]>
granicus.if.org Git - php/log
Anthony Ferrara [Thu, 28 Jun 2012 19:29:40 +0000 (15:29 -0400)]
Refactor password.c a bit, add different error checking
Anthony Ferrara [Thu, 28 Jun 2012 18:44:04 +0000 (14:44 -0400)]
Refactor crypt to use an external working function
Anthony Ferrara [Wed, 27 Jun 2012 15:04:41 +0000 (11:04 -0400)]
Fix formatting issues in password.c
Anthony Ferrara [Wed, 27 Jun 2012 03:09:08 +0000 (23:09 -0400)]
Add tests and error checking for large salt requested values to prevent overflow on allocation
Anthony Ferrara [Wed, 27 Jun 2012 02:13:51 +0000 (22:13 -0400)]
Update tests to check ini setting
Anthony Ferrara [Wed, 27 Jun 2012 02:05:25 +0000 (22:05 -0400)]
Add tests for password hashing
Anthony Ferrara [Wed, 27 Jun 2012 01:15:56 +0000 (21:15 -0400)]
Implement php.ini setting password.bcrypt_cost
Anthony Ferrara [Tue, 26 Jun 2012 01:22:16 +0000 (21:22 -0400)]
Refactor salt generation, rename password_create to password_hash
Anthony Ferrara [Mon, 25 Jun 2012 15:37:48 +0000 (11:37 -0400)]
Implement openssl support for make_salt
Anthony Ferrara [Mon, 25 Jun 2012 12:50:39 +0000 (08:50 -0400)]
More error checking, and some cleaning up for password.c
Anthony Ferrara [Mon, 25 Jun 2012 12:15:17 +0000 (08:15 -0400)]
Basic random generator added to make_salt
Anthony Ferrara [Mon, 25 Jun 2012 03:36:09 +0000 (23:36 -0400)]
Fix memory leak on branch
Anthony Ferrara [Mon, 25 Jun 2012 03:35:26 +0000 (23:35 -0400)]
Implement password_verify
Anthony Ferrara [Mon, 25 Jun 2012 03:25:18 +0000 (23:25 -0400)]
Actually complete password_create()
Anthony Ferrara [Mon, 25 Jun 2012 02:44:43 +0000 (22:44 -0400)]
Base structure for passsword_create and password_make_salt
Nikita Popov [Sat, 23 Jun 2012 19:15:59 +0000 (21:15 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Improve json_encode error handling
- BFN
- BFN
Nikita Popov [Sat, 23 Jun 2012 19:14:45 +0000 (21:14 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Improve json_encode error handling
- BFN
Conflicts:
ext/json/json.c
Nikita Popov [Sat, 23 Jun 2012 18:46:27 +0000 (20:46 +0200)]
Improve json_encode error handling
json_encode() now returns bool(false) for all possible errors, throws the
respective warning and also sets the respective json_last_error() error
code. Three new error codes have been added:
* JSON_ERROR_RECURSION
* JSON_ERROR_INF_OR_NAN
* JSON_ERROR_UNSUPPORTED_TYPE
To get a partial JSON output instead of bool(false) the option
JSON_PARTIAL_OUTPUT_ON_ERROR can be specified. In this case the invalid
segments will be replaced either by null (for recursion, unsupported type
and invalid JSON) or 0 (for Inf and NaN).
The warning for invalid UTF-8 stays intact and is thrown also with
display_errors = On. If this behavior is undesired this can be remedied
later.
