]>
granicus.if.org Git - php/log
Jakub Zelenka [Tue, 19 Jul 2016 19:01:20 +0000 (20:01 +0100)]
Use always non const SSL cipher version string
Jakub Zelenka [Sun, 17 Jul 2016 19:48:20 +0000 (20:48 +0100)]
Update authors of openssl.c
Jakub Zelenka [Sun, 17 Jul 2016 19:44:33 +0000 (20:44 +0100)]
Use opaque EVP_PKEY for new EC logic in openssl_pkey_new
Jakub Zelenka [Sun, 17 Jul 2016 19:24:34 +0000 (20:24 +0100)]
Use opaque RSA, DSA and DH
Jakub Zelenka [Sun, 17 Jul 2016 19:01:37 +0000 (20:01 +0100)]
Add missing creating of md_ctx in openssl_digest
Jakub Zelenka [Sun, 20 Mar 2016 19:02:26 +0000 (19:02 +0000)]
Change sign method from ecdsa-with-SHA1 to SHA1
There are no message digest methods for public key
(e.g. ecdsa-with-SHA1, dsa*, DSA*) MD methods in OpenSSL 1.1.
Jakub Zelenka [Sun, 13 Mar 2016 19:15:54 +0000 (19:15 +0000)]
Add missing break in php_openssl_is_private_key
Jakub Zelenka [Sun, 6 Mar 2016 12:39:06 +0000 (12:39 +0000)]
Use SHA1 instead of DSS1 in test for bug #41033
Jakub Zelenka [Sun, 6 Mar 2016 12:35:45 +0000 (12:35 +0000)]
Hide setting server ECDH curve for OpenSSL 1.1
It seems to be done automatically
Jakub Zelenka [Sun, 6 Mar 2016 12:22:24 +0000 (12:22 +0000)]
Do not use tmp_rsa_cb for OpenSSL 1.1
The SSL_CTX_set_tmp_rsa_callback has been removed
Jakub Zelenka [Sun, 6 Mar 2016 11:56:50 +0000 (11:56 +0000)]
The DSS1 is not available in OpenSSL 1.1
Jakub Zelenka [Sun, 6 Mar 2016 11:49:36 +0000 (11:49 +0000)]
Use opaque EVP_MD in phar_verify_signature
Jakub Zelenka [Sun, 6 Mar 2016 11:44:01 +0000 (11:44 +0000)]
Move and use opaque pkey in openssl_dh_compute_key
Jakub Zelenka [Thu, 3 Mar 2016 20:28:12 +0000 (20:28 +0000)]
Use opaque pkey in openssl_pkey_get_details
Jakub Zelenka [Thu, 3 Mar 2016 20:11:46 +0000 (20:11 +0000)]
Use EVP_PKEY_base_id where possible
Jakub Zelenka [Thu, 3 Mar 2016 19:43:29 +0000 (19:43 +0000)]
Use opaque EVP_PKEY in php_openssl_is_private_key
Jakub Zelenka [Wed, 2 Mar 2016 19:54:04 +0000 (19:54 +0000)]
Do not use X509 props directly in openssl_x509_parse
Jakub Zelenka [Tue, 1 Mar 2016 20:08:47 +0000 (20:08 +0000)]
Do not use X509_EXTENSION data directly as it is opaque
Jakub Zelenka [Mon, 29 Feb 2016 20:07:03 +0000 (20:07 +0000)]
Wrap pkey id and rsa getters
Jakub Zelenka [Mon, 29 Feb 2016 19:51:04 +0000 (19:51 +0000)]
Use opaque md ctx in openssl_sign and openssl_verify
Jakub Zelenka [Mon, 29 Feb 2016 19:45:07 +0000 (19:45 +0000)]
Use opaque cipher ctx in openssl_seal and openssl_open
Jakub Zelenka [Sun, 28 Feb 2016 20:05:46 +0000 (20:05 +0000)]
Use opaque EVP_MD_CTX in openssl_digest
Jakub Zelenka [Sun, 17 Jul 2016 16:28:08 +0000 (17:28 +0100)]
Merge branch 'openssl_bump_to_1_0_1'
Jakub Zelenka [Sun, 17 Jul 2016 16:26:29 +0000 (17:26 +0100)]
Bump a minimal OpenSSL version to 1.0.1
Jakub Zelenka [Wed, 29 Jun 2016 20:21:50 +0000 (21:21 +0100)]
Bump minimal OpenSSL version to 1.0.1
Jakub Zelenka [Sun, 17 Jul 2016 16:14:38 +0000 (17:14 +0100)]
Merge branch 'openssl_drop_ssl2'
Jakub Zelenka [Sun, 17 Jul 2016 16:13:24 +0000 (17:13 +0100)]
Update NEWS and UPGRADING with info about dropping SSL2
Leigh [Sun, 17 Jul 2016 16:05:10 +0000 (16:05 +0000)]
Merge RNG fixes RFC. PR #1986
* rng-fixes:
Fix legacy mode RAND_RANGE and 32/64-bit consistency
Fix crypt salt not being converted to b64
Make mode selection part of mt_srand()
Use zend_bitset
Improve array_rand distribution
Fix some insecure usages of php_rand
Alias rand to mt_rand
Fix RAND_RANGE for mt_rand
Fix mt_rand impl. Provide legacy impl. access.
