Jakub Zelenka cac8f7f1cf Fix GHSA-3cr5-j632-f35r: Null byte in hostnames ...

This fixes stream_socket_client() and fsockopen().

Specifically it adds a check to parse_ip_address_ex and it also makes
sure that the \0 is not ignored in fsockopen() hostname formatting.

2025-06-23 23:00:30 +02:00

..

array

Fix tests

2022-08-30 16:52:33 +02:00

assert

Remove assert_options() return value info

2021-04-28 11:05:05 +02:00

class_object

Improve class inheritance error messages (#7307)

2021-07-27 09:42:37 +02:00

crypt

crypt: Fix validation of malformed BCrypt hashes

2023-02-12 20:46:44 -07:00

dir

Merge branch 'PHP-8.0'

2021-08-17 11:32:24 +02:00

directory

Declare Directory properties

2021-08-19 10:39:23 +02:00

file

Backport CI fixes to security branches

2024-10-28 15:57:16 +01:00

filters

Fix GHSA-r977-prxv-hc43

2024-11-17 19:30:44 +01:00

general_functions

Fix GHSA-9fcc-425m-g385: bypass CVE-2024-1874

2024-06-05 00:26:14 -05:00

hrtime

Implement flaky test section

2023-07-06 09:45:35 +02:00

http

Fix GHSA-hgf5-96fm-v528: http user header check of crlf

2025-03-11 21:50:16 +01:00

image

Fix bug #75708: getimagesize with "&$imageinfo" fails on StreamWrappers

2023-10-22 13:26:18 +01:00

ini_info

…

mail

Fix GH-10990: mail() throws TypeError after iterating over $additional_headers array by reference

2023-04-01 19:44:43 +02:00

math

Update deprecation message for incompatible float to int conversion

2021-06-07 14:36:11 +02:00

misc

…

network

Fix GHSA-3cr5-j632-f35r: Null byte in hostnames

2025-06-23 23:00:30 +02:00

password

Fix bug GHSA-q6x7-frmf-grcw: password_verify can erroneously return true

2024-04-09 23:38:32 -05:00

random

…

serialize

Fix serialization of RC1 objects appearing in object graph twice

2023-06-28 21:15:03 +02:00

streams

Fix GHSA-3cr5-j632-f35r: Null byte in hostnames

2025-06-23 23:00:30 +02:00

strings

Fix param name in implode() error message

2023-08-24 21:05:26 +01:00

time

Deprecate strftime() and gmstrftime()

2021-07-14 09:38:43 +02:00

url

Make some zend_test dependencies explicit

2021-06-14 15:40:34 +02:00

versioning

…

bug49244.phpt

…

bug64370_var1.phpt

…

bug64370_var2.phpt

…

bug71827.phpt

…

bug75220.phpt

…

bug79821.phpt

…

bug80915.phpt

…

bug81048.phpt

Fix #81048: phpinfo(INFO_VARIABLES) "Array to string conversion"

2021-05-19 14:07:15 +02:00

bug81727.phpt

Fix #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning.

2022-09-09 17:10:04 +01:00

forward_static_call_array.phpt

…

gh10885.phpt

Fix GH-10885: Leaking stream_socket_server context

2023-03-20 17:42:16 +01:00

ghsa-wpj3-hf5j-x4v4.phpt

Fix GHSA-wpj3-hf5j-x4v4: __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix

2024-04-09 23:37:06 -05:00

oss_fuzz_57392.phpt

Fix buffer-overflow in php_fgetcsv() with \0 delimiter and enclosure

2023-03-25 17:42:39 +01:00

php_version_win_const.phpt

…

setrawcookie_basic_001.phpt

…

setrawcookie_basic_002.phpt

…

skipif_root.inc

…