Stanislav Malyshev 69ed3969dd Merge branch 'PHP-5.4' into PHP-5.5 ...

* PHP-5.4:
  Fix bug #70019 - limit extracted files to given directory
  Do not do convert_to_* on unserialize, it messes up references
  Fix #69793 - limit what we accept when unserializing exception
  Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList)
  Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject
  ignore signatures for packages too
  Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage
  Fixed bug #69892
  Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes
  Improved fix for Bug #69441
  Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items)
  Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref)
  Fix bug #70081: check types for SOAP variables

Conflicts:
	.gitignore
	ext/date/php_date.c
	ext/spl/spl_array.c
	ext/spl/spl_observer.c

2015-08-04 14:10:57 -07:00

..

lib

- Updated to version 2015.5 (2015e)

2015-06-15 10:41:29 +01:00

tests

Merge branch 'PHP-5.4' into PHP-5.5

2015-08-04 14:10:57 -07:00

config0.m4

- Added a test case for bug #45866

2010-02-10 16:23:30 +00:00

config.w32

- fix header install

2010-12-14 13:10:25 +00:00

CREDITS

…

php_date.c

Merge branch 'PHP-5.4' into PHP-5.5

2015-08-04 14:10:57 -07:00

php_date.h

Export date_get_immutable_ce() so that extensions can make use of it too.

2015-03-31 11:08:56 +01:00

TODO

- Updated to-do.

2011-09-08 16:57:41 +00:00