Remi Collet
6b8ffdbdeb
bump version to 7.2.34-dev
2020-08-04 09:55:29 +02:00
Stanislav Malyshev
07aeb9171d
Update NEWS
2020-08-03 01:14:38 -07:00
Christoph M. Becker
ff577b04c0
Fix #79877 : getimagesize function silently truncates after a null byte
...
We have to check for NUL bytes if `getimagesize()` has been called.
2020-08-02 15:33:24 -07:00
Christoph M. Becker
7355ab8176
Fix #79797 : Use of freed hash key in the phar_parse_zipfile function
...
We must not use heap memory after we freed it.
2020-08-02 15:31:29 -07:00
Sara Golemon
c68d48de9e
Prep for 7.2.33
2020-07-07 19:32:15 +00:00
Sara Golemon
9588c8474e
Prep NEWS for 7.2.32 release
2020-07-07 19:31:05 +00:00
Remi Collet
4cf8be71df
bump version to 7.2.32-dev
2020-05-12 09:16:01 +02:00
Stanislav Malyshev
b4afd21428
Update NEWS
2020-05-11 14:28:51 -07:00
Christoph M. Becker
3c8582ca4b
Fix #78876 : Long variables cause OOM and temp files are not cleaned
...
We use the proper type for size calculations, which is `size_t`.
2020-05-11 13:48:40 -07:00
Christoph M. Becker
1c9bd513ac
Fix #78875 : Long filenames cause OOM and temp files are not cleaned
...
We must not cast `size_t` to `int` (unless the `size_t` value is
guaranteed to be less than or equal to `INT_MAX`). In this case we can
declare `array_len` as `size_t` in the first place.
2020-05-11 13:47:38 -07:00
Sara Golemon
bef96b9d2c
Update NEWS for 7.2.31
2020-04-14 15:38:55 +00:00
Sara Golemon
cf083535f8
Update CREDITS for PHP 7.2.30
2020-04-14 15:16:26 +00:00
Sara Golemon
bd49622a9a
Update NEWS for PHP 7.2.30
2020-04-14 15:16:26 +00:00
dinosaur
13842eda37
Fixed bug #79468
...
Close the stream filter resources when removing them from the stream.
2020-04-14 10:27:28 -04:00
Sara Golemon
6df761b7ff
NEWS
2020-04-14 10:25:37 -04:00
Stanislav Malyshev
9d6bf8221b
Fix bug #79465 - use unsigneds as indexes.
2020-04-13 21:08:37 -07:00
Stanislav Malyshev
14fcc81394
Fix bug #79330 - make all execution modes consistent in rejecting \0
2020-04-13 21:08:30 -07:00
Remi Collet
3072b77c21
bump verison to 7.2.30-dev
2020-03-17 11:28:34 +01:00
Christoph M. Becker
6a4fff4682
Fix NEWS
2020-03-17 11:06:45 +01:00
Stanislav Malyshev
c8d21d7728
[ci skip] Update NEWS
2020-03-15 19:38:31 -07:00
Stanislav Malyshev
2c081b7e26
Fix test
2020-03-15 17:55:28 -07:00
Stanislav Malyshev
0d139c5b94
Fix bug #79329 - get_headers should not accept \0
2020-03-15 17:30:44 -07:00
Stanislav Malyshev
41f66e2a2c
Fixed bug #79282
2020-03-15 17:26:00 -07:00
Remi Collet
63f6608f89
bump version to 7.2.29
2020-02-18 11:00:28 +01:00
Christoph M. Becker
5009b9811d
Update NEWS [ci skip]
2020-02-17 19:21:51 +01:00
Nikita Popov
2826364298
Mark bug76348.phpt as online test
2020-02-16 22:40:25 -08:00
Stanislav Malyshev
e5c95234d8
Fix bug #79082 - Files added to tar with Phar::buildFromIterator have all-access permissions
2020-02-16 22:38:38 -08:00
Stanislav Malyshev
d76f7c6c63
Fix bug #79221 - Null Pointer Dereference in PHP Session Upload Progress
2020-02-15 20:52:19 -08:00
Christoph M. Becker
8308196c97
Fix typo in recent bugfix
2020-02-14 09:21:13 +01:00
Christoph M. Becker
cec8b24c84
Fix #77569 : Write Acess Violation in DomImplementation
...
