If the remote sends us a packet with a malformed TXT record,
we could end up trying to over-consume the packet and wander
off into overruns.
Stanislav Malyshev [Sun, 15 Jun 2014 07:46:31 +0000 (00:46 -0700)]
update NEWS
Derick Rethans [Fri, 13 Jun 2014 22:26:43 +0000 (23:26 +0100)]
Merge branch 'PHP-5.4' into PHP-5.5
Derick Rethans [Fri, 13 Jun 2014 22:26:42 +0000 (23:26 +0100)]
- Updated to version 2014.5 (2014e)
Adam Harvey [Fri, 13 Jun 2014 01:15:07 +0000 (18:15 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Follow 308 Permanent Redirect responses.
Adam Harvey [Fri, 13 Jun 2014 01:12:53 +0000 (18:12 -0700)]
Follow 308 Permanent Redirect responses.
Fixes bug #67430 (http:// wrapper doesn't follow 308 redirects).
Adam Harvey [Fri, 13 Jun 2014 00:56:10 +0000 (17:56 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Add 308 and 426 to the HTTP response code map in the CLI server.
Adam Harvey [Fri, 13 Jun 2014 00:54:29 +0000 (17:54 -0700)]
Add 308 and 426 to the HTTP response code map in the CLI server.
Implements FR #67429 (CLI server is missing some new HTTP response codes).
Adam Harvey [Fri, 13 Jun 2014 00:38:52 +0000 (17:38 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Keep 308-399 HTTP response codes when header('Location:') is called.
Adam Harvey [Fri, 13 Jun 2014 00:35:05 +0000 (17:35 -0700)]
Keep 308-399 HTTP response codes when header('Location:') is called.
Fixes bug #67428 (header('Location: foo') will override a 308-399 response
code).
Adam Harvey [Wed, 11 Jun 2014 21:42:26 +0000 (21:42 +0000)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
NEWS entry for "Fix potential segfault in dns_get_record()"
Sara Golemon [Wed, 11 Jun 2014 21:20:36 +0000 (14:20 -0700)]
NEWS entry for "Fix potential segfault in dns_get_record()"
Sara Golemon [Wed, 11 Jun 2014 21:22:59 +0000 (14:22 -0700)]
NEWS entry for Fix potential segfault in dns_get_record(
Sara Golemon [Wed, 11 Jun 2014 20:37:40 +0000 (13:37 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Fix potential segfault in dns_get_record()
Sara Golemon [Tue, 10 Jun 2014 18:18:02 +0000 (11:18 -0700)]
Fix potential segfault in dns_get_record()
If the remote sends us a packet with a malformed TXT record,
we could end up trying to over-consume the packet and wander
off into overruns.
Julien Pauli [Wed, 11 Jun 2014 08:21:26 +0000 (10:21 +0200)]
5.5.15 now
Stanislav Malyshev [Wed, 11 Jun 2014 06:17:30 +0000 (23:17 -0700)]
Fix bug #66127 (Segmentation fault with ArrayObject unset)
Stanislav Malyshev [Wed, 11 Jun 2014 06:23:37 +0000 (23:23 -0700)]
update NEWS
Stanislav Malyshev [Wed, 11 Jun 2014 06:19:21 +0000 (23:19 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Fix bug #66127 (Segmentation fault with ArrayObject unset)
5.4.31 next
Conflicts:
configure.in
main/php_version.h
Stanislav Malyshev [Wed, 11 Jun 2014 06:17:30 +0000 (23:17 -0700)]
Fix bug #66127 (Segmentation fault with ArrayObject unset)
Stanislav Malyshev [Wed, 11 Jun 2014 06:03:40 +0000 (23:03 -0700)]
5.4.31 next
Stanislav Malyshev [Wed, 11 Jun 2014 04:17:37 +0000 (21:17 -0700)]
5.4.30 rc1
Xinchen Hui [Tue, 10 Jun 2014 13:56:30 +0000 (21:56 +0800)]
Remove unused included file
Remi Collet [Tue, 10 Jun 2014 12:35:57 +0000 (14:35 +0200)]
NEWS
Remi Collet [Tue, 10 Jun 2014 12:35:23 +0000 (14:35 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
NEWS
Fixed Bug #67413 fileinfo: cdf_read_property_info insufficient boundary chec
Remi Collet [Tue, 10 Jun 2014 12:35:14 +0000 (14:35 +0200)]
NEWS
Remi Collet [Tue, 10 Jun 2014 12:33:37 +0000 (14:33 +0200)]
Fixed Bug #67413 fileinfo: cdf_read_property_info insufficient boundary chec
Upstream:
https://github.com/file/file/commit/
93e063ee374b6a75729df9e7201fb511e47e259d
Adapted for C standard.
