Arnaud Le Blanc dd15693e90 Fix GHSA-9pqp-7h25-4f32 ...

multipart/form-data boundaries larger than the read buffer result in erroneous
parsing, which violates data integrity.

Limit boundary size, as allowed by RFC 1521:

    Encapsulation boundaries [...] must be no longer than 70 characters, not
    counting the two leading hyphens.

We correctly parse payloads with boundaries of length up to
FILLUNIT-strlen("\r\n--") bytes, so allow this for BC.

2024-09-23 11:44:35 +01:00

..

streams

Merge branch 'PHP-8.2' into PHP-8.3

2024-09-01 14:56:54 +02:00

build-defs.h.in

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

explicit_bzero.c

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

fastcgi.c

Merge branch 'PHP-8.2' into PHP-8.3

2024-05-19 22:55:02 +02:00

fastcgi.h

Mark various functions with void arguments.

2021-05-12 14:55:53 +01:00

fopen_wrappers.c

Merge branch 'PHP-8.2' into PHP-8.3

2024-06-24 19:56:19 +02:00

fopen_wrappers.h

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

getopt.c

Fixed some spaces used instead of tabs

2021-06-29 11:30:26 +02:00

http_status_codes.h

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

internal_functions_win32.c

Implement Random Extension

2022-07-19 10:27:38 +01:00

internal_functions.c.in

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

main_arginfo.h

Fix type of the PHP_FLOAT_DIG constant

2023-09-10 22:31:19 +02:00

main.c

Merge branch 'PHP-8.2' into PHP-8.3

2024-06-24 19:56:19 +02:00

main.stub.php

Fix type of the PHP_FLOAT_DIG constant

2023-09-10 22:31:19 +02:00

network.c

Merge branch 'PHP-8.2' into PHP-8.3

2024-08-24 14:14:57 +02:00

output.c

Merge branch 'PHP-8.2' into PHP-8.3

2024-07-04 15:50:32 +02:00

php_compat.h

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

php_content_types.c

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

php_content_types.h

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

php_getopt.h

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

php_globals.h

Fix open_basedir leak

2023-07-25 17:54:14 +02:00

php_ini_builder.c

sapi/*: move duplicate "--define" code to library

2022-04-18 16:52:08 +02:00

php_ini_builder.h

sapi/*: move duplicate "--define" code to library

2022-04-18 16:52:08 +02:00

php_ini.c

Revert "Zend/zend_types.h: move zend_rc_debug to zend_rc_debug.h"

2023-04-04 22:48:26 +03:00

php_ini.h

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

php_main.h

Add php_version and php_version_id PHPAPI funcs (#11875)

2023-08-04 15:39:50 -06:00

php_memory_streams.h

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

php_network.h

[skip ci] Fix various typos and grammar issues (#11143)

2023-04-28 11:05:32 +02:00

php_odbc_utils.c

[skip ci] Fix typo (#11558)

2023-06-30 12:59:33 +02:00

php_odbc_utils.h

Quote when adding to connection string in (PDO_)ODBC

2022-05-27 16:56:44 +02:00

php_open_temporary_file.c

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

php_open_temporary_file.h

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

php_output.h

Declare main constants in stubs - part 3 (#9731)

2022-10-12 14:42:22 +02:00

php_reentrancy.h

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

php_scandir.c

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

php_scandir.h

Update http->https in license (#6945)

2021-05-06 12:16:35 +02:00

php_streams.h

Revert fix for GH-14930: truncating readdir output (#15533)

2024-08-22 23:41:34 +01:00

php_syslog.c

Make globals const (part 2) (#10610)

2023-02-18 19:52:53 +00:00

php_syslog.h

Fix strict prototype for php_closelog

2022-06-19 22:56:44 +01:00

php_ticks.c

Fix GH-10737: PHP 8.1.16 segfaults on line 597 of sapi/apache2handler/sapi_apache2.c

2023-04-08 16:34:07 +02:00

php_ticks.h

Fix GH-10737: PHP 8.1.16 segfaults on line 597 of sapi/apache2handler/sapi_apache2.c

2023-04-08 16:34:07 +02:00

php_variables.c

Merge branch 'PHP-8.2' into PHP-8.3

2024-04-09 23:49:53 -05:00

php_variables.h

Fix bug #75712: getenv in php-fpm should not read $_ENV, $_SERVER

2024-02-04 11:58:18 +00:00

php_version.h

PHP-8.3 is now for PHP-8.3.12-dev

2024-08-13 20:16:40 +01:00

php.h

Update API versions and numbers

2023-08-29 17:04:24 +01:00

reentrancy.c

Implement Random Extension

2022-07-19 10:27:38 +01:00

rfc1867.c

Fix GHSA-9pqp-7h25-4f32

2024-09-23 11:44:35 +01:00

rfc1867.h

Fix -Wenum-int-mismatch warnings on gcc 13

2023-04-20 16:04:59 +02:00

safe_bcmp.c

Fix comment for php_safe_bcmp (#10306)

2023-01-12 23:30:36 +01:00

SAPI.c

Use new ZSTR_INIT_LITERAL macro (#10879)

2023-03-20 16:19:05 +01:00

SAPI.h

main/SAPI: make "ini_entries" a const string

2023-01-04 12:49:48 +00:00

snprintf.c

[skip ci] Fix various typos and grammar issues (#11143)

2023-04-28 11:05:32 +02:00

snprintf.h

Revert GH-10220

2023-01-16 12:27:33 +01:00

spprintf.c

Use a single version of strnlen (#12015)

2023-08-22 17:40:24 +02:00

spprintf.h

Revert GH-10220

2023-01-16 12:27:33 +01:00

strlcat.c

strlcpy/strlcat update to last openbsd version.

2022-04-28 15:09:55 +02:00

strlcpy.c

strlcpy/strlcat update to last openbsd version.

2022-04-28 15:09:55 +02:00