summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Update Git rulesPHP-5.3Johannes Schlüter2014-08-141-4/+2
|
* Back to -dev (with EOL notice in NEWS)Johannes Schlüter2014-08-143-6/+10
|
* It's 2014 already, fix copyright year where user visiblephp-5.3.29PHP-5.3.29Johannes Schlüter2014-08-138-12/+12
| | | | Left out all file headers
* PHP 5.3.29Johannes Schlüter2014-08-133-4/+4
|
* PHP 5.3.29RC1php-5.3.29RC1Johannes Schlüter2014-07-313-4/+4
|
* Fix missing type checks in various functionsStanislav Malyshev2014-07-315-19/+41
|
* update NEWSStanislav Malyshev2014-07-181-0/+50
|
* Fix bug #67492: unserialize() SPL ArrayObject / SPLObjectStorage Type ConfusionStanislav Malyshev2014-07-183-5/+8
| | | | | | Conflicts: ext/spl/spl_array.c ext/spl/tests/SplObjectStorage_unserialize_bad.phpt
* Fixed bug #67359 (Segfault in recursiveDirectoryIterator)Xinchen Hui2014-07-183-0/+32
|
* Fix bug #66127 (Segmentation fault with ArrayObject unset)Stanislav Malyshev2014-07-183-1/+28
|
* Fix test - because of big #67397 we don't allow overlong locales anymoreStanislav Malyshev2014-07-181-3/+4
|
* Fix bug #67397 (Buffer overflow in ↵Stanislav Malyshev2014-07-182-1/+30
| | | | locale_get_display_name->uloc_getDisplayName (libicu 4.8.1))
* Fix bug #67349: Locale::parseLocale Double FreeStanislav Malyshev2014-07-182-5/+8
|
* Fixed bug #67399 (putenv with empty variable may lead to crash)Stanislav Malyshev2014-07-182-55/+63
| | | | | Conflicts: ext/standard/basic_functions.c
* Fixed Bug #67413 fileinfo: cdf_read_property_info insufficient boundary checRemi Collet2014-07-181-1/+5
| | | | | | | Upstream: https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d Adapted for C standard.
* Bug #67412 fileinfo: cdf_count_chain insufficient boundary checkRemi Collet2014-07-181-3/+4
| | | | | Upstream: https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382
* Fixed Bug #67411 fileinfo: cdf_check_stream_offset insufficient boundary checkRemi Collet2014-07-181-2/+4
| | | | | | | | Upstream: https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67 Conflicts: ext/fileinfo/libmagic/cdf.c
* Fixed Bug #67410 fileinfo: mconvert incorrect handling of truncated pascal ↵Remi Collet2014-07-181-3/+11
| | | | | | | string size Upstream https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08
* Fix bug #67498 - phpinfo() Type Confusion Information Leak VulnerabilityStanislav Malyshev2014-07-182-4/+19
|
* Fix bug #67326 fileinfo: cdf_read_short_sector insufficient boundary checkRemi Collet2014-07-181-2/+2
| | | | | Upstream fix https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391.patch Only revelant part applied
* fix bug #67253: timelib_meridian_with_check out-of-bounds readStanislav Malyshev2014-07-184-101/+151
| | | | | Conflicts: ext/date/lib/parse_date.c
* Fix bug #67252: convert_uudecode out-of-bounds readStanislav Malyshev2014-07-182-0/+16
|
* Fix bug #67250 (iptcparse out-of-bounds read)Stanislav Malyshev2014-07-182-0/+11
|
* Fix bug #67247 spl_fixedarray_resize integer overflowStanislav Malyshev2014-07-182-1/+14
|
* Fix bug #67328 (fileinfo: numerous file_printf calls resulting in ↵Stanislav Malyshev2014-07-181-12/+4
| | | | | | performance degradation) Upstream patch: https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d