We must not assume that the zval IS_STRING.
2020-02-13 15:13:26 +01:00
Stanislav Malyshev
2dc170e25d
More checks for php_strip_tags_ex
2020-01-22 22:37:30 -08:00
Remi Collet
7e2bd95fa5
next will be 7.2.28
2020-01-22 09:17:00 +01:00
Stanislav Malyshev
5c90f8eb66
Update NEWS
2020-01-20 22:12:32 -08:00
Stanislav Malyshev
2bcbc95f03
Fix bug #79037 (global buffer-overflow in mbfl_filt_conv_big5_wchar)
2020-01-20 21:43:42 -08:00
Stanislav Malyshev
0f79b1bf30
Fix #79099 : OOB read in php_strip_tags_ex
2020-01-20 21:43:42 -08:00
Christoph M. Becker
f79c774274
Fix #79091 : heap use-after-free in session_create_id()
...
If the `new_id` is released, we must not use it again.
2020-01-20 21:43:42 -08:00
Remi Collet
864f5ef12f
fix release date
2019-12-18 14:16:19 +01:00
Stanislav Malyshev
9705e631a4
[ci skip] Update NEWS
2019-12-16 23:41:04 -08:00
Stanislav Malyshev
6d5cddabaf
Fix test
2019-12-16 10:03:43 -08:00
Stanislav Malyshev
c14eb8de97
Fix bug #78793
2019-12-16 01:14:58 -08:00
Stanislav Malyshev
d348cfb96f
Fixed bug #78910
2019-12-16 00:10:39 -08:00
Christoph M. Becker
eb23c60087
Fix #78878 : Buffer underflow in bc_shift_addsub
...
We must not rely on `isdigit()` to detect digits, since we only support
decimal ASCII digits in the following processing.
2019-12-16 00:05:03 -08:00
Stanislav Malyshev
b771a18133
Fix test
2019-12-16 00:03:18 -08:00
Christoph M. Becker
0e6c0654ed
Fix #78862 : link() silently truncates after a null byte on Windows
...
Since link() is supposed to accepts paths (i.e. strings without NUL
bytes), we must not accept arbitrary strings.
2019-12-16 00:03:06 -08:00
Christoph M. Becker
a5a15965da
Fix #78863 : DirectoryIterator class silently truncates after a null byte
...
Since the constructor of DirectoryIterator and friends is supposed to
accepts paths (i.e. strings without NUL bytes), we must not accept
arbitrary strings.
2019-12-16 00:02:57 -08:00
Remi Collet
d2cfb63f02
next is 7.2.27
2019-12-03 11:25:37 +01:00
Christoph M. Becker
600f1f898f
Fix #78814 : strip_tags allows / in tag name => whitelist bypass
...
When normalizing tags to check whether they are contained in the set
of allowable tags, we must not strip slashes, unless they come
immediately after the opening `<`, or immediately before the closing
`>`.
2019-12-02 11:37:25 +01:00
Christoph M. Becker
db420cb6a1
Fix #78833 : Integer overflow in pack causes out-of-bound access
...
We check for potential signed integer overflow, and bail out
gracefully, in that case.
2019-12-02 11:18:19 +01:00
George Wang
c7141412ce
Added environment LSAPI_CLEAN_SHUTDOWN to control clean shutdown. Update SAPI version to LiteSpeed v7.6 .
2019-11-21 17:57:50 -05:00
Christoph M. Becker
9b92c1d154
Fix #78849 : GD build broken with -D SIGNED_COMPARE_SLOW
...
Apparently, this has not been tested for a long time, and might be a
refactoring relict. Anyhow, we have to pass the context to
`GIFNextPixel` as well.
2019-11-21 09:59:26 +01:00