Split rand and mt_rand into separate files
Remi Collet [Thu, 17 Mar 2016 14:15:30 +0000 (15:15 +0100)]
force SSL_OP_NO_SSLv2
Remi Collet [Thu, 17 Mar 2016 13:06:18 +0000 (14:06 +0100)]
Cleanup all SSLv2 code, whatever OpenSSL version is
Masaki Kagaya [Sun, 1 Mar 2015 13:10:41 +0000 (22:10 +0900)]
add test
Masaki Kagaya [Sun, 1 Mar 2015 12:49:10 +0000 (21:49 +0900)]
check the encoding of argument for mb_ereg, mb_ereg_replace, mb_ereg_search_init
Masaki Kagaya [Sun, 1 Mar 2015 12:43:09 +0000 (21:43 +0900)]
add php_mb_check_encoding
Anatol Belski [Sun, 17 Jul 2016 10:18:23 +0000 (12:18 +0200)]
correct macro names
Nikita Popov [Sat, 16 Jul 2016 21:35:08 +0000 (23:35 +0200)]
Avoid uncollectable cycle in sxe_property_get_adr
The code was storing the created object in a property on the
created object, creating a trivial cycle. This cycle cannot be
collected (even if sxe->tmp is exposed via get_gc), because it
is never rooted (and we cannot safely manually root it).
Change the code to store the created object on the parent node
instead.
The only reason this is not showing up as a leak is that sxe->tmp
is dtor'ed in the dtor handler, which means that these objects
do get collected on shutdown -- but never earlier.
Nikita Popov [Fri, 15 Jul 2016 21:35:07 +0000 (23:35 +0200)]
Remove unnecessary use of sxe->tmp
Nikita Popov [Fri, 15 Jul 2016 21:09:18 +0000 (23:09 +0200)]
Remove useless dtor handlers in intl
These are only indirections to the default handler
Nikita Popov [Thu, 14 Jul 2016 20:29:04 +0000 (22:29 +0200)]
Fix leak if get_iterator throws but doesn't return NULL
Nikita Popov [Thu, 14 Jul 2016 20:18:06 +0000 (22:18 +0200)]
Fix leak in PDO row_get_ctor
The __construct function name was leaked. Avoid this by simply
throwing directly from row_get_ctor instead of indirecting through
an actual __construct function.
Nikita Popov [Thu, 14 Jul 2016 20:01:13 +0000 (22:01 +0200)]
Fix leak in intl collator compare function
Nikita Popov [Sat, 16 Jul 2016 21:03:01 +0000 (23:03 +0200)]
Merge branch 'PHP-7.0'
Nikita Popov [Sat, 16 Jul 2016 21:02:34 +0000 (23:02 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Conflicts:
Zend/zend_gc.c
Nikita Popov [Sat, 16 Jul 2016 21:00:47 +0000 (23:00 +0200)]
Revert "Fixed bug #72286 (Segmentation fault During Garbage Collection)"
This reverts commit
1c84b55adea936b065a20102202bea3d1d243225 .
Leigh [Sat, 16 Jul 2016 16:50:20 +0000 (16:50 +0000)]
Fix legacy mode RAND_RANGE and 32/64-bit consistency
Christoph M. Becker [Fri, 15 Jul 2016 19:05:59 +0000 (21:05 +0200)]
Un-XFAIL test case
libgd substitutes unallowed characters of XBM names (but not filenames),
depending on the locale. As we're interested in the filenames in this case
we simply ignore these differences.
Christoph M. Becker [Fri, 15 Jul 2016 18:04:43 +0000 (20:04 +0200)]
Merge branch 'PHP-7.0'
Christoph M. Becker [Fri, 15 Jul 2016 17:47:21 +0000 (19:47 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Fri, 15 Jul 2016 17:42:26 +0000 (19:42 +0200)]
Fix #72604: imagearc() ignores thickness for full arcs
We remove the special casing for full arcs, what conforms to external libgd.
Christoph M. Becker [Thu, 14 Jul 2016 23:16:18 +0000 (01:16 +0200)]
Merge branch 'PHP-7.0'
Christoph M. Becker [Thu, 14 Jul 2016 23:09:58 +0000 (01:09 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Thu, 14 Jul 2016 22:57:36 +0000 (00:57 +0200)]
Fix bug #66502: DOM document dangling reference
When we decrement the refcount of a node's document, we state that we
won't need it anymore. Therefore we can *always* set the pointer to the
document to NULL, what avoids invalid memory accesses for some edge cases
as demonstrated with the PHPT.
