Xinchen Hui
2d8ab51576
Fixed bug #73067 (__debugInfo crashes when throwing an exception)
2016-09-13 10:58:57 +08:00
Dmitry Stogov
b66039db33
Fixed bug #72944 (Null pointer deref in zval_delref_p).
2016-08-29 12:02:50 +03:00
Xinchen Hui
c67fa3c91d
Fixed bug #72943 (assign_dim on string doesn't reset hval)
2016-08-26 18:30:08 +08:00
Xinchen Hui
0476bb1de5
Fixed bug #72911 (Memleak in zend_binary_assign_op_obj_helper)
2016-08-21 17:38:03 +08:00
Nikita Popov
e2230c17d3
Fix bug #72854
2016-08-16 21:05:30 +02:00
Xinchen Hui
e03480bfab
Fixed bug #72813 (Segfault with __get returned by ref)
...
This should be safe change, as we don't dereference value and member
after calling setter/getter.
And compare to adding unref codes, this is much cheaper.
2016-08-12 16:24:46 +08:00
Nikita Popov
807e81937b
Fix bug #72767
...
The page size calculation did not account for the size of the
stack header (or rather it did account for it, but in the wrong
direction...)
2016-08-05 19:55:10 +02:00
Nikita Popov
3b48c5a36f
Revert "Make call_user_func() on reference args consistent"
...
This reverts commit fafe01b07b .
See bug #72698 , there is code using this behavior. Reverting for
PHP 7.0 *only*. The fix is still in PHP 7.1.
2016-07-28 18:45:44 +02:00
Bob Weinand
6046acf93e
Fix ClosedGeneratorException possibly thrown into wrong scope
2016-07-23 16:39:21 +02:00
Xinchen Hui
97c0b133c5
Fixed bug #72629 (Caught exception assignment to variables ignores references).
2016-07-20 16:59:14 +08:00
Nikita Popov
31cbe23a9a
Merge branch 'PHP-5.6' into PHP-7.0
...
Conflicts:
Zend/zend_gc.c
2016-07-16 23:02:34 +02:00
Nikita Popov
171c759d79
Revert "Fixed bug #72286 (Segmentation fault During Garbage Collection)"
...
This reverts commit 1c84b55ade .
2016-07-16 23:02:23 +02:00
Dmitry Stogov
99a5170781
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
Fixed bug #72286 (Segmentation fault During Garbage Collection)
2016-07-14 22:38:47 +03:00
Dmitry Stogov
1c84b55ade
Fixed bug #72286 (Segmentation fault During Garbage Collection)
2016-07-14 22:37:25 +03:00
Xinchen Hui
8c5b27e061
Fixed bug #72594 (Calling an earlier instance of an included anonymous class fatals)
2016-07-14 13:36:43 +08:00
Xinchen Hui
42902919bc
Fixed bug #72581 (previous property undefined in Exception after deserialization)
2016-07-12 11:51:20 +08:00
Nikita Popov
8a555d7c66
Merge branch 'PHP-5.6' into PHP-7.0
...
Conflicts:
Zend/zend_compile.c
2016-07-05 14:32:38 +02:00
Pedro Magalhães
08777e9615
Don't enforce LSP if prototype method is private
...
Fixes bug #72496 .
2016-07-05 14:30:22 +02:00
Nikita Popov
9b8f1d6037
Don't use FUNC_ARG fetches for call_user_func()
...
This makes no sense -- SEND_USER can't even handle INDIRECTs.
2016-06-28 21:34:20 +02:00
Nikita Popov
fafe01b07b
Make call_user_func() on reference args consistent
...
Previously reference arguments were allowed if call_user_func()
was compiled to SEND_USER and not otherwise. Make it consistent
by always forbidding them.
2016-06-28 20:43:38 +02:00
Xinchen Hui
76370f30db
Fixed test
2016-06-28 15:39:02 +08:00
Xinchen Hui
ce7e180a04
Fixed bug #72508 (strange references after recursive function call and "switch" statement)
2016-06-28 15:36:50 +08:00
Stanislav Malyshev
7dde353ee7
Merge branch 'PHP-5.5' into PHP-5.6.23
...
* PHP-5.5:
Fixed bug #72446 - Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow
update NEWS
fix tests
fix build
Fix bug #72455 : Heap Overflow due to integer overflows
Fix bug #72434 : ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize
Fixed ##72433: Use After Free Vulnerability in PHP's GC algorithm and unserialize
Fix bug #72407 : NULL Pointer Dereference at _gdScaleVert
Fix bug #72402 : _php_mb_regex_ereg_replace_exec - double free
Fix bug #72298 pass2_no_dither out-of-bounds access
Fixed #72339 Integer Overflow in _gd2GetHeader() resulting in heap overflow
Fix bug #72262 - do not overflow int
Fix bug #72400 and #72403 - prevent signed int overflows for string lengths
Fix bug #72275 : don't allow smart_str to overflow int
Fix bug #72340 : Double Free Courruption in wddx_deserialize
update NEWS
Fix #66387 : Stack overflow with imagefilltoborder
Skip test which is 64bits only
5.5.37 now
Conflicts:
configure.in
ext/mcrypt/mcrypt.c
ext/spl/spl_directory.c
main/php_version.h
2016-06-21 00:01:48 -07:00
Stanislav Malyshev
3f627e580a
Fixed ##72433: Use After Free Vulnerability in PHP's GC algorithm and unserialize
2016-06-20 21:26:33 -07:00
Nikita Popov
4746e5efcb
Forbid "yield from" in force closed generators
...