Felipe Pena [Sat, 23 Jun 2012 18:21:32 +0000 (15:21 -0300)]
- BFN
Felipe Pena [Sat, 23 Jun 2012 18:21:20 +0000 (15:21 -0300)]
- BFN
Felipe Pena [Sat, 23 Jun 2012 18:16:20 +0000 (15:16 -0300)]
Merge branch 'PHP-5.4'
* PHP-5.4:
- Improved fix for #62384
Felipe Pena [Sat, 23 Jun 2012 18:16:13 +0000 (15:16 -0300)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
- Improved fix for #62384
Felipe Pena [Sat, 23 Jun 2012 18:10:47 +0000 (15:10 -0300)]
- Improved fix for #62384
Johannes Schlüter [Fri, 22 Jun 2012 18:01:27 +0000 (20:01 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Remove unneeded and outdated ChangeLog file
Johannes Schlüter [Fri, 22 Jun 2012 18:01:06 +0000 (20:01 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Remove unneeded and outdated ChangeLog file
Johannes Schlüter [Fri, 22 Jun 2012 18:00:20 +0000 (20:00 +0200)]
Remove unneeded and outdated ChangeLog file
Johannes Schlüter [Fri, 22 Jun 2012 15:33:38 +0000 (17:33 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Remove extra ;
Johannes Schlüter [Fri, 22 Jun 2012 15:33:22 +0000 (17:33 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Remove extra ;
Johannes Schlüter [Fri, 22 Jun 2012 15:32:46 +0000 (17:32 +0200)]
Remove extra ;
Felipe Pena [Fri, 22 Jun 2012 15:06:05 +0000 (12:06 -0300)]
Merge branch 'PHP-5.4'
* PHP-5.4:
- Fixed bug #62384 (Attempting to invoke a Closure more than once causes segfaul)
Felipe Pena [Fri, 22 Jun 2012 15:05:55 +0000 (12:05 -0300)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
- Fixed bug #62384 (Attempting to invoke a Closure more than once causes segfaul)
Felipe Pena [Fri, 22 Jun 2012 15:05:29 +0000 (12:05 -0300)]
- Fixed bug #62384 (Attempting to invoke a Closure more than once causes segfaul)
Johannes Schlüter [Fri, 22 Jun 2012 10:50:55 +0000 (12:50 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Improve check for :memory: pseudo-filename in SQlite
Johannes Schlüter [Fri, 22 Jun 2012 10:50:30 +0000 (12:50 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Improve check for :memory: pseudo-filename in SQlite
Conflicts:
ext/sqlite3/sqlite3.c
Johannes Schlüter [Fri, 22 Jun 2012 10:48:39 +0000 (12:48 +0200)]
Improve check for :memory: pseudo-filename in SQlite
Johannes Schlüter [Wed, 20 Jun 2012 17:48:17 +0000 (19:48 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Remove outdated and user-specific files
Johannes Schlüter [Wed, 20 Jun 2012 17:47:44 +0000 (19:47 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Remove outdated and user-specific files
Johannes Schlüter [Wed, 20 Jun 2012 17:46:32 +0000 (19:46 +0200)]
Remove outdated and user-specific files
Anatoliy Belsky [Wed, 20 Jun 2012 13:02:49 +0000 (15:02 +0200)]
fix windows build
Nikita Popov [Tue, 19 Jun 2012 16:42:22 +0000 (18:42 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Add NEWS for bug #62262
Fixed bug RecursiveArrayIterator does not implement Countable
Nikita Popov [Tue, 19 Jun 2012 16:41:49 +0000 (18:41 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
I messed up the last merge somehow :/ Merge again.
* PHP-5.3:
Add NEWS for bug #62262
Fixed bug RecursiveArrayIterator does not implement Countable
Conflicts:
ext/spl/spl_array.c
Nikita Popov [Tue, 19 Jun 2012 16:40:46 +0000 (18:40 +0200)]
Add NEWS for bug #62262
Nikita Popov [Tue, 19 Jun 2012 15:45:04 +0000 (17:45 +0200)]
Fixed bug RecursiveArrayIterator does not implement Countable
ArrayIterator implemented Countable only after it was already inherited by
RecursiveArrayIterator. Thus the interface was missing in RAI.
