]>
granicus.if.org Git - php/log
Nikita Popov [Sun, 1 Jul 2012 15:05:19 +0000 (17:05 +0200)]
Fix accidential change of php_version.h
For some reason the merge reverts changed the version :/
Nikita Popov [Sun, 1 Jul 2012 14:38:26 +0000 (16:38 +0200)]
Nikita Popov [Sun, 1 Jul 2012 14:35:43 +0000 (16:35 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Revert JSON changes to PHP 5.3
Nikita Popov [Sun, 1 Jul 2012 14:28:57 +0000 (16:28 +0200)]
Revert JSON changes to PHP 5.3
This reverts the following commits:
974324676b2436f159f42d9241c569f813471684
4662151ea7d7b6920d115cf2a2d6e9d4232727a3
84fe2cc890e49f40bac7c3ba74b3cfc6dc4cef2f
This does not revert the JSON changes released in PHP 5.3.14.
Stanislav Malyshev [Sun, 1 Jul 2012 02:14:30 +0000 (19:14 -0700)]
fix bug #61359: json_encode() calls too many reallocs
Stanislav Malyshev [Sun, 1 Jul 2012 00:37:20 +0000 (17:37 -0700)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
remove duplicates, fix order
Stanislav Malyshev [Sun, 1 Jul 2012 00:37:09 +0000 (17:37 -0700)]
update NEWS
Stanislav Malyshev [Sun, 1 Jul 2012 00:36:22 +0000 (17:36 -0700)]
remove duplicates, fix order
Marc Easen [Mon, 11 Jun 2012 20:47:40 +0000 (21:47 +0100)]
Fixed the common misspelling of the word occurred (occured -> occurred)
Felipe Pena [Sat, 30 Jun 2012 19:29:47 +0000 (16:29 -0300)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
- Fixed bug #62415 (Undefined variable: diff in run-tests.php on line 2093 for successful XFAIL)
Felipe Pena [Sat, 30 Jun 2012 19:29:30 +0000 (16:29 -0300)]
- Fixed bug #62415 (Undefined variable: diff in run-tests.php on line 2093 for successful XFAIL)
andrey [Fri, 29 Jun 2012 13:32:55 +0000 (16:32 +0300)]
merge
andrey [Fri, 29 Jun 2012 11:48:37 +0000 (14:48 +0300)]
Merge branch 'PHP-5.3' into PHP-5.4
andrey [Fri, 29 Jun 2012 11:42:36 +0000 (14:42 +0300)]
fix Bug #62273 Segmentation Fault in Mysqli/Mysqlnd
andrey [Fri, 29 Jun 2012 11:41:11 +0000 (14:41 +0300)]
Merge branch 'PHP-5.3' into PHP-5.4
andrey [Fri, 29 Jun 2012 11:41:01 +0000 (14:41 +0300)]
Merge branch 'PHP-5.4' of ssh://git.php.net/php-src into PHP-5.4
andrey [Fri, 29 Jun 2012 11:40:41 +0000 (14:40 +0300)]
Merge branch 'PHP-5.3' of ssh://git.php.net/php-src into PHP-5.3
Nikita Popov [Fri, 29 Jun 2012 11:15:35 +0000 (13:15 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Fix some lengths in crypt()
Conflicts:
ext/standard/crypt.c
Nikita Popov [Fri, 29 Jun 2012 10:47:37 +0000 (12:47 +0200)]
Fix some lengths in crypt()
Use salt_len_in instead of strlen(salt) or PHP_MAX_SALT_LEN, otherwise too
much memory will be allocated.
sha512 has a 86 character checksum, not 43. That probably was a copy&paste
from the sha256 code which indeed has 43.
The allocation also was using sizeof(char *), thus allocating 4 or 8 times
as much memory as necessary. The sizeof(char *) was removed in the 5.4
branch in
b7a92c9 but forgotten on 5.3.
