Stanislav Malyshev
53eff4a369
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Fix bug #69253 - ZIP Integer Overflow leads to writing past heap boundary
2015-03-17 22:00:29 -07:00
Stanislav Malyshev
ef8fc4b53d
Fix bug #69253 - ZIP Integer Overflow leads to writing past heap boundary
2015-03-17 21:59:56 -07:00
Stanislav Malyshev
bf2f03ddb3
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Fix bug #69248 - heap overflow vulnerability in regcomp.c
add test for bug #68976
2015-03-17 17:10:05 -07:00
Stanislav Malyshev
fb04dcf6db
Fix bug #69248 - heap overflow vulnerability in regcomp.c
...
Merged from 70bc296560
2015-03-17 17:04:57 -07:00
Stanislav Malyshev
8b14d3052f
add test for bug #68976
2015-03-17 17:03:46 -07:00
Stanislav Malyshev
d5e523f52f
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Fixed bug #68976 - Use After Free Vulnerability in unserialize()
Conflicts:
ext/standard/var_unserializer.c
2015-03-17 13:22:12 -07:00
Stanislav Malyshev
646572d6d3
Fixed bug #68976 - Use After Free Vulnerability in unserialize()
2015-03-17 13:20:22 -07:00
Stanislav Malyshev
9ba4db5e5d
fix tests
2015-03-17 12:55:35 -07:00
Stanislav Malyshev
e55e40ca66
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Fix bug #69207 - move_uploaded_file allows nulls in path
2015-03-17 12:48:37 -07:00
Stanislav Malyshev
1291d6bbee
Fix bug #69207 - move_uploaded_file allows nulls in path
2015-03-17 12:47:58 -07:00
Julien Pauli
4dba99c226
Fix flaws in session module
2015-03-16 16:00:46 +01:00
Anatol Belski
293d6e629d
backport af2b0669 into 5.5
2015-03-16 08:32:39 +01:00
Anatol Belski
c21c8f369d
fix test
2015-03-14 18:29:59 +01:00
Jeff Welch
1e51c5411e
Fix #69203 : FILTER_FLAG_STRIP_HIGH doesn't strip ASCII 127
2015-03-14 09:17:36 +01:00
Xinchen Hui
5b87d52041
Fixed typo
2015-03-14 11:31:12 +08:00
Xinchen Hui
ed59370f0a
Little improvement, update NEWs, added test
2015-03-14 00:52:53 +08:00
Vektah
482500b455
Fix a leak
2015-03-13 15:54:30 +11:00
Vektah
950d3d6e9b
Fix bug #69227 and #65967
...
This patch fixes a use (in zend_gc.c) after free (in spl_observer.c).
See https://bugs.php.net/bug.php?id=69227
2015-03-13 15:02:05 +11:00
Dmitry Stogov
c814b3294a
We don't cache custom strems with callbacks anymore
2015-03-10 19:25:30 +03:00
Daniel Lowrey
bbfd4a5e62
Fix crypto stream timeout regressions
2015-03-09 15:53:26 -06:00
Xinchen Hui
9af1383a3f
Revert "Fix #63486 "
...
This reverts commit f4c96ffcb5 .
2015-03-09 17:22:56 +08:00
Jeff Welch
66a2c528fe
Fix #69202 : FILTER_FLAG_STRIP_BACKTICK ignored unless other flags are used.
2015-03-09 17:08:35 +08:00
Masaki Kagaya
fa72f1ea86
added missing parentheses
...
added test case for bug #68846
replaced tab with space
added missing parentheses again
See also: http://icu-project.org/docs/papers/gb18030.html#h7
2015-03-08 23:39:04 -07:00
Stanislav Malyshev
a8da0a9620
Merge branch 'pull-request/1104' into PHP-5.5
...
* pull-request/1104:
Fix #63486
2015-03-08 23:21:53 -07:00
Stanislav Malyshev
43b426fbc4
Merge branch 'pull-request/1106' into PHP-5.5
...
* pull-request/1106:
Fix #67626
2015-03-08 22:52:21 -07:00
Stanislav Malyshev
a2a20d29a8
Merge branch 'pull-request/1134' into PHP-5.5
...
* pull-request/1134:
Regression tests for SplFileInfo class setters
2015-03-08 17:13:02 -07:00
Remi Collet
89f86119d6
Fix odbc build as shared
...
