Tim Düsterhus
273303e076
Merge branch 'PHP-8.2'
...
* PHP-8.2:
[ci skip] NEWS (#10586 )
[ci skip] Next release will be 8.0.29
2023-02-14 20:28:34 +01:00
Tim Düsterhus
a313cce913
Merge branch 'PHP-8.1' into PHP-8.2
...
* PHP-8.1:
[ci skip] NEWS (#10586 )
[ci skip] Next release will be 8.0.29
2023-02-14 20:28:27 +01:00
Tim Düsterhus
5e69d76bbc
Merge branch 'PHP-8.0' into PHP-8.1
...
* PHP-8.0:
[ci skip] Next release will be 8.0.29
2023-02-14 20:27:53 +01:00
Niels Dossche
e35e6dc351
[ci skip] NEWS ( #10586 )
2023-02-14 20:27:29 +01:00
Pierrick Charron
9f5c391d15
Merge branch 'PHP-8.2'
...
* PHP-8.2:
PHP-8.2 is now for PHP 8.2.4-dev
2023-02-14 10:04:55 -05:00
Pierrick Charron
dc054488da
PHP-8.2 is now for PHP 8.2.4-dev
2023-02-14 10:02:46 -05:00
Gabriel Caruso
0e45ed772d
[ci skip] Next release will be 8.0.29
2023-02-14 15:19:11 +01:00
Remi Collet
6ec4856dc3
Merge branch 'PHP-8.2'
...
* PHP-8.2:
more config for new FPM tests
2023-02-14 14:14:52 +01:00
Remi Collet
73b3f78ea0
Merge branch 'PHP-8.1' into PHP-8.2
...
* PHP-8.1:
more config for new FPM tests
2023-02-14 14:14:34 +01:00
Remi Collet
b11d855dbf
Merge branch 'PHP-8.0' into PHP-8.1
...
* PHP-8.0:
more config for new FPM tests
2023-02-14 14:14:03 +01:00
Remi Collet
e86d8704b4
more config for new FPM tests
2023-02-14 14:13:40 +01:00
Jakub Zelenka
c81b7ce1a3
Merge branch 'PHP-8.2'
2023-02-14 11:07:59 +00:00
Jakub Zelenka
cbf089018b
Merge branch 'PHP-8.1' into PHP-8.2
2023-02-14 11:00:20 +00:00
Jakub Zelenka
4058d20608
Merge branch 'PHP-8.0' into PHP-8.1
2023-02-14 10:52:17 +00:00
Jakub Zelenka
937b1e38e2
Fix missing colon in NEWS
2023-02-14 10:46:48 +00:00
Jakub Zelenka
eef29d434a
Change NEWS for GHSA-54hq-v5wp-fqgv as it is for all SAPIs
2023-02-14 10:42:40 +00:00
Jakub Zelenka
caaaf75990
Fix incorrect character in NEWS
2023-02-14 10:33:56 +00:00
Jakub Zelenka
054c7b09f9
Update NEWS
2023-02-14 10:23:59 +00:00
Jakub Zelenka
716de0cff5
Introduce max_multipart_body_parts INI
...
This fixes GHSA-54hq-v5wp-fqgv DOS vulnerabality by limitting number of
parsed multipart body parts as currently all parts were always parsed.
2023-02-14 10:21:23 +00:00
Jakub Zelenka
e45850c195
Fix repeated warning for file uploads limit exceeding
2023-02-14 10:21:07 +00:00
Dmitry Stogov
bc1d780fef
Merge branch 'PHP-8.2'
...
* PHP-8.2:
Fix updating SSA object type for *_ASSIGN_OP (#10458 )
2023-02-14 11:29:55 +03:00
Dmitry Stogov
e3aa73904a
Merge branch 'PHP-8.1' into PHP-8.2
...
* PHP-8.1:
Fix updating SSA object type for *_ASSIGN_OP (#10458 )
2023-02-14 11:29:47 +03:00
Niels Dossche
d94ddbed2c
Fix updating SSA object type for *_ASSIGN_OP ( #10458 )
...
The code fetched the class entry into ce for objects and static
properties. However, when the actual update needs to take place (when
result_def exists), the class entry in ce was reset to NULL. So the SSA
object type update never happened. Fetch the class entry in the
result_def>=0 case instead after the reset of ce to NULL.
2023-02-14 11:29:29 +03:00
Dmitry Stogov
7d49189ff4
Make C functions returning "void" to return PHP "null" ( #10579 )
...
In PHP-8.2 and below we by mistake returned "object(FFI\CData:void)#2 (0) {}". We decided not to fix this in PHP-8.2 and below to avoid BC breaks.
2023-02-14 09:24:02 +03:00
David Carlier
10c26ce790
[ci skip] NEWS
2023-02-13 19:43:29 +00:00
Dmitry Stogov
851e4623f5
Make C functions returning "void" to return PHP "null"
...
In PHP-2.0 and below we by mistake returned "obcect(FFI\CData:void)#2 (0) {}".
We decided not to fix this in PHP-2.0 and below to aboid BC breaks.
2023-02-13 22:42:39 +03:00
Cristian Rodríguez
ab3f871846
posix: fix misuse of bool (invalid code in c23)
...
a bool pointer argument cannot take true or false but either &boolval
or NULL
Closes GH-10577.