The memset 0 call was using PHP_MAX_SALT_LEN which can be smaller than the
output buffer and thus not zeroing out everything. Use the size of the
output buffer (needed) instead.
andrey [Fri, 29 Jun 2012 09:43:14 +0000 (12:43 +0300)]
Merge branch 'PHP-5.3' into PHP-5.4
andrey [Fri, 29 Jun 2012 09:42:54 +0000 (12:42 +0300)]
new charsets
Stanislav Malyshev [Fri, 29 Jun 2012 01:08:11 +0000 (18:08 -0700)]
fix NEWS order
Anthony Ferrara [Fri, 29 Jun 2012 00:36:21 +0000 (20:36 -0400)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed Salt)
Anthony Ferrara [Fri, 29 Jun 2012 00:00:03 +0000 (20:00 -0400)]
Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed Salt)
Fixed a memory allocation bug in crypt() SHA256/512 that can
cause segmentation faults when passed in salts with a null byte
early.
Nikita Popov [Thu, 28 Jun 2012 18:18:19 +0000 (20:18 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Add json_last_error_msg() function
Nikita Popov [Thu, 28 Jun 2012 18:09:47 +0000 (20:09 +0200)]
Add json_last_error_msg() function
This replaces json_last_error(true) and is consistent with other custom
error handling functions.
Johannes Schlüter [Wed, 27 Jun 2012 21:35:07 +0000 (23:35 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Fix #62432 ReflectionMethod random corrupt memory on high concurrent
Conflicts:
ext/date/php_date.c
ext/fileinfo/fileinfo.c
ext/pdo/pdo_dbh.c
ext/pdo/pdo_stmt.c
ext/reflection/php_reflection.c
ext/spl/spl_array.c
ext/spl/spl_directory.c
ext/spl/spl_dllist.c
ext/spl/spl_fixedarray.c
ext/spl/spl_heap.c
ext/spl/spl_iterators.c
ext/spl/spl_observer.c
ext/sqlite/sqlite.c
ext/sqlite3/sqlite3.c
ext/tidy/tidy.c
ext/xmlreader/php_xmlreader.c
ext/xmlwriter/php_xmlwriter.c
ext/xsl/php_xsl.c
ext/zip/php_zip.c
Johannes Schlüter [Wed, 27 Jun 2012 21:26:33 +0000 (23:26 +0200)]
Fix #62432 ReflectionMethod random corrupt memory on high concurrent
This fixes the same issue in multiple extensions. This isn't needed
in later branches as 5.4 introduced object_properties_init()
Nikita Popov [Wed, 27 Jun 2012 10:28:55 +0000 (12:28 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Improve JSON error handling
Conflicts:
ext/json/tests/bug54058.phpt
ext/json/tests/bug61537.phpt
Nikita Popov [Wed, 27 Jun 2012 10:19:41 +0000 (12:19 +0200)]
Improve JSON error handling
json_encode() no longer throws warnings. Instead only the error code for
json_last_error() is set.
As it is hard to debug the error from just an error code an optional
$as_string parameter was added to json_last_error(), which returns an
error message instead of an error code.
Johannes Schlüter [Wed, 27 Jun 2012 09:46:57 +0000 (11:46 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Fix memleak in CLI
Conflicts:
sapi/cli/php_cli.c
Johannes Schlüter [Wed, 27 Jun 2012 09:42:43 +0000 (11:42 +0200)]
Fix memleak in CLI
Stanislav Malyshev [Wed, 27 Jun 2012 04:56:11 +0000 (21:56 -0700)]
update NEWS
Stanislav Malyshev [Wed, 27 Jun 2012 04:53:40 +0000 (21:53 -0700)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
ws fix
BFN
Fix bug #62373 (serialize() generates wrong reference to the object)
Conflicts:
php.ini-development
php.ini-production
Stanislav Malyshev [Tue, 26 Jun 2012 22:22:29 +0000 (15:22 -0700)]
ws fix
Xinchen Hui [Tue, 26 Jun 2012 10:42:33 +0000 (18:42 +0800)]
Fixed bug #62357 (compile failure: (S) Arguments missing for built-in function __memcmp).
Any C library function may be a macro, We should avoid using ZEND_STRS(L) as their arguments
Moriyoshi Koizumi [Mon, 25 Jun 2012 10:20:38 +0000 (19:20 +0900)]
BFN
Moriyoshi Koizumi [Mon, 25 Jun 2012 10:13:23 +0000 (19:13 +0900)]
Fix bug #62373 (serialize() generates wrong reference to the object)
Moriyoshi Koizumi [Mon, 25 Jun 2012 10:13:23 +0000 (19:13 +0900)]
Fix bug #62373 (serialize() generates wrong reference to the object)
Nikita Popov [Sun, 24 Jun 2012 21:56:55 +0000 (23:56 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Fix memory allocation checks for base64 encode
Nikita Popov [Sun, 24 Jun 2012 21:32:50 +0000 (23:32 +0200)]
Fix memory allocation checks for base64 encode
base64_encode used safe_emalloc, but one of the arguments was derived from a
multiplication, thus making the allocation unsafe again.