Original patch provided by Sean Heelan.
Nikita Popov [Thu, 14 Jul 2016 21:22:41 +0000 (23:22 +0200)]
Merge branch 'PHP-7.0'
Nikita Popov [Thu, 14 Jul 2016 21:22:09 +0000 (23:22 +0200)]
Fix test output
The error is now detected earlier, so the message ends up being
different.
Nikita Popov [Thu, 14 Jul 2016 19:41:49 +0000 (21:41 +0200)]
Merge branch 'PHP-7.0'
Nikita Popov [Thu, 14 Jul 2016 19:38:10 +0000 (21:38 +0200)]
Fix is_callable() on abstract method via object
Dmitry Stogov [Thu, 14 Jul 2016 19:39:15 +0000 (22:39 +0300)]
Merge branch 'PHP-7.0'
* PHP-7.0:
Fixed bug #72286 (Segmentation fault During Garbage Collection)
Dmitry Stogov [Thu, 14 Jul 2016 19:38:47 +0000 (22:38 +0300)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
Fixed bug #72286 (Segmentation fault During Garbage Collection)
Dmitry Stogov [Thu, 14 Jul 2016 19:37:25 +0000 (22:37 +0300)]
Fixed bug #72286 (Segmentation fault During Garbage Collection)
Anatol Belski [Thu, 14 Jul 2016 19:21:35 +0000 (21:21 +0200)]
Merge branch 'master' of git.php.net:php-src
Anatol Belski [Thu, 14 Jul 2016 19:21:01 +0000 (21:21 +0200)]
Merge branch 'PHP-7.0' of git.php.net:php-src into PHP-7.0
Anatol Belski [Thu, 14 Jul 2016 19:17:40 +0000 (21:17 +0200)]
Merge branch 'PHP-7.0'
* PHP-7.0:
Extend libxml exports
Updated NEWS
Fix #69975: PHP segfaults when accessing nvarchar(max) defined columns
Updated NEWS
Fix bug #70480 (php_url_parse_ex() buffer overflow read)
Update PHP 5.5 NEWS entries with CVE info
Anatol Belski [Thu, 14 Jul 2016 19:16:07 +0000 (21:16 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
* PHP-5.6:
Extend libxml exports
Updated NEWS
Fix #69975: PHP segfaults when accessing nvarchar(max) defined columns
Updated NEWS
Fix bug #70480 (php_url_parse_ex() buffer overflow read)
Update PHP 5.5 NEWS entries with CVE info
Anatol Belski [Thu, 14 Jul 2016 19:13:49 +0000 (21:13 +0200)]
Merge branch 'PHP-5.5' into PHP-5.6
* PHP-5.5:
Extend libxml exports
Updated NEWS
Fix #69975: PHP segfaults when accessing nvarchar(max) defined columns
Updated NEWS
Fix bug #70480 (php_url_parse_ex() buffer overflow read)
Update PHP 5.5 NEWS entries with CVE info
Anatol Belski [Thu, 14 Jul 2016 19:08:54 +0000 (21:08 +0200)]
Extend libxml exports
These are needed to support libxslt 1.1.29 on Windows. This libxslt version
fixes CVE-2015-7995 and for this reason needs to be used.
Nikita Popov [Thu, 14 Jul 2016 18:46:01 +0000 (20:46 +0200)]
Merge branch 'PHP-7.0'
Conflicts:
Zend/zend_vm_execute.h
Nikita Popov [Thu, 14 Jul 2016 18:44:36 +0000 (20:44 +0200)]
Fix bad merge
In master the operand is fetched earlier, I didn't account for
that.
Nikita Popov [Wed, 13 Jul 2016 21:39:16 +0000 (23:39 +0200)]
Fix leak if get_constructor returns NULL
Nikita Popov [Wed, 13 Jul 2016 21:16:55 +0000 (23:16 +0200)]
Fix leaks if update_constant fails
Nikita Popov [Thu, 14 Jul 2016 16:39:48 +0000 (18:39 +0200)]
Merge branch 'PHP-7.0'
Conflicts:
Zend/zend_vm_execute.h
Nikita Popov [Thu, 14 Jul 2016 15:43:29 +0000 (17:43 +0200)]
Fix leak when creating timezone with null bytes
Nikita Popov [Thu, 14 Jul 2016 15:36:56 +0000 (17:36 +0200)]
Fix leak when dynamically calling abstract method
Nikita Popov [Thu, 14 Jul 2016 15:29:59 +0000 (17:29 +0200)]
Fix leak of class name when printing exception backtrace
Nikita Popov [Thu, 14 Jul 2016 13:55:30 +0000 (15:55 +0200)]
Fix leaks in yield from error conditions
Conflicts:
Zend/zend_vm_execute.h
Nikita Popov [Wed, 13 Jul 2016 22:08:29 +0000 (00:08 +0200)]
Fix leak for by-ref assign to overloaded object
Conflicts:
Zend/zend_vm_execute.h
Nikita Popov [Wed, 13 Jul 2016 21:55:19 +0000 (23:55 +0200)]
Add missing call opcodes in cleanup_unfinished_calls()
Otherwise we may leak if an exception is thrown from them.
