Stanislav Malyshev
44f87fbf36
Fix test error message
2019-03-03 19:30:14 -08:00
Stanislav Malyshev
8ac6fee856
Fix bug #77563 - Uninitialized read in exif_process_IFD_in_MAKERNOTE
...
Also fix for bug #77659
2019-03-03 18:35:43 -08:00
Stanislav Malyshev
5f0e62a3e5
Fix bug #77540 - Invalid Read on exif_process_SOFn
2019-03-03 18:35:26 -08:00
Stanislav Malyshev
5e824a88d0
Fix integer overflows on 32-bits
2019-03-03 18:35:04 -08:00
Christoph M. Becker
254a5914ad
Fix #77431 SplFileInfo::__construct() accepts NUL bytes
...
`SplFileInfo::__construct()` has to expect a path instead of a string,
analogous to `SplFileObject::__construct()`.
2019-03-03 18:23:46 -08:00
Stanislav Malyshev
7f0ab7c20c
Fix bug #77396 - Null Pointer Dereference in phar_create_or_parse_filename
2019-03-03 18:22:32 -08:00
Derick Rethans
65d81833bb
Use pkg-config for ICU, as the old icu-config has been deprecated
2019-02-07 14:00:39 +01:00
Sara Golemon
fabade1573
Bump for 7.1.27
2019-01-08 14:17:43 -05:00
Stanislav Malyshev
27625f063e
Still leaking for some reason, XFAIL for now, I'll look into it later.
2019-01-07 01:03:04 -08:00
Stanislav Malyshev
1afebfb3fa
Merge branch 'PHP-5.6' into PHP-7.1
...
* PHP-5.6:
Fix bug #77418 - Heap overflow in utf32be_mbc_to_code
[ci skip] Add NEWS
Fix more issues with encodilng length
Fix #77270 : imagecolormatch Out Of Bounds Write on Heap
Fix bug #77380 (Global out of bounds read in xmlrpc base64 code)
Fix bug #77371 (heap buffer overflow in mb regex functions - compile_string_node)
Fix bug #77370 - check that we do not read past buffer end when parsing multibytes
Fix #77269 : Potential unsigned underflow in gdImageScale
Fix bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext)
Fix bug #77242 (heap out of bounds read in xmlrpc_decode())
Regenerate certs for openssl tests
2019-01-06 23:33:34 -08:00
Stanislav Malyshev
9d6c59eeea
Fix bug #77418 - Heap overflow in utf32be_mbc_to_code
2019-01-06 23:31:15 -08:00
Stanislav Malyshev
08bb0ce4e4
Add NEWS
2019-01-06 13:08:24 -08:00
Stanislav Malyshev
b51eaf4166
[ci skip] Add NEWS
2019-01-06 13:03:38 -08:00
Stanislav Malyshev
0c35032012
Fix test
2019-01-06 12:30:44 -08:00
Stanislav Malyshev
8d3dfabef4
Fix #77369 - memcpy with negative length via crafted DNS response
2019-01-06 11:39:09 -08:00
Stanislav Malyshev
31f59e1f30
Fix more issues with encodilng length
...
Should fix bug #77381 , bug #77382 , bug #77385 , bug #77394 .
2019-01-06 11:38:46 -08:00
Christoph M. Becker
567c9f5842
Fix #77270 : imagecolormatch Out Of Bounds Write on Heap
...
At least some of the image reading functions may return images which
use color indexes greater than or equal to im->colorsTotal. We cater
to this by always using a buffer size which is sufficient for
`gdMaxColors` in `gdImageColorMatch()`.
2019-01-06 11:38:46 -08:00
Stanislav Malyshev
4feb9e66ff
Fix bug #77380 (Global out of bounds read in xmlrpc base64 code)
2019-01-06 11:38:46 -08:00
Stanislav Malyshev
c6e34d91b8
Fix bug #77371 (heap buffer overflow in mb regex functions - compile_string_node)
2019-01-06 11:38:46 -08:00
Stanislav Malyshev
deb06bbb9c
Fix bug #77370 - check that we do not read past buffer end when parsing multibytes
2019-01-06 11:38:46 -08:00
Christoph M. Becker
dfd8237aec
Fix #77269 : Potential unsigned underflow in gdImageScale
...
Belatedly, we're porting the respective upstream patch[1].
[1] <60bfb401ad >
2019-01-06 11:38:46 -08:00
Stanislav Malyshev
78bd347774
Fix bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext)
2019-01-06 11:38:46 -08:00
Stanislav Malyshev
9c62b95e5e
Fix bug #77242 (heap out of bounds read in xmlrpc_decode())
2019-01-06 11:38:46 -08:00
Alexander Kurilo
e3e3289bd1
Regenerate certs for openssl tests
2019-01-06 11:38:46 -08:00
Stanislav Malyshev
c95daa9c75
Fix more issues with encodilng length
...