Broken since a41aa46759
2015-03-08 07:34:51 +01:00
Tjerk Meesters
d7fb52ea20
Fixed bug #68917 (parse_url fails on some partial urls)
2015-03-06 20:51:22 +08:00
Daniel Lowrey
e892f5382f
Fix ZTS build
2015-03-05 12:12:55 -07:00
Daniel Lowrey
94140afa69
Fix bug #67403 (Add signatureType to openssl_x509_parse)
2015-03-05 10:09:06 -07:00
nathan r. hruby
837eeefee9
Make killing a locker an ERROR event
...
At least in apache, killing a locker with SIGKILL from inside opcache prevents
the child process from emitting a corresponding log event to the access or
error logs, therefore requests are termed with no record. This makes is
incredibly difficult to debug problems espically on systems with high counts
of cache restarts. Since INFO level is far too noisy for production use,
switch the killing to a higher level so we can see it easier.
2015-03-03 23:16:45 +08:00
Dmitry Stogov
b3ac352253
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Added type checks
2015-03-03 10:45:07 +03:00
Dmitry Stogov
c8eaca013a
Added type checks
2015-03-03 10:43:48 +03:00
Dmitry Stogov
035d80523f
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Added type checks
Conflicts:
ext/soap/soap.c
2015-03-03 09:52:21 +03:00
Dmitry Stogov
0c136a2abd
Added type checks
2015-03-03 09:44:46 +03:00
Jeremy Mikola
dea7bc8786
Regression tests for SplFileInfo class setters
...
Adds tests for SplFileInfo class setters accepting either the base and child classes, and throwing an exception for unexpected classes.
Related: http://svn.php.net/viewvc?view=revision&revision=336017 and https://github.com/facebook/hhvm/pull/4917
2015-03-02 14:45:26 -05:00
Dmitry Stogov
d5248f67b5
Check variable type before its usage as IS_ARRAY.
2015-03-02 12:27:36 +03:00
Xinchen Hui
caebb76131
Fixed bug #69139 (Crash in gc_zval_possible_root on unserialize)
2015-03-01 23:16:15 +08:00
Reeze Xia
f824f91ac9
Fixed bug #69141 Missing arguments in reflection info for some builtin functions
...
This include:
- setcookie (missing "httponly")
- setrawcookie (missing "httponly")
- spl_autoload_register (missing 2 optional params)
- mktime (missing "is_dst")
- gmmktime (missing "is_dst")
2015-02-28 16:37:14 +08:00
Дмитрий Пацура
e9c6798721
Fix ARG_INFO for levenshtein
...
This can work with 2 parameters (require)
refs http://php.net/manual/ru/function.levenshtein.php
refs https://github.com/phalcon/zephir/issues/753
2015-02-27 23:23:24 +01:00
Xinchen Hui
997b7e5630
Fixed bug #69085 (SoapClient's __call() type confusion through unserialize()).
2015-02-27 23:32:32 +08:00
Xinchen Hui
3e82816ba1
Fixed bug #69125 (Array numeric string as key)
2015-02-27 11:42:36 +08:00
Taoguang Chen
e441d71baa
fix bug#68942's patch
...
Fix type confusion bug in unserialize() with DateTimeZone. https://bugs.php.net/bug.php?id=68942
2015-02-27 10:41:53 +08:00
Xinchen Hui
34d397e267
better name
2015-02-25 20:49:07 +08:00
Xinchen Hui
d508ff9640
Improve fix for #69038
2015-02-25 20:07:02 +08:00
Xinchen Hui
ffdc5728c8
Fixed bug #69108 ("Segmentation fault" when (de)serializing SplObjectStorage)
2015-02-25 18:21:59 +08:00
Linus Unnebäck
63ab6d8249
curl: add new proxy constants
2015-02-23 11:19:36 +01:00
Xinchen Hui
d5a1a3342b
Fixed test fails for bug68557
2015-02-23 10:35:16 +01:00
Jakub Zelenka
591dbcabe5
Fix bug #64695 (JSON_NUMERIC_CHECK has issues with strings that are numbers plus the letter e)
2015-02-22 20:22:47 +00:00
Anatol Belski
68afd75ecd
Merge branch 'pull-request/1112' into PHP-5.5
2015-02-22 16:26:02 +01:00