* Fix bug #67327: fileinfo: CDF infinite loop in nelements DoSStanislav Malyshev2014-07-181-1/+7
| | | | Upstream fix: https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0
* backport this piece from 5.6, related to the #66307 fixAnatol Belski2014-07-181-1/+2
| | | | | Conflicts: ext/fileinfo/libmagic/readcdf.c
* Fixed bug #66307 Fileinfo crashes with powerpoint filesAnatol Belski2014-07-183-2/+7
| | | | | | Conflicts: ext/fileinfo/libmagic/readcdf.c ext/fileinfo/tests/finfo_file_002.phpt
* Fixed bug #66060 (Heap buffer over-read in DateInterval)Remi Collet2014-07-182-2/+2
| | | | | Conflicts: ext/date/lib/parse_iso_intervals.c
* Fix bug #65873 - Integer overflow in exif_read_data()Stanislav Malyshev2014-07-181-1/+6
|
* let make test report the run-test resultXinchen Hui2014-07-181-0/+2
|
* Fix bug #67251 - date_parse_from_format out-of-bounds readStanislav Malyshev2014-06-153-2/+48
| | | | | | Conflicts: ext/date/lib/parse_date.c ext/date/lib/parse_date.re
* Fix bug #67249: printf out-of-bounds readStanislav Malyshev2014-06-132-2/+12
|
* Fix potential segfault in dns_get_record()Sara Golemon2014-06-131-0/+4
| | | | | | If the remote sends us a packet with a malformed TXT record, we could end up trying to over-consume the packet and wander off into overruns.
* Fix bug #67390 insecure temporary file use in the configure scriptRemi Collet2014-06-131-1/+1
|
* fix typo in ODBC codeStanislav Malyshev2014-05-181-1/+1
|
* Fix bug #67060: use default mode of 660Stanislav Malyshev2014-05-113-3/+7
|
* fix the primary qa email address and update the list of available people ↵Ferenc Kovacs2014-01-241-2/+2
| | | | being able to add moderators to our lists
* Revert "Fix #62479: Some chars not parsed in passwords"Will Fitch2014-01-193-88/+2
| | | | This reverts commit e6bb90c66a5306f3db7ca38206b27685177a65cc.
* Fix #62479: Some chars not parsed in passwordsWill Fitch2014-01-183-2/+88
| | | | | This fixes an issue where backslashes and spaces aren't correctly parsed for passwords.
* Updated release processJulien Pauli2013-12-131-77/+79
|
* fix dir separator in cve-2013-6420 testAnatol Belski2013-12-111-1/+1
|
* 5.3.29-devStanislav Malyshev2013-12-103-4/+6
|
* Fix CVE-2013-6420 - memory corruption in openssl_x509_parseStanislav Malyshev2013-12-104-5/+64
|
* Merge branch 'PHP-5.3' of https://git.php.net/repository/php-src into PHP-5.3Christopher Jones2013-08-191-0/+1
|\ | | | | | | | | * 'PHP-5.3' of https://git.php.net/repository/php-src: fix using wrong buffer pointer
| * fix using wrong buffer pointerStanislav Malyshev2013-08-191-0/+1
|/
* Fix CVE-2013-4073 - handling of certs with null bytesStanislav Malyshev2013-08-134-2/+135
|
* Merge branch 'PHP-5.3' of https://git.php.net/repository/php-src into PHP-5.3Christopher Jones2013-07-222-6/+19
|\ | | | | | | | | | | | | | | # By Johannes Schlüter # Via Christopher Jones (1) and Johannes Schlüter (1) * 'PHP-5.3' of https://git.php.net/repository/php-src: Merge PHP 5.3.27 NEWS add test for bug #65236
| * Merge branch 'PHP-5.3' of https://git.php.net/repository/php-src into PHP-5.3Christopher Jones2013-07-102-6/+19
| |\ |/ / | | | | | | | | * 'PHP-5.3' of https://git.php.net/repository/php-src: Merge PHP 5.3.27 NEWS add test for bug #65236
| * Merge PHP 5.3.27 NEWSJohannes Schlüter2013-07-101-6/+4
| |