There was a size check in place, but it was off by a factor of two as it
didn't account for the signedness of the integer type.
The unsafe allocation is not exploitable, but still causes funny behavior
when the sized overflows into a negative number.
To fix the issue the *4 factor is moved into the size argument (where it is
known to be safe), so safe_emalloc can carry out the multiplication.
The size check is removed as it doesn't really make sense once safe_emalloc
works correctly. (Would only cause base64_encode to silently return false
instead of throwing an error. Also could cause problems with other uses of
the base64 encoding API, which all don't check for a NULL return value.)
Furthermore the (length + 2) < 0 check is replaced with just length < 0.
Allowing lengths -2 and -1 doesn't make sense semantically and also is not
honored in the following code (negative length would access unallocated
memory.)
Actually the length < 0 check doesn't make sense altogether, but I left it
there just to be safe.
Nikita Popov [Sat, 23 Jun 2012 19:14:45 +0000 (21:14 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Improve json_encode error handling
- BFN
Conflicts:
ext/json/json.c
Nikita Popov [Sat, 23 Jun 2012 18:46:27 +0000 (20:46 +0200)]
Improve json_encode error handling
json_encode() now returns bool(false) for all possible errors, throws the
respective warning and also sets the respective json_last_error() error
code. Three new error codes have been added:
* JSON_ERROR_RECURSION
* JSON_ERROR_INF_OR_NAN
* JSON_ERROR_UNSUPPORTED_TYPE
To get a partial JSON output instead of bool(false) the option
JSON_PARTIAL_OUTPUT_ON_ERROR can be specified. In this case the invalid
segments will be replaced either by null (for recursion, unsupported type
and invalid JSON) or 0 (for Inf and NaN).
The warning for invalid UTF-8 stays intact and is thrown also with
display_errors = On. If this behavior is undesired this can be remedied
later.
Felipe Pena [Sat, 23 Jun 2012 18:21:32 +0000 (15:21 -0300)]
- BFN
Felipe Pena [Sat, 23 Jun 2012 18:21:20 +0000 (15:21 -0300)]
- BFN
Felipe Pena [Sat, 23 Jun 2012 18:16:13 +0000 (15:16 -0300)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
- Improved fix for #62384
Felipe Pena [Sat, 23 Jun 2012 18:10:47 +0000 (15:10 -0300)]
- Improved fix for #62384
Johannes Schlüter [Fri, 22 Jun 2012 18:01:06 +0000 (20:01 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Remove unneeded and outdated ChangeLog file
Johannes Schlüter [Fri, 22 Jun 2012 18:00:20 +0000 (20:00 +0200)]
Remove unneeded and outdated ChangeLog file
Johannes Schlüter [Fri, 22 Jun 2012 15:33:22 +0000 (17:33 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Remove extra ;
Johannes Schlüter [Fri, 22 Jun 2012 15:32:46 +0000 (17:32 +0200)]
Remove extra ;
Felipe Pena [Fri, 22 Jun 2012 15:05:55 +0000 (12:05 -0300)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
- Fixed bug #62384 (Attempting to invoke a Closure more than once causes segfaul)
Felipe Pena [Fri, 22 Jun 2012 15:05:29 +0000 (12:05 -0300)]
- Fixed bug #62384 (Attempting to invoke a Closure more than once causes segfaul)
Johannes Schlüter [Fri, 22 Jun 2012 10:50:30 +0000 (12:50 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Improve check for :memory: pseudo-filename in SQlite
Conflicts:
ext/sqlite3/sqlite3.c
Johannes Schlüter [Fri, 22 Jun 2012 10:48:39 +0000 (12:48 +0200)]
Improve check for :memory: pseudo-filename in SQlite
Johannes Schlüter [Wed, 20 Jun 2012 17:47:44 +0000 (19:47 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Remove outdated and user-specific files
Johannes Schlüter [Wed, 20 Jun 2012 17:46:32 +0000 (19:46 +0200)]
Remove outdated and user-specific files
Nikita Popov [Tue, 19 Jun 2012 16:41:49 +0000 (18:41 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
I messed up the last merge somehow :/ Merge again.