Nikita Popov [Tue, 19 Jun 2012 16:13:14 +0000 (18:13 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Fixed bug RecursiveArrayIterator does not implement Countable
Nikita Popov [Tue, 19 Jun 2012 16:08:22 +0000 (18:08 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Fixed bug RecursiveArrayIterator does not implement Countable
Conflicts:
ext/spl/spl_array.c
Nikita Popov [Tue, 19 Jun 2012 15:45:04 +0000 (17:45 +0200)]
Fixed bug RecursiveArrayIterator does not implement Countable
ArrayIterator implemented Countable only after it was already inherited by
RecursiveArrayIterator. Thus the interface was missing in RAI.
Anatoliy Belsky [Tue, 19 Jun 2012 15:18:00 +0000 (17:18 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
sync zip ext version with pecl
Anatoliy Belsky [Tue, 19 Jun 2012 15:17:11 +0000 (17:17 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
sync zip ext version with pecl
Anatoliy Belsky [Tue, 19 Jun 2012 15:15:56 +0000 (17:15 +0200)]
sync zip ext version with pecl
Anatoliy Belsky [Tue, 19 Jun 2012 12:58:47 +0000 (14:58 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
one more correction for COM upgrading notes
one more correction for COM upgrading notes
Anatoliy Belsky [Tue, 19 Jun 2012 12:58:06 +0000 (14:58 +0200)]
one more correction for COM upgrading notes
Anatoliy Belsky [Tue, 19 Jun 2012 12:51:52 +0000 (14:51 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
one more correction for COM upgrading notes
Anatoliy Belsky [Tue, 19 Jun 2012 12:42:59 +0000 (14:42 +0200)]
one more correction for COM upgrading notes
Anatoliy Belsky [Tue, 19 Jun 2012 12:13:53 +0000 (14:13 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
split gzgetc_basic.phpt for zlib 1.2.7
Anatoliy Belsky [Tue, 19 Jun 2012 12:12:54 +0000 (14:12 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
split gzgetc_basic.phpt for zlib 1.2.7
Anatoliy Belsky [Tue, 19 Jun 2012 12:08:34 +0000 (14:08 +0200)]
split gzgetc_basic.phpt for zlib 1.2.7
Anatoliy Belsky [Mon, 18 Jun 2012 20:09:46 +0000 (22:09 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
com ext upgrading correction
Anatoliy Belsky [Mon, 18 Jun 2012 20:08:44 +0000 (22:08 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
com ext upgrading correction
Anatoliy Belsky [Mon, 18 Jun 2012 20:07:19 +0000 (22:07 +0200)]
com ext upgrading correction
Anatoliy Belsky [Mon, 18 Jun 2012 20:05:44 +0000 (22:05 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
com ext upgrading infos
Anatoliy Belsky [Mon, 18 Jun 2012 20:04:40 +0000 (22:04 +0200)]
com ext upgrading infos
Anatoliy Belsky [Mon, 18 Jun 2012 20:00:55 +0000 (22:00 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
com ext upgrading info
Anatoliy Belsky [Mon, 18 Jun 2012 19:59:27 +0000 (21:59 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
com ext upgrading info
Anatoliy Belsky [Mon, 18 Jun 2012 19:56:17 +0000 (21:56 +0200)]
com ext upgrading info
Anatoliy Belsky [Sun, 17 Jun 2012 14:16:59 +0000 (16:16 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Reverted the BC fix regarding to #57905, test adopted
Anatoliy Belsky [Sun, 17 Jun 2012 14:10:56 +0000 (16:10 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Reverted the BC fix regarding to #57905, test adopted
Anatoliy Belsky [Sun, 17 Jun 2012 14:04:36 +0000 (16:04 +0200)]
Reverted the BC fix regarding to #57905, test adopted
New 0.10.1 has a stronger archive integrity check. Restoring
the old behaviour of libzip < 0.10.1 makes no sense at this
place.
