php/archived-php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2026-04-10 17:43:13 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
d89408075f1327a36e414ea62cdce5ff575ef699
archived-php-src/ext
History
Tim Düsterhus f2e8c5da90 unserialize: Strictly check for :{ at object start (#10214) 
* unserialize: Strictly check for `:{` at object start

* unserialize: Update CVE tests

It's unlikely that the object syntax error contributed to the actual CVE. The
CVE is rather caused by the incorrect object serialization data of the `C`
format. Add a second string without such a syntax error to ensure that path is
still executed as well to ensure the CVE is absent.

* Fix test expectation in gmp/tests/bug74670.phpt

No changes to the input required, because the test actually is intended to
verify the behavior for a missing `}`, it's just that the report position changed.

* NEWS

* UPGRADING
2023-01-12 19:55:54 +01:00
..
bcmath
Deprecate zend_atol() / add zend_ini_parse_quantity() (#7951)
2022-06-17 14:12:53 +02:00
bz2
Merge branch 'PHP-8.1'
2022-06-25 07:40:19 +01:00
calendar
Do not generate CONST_CS when registering constants (#9439)
2022-08-28 08:27:19 +02:00
com_dotnet
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
ctype
Merge branch 'PHP-8.1' into PHP-8.2
2022-10-27 14:42:17 +01:00
curl
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
date
Merge branch 'PHP-8.1' into PHP-8.2
2023-01-10 15:16:32 +00:00
dba
Do not generate CONST_CS when registering constants (#9439)
2022-08-28 08:27:19 +02:00
dl_test
Add support for validation of missing method synopses (#9491)
2022-09-07 17:40:36 +02:00
dom
Merge branch 'PHP-8.1' into PHP-8.2
2022-10-27 14:42:17 +01:00
enchant
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
exif
Do not generate CONST_CS when registering constants (#9439)
2022-08-28 08:27:19 +02:00
ffi
Merge branch 'PHP-8.1' into PHP-8.2
2022-11-03 14:37:59 +01:00
fileinfo
Merge branch 'PHP-8.1' into PHP-8.2
2022-09-25 20:44:16 +02:00
filter
Merge branch 'PHP-8.1' into PHP-8.2
2022-10-27 14:42:17 +01:00
ftp
Do not generate CONST_CS when registering constants (#9439)
2022-08-28 08:27:19 +02:00
gd
Merge branch 'PHP-8.1' into PHP-8.2
2022-10-24 15:02:55 +02:00
gettext
…
gmp
unserialize: Strictly check for :{ at object start (#10214)
2023-01-12 19:55:54 +01:00
hash
Fix compilation on RHEL 7 ppc64le (gcc 4.8)
2022-12-11 17:30:31 +01:00
iconv
Do not generate CONST_CS when registering constants (#9439)
2022-08-28 08:27:19 +02:00
imap
Add a new imap_is_open() function to check that a connection object is still valid
2022-12-13 23:48:03 +00:00
intl
Merge branch 'PHP-8.1' into PHP-8.2
2023-01-09 14:09:43 +01:00
json
Do not generate CONST_CS when registering constants (#9439)
2022-08-28 08:27:19 +02:00
ldap
Merge branch 'PHP-8.1' into PHP-8.2
2022-12-16 14:37:39 +01:00
libxml
Drop unsupported libxml2 2.10.0 symbols
2022-08-28 13:56:34 +02:00
mbstring
Merge branch 'PHP-8.1' into PHP-8.2
2023-01-06 14:13:21 +02:00
mysqli
Fix mysqli test wrt. MariaDB
2022-12-09 16:09:23 +01:00
mysqlnd
Merge branch 'PHP-8.1' into PHP-8.2
2022-10-27 18:34:14 +01:00
oci8
Merge branch 'PHP-8.1' into PHP-8.2
2022-09-27 23:32:37 +02:00
odbc
Update globals to use bool type