2023-02-13 19:40:03 +00:00
Dmitry Stogov
2abb5850ba
Merge branch 'PHP-8.2'
...
* PHP-8.2:
Fix assertion failure when var_dump'ing void FFI result (#10568 )
2023-02-13 22:38:52 +03:00
Dmitry Stogov
cec528d06b
Merge branch 'PHP-8.1' into PHP-8.2
...
* PHP-8.1:
Fix assertion failure when var_dump'ing void FFI result (#10568 )
2023-02-13 22:38:43 +03:00
Niels Dossche
1a5fc6e1a3
Fix assertion failure when var_dump'ing void FFI result ( #10568 )
2023-02-13 22:38:28 +03:00
Ben Ramsey
9c48f1da8d
Merge branch 'PHP-8.2'
2023-02-13 13:23:41 -06:00
Ben Ramsey
32f0ee3b8c
Merge branch 'PHP-8.1' into PHP-8.2
2023-02-13 13:22:59 -06:00
Ben Ramsey
28d68f5013
PHP-8.1 is now for PHP 8.1.17-dev
2023-02-13 13:16:07 -06:00
Bob Weinand
71f2d60cb0
Merge branch 'PHP-8.2'
2023-02-13 16:34:36 +00:00
Bob Weinand
98b8d1c152
Merge branch 'PHP-8.1' into PHP-8.2
2023-02-13 16:34:19 +00:00
Bob Weinand
95016138a5
Fix GH-10496: Fibers must not be garbage collected while implicitly suspended by resumption of another fiber
2023-02-13 16:30:21 +00:00
Bob Weinand
e8d16fda13
Merge branch 'PHP-8.2'
2023-02-13 13:10:44 +01:00
Bob Weinand
0e31e03bc5
Merge branch 'PHP-8.1' into PHP-8.2
2023-02-13 13:10:08 +01:00
Arnaud Le Blanc
d721dcc2ef
Fix colletion of unfinished function call in fibers
...
Fixes GH-10496.
Co-authored-by: Bob Weinand <bobwei9@hotmail.com >
2023-02-13 13:09:04 +01:00
Dmitry Stogov
3b75f07c9a
Stop copying internal functions into each thread ( #10517 )
...
* Stop copying internal functions into each thread
It seems we don't copy internal methods for a long time, so this
shouldn't be a problem. We had to copy functions in PHP-5 times, but it
seems we just forgot to remove this.
It's possible that some third-part extensions (e.g. profilers, tracers,
debuggers) modify internal functions. After this change that may cause
race conditions in ZTS build (but we already jave the same behavior for
internal methods). Observer API should provide necesssary functionality
to avoid shared structures modification.
* Remove unused function
2023-02-13 10:09:30 +03:00
Stanislav Malyshev
0ebef331ac
Merge branch 'PHP-8.2'
2023-02-12 21:34:14 -07:00
Stanislav Malyshev
e8c64b62da
Merge branch 'PHP-8.1' into PHP-8.2
2023-02-12 21:34:10 -07:00
Stanislav Malyshev
85d9278db2
Merge branch 'PHP-8.0' into PHP-8.1
2023-02-12 21:33:39 -07:00
Stanislav Malyshev
b5ccaaf613
Update NEWS
2023-02-12 21:04:31 -07:00
Niels Dossche
ec10b28d64
Fix array overrun when appending slash to paths
...
Fix it by extending the array sizes by one character. As the input is
limited to the maximum path length, there will always be place to append
the slash. As the php_check_specific_open_basedir() simply uses the
strings to compare against each other, no new failures related to too
long paths are introduced.
We'll let the DOM and XML case handle a potentially too long path in the
library code.
2023-02-12 20:56:19 -07:00
Stanislav Malyshev
af2ddc6426
Update NEWS
2023-02-12 20:53:06 -07:00
Tim Düsterhus
a92acbad87
crypt: Fix possible buffer overread in php_crypt()
2023-02-12 20:46:51 -07:00
Tim Düsterhus
c840f71524
crypt: Fix validation of malformed BCrypt hashes
...
PHP’s implementation of crypt_blowfish differs from the upstream Openwall
version by adding a “PHP Hack”, which allows one to cut short the BCrypt salt
by including a `$` character within the characters that represent the salt.
Hashes that are affected by the “PHP Hack” may erroneously validate any
password as valid when used with `password_verify` and when comparing the
return value of `crypt()` against the input.
The PHP Hack exists since the first version of PHP’s own crypt_blowfish
implementation that was added in 1e820eca02 .
No clear reason is given for the PHP Hack’s existence. This commit removes it,
because BCrypt hashes containing a `$` character in their salt are not valid
BCrypt hashes.
2023-02-12 20:46:44 -07:00
Frank Du
a9437ceb6f
base64: add avx512 and vbmi version. ( #6361 )
...
1. Implementation based on https://github.com/WojciechMula/base64simd
2. Only runtime path is added to reduce the complexity of SIMD variants.
3. Expand test case to cover SIMD implementation.
Signed-off-by: Frank Du <frank.du@intel.com >
2023-02-13 03:30:47 +00:00
David Carlier
19a7281efa
sockets add SO_RERROR/SO_ZEROIZE/SO_SPLICE net/openbsd's constants.
...
Closes GH-10563.
2023-02-12 21:55:55 +00:00