* PHP-5.3:
Add NEWS for bug #62262
Fixed bug RecursiveArrayIterator does not implement Countable
Conflicts:
ext/spl/spl_array.c
Nikita Popov [Tue, 19 Jun 2012 16:40:46 +0000 (18:40 +0200)]
Add NEWS for bug #62262
Nikita Popov [Tue, 19 Jun 2012 15:45:04 +0000 (17:45 +0200)]
Fixed bug RecursiveArrayIterator does not implement Countable
ArrayIterator implemented Countable only after it was already inherited by
RecursiveArrayIterator. Thus the interface was missing in RAI.
Nikita Popov [Tue, 19 Jun 2012 16:08:22 +0000 (18:08 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Fixed bug RecursiveArrayIterator does not implement Countable
Conflicts:
ext/spl/spl_array.c
Nikita Popov [Tue, 19 Jun 2012 15:45:04 +0000 (17:45 +0200)]
Fixed bug RecursiveArrayIterator does not implement Countable
ArrayIterator implemented Countable only after it was already inherited by
RecursiveArrayIterator. Thus the interface was missing in RAI.
Anatoliy Belsky [Tue, 19 Jun 2012 15:17:11 +0000 (17:17 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
sync zip ext version with pecl
Anatoliy Belsky [Tue, 19 Jun 2012 15:15:56 +0000 (17:15 +0200)]
sync zip ext version with pecl
Anatoliy Belsky [Tue, 19 Jun 2012 12:58:06 +0000 (14:58 +0200)]
one more correction for COM upgrading notes
Anatoliy Belsky [Tue, 19 Jun 2012 12:51:52 +0000 (14:51 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
one more correction for COM upgrading notes
Anatoliy Belsky [Tue, 19 Jun 2012 12:42:59 +0000 (14:42 +0200)]
one more correction for COM upgrading notes
Anatoliy Belsky [Tue, 19 Jun 2012 12:12:54 +0000 (14:12 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
split gzgetc_basic.phpt for zlib 1.2.7
Anatoliy Belsky [Tue, 19 Jun 2012 12:08:34 +0000 (14:08 +0200)]
split gzgetc_basic.phpt for zlib 1.2.7
Anatoliy Belsky [Mon, 18 Jun 2012 20:08:44 +0000 (22:08 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
com ext upgrading correction
Anatoliy Belsky [Mon, 18 Jun 2012 20:07:19 +0000 (22:07 +0200)]
com ext upgrading correction
Anatoliy Belsky [Mon, 18 Jun 2012 20:04:40 +0000 (22:04 +0200)]
com ext upgrading infos
Anatoliy Belsky [Mon, 18 Jun 2012 19:59:27 +0000 (21:59 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
com ext upgrading info
Anatoliy Belsky [Mon, 18 Jun 2012 19:56:17 +0000 (21:56 +0200)]
com ext upgrading info
Anatoliy Belsky [Sun, 17 Jun 2012 14:10:56 +0000 (16:10 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Reverted the BC fix regarding to #57905, test adopted
Anatoliy Belsky [Sun, 17 Jun 2012 14:04:36 +0000 (16:04 +0200)]
Reverted the BC fix regarding to #57905, test adopted
New 0.10.1 has a stronger archive integrity check. Restoring
the old behaviour of libzip < 0.10.1 makes no sense at this
place.
stealth35 [Fri, 15 Jun 2012 21:56:54 +0000 (00:56 +0300)]
Fix potential leak in cli server
Anatoliy Belsky [Thu, 14 Jun 2012 16:02:53 +0000 (18:02 +0200)]
Fixed bug #62312 ext\sockets\tests\socket_import_stream-4.phpt fails
Anatoliy Belsky [Thu, 14 Jun 2012 15:59:39 +0000 (17:59 +0200)]
Fix bug #62270 Test bug - ext/fileinfo/tests/finfo_open_error-win32
Johannes Schlüter [Wed, 13 Jun 2012 08:36:49 +0000 (10:36 +0200)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Merge PHP 5.3.14 NEWS
re-add 61755 to NEWS
Johannes Schlüter [Wed, 13 Jun 2012 08:35:58 +0000 (10:35 +0200)]
Merge PHP 5.3.14 NEWS
Stanislav Malyshev [Tue, 12 Jun 2012 18:53:24 +0000 (11:53 -0700)]
re-add 61755 to NEWS
Stanislav Malyshev [Tue, 12 Jun 2012 18:49:35 +0000 (11:49 -0700)]
re-add 61755 to NEWS
Stanislav Malyshev [Tue, 12 Jun 2012 18:22:49 +0000 (11:22 -0700)]
Revert "Add PBKDF2 support via openssl()"
This reverts commit
b5b8ea1050837fba5a6cee55e41b4574ed64158e .
