php/archived-php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2026-03-29 19:52:20 +02:00
Code Issues Packages Projects Releases Wiki Activity
138,768 Commits 547 Branches 1,481 Tags
php-8.4.1
Commit Graph

138768 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Saki Takamachi
0454901ed1 Update versions for PHP 8.4.1 php-8.4.1 2024-11-20 18:48:35 +09:00
Jakub Zelenka
fd4d65b3ca Fix MySQLnd possible buffer over read in auth_protocol 2024-11-20 18:10:36 +09:00
Jakub Zelenka
48b9bcdbe3 Make MySQLnd protocol stmt test work on 32bit 2024-11-20 18:10:35 +09:00
Niels Dossche
9e9319c4f0 Fix GHSA-4w77-75f9-2c8w 2024-11-20 18:10:20 +09:00
Niels Dossche
40bd1822a3 Fix GHSA-r977-prxv-hc43 
Move the bound check upwards. Since this doesn't generate output we can
check the bound first.
 2024-11-20 18:10:20 +09:00
Jakub Zelenka
07395e5f60 Fix GHSA-h35g-vwh6-m678: Mysqlnd - various heap buffer over-reads 
This fixes issues causing buffer over-read that leak heap content:
- RESP packet field default left over for COM_LIST
- RESP packet upsert filename
- OK packet message
- RESP packet for stmt row data
  - ps_fetch_from_1_to_8_bytes
  - ps_fetch_float
  - ps_fetch_double
  - ps_fetch_time
  - ps_fetch_date
  - ps_fetch_datetime
  - ps_fetch_string
  - ps_fetch_bit
- RESP packet for query row data (just possible overflow on 32bit)

It also adds various protocol tests using a new fake server.
 2024-11-20 18:10:20 +09:00
Niels Dossche
8e942bbdae Fix GHSA-g665-fm4p-vhff: OOB access in ldap_escape 2024-11-20 18:10:19 +09:00
Jakub Zelenka
62e23cb858 Fix GHSA-c5f2-jwm7-mmq2: stream HTTP fulluri CRLF injection 2024-11-20 18:10:19 +09:00
Niels Dossche
b256b6555a Fix GHSA-5hqh-c84r-qjcv: Integer overflow in the firebird quoter causing OOB writes 2024-11-20 18:10:19 +09:00
Niels Dossche
ed01e51276 Fix GHSA-5hqh-c84r-qjcv: Integer overflow in the dblib quoter causing OOB writes 2024-11-20 18:10:19 +09:00
Saki Takamachi
1fd82aa13a PHP-8.4 is now for PHP 8.4.1-dev 2024-11-20 17:19:18 +09:00
Dmitry Stogov
d0c336a666 Merge branch 'PHP-8.3' into PHP-8.4 
* PHP-8.3:
  Use the immutable twin of temporary op_array (#16861)
 2024-11-19 20:55:40 +03:00
Dmitry Stogov
d1a9281814 Merge branch 'PHP-8.2' into PHP-8.3 
* PHP-8.2:
  Use the immutable twin of temporary op_array (#16861)
 2024-11-19 20:55:32 +03:00
Dmitry Stogov
ef5844a1ca Use the immutable twin of temporary op_array (#16861) 2024-11-19 20:55:15 +03:00
Saki Takamachi
315fef2c72 Prepare NEWS for 8.4.0 2024-11-20 01:57:56 +09:00
Saki Takamachi
fa36346a6c [skip ci] NEWS for #16694 2024-11-20 00:42:40 +09:00
Saki Takamachi
2c8662d6f9 Fixed a bug in BcMath\Number::pow() and bcpow() when raising negative powers of 0. (#16694) 
Closes #16694
Fixes #16236
 2024-11-20 00:16:52 +09:00
Patrick Allaert
60e4f48fca Merge branch 'PHP-8.3' into PHP-8.4 2024-11-19 16:12:17 +01:00
Patrick Allaert
65bd3dbd2c Merge branch 'PHP-8.2' into PHP-8.3 2024-11-19 16:12:02 +01:00
Patrick Allaert
27a9965b97 Merge branch 'PHP-8.1' into PHP-8.2 2024-11-19 16:11:41 +01:00
Dmitry Stogov
9dade02569 Merge branch 'PHP-8.3' into PHP-8.4 
* PHP-8.3:
  Backport JIT fix: set valid EX(opline) before calling gc_possible_root() (#16858)
 2024-11-19 18:04:33 +03:00
Dmitry Stogov
c6c3d9fa5a Merge branch 'PHP-8.2' into PHP-8.3 
* PHP-8.2:
  Backport JIT fix: set valid EX(opline) before calling gc_possible_root() (#16858)
 2024-11-19 18:04:15 +03:00
Dmitry Stogov
6167c64782 Backport JIT fix: set valid EX(opline) before calling gc_possible_root() (#16858) 2024-11-19 18:03:54 +03:00
Christoph M. Becker
e44b7625c5 Fix GH-16839: Error on building Opcache JIT for Windows ARM64 
OPcache JIT does not support Windows ARM64, so we should not allow
`--enable-opcache-jit` in the first place.

Due to the way `ARG_ENABLE()` is handled on Windows, we do not attempt
to suppress the configure option, but just do not enable JIT when the
user attempts to, and adapt the help text.