Nikita Popov [Wed, 13 Jul 2016 21:35:53 +0000 (23:35 +0200)]
Fix leak if throw_exception_object() fails
Christoph M. Becker [Thu, 14 Jul 2016 15:26:32 +0000 (17:26 +0200)]
Merge branch 'PHP-7.0'
Christoph M. Becker [Thu, 14 Jul 2016 15:20:19 +0000 (17:20 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Christoph M. Becker [Thu, 14 Jul 2016 14:43:13 +0000 (16:43 +0200)]
Fix bug #72596: imagetypes function won't advertise WEBP support
We add the constant IMG_WEBP and make sure that WebP support is properly
reported by imagetypes().
Nikita Popov [Thu, 14 Jul 2016 13:44:04 +0000 (15:44 +0200)]
Fix return from by-ref generators
Anatol Belski [Thu, 14 Jul 2016 11:20:57 +0000 (13:20 +0200)]
Merge branch 'PHP-7.0'
* PHP-7.0:
update NEWS
Anatol Belski [Thu, 14 Jul 2016 11:20:13 +0000 (13:20 +0200)]
update NEWS
Dmitry Stogov [Thu, 14 Jul 2016 10:14:15 +0000 (13:14 +0300)]
Fixed memory leak
Dmitry Stogov [Thu, 14 Jul 2016 10:12:34 +0000 (13:12 +0300)]
Merge branch 'PHP-7.0'
* PHP-7.0:
Fixed memory leak
Dmitry Stogov [Thu, 14 Jul 2016 10:05:27 +0000 (13:05 +0300)]
Fixed memory leak
Dmitry Stogov [Thu, 14 Jul 2016 09:05:44 +0000 (12:05 +0300)]
Fixed bug #71818 (Memory leak when array altered in destructor)
Xinchen Hui [Thu, 14 Jul 2016 05:38:42 +0000 (13:38 +0800)]
Update NEWS
Xinchen Hui [Thu, 14 Jul 2016 05:38:27 +0000 (13:38 +0800)]
Merge branch 'PHP-7.0'
* PHP-7.0:
Fixed bug #72594 (Calling an earlier instance of an included anonymous class fatals)
Conflicts:
Zend/zend_compile.c
Xinchen Hui [Thu, 14 Jul 2016 05:36:43 +0000 (13:36 +0800)]
Fixed bug #72594 (Calling an earlier instance of an included anonymous class fatals)
Nikita Popov [Wed, 13 Jul 2016 19:57:23 +0000 (21:57 +0200)]
Merge branch 'PHP-7.0'
Nikita Popov [Wed, 13 Jul 2016 19:57:14 +0000 (21:57 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Nikita Popov [Wed, 13 Jul 2016 19:57:01 +0000 (21:57 +0200)]
Add NEWS entry
Nikita Popov [Wed, 13 Jul 2016 19:48:22 +0000 (21:48 +0200)]
Merge branch 'PHP-7.0'
Nikita Popov [Wed, 13 Jul 2016 19:46:52 +0000 (21:46 +0200)]
Merge branch 'PHP-5.6' into PHP-7.0
Conflicts:
ext/reflection/php_reflection.c
nikita2206 [Sun, 15 May 2016 23:58:21 +0000 (02:58 +0300)]
fix: bug72222 for PHP-5.6 reflection export of array consts
Dmitry Stogov [Wed, 13 Jul 2016 17:35:53 +0000 (20:35 +0300)]
Unified behavior of modification of returned by reference value in finnally code.
Dmitry Stogov [Wed, 13 Jul 2016 17:04:47 +0000 (20:04 +0300)]
Removed wrong warning
Dmitry Stogov [Wed, 13 Jul 2016 13:43:47 +0000 (16:43 +0300)]
Fixed bug #29368 (The destructor is called when an exception is thrown from the constructor).
Dmitry Stogov [Wed, 13 Jul 2016 12:08:28 +0000 (15:08 +0300)]
Fixed bug #72347 (VERIFY_RETURN type casts visible in finally)
Fixed bug #72216 (Return by reference with finally is not memory safe)
Fixed bug #72215 (Wrong return value if var modified in finally)
Dmitry Stogov [Wed, 13 Jul 2016 12:05:11 +0000 (15:05 +0300)]
Prevent wrong optimization