Jakub Zelenka 27e67cc371 Fix GHSA-3cr5-j632-f35r: Null byte in hostnames ...

This fixes stream_socket_client() and fsockopen().

Specifically it adds a check to parse_ip_address_ex and it also makes
sure that the \0 is not ignored in fsockopen() hostname formatting.

2025-07-01 19:46:42 +03:00

..

bcmath

ext/bcmath: Fixed bug (bcpowmod() with mod = -1 returns 1 when it must be 0)

2024-05-30 15:47:25 +01:00

bz2

Use EXTENSIONS instead of SKIPIF sections in *.phpt

2024-01-31 11:18:21 +01:00

calendar

Fix GH-16834: cal_from_jd overflow on julian_day argument.

2024-11-17 12:27:02 +00:00

com_dotnet

Fix GH-16991: Getting typeinfo of non DISPATCH variant segfaults

2024-11-29 16:29:11 +01:00

ctype

Merge branch 'PHP-8.1' into PHP-8.2

2023-09-26 21:44:00 +02:00

curl

Merge branch 'PHP-8.1' into PHP-8.2

2025-02-05 19:22:20 +01:00

date

Merge branch 'PHP-8.1' into PHP-8.2

2025-03-06 15:04:08 +01:00

dba

Backport GH-14962 to stable versions

2024-11-26 21:24:48 +01:00

dl_test

Add observer temporary to dl'ed functions

2024-12-20 18:45:34 +01:00

dom

Merge branch 'PHP-8.1' into PHP-8.2

2025-03-11 21:57:33 +01:00

enchant

…

exif

Fix GH-16409: Segfault in exif_thumbnail when not dealing with a real file

2024-10-13 21:12:17 +02:00

ffi

Fix GH-16397: Segmentation fault when comparing FFI object (#16401)

2024-10-14 19:23:04 +02:00

fileinfo

Merge branch 'PHP-8.1' into PHP-8.2

2025-04-24 11:27:16 +02:00

filter

Fixed CS

2024-11-26 15:40:46 +00:00

ftp

Fix compilation of ftp without openssl

2023-12-05 11:55:44 +01:00

gd

Fix GH-16771: imagecreatefromstring overflow on invalid format.

2024-11-13 12:48:37 +00:00

gettext

Backport CI fixes to security branches

2024-10-28 15:57:16 +01:00

gmp

Revert "ext/gmp: gmp_pow fix FPE with large values."

2024-11-27 19:52:07 +00:00

hash

ext/hash: Fix GH-16711: Segfault in mhash()

2024-11-10 20:15:44 +00:00

iconv

Fix iconv_open basic test (#15611)

2024-08-28 14:29:49 +02:00

imap

Merge branch 'PHP-8.1' into PHP-8.2

2025-03-06 15:24:35 +01:00

intl

backporting C++17 detection support for recent icu4c releases.

2025-04-23 11:01:11 +02:00

json

…

ldap

Fix GHSA-g665-fm4p-vhff: OOB access in ldap_escape

2024-11-20 11:06:12 +01:00

libxml

Merge branch 'PHP-8.1' into PHP-8.2

2025-03-11 21:57:33 +01:00

mbstring

Fix GH-16360 mb_substr overflow on start and length arguments.

2024-10-11 08:46:48 +01:00

mysqli

Merge branch 'PHP-8.1' into PHP-8.2

2025-03-13 16:46:03 +01:00

mysqlnd

Fix MySQLnd possible buffer over read in auth_protocol

2024-11-20 11:06:53 +01:00

oci8

Merge branch 'PHP-8.1' into PHP-8.2

2025-03-06 15:24:35 +01:00

odbc

Fix odbc_data_source_001.phpt

2024-08-06 16:54:19 +02:00

opcache

Merge branch 'PHP-8.1' into PHP-8.2

2025-03-06 15:24:35 +01:00

openssl

Port OpenSSL gh10495, gh13860 and gh9310 test to use ephemeral ports

2024-12-31 15:02:08 +01:00

pcntl

Merge branch 'PHP-8.1' into PHP-8.2

2023-09-22 10:26:01 +02:00

pcre

Fix GH-16184: UBSan address overflowed in ext/pcre/php_pcre.c

2024-10-03 21:10:57 +02:00

pdo

Upgrade security branches to Ubuntu 22.04

2025-03-06 15:24:15 +01:00

pdo_dblib

Fix GHSA-5hqh-c84r-qjcv: Integer overflow in the dblib quoter causing OOB writes

2024-11-20 11:05:48 +01:00

pdo_firebird

Fix GHSA-5hqh-c84r-qjcv: Integer overflow in the firebird quoter causing OOB writes