2022-09-06 10:34:10 +01:00
opcache
Merge branch 'PHP-8.1' into PHP-8.2
2023-01-12 15:48:01 +00:00
openssl
Make build work with newer OpenSSL
2022-12-18 22:52:30 -07:00
pcntl
Merge branch 'PHP-8.1' into PHP-8.2
2022-11-13 11:05:28 +01:00
pcre
Update INI validator and displayers depending on INI type
2022-09-06 10:33:34 +01:00
pdo
Merge branch 'PHP-8.1' into PHP-8.2
2022-12-18 23:21:25 -07:00
pdo_dblib
Merge branch 'PHP-8.1'
2022-08-26 14:59:59 +02:00
pdo_firebird
Merge branch 'PHP-8.1' into PHP-8.2
2022-11-30 12:13:11 +01:00
pdo_mysql
Fix debug output
2022-06-09 13:42:45 +02:00
pdo_oci
[skip ci] Backport XFAIL of failing test
2022-11-11 19:46:16 +01:00
pdo_odbc
Fix GH-9372: HY010 when binding overlong parameter
2022-10-19 11:37:05 +02:00
pdo_pgsql
Merge branch 'PHP-8.1' into PHP-8.2
2022-09-05 17:28:23 +02:00
pdo_sqlite
Merge branch 'PHP-8.1' into PHP-8.2
2022-12-19 16:15:24 +01:00
pgsql
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
phar
Merge branch 'PHP-8.0' into PHP-8.1
2022-09-27 18:45:54 +02:00
posix
Merge branch 'PHP-8.1' into PHP-8.2
2023-01-02 16:55:03 +00:00
pspell
Do not generate CONST_CS when registering constants (#9439)
2022-08-28 08:27:19 +02:00
random
random: Fix check before closing random_fd (#10247)
2023-01-07 14:03:13 +01:00
readline
Do not generate CONST_CS when registering constants (#9439)
2022-08-28 08:27:19 +02:00
reflection
Convert Implicitly nullable pure intersection types to DNF
2022-10-24 11:39:54 +01:00
session
Merge branch 'PHP-8.1' into PHP-8.2
2022-11-15 12:30:04 +00:00
shmop
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
simplexml
Move test for GH-10200 to the simplexml extension test directory
2023-01-07 03:07:37 +00:00
skeleton
Add support for validation of missing method synopses (#9491)
2022-09-07 17:40:36 +02:00
snmp
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
soap
Merge branch 'PHP-8.1' into PHP-8.2
2022-10-13 16:08:34 +02:00
sockets
Merge branch 'PHP-8.1' into PHP-8.2
2022-10-01 11:24:23 +02:00
sodium
Do not generate CONST_CS when registering constants (#9439)
2022-08-28 08:27:19 +02:00
spl
unserialize: Strictly check for :{ at object start (#10214)
2023-01-12 19:55:54 +01:00
sqlite3
Merge branch 'PHP-8.1' into PHP-8.2
2022-12-06 16:00:49 +01:00
standard
unserialize: Strictly check for :{ at object start (#10214)
2023-01-12 19:55:54 +01:00
sysvmsg
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
sysvsem
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
sysvshm
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
tidy
Update INI validator and displayers depending on INI type
2022-09-06 10:33:34 +01:00
tokenizer
Merge branch 'PHP-8.1' into PHP-8.2
2022-10-27 14:42:17 +01:00
xml
Use true return type for XML functions which always return true
2022-09-23 13:22:13 +01:00
xmlreader
Merge branch 'PHP-8.1' into PHP-8.2
2022-10-27 14:42:17 +01:00
xmlwriter
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
xsl
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
zend_test
Disable opcache file_cache for observer preloading test
2022-11-11 19:33:32 +01:00
zip
Improve string class constant code generation (#9577)
2022-09-26 23:12:34 +02:00
zlib
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
ext_skel.php
…