Same check we do for "yield", was missed when "yield from" was
added. We could make this more granular by only forbidding to
actually yield values and still allow something like "yield from []",
but this does not seem worthwhile.
2016-05-28 13:21:05 +02:00
Xinchen Hui
d29bd582a8
Added NEWS Entry
2016-05-28 16:12:10 +08:00
Lauri Kenttä
58302192b7
Test for bug #72221 , segfault in zend_memnstr_ex
2016-05-28 16:10:29 +08:00
Anatol Belski
f751b1ceaf
fix dir separator in test
2016-05-12 20:37:04 +02:00
Sara Golemon
a73b03edea
Fix serializing ZEND_AST_SHELL_EXEC
...
Currently, `foo` is reserialized as `'foo'` due to misuse of zend_ast_export().
ZEND_AST_SHELL_EXEC can only contain ZEND_AST_ZVAL(string) or ZEND_AST_ENCAPS_LIST,
so just handle the ZEND_AST_ZVAL(string) case directly.
2016-05-12 02:47:56 +00:00
Xinchen Hui
69adf2370e
Fixed test
2016-05-07 22:04:20 -07:00
Xinchen Hui
080f6b10ec
Fixed test
2016-05-06 10:51:38 +08:00
Xinchen Hui
9191862121
Fixed bug #72162 (use-after-free - error_reporting)
2016-05-05 11:02:21 +08:00
Nikita Popov
9af0c96af4
Fix bug #72159
2016-05-04 18:43:11 +02:00
Nikita Popov
fbae590bf0
Fix leaks in QM_ASSIGN, JMP_SET and COALESCE
...
The QM_ASSIGN code was rewritten to use the standard pattern for
handling CVs and VARs.
2016-05-03 18:12:56 +02:00
Nikita Popov
ec7c3c22b6
Fix leak in zend_get_constant_ex
2016-05-02 19:59:43 +02:00
Anatol Belski
81e62e66d6
fix dir separator in test
2016-05-01 19:05:02 +02:00
Nikita Popov
d0069ca6c1
Fix ('\bar')() in namespace
2016-05-01 13:05:14 +02:00
Dmitry Stogov
d851e8389c
Added test
2016-04-28 20:12:42 +03:00
Dmitry Stogov
9e45ac53ce
Fixed BC break described by bug #72119 .
...
It was introduced after 7.0.5 release by attempt to fix bug #71428 .
2016-04-28 19:56:10 +03:00
Dmitry Stogov
92233dd736
Fixed bug #72101 (crash on complex code)
2016-04-25 14:11:46 +03:00
Bob Weinand
a287c3f776
Fix magic constants (__LINE__) with ?? for constant scalar exprs
...
Also fix general memory leak when root ast gets replaced in compile time evaluation
2016-04-21 02:45:09 +02:00
Márcio Almada
9f3eab44df
allow null coalescing (??) on constant expressions
2016-04-21 01:22:28 +02:00
Nikita Popov
77bb96d7c9
Fix bug #71737
...
Also improve the error message for $this used in parameters.
2016-04-20 18:38:40 +02:00
Nikita Nefedov
19759a5602
Fix RECV opcode to handle all kinds of exceptions
...
fix RECV opcode to handle exceptions thrown from user-defined error handler
as a result Notice error from failed type coercion
2016-04-20 08:40:44 -07:00
Nikita Popov
73958ca62d
Fix SEND_USER as well
...
Missed copy&paste code here
2016-04-18 22:45:38 +02:00
Nikita Popov
a8792158bd
Fix SEND_ARRAY+PREFER_REF SHM corruption
...
Make the behavior consistent between namespaced and not and with
PHP 5.6.
2016-04-18 18:26:20 +02:00
Nikita Popov
d1a38743a5
Fix SEND_UNPACK array separation
...
Separating only immutable arrays is not enough.
2016-04-16 22:33:23 +02:00
Bob Weinand
15d1d4f45b
Fixed bug #72038 (Function calls with values to a by-ref parameter don't always throw a notice)
2016-04-16 20:36:19 +02:00
Nikita Popov
4e585eb429
Fix ZEND_SEPARATE for by-val func returning ref zval
2016-04-12 14:44:29 +02:00
Remi Collet
d62ab27042
fix skipif
2016-04-12 13:46:06 +02:00