Should fix bug #77381 , bug #77382 , bug #77385 , bug #77394 .
2019-01-06 11:34:27 -08:00
Christoph M. Becker
7a12dad4dd
Fix #77270 : imagecolormatch Out Of Bounds Write on Heap
...
At least some of the image reading functions may return images which
use color indexes greater than or equal to im->colorsTotal. We cater
to this by always using a buffer size which is sufficient for
`gdMaxColors` in `gdImageColorMatch()`.
2019-01-06 11:34:20 -08:00
Stanislav Malyshev
1cc2182bcc
Fix bug #77380 (Global out of bounds read in xmlrpc base64 code)
2019-01-06 11:34:00 -08:00
Stanislav Malyshev
28362ed4fa
Fix bug #77371 (heap buffer overflow in mb regex functions - compile_string_node)
2019-01-06 11:33:54 -08:00
Stanislav Malyshev
20407d06ca
Fix bug #77370 - check that we do not read past buffer end when parsing multibytes
2019-01-06 11:33:44 -08:00
Christoph M. Becker
a918020c03
Fix #77269 : Potential unsigned underflow in gdImageScale
...
Belatedly, we're porting the respective upstream patch[1].
[1] <60bfb401ad >
2019-01-06 11:33:38 -08:00
Stanislav Malyshev
428d8164ff
Fix bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext)
2019-01-06 11:33:32 -08:00
Stanislav Malyshev
4fc0bceb7c
Fix bug #77242 (heap out of bounds read in xmlrpc_decode())
2019-01-06 11:33:25 -08:00
Alexander Kurilo
f51062523d
Regenerate certs for openssl tests
2019-01-02 10:00:36 -08:00
Remi Collet
4288674651
add imap.enable_insecure_rsh in php.ini
2018-12-08 10:24:36 +01:00
Remi Collet
9b8f2417ad
missing entry for #77020
2018-12-08 10:06:19 +01:00
Ferenc Kovacs
6cbdc5e207
Merge branch 'PHP-7.0' into PHP-7.1
2018-12-05 09:30:20 +01:00
Ferenc Kovacs
bd289af963
Merge branch 'PHP-5.6' into PHP-7.0
2018-12-05 09:25:53 +01:00
Ferenc Kovacs
c26cb383a5
5.6.40 will be next. probably not
2018-12-05 09:13:30 +01:00
Anatol Belski
d07e63211a
Merge branch 'PHP-7.0' into PHP-7.1
...
* PHP-7.0:
Sync NEWS [ci skip]
2018-12-04 12:49:42 +01:00
Anatol Belski
a8f125fbca
Sync NEWS [ci skip]
2018-12-04 12:49:10 +01:00
Stanislav Malyshev
d5dc3c69f9
Merge branch 'PHP-7.0' into PHP-7.1
...
* PHP-7.0:
Fix null pointer deref in qprint-encode filter (bug #77231 )
2018-12-03 10:19:57 -08:00
Stanislav Malyshev
036bc5c1fb
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
Fix null pointer deref in qprint-encode filter (bug #77231 )
2018-12-03 10:19:49 -08:00
Stanislav Malyshev
78bffa72c1
Fix null pointer deref in qprint-encode filter (bug #77231 )
2018-12-03 10:19:08 -08:00
Stanislav Malyshev
8ab5d22332
Merge branch 'PHP-7.0' into PHP-7.1
...
* PHP-7.0:
Fix bug #77143 - add more checks to buffer reads
Fix bug #77143 - add more checks to buffer reads
Fix #77020 : null pointer dereference in imap_mail
2018-12-03 00:42:45 -08:00
Stanislav Malyshev
5718d73dbb
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
Fix bug #77143 - add more checks to buffer reads
2018-12-03 00:42:35 -08:00
Stanislav Malyshev
48f0f73f75
Fix bug #77143 - add more checks to buffer reads
2018-12-03 00:41:46 -08:00
Stanislav Malyshev
66a0f061f6
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
Fix bug #77143 - add more checks to buffer reads
Fix #77020 : null pointer dereference in imap_mail
2018-12-03 00:39:03 -08:00
Stanislav Malyshev
54212674b9
Fix bug #77143 - add more checks to buffer reads
2018-12-03 00:03:10 -08:00
Stanislav Malyshev
7edc639b9f
Fix #77020 : null pointer dereference in imap_mail
...
If an empty $message is passed to imap_mail(), we must not set message
to NULL, since _php_imap_mail() is not supposed to handle NULL pointers
(opposed to pointers to NUL).
2018-12-03 00:00:56 -08:00
Philip Prindeville
61af343768
Don't need interactive progress on git clones in Travis
...
Travis logs are usually inspected after the build completes, by which time
progress info is useless.
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com >
2018-12-02 16:04:22 -08:00