Closes GH-16841.
 2024-11-18 23:27:54 +01:00
Niels Dossche
e00d684420 Merge branch 'PHP-8.3' into PHP-8.4 
* PHP-8.3:
  Fix GH-16630: UAF in lexer with encoding translation and heredocs
 2024-11-18 19:59:08 +01:00
Niels Dossche
6a632a2d60 Merge branch 'PHP-8.2' into PHP-8.3 
* PHP-8.2:
  Fix GH-16630: UAF in lexer with encoding translation and heredocs
 2024-11-18 19:59:01 +01:00
Niels Dossche
fc1db70f10 Fix GH-16630: UAF in lexer with encoding translation and heredocs 
zend_save_lexical_state() can be nested multiple times, for example for
the parser initialization and then in the heredoc lexing. The input
should not be freed if we restore to the same filtered string.

Closes GH-16716.
 2024-11-18 19:58:02 +01:00
Dmitry Stogov
997431dea2 JIT: Set valid EX(opline) before calling gc_possible_root() 2024-11-18 19:31:26 +03:00
Jakub Zelenka
a001ad33f0 Update NEWS with security fixes info 2024-11-18 16:56:00 +01:00
Jakub Zelenka
32f905f1d6 Fix MySQLnd possible buffer over read in auth_protocol 2024-11-18 16:55:44 +01:00
Jakub Zelenka
e47f18156e Merge branch 'PHP-8.3' into PHP-8.4 2024-11-18 16:50:05 +01:00
Jakub Zelenka
1b6c3f7172 Merge branch 'PHP-8.2' into PHP-8.3 2024-11-18 16:48:50 +01:00
Jakub Zelenka
cae2582416 Run labeler only in php/php-src repository 
Closes GH-16844
 2024-11-18 16:43:15 +01:00
Ilija Tovilo
048fa7bacc Fix get_object_vars() for non-hooked props in hooked prop iter 
The zend_hash_update_ind() variant unwraps indirects, rather than creating them.
Don't use _zend_hash_append_ind() because the property might already exist.

Fixes GH-16725
Closes GH-16805
 2024-11-18 16:20:19 +01:00
Dmitry Stogov
159b71c0f4 Merge branch 'PHP-8.3' into PHP-8.4 
* PHP-8.3:
  Fixed test
 2024-11-18 15:35:13 +03:00
Dmitry Stogov
5198bcc561 Merge branch 'PHP-8.2' into PHP-8.3 
* PHP-8.2:
  Fixed test
 2024-11-18 15:35:09 +03:00
Dmitry Stogov
71403558d3 Fixed test 2024-11-18 15:34:55 +03:00
Dmitry Stogov
e55bf9a2ea Merge branch 'PHP-8.3' into PHP-8.4 
* PHP-8.3:
  Fix GH-16829: Segmentation fault with opcache.jit=tracing enabled on aarch64
 2024-11-18 14:34:55 +03:00
Dmitry Stogov
5575703fb3 Merge branch 'PHP-8.2' into PHP-8.3 
* PHP-8.2:
  Fix GH-16829: Segmentation fault with opcache.jit=tracing enabled on aarch64
 2024-11-18 14:34:42 +03:00
Dmitry Stogov
79aaeeafe5 Fix GH-16829: Segmentation fault with opcache.jit=tracing enabled on aarch64 2024-11-18 14:27:08 +03:00
Niels Dossche
7dd336ae83 Fix GHSA-4w77-75f9-2c8w 2024-11-18 11:06:01 +01:00
Niels Dossche
81030c9bbb Fix GHSA-r977-prxv-hc43 
Move the bound check upwards. Since this doesn't generate output we can
check the bound first.
 2024-11-17 19:30:44 +01:00
Jakub Zelenka
2f5aa9f9d1 Fix GHSA-h35g-vwh6-m678: Mysqlnd - various heap buffer over-reads 
This fixes issues causing buffer over-read that leak heap content:
- RESP packet field default left over for COM_LIST
- RESP packet upsert filename
- OK packet message
- RESP packet for stmt row data
  - ps_fetch_from_1_to_8_bytes
  - ps_fetch_float
  - ps_fetch_double
  - ps_fetch_time
  - ps_fetch_date
  - ps_fetch_datetime
  - ps_fetch_string
  - ps_fetch_bit
- RESP packet for query row data (just possible overflow on 32bit)

It also adds various protocol tests using a new fake server.
 2024-11-17 19:30:13 +01:00
Niels Dossche
f9ecf90070 Fix GHSA-g665-fm4p-vhff: OOB access in ldap_escape 2024-11-17 19:29:56 +01:00
Jakub Zelenka
426a6d4539 Fix GHSA-c5f2-jwm7-mmq2: stream HTTP fulluri CRLF injection 2024-11-17 19:29:45 +01:00
Niels Dossche
69c5f68fdc Fix GHSA-5hqh-c84r-qjcv: Integer overflow in the firebird quoter causing OOB writes 2024-11-17 19:29:26 +01:00
Niels Dossche
d9baa9fed8 Fix GHSA-5hqh-c84r-qjcv: Integer overflow in the dblib quoter causing OOB writes 2024-11-17 19:29:16 +01:00
David Carlier
f7a508ca10 Merge branch 'PHP-8.3' into PHP-8.4 2024-11-17 12:27:36 +00:00
David Carlier
3fd0e4c461 Merge branch 'PHP-8.2' into PHP-8.3 2024-11-17 12:27:26 +00:00
David Carlier
80894d87d5 Fix GH-16834: cal_from_jd overflow on julian_day argument. 
close GH-16836
 2024-11-17 12:27:02 +00:00