2024-11-20 11:05:55 +01:00

pdo_mysql

ext/pdo_mysql: Fix [-Wcalloc-transposed-args] compiler warning

2024-05-21 12:17:25 +01:00

pdo_oci

Upgrade security branches to Ubuntu 22.04

2025-03-06 15:24:15 +01:00

pdo_odbc

Fix GH-16450: PDO_ODBC can inject garbage into field values

2024-10-31 16:15:17 +01:00

pdo_pgsql

Use EXTENSIONS instead of SKIPIF sections in *.phpt

2024-01-31 11:18:21 +01:00

pdo_sqlite

Fix GH-14712: segfault on invalid object.

2024-06-29 15:51:57 +01:00

pgsql

Backport GH-14962 to stable versions

2024-11-26 21:24:48 +01:00

phar

Merge branch 'PHP-8.1' into PHP-8.2

2025-02-04 14:52:15 +01:00

posix

Backport flaky flag for phar tests

2024-12-10 10:35:00 +01:00

pspell

…

random

Checks getrandom availability on solaris.

2024-08-13 20:50:15 +01:00

readline

ext/readline: Fix [-Wcalloc-transposed-args] compiler warning

2024-05-21 12:17:25 +01:00

reflection

Fix GH-16601: Memory leak in Reflection constructors

2024-11-02 19:35:20 +01:00

session

Fix GH-16290: session cookie_lifetime ini value overflow.

2024-10-13 14:19:18 +01:00

shmop

Fix GH-14537: shmop Windows 11 crashes the process

2024-06-28 20:13:47 +02:00

simplexml

Merge branch 'PHP-8.1' into PHP-8.2

2025-03-10 20:22:27 +01:00

skeleton

…

snmp

[skip ci] Ignore snmp test on asan that frequently times out

2025-03-10 11:24:27 +01:00

soap

Merge branch 'PHP-8.1' into PHP-8.2

2025-03-06 15:24:35 +01:00

sockets

Fix socket_recvfrom overflow on buffer size.

2024-10-12 15:23:03 +01:00

sodium

Fix memory leaks in ext/sodium on failure of some functions

2024-05-23 22:40:28 +02:00

spl

Also fix same issue in ArrayObject::exchangeArray()

2024-11-04 17:46:17 +01:00

sqlite3

Merge branch 'PHP-8.1' into PHP-8.2

2023-11-10 00:08:09 +01:00

standard

Fix GHSA-3cr5-j632-f35r: Null byte in hostnames

2025-07-01 19:46:42 +03:00

sysvmsg

Fix GH-16592 msg_send() crashes when the type does not serialize as expected.

2024-11-03 13:39:24 +00:00

sysvsem

…

sysvshm

Fix GH-16591: Assertion error in shm_put_var

2024-10-26 15:07:22 +02:00

tidy

Fix memory leaks in ext/tidy basedir restriction code

2024-07-21 16:28:15 +02:00

tokenizer

…

xml

Merge branch 'PHP-8.1' into PHP-8.2

2025-03-11 21:57:33 +01:00

xmlreader

Fix GH-16292: Segmentation fault in ext/xmlreader/php_xmlreader.c:1282

2024-10-08 20:54:07 +02:00

xmlwriter

Backport 4fe82131: Backport libxml2 2.13.2 fixes (#14816)

2024-10-12 15:12:40 +02:00

xsl

Backport e2d97314: Backport deprecation warning ignores to unbreak CI

2024-10-12 15:12:40 +02:00

zend_test

Fix GH-16908: _ZendTestMagicCallForward does not handle references well

2024-11-25 19:38:33 +01:00

zip

Use EXTENSIONS instead of SKIPIF sections in *.phpt

2024-01-31 11:18:21 +01:00

zlib

Fix GH-16326: Memory management is broken for bad dictionaries

2024-10-13 02:28:07 +02:00

ext_skel.php

…