Christoph M. Becker 08841bf79c Fix GH-15552: Signed integer overflow in ext/standard/scanf.c ...

We ensure that the argnum `value` is in the allowed range, *before*
mapping it to the `objIndex`, not *afterwards*.

Closes GH-15581.

2024-09-01 17:24:17 +02:00

..

array

Added test

2024-05-20 15:13:53 +01:00

assert

Make zend_call_function() failure handling consistent

2021-09-01 16:09:23 +02:00

class_object

Deprecate partially supported callables

2021-10-22 10:15:24 +02:00

crypt

crypt: Fix validation of malformed BCrypt hashes

2023-02-12 20:46:44 -07:00

dir

Merge branch 'PHP-8.0'

2021-08-17 11:32:24 +02:00

directory

Declare Directory properties

2021-08-19 10:39:23 +02:00

file

Fix GH-15653: fgetcsv overflow on length parameter.

2024-08-30 17:16:57 +01:00

filters

ext/standard: Fix test conflict with I/O tests

2024-06-02 17:03:19 +01:00

general_functions

Merge branch 'PHP-8.1' into PHP-8.2

2024-06-05 01:10:47 -05:00

hrtime

Implement flaky test section

2023-07-06 09:45:35 +02:00

http

Fix GH-15034: Integer overflow on stream_notification_callback byte_max parameter with files bigger than 2GB

2024-07-21 22:02:11 +02:00

image

Fix failing test for bug #75708

2023-10-22 15:31:00 +01:00

ini_info

…

mail

Added validation of \n in $additional_headers of mail()

2024-03-04 21:30:07 +09:00

math

Use -1 "precision" in gen_stub.php

2022-07-23 12:09:37 +02:00

misc

Fix GH-14774 time_sleep_until overflow.

2024-07-06 20:43:59 +01:00

network

Merge branch 'PHP-8.1' into PHP-8.2

2023-09-24 15:19:02 +01:00

password

Merge branch 'PHP-8.1' into PHP-8.2

2024-04-09 23:49:31 -05:00

serialize

Merge branch 'PHP-8.1' into PHP-8.2

2023-06-28 21:16:51 +02:00

streams

Fix GH-14780: p(f)sockopen overflow on timeout argument.

2024-07-22 22:57:59 +01:00

strings

Fix GH-15552: Signed integer overflow in ext/standard/scanf.c

2024-09-01 17:24:17 +02:00

time

Add "N" and "o" format specifiers to idate()

2022-05-13 09:36:43 +01:00

url

Revert "Fix parse_url(): can not recognize port without scheme"

2022-09-23 19:44:29 +02:00

versioning

…

bug49244.phpt

…

bug64370_var1.phpt

…

bug64370_var2.phpt

…

bug71827.phpt

…

bug75220.phpt

Extend deprecation notices to is_callable($foo) and callable $foo

2022-07-14 17:07:42 +02:00

bug79821.phpt

…

bug80915.phpt

…

bug81048.phpt

…

bug81727.phpt

Fix #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning.

2022-09-09 17:10:04 +01:00

forward_static_call_array.phpt

…

gh10885.phpt

Fix GH-10885: Leaking stream_socket_server context

2023-03-20 17:42:16 +01:00

ghsa-wpj3-hf5j-x4v4.phpt

Fix GHSA-wpj3-hf5j-x4v4: __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix

2024-04-09 23:37:06 -05:00

oss_fuzz_57392.phpt

Fix buffer-overflow in php_fgetcsv() with \0 delimiter and enclosure

2023-03-25 17:42:39 +01:00

php_version_win_const.phpt

…

setrawcookie_basic_001.phpt

…

setrawcookie_basic_002.phpt

…

skipif_root.inc

…