Xinchen Hui [Sat, 16 Jun 2012 06:30:21 +0000 (14:30 +0800)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Fix potential leak in cli server
stealth35 [Fri, 15 Jun 2012 21:56:54 +0000 (00:56 +0300)]
Fix potential leak in cli server
Anatoliy Belsky [Thu, 14 Jun 2012 16:04:13 +0000 (18:04 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Fixed bug #62312 ext\sockets\tests\socket_import_stream-4.phpt fails
Anatoliy Belsky [Thu, 14 Jun 2012 16:02:53 +0000 (18:02 +0200)]
Fixed bug #62312 ext\sockets\tests\socket_import_stream-4.phpt fails
Anatoliy Belsky [Thu, 14 Jun 2012 16:01:23 +0000 (18:01 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Fix bug #62270 Test bug - ext/fileinfo/tests/finfo_open_error-win32
Anatoliy Belsky [Thu, 14 Jun 2012 15:59:39 +0000 (17:59 +0200)]
Fix bug #62270 Test bug - ext/fileinfo/tests/finfo_open_error-win32
Stanislav Malyshev [Wed, 13 Jun 2012 19:25:04 +0000 (12:25 -0700)]
Merge branch 'PHP-5.4'
Merge reverts from 5.4, but shouldn't actually revert anything
* PHP-5.4:
Merge PHP 5.3.14 NEWS
re-add 61755 to NEWS
re-add 61755 to NEWS
Revert "Add PBKDF2 support via openssl()"
Revert "Rename openssl_pkcs5_pbkdf2_hmac() to something that doesn't sound like a spell."
add CVE
Stanislav Malyshev [Wed, 13 Jun 2012 19:01:26 +0000 (12:01 -0700)]
simplify boolval()
Johannes Schlüter [Wed, 13 Jun 2012 08:36:49 +0000 (10:36 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Merge PHP 5.3.14 NEWS
re-add 61755 to NEWS
Johannes Schlüter [Wed, 13 Jun 2012 08:35:58 +0000 (10:35 +0200)]
Merge PHP 5.3.14 NEWS
Stanislav Malyshev [Tue, 12 Jun 2012 18:53:24 +0000 (11:53 -0700)]
re-add 61755 to NEWS
Stanislav Malyshev [Tue, 12 Jun 2012 18:49:35 +0000 (11:49 -0700)]
re-add 61755 to NEWS
Stanislav Malyshev [Tue, 12 Jun 2012 18:22:49 +0000 (11:22 -0700)]
Revert "Add PBKDF2 support via openssl()"
This reverts commit
b5b8ea1050837fba5a6cee55e41b4574ed64158e .
Looks like we don't have agreement yet on this for 5.4. Let's keep it in 5.5 for now.
Stanislav Malyshev [Tue, 12 Jun 2012 18:21:54 +0000 (11:21 -0700)]
Revert "Rename openssl_pkcs5_pbkdf2_hmac() to something that doesn't sound like a spell."
This reverts commit
bccd1e672fabc3c788e93075221d47d9f077b167 .
Looks like we don't have agreement yet on this for 5.4. Let's keep it in 5.5 for now.
Stanislav Malyshev [Tue, 12 Jun 2012 18:18:43 +0000 (11:18 -0700)]
add CVE
Scott MacVicar [Mon, 11 Jun 2012 23:23:27 +0000 (16:23 -0700)]
One more time
Scott MacVicar [Mon, 11 Jun 2012 23:04:01 +0000 (16:04 -0700)]
Merge branch '5.4'
* 5.4:
Rename openssl_pkcs5_pbkdf2_hmac() to something that doesn't sound like a spell.
Add PBKDF2 support via openssl()
Conflicts:
ext/openssl/openssl.c
Scott MacVicar [Mon, 11 Jun 2012 07:16:30 +0000 (00:16 -0700)]
Add PBKDF2 support via openssl()
Summary:
No easy way to put these in the hash extension since we don't really support optional
parameters to certain algorithms. Implemented in openssl for now since it has it already
and is pretty stable.
Only SHA1 is confirmed to work as an algorithm but openssl has a parameter so it can be
changed in the future.
Will backport to 5.4 potentially with Stas' approval.
Test Plan:
Ran newly added tests which came from RFC 6070
Scott MacVicar [Mon, 11 Jun 2012 19:38:54 +0000 (12:38 -0700)]
Rename openssl_pkcs5_pbkdf2_hmac() to something that doesn't sound like a spell.
