Stanislav Malyshev
e2ba5c7987
Fix bug #66127 (Segmentation fault with ArrayObject unset)
2014-07-18 16:28:16 -07:00
Stanislav Malyshev
8e9777a1f1
Fix test - because of big #67397 we don't allow overlong locales anymore
2014-07-18 16:27:11 -07:00
Stanislav Malyshev
e644aad3f9
Fix bug #67397 (Buffer overflow in locale_get_display_name->uloc_getDisplayName (libicu 4.8.1))
2014-07-18 16:26:51 -07:00
Stanislav Malyshev
8ab4e2e90d
Fix bug #67349 : Locale::parseLocale Double Free
2014-07-18 16:26:05 -07:00
Stanislav Malyshev
b512adf78d
Fixed bug #67399 (putenv with empty variable may lead to crash)
...
Conflicts:
ext/standard/basic_functions.c
2014-07-18 16:24:54 -07:00
Remi Collet
2fe5bcbeb5
Fixed Bug #67413 fileinfo: cdf_read_property_info insufficient boundary chec
...
Upstream:
https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d
Adapted for C standard.
2014-07-18 16:21:01 -07:00
Remi Collet
892def5f12
Bug #67412 fileinfo: cdf_count_chain insufficient boundary check
...
Upstream:
https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382
2014-07-18 16:20:19 -07:00
Remi Collet
8d1d038509
Fixed Bug #67411 fileinfo: cdf_check_stream_offset insufficient boundary check
...
Upstream:
https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67
Conflicts:
ext/fileinfo/libmagic/cdf.c
2014-07-18 16:19:30 -07:00
Remi Collet
6bd5a06894
Fixed Bug #67410 fileinfo: mconvert incorrect handling of truncated pascal string size
...
Upstream
https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08
2014-07-18 16:17:36 -07:00
Stanislav Malyshev
ec002bd837
Fix bug #67498 - phpinfo() Type Confusion Information Leak Vulnerability
2014-07-18 16:14:42 -07:00
Remi Collet
52de149ebc
Fix bug #67326 fileinfo: cdf_read_short_sector insufficient boundary check
...
Upstream fix https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391.patch
Only revelant part applied
2014-07-18 16:13:07 -07:00
Stanislav Malyshev
2326401fc1
fix bug #67253 : timelib_meridian_with_check out-of-bounds read
...
Conflicts:
ext/date/lib/parse_date.c
2014-07-18 16:11:54 -07:00
Stanislav Malyshev
7f527897fe
Fix bug #67252 : convert_uudecode out-of-bounds read
2014-07-18 16:05:52 -07:00
Stanislav Malyshev
d4b67896ec
Fix bug #67250 (iptcparse out-of-bounds read)
2014-07-18 16:02:52 -07:00
Stanislav Malyshev
84605098bc
Fix bug #67247 spl_fixedarray_resize integer overflow
2014-07-18 15:59:59 -07:00
Stanislav Malyshev
ee1ab62763
Fix bug #67328 (fileinfo: numerous file_printf calls resulting in performance degradation)
...
Upstream patch: https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d
2014-07-18 15:52:00 -07:00
Stanislav Malyshev
d77ea459bd
Fix bug #67327 : fileinfo: CDF infinite loop in nelements DoS
...
Upstream fix: https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0
2014-07-18 15:50:58 -07:00
Anatol Belski
44be7b7f27
backport this piece from 5.6, related to the #66307 fix
...
Conflicts:
ext/fileinfo/libmagic/readcdf.c
2014-07-18 15:50:04 -07:00
Anatol Belski
0335d2ef3e
Fixed bug #66307 Fileinfo crashes with powerpoint files
...
Conflicts:
ext/fileinfo/libmagic/readcdf.c
ext/fileinfo/tests/finfo_file_002.phpt
2014-07-18 15:48:18 -07:00
Remi Collet
a0bb3fd679
Fixed bug #66060 (Heap buffer over-read in DateInterval)
...
Conflicts:
ext/date/lib/parse_iso_intervals.c
2014-07-18 15:39:37 -07:00
Stanislav Malyshev
eca037a51d
Fix bug #65873 - Integer overflow in exif_read_data()
2014-07-18 15:37:15 -07:00
Xinchen Hui
f3230e3522
let make test report the run-test result
2014-07-18 15:33:59 -07:00
Stanislav Malyshev
3c328f0984
Fix bug #67251 - date_parse_from_format out-of-bounds read
...