Remi Collet [Tue, 10 Jun 2014 12:24:00 +0000 (14:24 +0200)]
NEWS
Remi Collet [Tue, 10 Jun 2014 12:23:37 +0000 (14:23 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
NEWS
Bug #67412 fileinfo: cdf_count_chain insufficient boundary check
Remi Collet [Tue, 10 Jun 2014 12:23:31 +0000 (14:23 +0200)]
NEWS
Remi Collet [Tue, 10 Jun 2014 12:22:04 +0000 (14:22 +0200)]
Bug #67412 fileinfo: cdf_count_chain insufficient boundary check
Upstream:
https://github.com/file/file/commit/
40bade80cbe2af1d0b2cd0420cebd5d5905a2382
Remi Collet [Tue, 10 Jun 2014 12:16:32 +0000 (14:16 +0200)]
NEWS
Remi Collet [Tue, 10 Jun 2014 12:16:07 +0000 (14:16 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
NEWS
Fixed Bug #67411 fileinfo: cdf_check_stream_offset insufficient boundary check
Remi Collet [Tue, 10 Jun 2014 12:16:00 +0000 (14:16 +0200)]
NEWS
Remi Collet [Tue, 10 Jun 2014 12:13:14 +0000 (14:13 +0200)]
Fixed Bug #67411 fileinfo: cdf_check_stream_offset insufficient boundary check
Upstream:
https://github.com/file/file/commit/
36fadd29849b8087af9f4586f89dbf74ea45be67
Remi Collet [Tue, 10 Jun 2014 12:04:52 +0000 (14:04 +0200)]
NEWS
Remi Collet [Tue, 10 Jun 2014 12:04:36 +0000 (14:04 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
NEWS
Fixed Bug #67410 fileinfo: mconvert incorrect handling of truncated pascal string size
Remi Collet [Tue, 10 Jun 2014 12:04:27 +0000 (14:04 +0200)]
NEWS
Remi Collet [Tue, 10 Jun 2014 12:02:36 +0000 (14:02 +0200)]
Fixed Bug #67410 fileinfo: mconvert incorrect handling of truncated pascal string size
Upstream
https://github.com/file/file/commit/
27a14bc7ba285a0a5ebfdb55e54001aa11932b08
Remi Collet [Tue, 10 Jun 2014 08:32:26 +0000 (10:32 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
NEWS
Fixed bug #67406 built-in web-server segfaults on startup
Remi Collet [Tue, 10 Jun 2014 08:32:15 +0000 (10:32 +0200)]
NEWS
Remi Collet [Tue, 10 Jun 2014 08:31:17 +0000 (10:31 +0200)]
NEWS
Remi Collet [Tue, 10 Jun 2014 08:28:34 +0000 (10:28 +0200)]
Fixed bug #67406 built-in web-server segfaults on startup
Reproduce on aarch64.
From select man page:
"select() may update the timeout argument to indicate how much time was left."
So "const" is not ok.
Stanislav Malyshev [Mon, 9 Jun 2014 06:09:37 +0000 (23:09 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Fixed bug #67399 (putenv with empty variable may lead to crash)
Stanislav Malyshev [Mon, 9 Jun 2014 06:00:38 +0000 (23:00 -0700)]
Fixed bug #67399 (putenv with empty variable may lead to crash)
Stanislav Malyshev [Mon, 9 Jun 2014 06:00:38 +0000 (23:00 -0700)]
Fixed bug #67399 (putenv with empty variable may lead to crash)
Matteo Beccati [Mon, 9 Jun 2014 05:07:07 +0000 (07:07 +0200)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
Fixed DOM tests when using libxml2 versions patched against CVE-2014-0191
Matteo Beccati [Wed, 4 Jun 2014 11:26:24 +0000 (13:26 +0200)]
Fixed DOM tests when using libxml2 versions patched against CVE-2014-0191
DOMDocument::substituteEntities needs to be set to true in order for
external entities to be parsed.
Stanislav Malyshev [Mon, 9 Jun 2014 02:44:49 +0000 (19:44 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
add news
Bug 49898 __getCookies() method implementation
Stanislav Malyshev [Mon, 9 Jun 2014 02:38:07 +0000 (19:38 -0700)]
add news
Boro Sitnikovski [Thu, 26 Sep 2013 00:03:48 +0000 (02:03 +0200)]
Bug 49898
__getCookies() method implementation
Stanislav Malyshev [Mon, 9 Jun 2014 02:04:35 +0000 (19:04 -0700)]
Merge branch 'PHP-5.4' into PHP-5.5
* PHP-5.4:
fix order
Stanislav Malyshev [Mon, 9 Jun 2014 02:04:21 +0000 (19:04 -0700)]
fix order
Stanislav Malyshev [Mon, 9 Jun 2014 02:03:50 +0000 (19:03 -0700)]
fix order