Looks like we don't have agreement yet on this for 5.4. Let's keep it in 5.5 for now.
Stanislav Malyshev [Tue, 12 Jun 2012 18:21:54 +0000 (11:21 -0700)]
Revert "Rename openssl_pkcs5_pbkdf2_hmac() to something that doesn't sound like a spell."
This reverts commit
bccd1e672fabc3c788e93075221d47d9f077b167 .
Looks like we don't have agreement yet on this for 5.4. Let's keep it in 5.5 for now.
Stanislav Malyshev [Tue, 12 Jun 2012 18:18:43 +0000 (11:18 -0700)]
add CVE
Scott MacVicar [Mon, 11 Jun 2012 19:38:54 +0000 (12:38 -0700)]
Rename openssl_pkcs5_pbkdf2_hmac() to something that doesn't sound like a spell.
Summary:
Stas pointed out that this is named pretty poorly. Go for openssl_pbkdf2()
Scott MacVicar [Mon, 11 Jun 2012 07:16:30 +0000 (00:16 -0700)]
Add PBKDF2 support via openssl()
Summary:
No easy way to put these in the hash extension since we don't really support optional
parameters to certain algorithms. Implemented in openssl for now since it has it already
and is pretty stable.
Only SHA1 is confirmed to work as an algorithm but openssl has a parameter so it can be
changed in the future.
Will backport to 5.4 potentially with Stas' approval.
Test Plan:
Ran newly added tests which came from RFC 6070
Matt Ficken [Mon, 11 Jun 2012 15:00:36 +0000 (17:00 +0200)]
Fix bug #62271 test bug - ext/wddx/tests/bug48562.phpt
Stanislav Malyshev [Mon, 11 Jun 2012 03:38:22 +0000 (20:38 -0700)]
typo fix
David Soria Parra [Sun, 10 Jun 2012 14:17:49 +0000 (18:17 +0400)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Make travis silent
David Soria Parra [Sun, 10 Jun 2012 14:15:34 +0000 (18:15 +0400)]
Make travis silent
Travis will always build all branches. As we just have a .travis.yml
on master, travis will go ahead and checkout PHP-5.3. It fails and
then sends mails. We really don't want to get spammed, so we add
a .travis.yml that is just silent.
David Soria Parra [Sun, 10 Jun 2012 13:08:02 +0000 (17:08 +0400)]
Merge branch 'PHP-5.3' into PHP-5.4
By Stanislav Malyshev (1) and michelangelo (1)
* PHP-5.3:
Adding a test for ext/posix/tests/posix_getegid_basic.phpt
typo
michelangelo [Sat, 9 Jun 2012 16:07:11 +0000 (16:07 +0000)]
Adding a test for ext/posix/tests/posix_getegid_basic.phpt
Gustavo André dos Santos Lopes [Sat, 9 Jun 2012 16:29:47 +0000 (17:29 +0100)]
Fix bug #62266
Custom extension segfaults during xmlParseFile with FPM SAPI
because the regular list is not prepared during the MINIT phase
and our custom external entity loader tries to open PHP streams.
Stanislav Malyshev [Fri, 8 Jun 2012 20:27:24 +0000 (13:27 -0700)]
rearrange news
Stanislav Malyshev [Fri, 8 Jun 2012 08:24:49 +0000 (01:24 -0700)]
typo
Pierrick Charron [Fri, 8 Jun 2012 16:02:49 +0000 (18:02 +0200)]
NEWS File
Stanislav Malyshev [Fri, 8 Jun 2012 08:24:49 +0000 (01:24 -0700)]
typo
Stanislav Malyshev [Fri, 8 Jun 2012 08:22:46 +0000 (01:22 -0700)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
improve overflow checks
fix potential overflow in _php_stream_scandir