Conflicts:
ext/date/lib/parse_date.c
ext/date/lib/parse_date.re
2014-06-15 00:33:24 -07:00
Stanislav Malyshev
d780c2a673
Fix bug #67249 : printf out-of-bounds read
2014-06-13 16:43:56 -07:00
Sara Golemon
d400b74296
Fix potential segfault in dns_get_record()
...
If the remote sends us a packet with a malformed TXT record,
we could end up trying to over-consume the packet and wander
off into overruns.
2014-06-13 16:42:55 -07:00
Remi Collet
08334293f8
Fix bug #67390 insecure temporary file use in the configure script
2014-06-13 16:41:13 -07:00
Stanislav Malyshev
adc070ca99
fix typo in ODBC code
2014-05-18 23:42:30 -07:00
Stanislav Malyshev
8a22540a95
Fix bug #67060 : use default mode of 660
2014-05-11 23:32:35 -07:00
Ferenc Kovacs
4b48b29988
fix the primary qa email address and update the list of available people being able to add moderators to our lists
2014-01-24 16:06:58 +01:00
Will Fitch
8aa93b7f2c
Revert "Fix #62479 : Some chars not parsed in passwords"
...
This reverts commit e6bb90c66a .
2014-01-19 13:02:20 -05:00
Will Fitch
e6bb90c66a
Fix #62479 : Some chars not parsed in passwords
...
This fixes an issue where backslashes and spaces aren't
correctly parsed for passwords.
2014-01-18 19:27:00 -05:00
Julien Pauli
3eb2b1ac40
Updated release process
2013-12-13 13:16:54 +01:00
Anatol Belski
6f739318fd
fix dir separator in cve-2013-6420 test
2013-12-11 13:31:29 +01:00
Stanislav Malyshev
8650bbc8dc
5.3.29-dev
2013-12-10 11:32:11 -08:00
Stanislav Malyshev
c1224573c7
Fix CVE-2013-6420 - memory corruption in openssl_x509_parse
2013-12-10 11:03:49 -08:00
Christopher Jones
32873cd0dd
Merge branch 'PHP-5.3' of https://git.php.net/repository/php-src into PHP-5.3
...
* 'PHP-5.3' of https://git.php.net/repository/php-src :
fix using wrong buffer pointer
2013-08-19 10:53:41 -07:00
Stanislav Malyshev
c1c49d6e39
fix using wrong buffer pointer
2013-08-19 01:02:12 -07:00
Stanislav Malyshev
dcea4ec698
Fix CVE-2013-4073 - handling of certs with null bytes
2013-08-13 22:24:11 -07:00
Christopher Jones
7c9bb87edd
Merge branch 'PHP-5.3' of https://git.php.net/repository/php-src into PHP-5.3
...
# By Johannes Schlüter
# Via Christopher Jones (1) and Johannes Schlüter (1)
* 'PHP-5.3' of https://git.php.net/repository/php-src :
Merge PHP 5.3.27 NEWS
add test for bug #65236
2013-07-22 10:58:52 -07:00
Christopher Jones
e2e002d4ea
Merge branch 'PHP-5.3' of https://git.php.net/repository/php-src into PHP-5.3
...
* 'PHP-5.3' of https://git.php.net/repository/php-src :
Merge PHP 5.3.27 NEWS
add test for bug #65236
2013-07-10 11:13:15 -07:00
Johannes Schlüter
9c4ef50146
Merge PHP 5.3.27 NEWS
2013-07-10 19:45:45 +02:00
Johannes Schlüter
710eee5555
add test for bug #65236
2013-07-10 19:35:18 +02:00
Rob Richards
7d163e8a08
truncate results at depth of 255 to prevent corruption
2013-07-06 07:53:07 -04:00
Nuno Lopes
e964817b24
fix assembly of safe_address() for x86 and x86_64
2013-07-03 18:02:28 -04:00
Sebastian Bergmann
50ac53e1b1
Add bison 2.6.4 to the list of supported versions
2013-07-03 06:36:54 +02:00
Johannes Schlüter
e4ee921b7e
Update git rules (5.5 is stable, 5.3 sec only)
2013-06-20 11:51:21 +02:00
Johannes Schlüter
f0eaa02f6f
This will be PHP 5.3.28
2013-06-19 15:08:02 +02:00
Matteo Beccati
6238dd6f32
Fixed bug #63186 (compile failure on netbsd)
2013-06-14 16:51:54 +02:00
Anatol Belski
cd1b44c4b6
ensure the error_reporting level to get expected notice
2013-06-12 13:13:48 +02:00
Anatol Belski
eccc05fc44
fixed tests
2013-06-11 12:38:49 +02:00