Summary:
Stas pointed out that this is named pretty poorly. Go for openssl_pbkdf2()
Scott MacVicar [Mon, 11 Jun 2012 07:16:30 +0000 (00:16 -0700)]
Add PBKDF2 support via openssl()
Summary:
No easy way to put these in the hash extension since we don't really support optional
parameters to certain algorithms. Implemented in openssl for now since it has it already
and is pretty stable.
Only SHA1 is confirmed to work as an algorithm but openssl has a parameter so it can be
changed in the future.
Will backport to 5.4 potentially with Stas' approval.
Test Plan:
Ran newly added tests which came from RFC 6070
Scott MacVicar [Mon, 11 Jun 2012 19:38:54 +0000 (12:38 -0700)]
Rename openssl_pkcs5_pbkdf2_hmac() to something that doesn't sound like a spell.
Summary:
Stas pointed out that this is named pretty poorly. Go for openssl_pbkdf2()
Felipe Pena [Mon, 11 Jun 2012 17:08:38 +0000 (14:08 -0300)]
- Fixed build (PKCS5_PBKDF2_HMAC is from 1.0.0)
Anatoliy Belsky [Mon, 11 Jun 2012 15:03:14 +0000 (17:03 +0200)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Fix bug #62271 test bug - ext/wddx/tests/bug48562.phpt
Matt Ficken [Mon, 11 Jun 2012 15:00:36 +0000 (17:00 +0200)]
Fix bug #62271 test bug - ext/wddx/tests/bug48562.phpt
Scott MacVicar [Mon, 11 Jun 2012 07:29:02 +0000 (00:29 -0700)]
Merge branch '5.4'
* 5.4:
Add PBKDF2 support via openssl()
Scott MacVicar [Mon, 11 Jun 2012 07:16:30 +0000 (00:16 -0700)]
Add PBKDF2 support via openssl()
Summary:
No easy way to put these in the hash extension since we don't really support optional
parameters to certain algorithms. Implemented in openssl for now since it has it already
and is pretty stable.
Only SHA1 is confirmed to work as an algorithm but openssl has a parameter so it can be
changed in the future.
Will backport to 5.4 potentially with Stas' approval.
Test Plan:
Ran newly added tests which came from RFC 6070
Stanislav Malyshev [Mon, 11 Jun 2012 03:38:58 +0000 (20:38 -0700)]
Merge branch 'PHP-5.4'
* PHP-5.4:
typo fix
Stanislav Malyshev [Mon, 11 Jun 2012 03:38:22 +0000 (20:38 -0700)]
typo fix
David Soria Parra [Sun, 10 Jun 2012 14:18:05 +0000 (18:18 +0400)]
Merge branch 'PHP-5.4'
* PHP-5.4:
Make travis silent
David Soria Parra [Sun, 10 Jun 2012 14:17:49 +0000 (18:17 +0400)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Make travis silent
David Soria Parra [Sun, 10 Jun 2012 14:15:34 +0000 (18:15 +0400)]
Make travis silent
Travis will always build all branches. As we just have a .travis.yml
on master, travis will go ahead and checkout PHP-5.3. It fails and
then sends mails. We really don't want to get spammed, so we add
a .travis.yml that is just silent.
David Soria Parra [Sun, 10 Jun 2012 13:08:10 +0000 (17:08 +0400)]
Merge branch 'PHP-5.4'
By Stanislav Malyshev (1) and michelangelo (1)
* PHP-5.4:
Adding a test for ext/posix/tests/posix_getegid_basic.phpt
typo
David Soria Parra [Sun, 10 Jun 2012 13:08:02 +0000 (17:08 +0400)]
Merge branch 'PHP-5.3' into PHP-5.4
By Stanislav Malyshev (1) and michelangelo (1)
* PHP-5.3:
Adding a test for ext/posix/tests/posix_getegid_basic.phpt
typo