Jakub Zelenka cf0c39723e Fix GHSA-3cr5-j632-f35r: Null byte in hostnames ...

This fixes stream_socket_client() and fsockopen().

Specifically it adds a check to parse_ip_address_ex and it also makes
sure that the \0 is not ignored in fsockopen() hostname formatting.

2025-07-01 09:34:23 -07:00

..

array

Fix RCN violations in array functions

2025-06-24 23:29:00 +02:00

assert

standard: Take zend.assertions into account for dynamic calls to assert() (#18521)

2025-05-12 08:44:46 +02:00

class_object

…

crypt

…

dir

…

directory

…

file

Fix test conflict between copy_variation2-win32-mb.phpt and copy_variation2-win32.phpt

2025-06-09 14:16:18 +02:00

filters

Fix GH-13264: fgets() and stream_get_line() do not return false on filter fatal error

2025-06-21 20:13:09 +02:00

general_functions

Merge branch 'PHP-8.2' into PHP-8.3

2024-12-20 18:46:55 +01:00

helpers

Harden proc_open() against cmd.exe hijacking

2024-12-08 19:08:02 +01:00

hrtime

…

http

tests: Fix expectations

2025-05-31 14:45:41 +01:00

image

…

ini_info

…

mail

Merge branch 'PHP-8.2' into PHP-8.3

2024-03-04 21:30:27 +09:00

math

…

misc

Merge branch 'PHP-8.2' into PHP-8.3

2024-07-06 20:44:20 +01:00

network

Fix GHSA-3cr5-j632-f35r: Null byte in hostnames

2025-07-01 09:34:23 -07:00

password

Merge branch 'PHP-8.1' into PHP-8.2

2024-04-09 23:49:31 -05:00

serialize

Fix tests: Prevent stack overflow during dtor

2024-10-24 15:56:25 +02:00

streams

Fix GHSA-3cr5-j632-f35r: Null byte in hostnames

2025-07-01 09:34:23 -07:00

strings

Fix GH-18976: pack with h or H format string overflow.

2025-06-29 16:57:10 +01:00

time

…

url

…

versioning

…

bug49244.phpt

…

bug64370_var1.phpt

…

bug64370_var2.phpt

…

bug71827.phpt

…

bug75220.phpt

…

bug79821.phpt

…

bug80915.phpt

…

bug81048.phpt

…

bug81727.phpt

…

constant_with_typed_class_constant.phpt

…

forward_static_call_array.phpt

…

gh10885.phpt

…

gh11010.phpt

…

gh13279.phpt

Fix instable array during in-place modification in uksort

2024-01-31 19:25:30 +01:00

gh18209.phpt

Use-after-free in extract() with EXTR_REFS

2025-04-01 16:33:30 +02:00

ghsa-wpj3-hf5j-x4v4.phpt

Fix GHSA-wpj3-hf5j-x4v4: __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix

2024-04-09 23:37:06 -05:00

oss_fuzz_57392.phpt

…

php_version_win_const.phpt

…

setrawcookie_basic_001.phpt

…

setrawcookie_basic_002.phpt

…

skipif_root.inc

…