Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Update Git rulesPHP-5.3 | Johannes Schlüter | 2014-08-14 | 1 | -4/+2 |
| | |||||
* | Back to -dev (with EOL notice in NEWS) | Johannes Schlüter | 2014-08-14 | 3 | -6/+10 |
| | |||||
* | It's 2014 already, fix copyright year where user visiblephp-5.3.29PHP-5.3.29 | Johannes Schlüter | 2014-08-13 | 8 | -12/+12 |
| | | | | Left out all file headers | ||||
* | PHP 5.3.29 | Johannes Schlüter | 2014-08-13 | 3 | -4/+4 |
| | |||||
* | PHP 5.3.29RC1php-5.3.29RC1 | Johannes Schlüter | 2014-07-31 | 3 | -4/+4 |
| | |||||
* | Fix missing type checks in various functions | Stanislav Malyshev | 2014-07-31 | 5 | -19/+41 |
| | |||||
* | update NEWS | Stanislav Malyshev | 2014-07-18 | 1 | -0/+50 |
| | |||||
* | Fix bug #67492: unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion | Stanislav Malyshev | 2014-07-18 | 3 | -5/+8 |
| | | | | | | Conflicts: ext/spl/spl_array.c ext/spl/tests/SplObjectStorage_unserialize_bad.phpt | ||||
* | Fixed bug #67359 (Segfault in recursiveDirectoryIterator) | Xinchen Hui | 2014-07-18 | 3 | -0/+32 |
| | |||||
* | Fix bug #66127 (Segmentation fault with ArrayObject unset) | Stanislav Malyshev | 2014-07-18 | 3 | -1/+28 |
| | |||||
* | Fix test - because of big #67397 we don't allow overlong locales anymore | Stanislav Malyshev | 2014-07-18 | 1 | -3/+4 |
| | |||||
* | Fix bug #67397 (Buffer overflow in ↵ | Stanislav Malyshev | 2014-07-18 | 2 | -1/+30 |
| | | | | locale_get_display_name->uloc_getDisplayName (libicu 4.8.1)) | ||||
* | Fix bug #67349: Locale::parseLocale Double Free | Stanislav Malyshev | 2014-07-18 | 2 | -5/+8 |
| | |||||
* | Fixed bug #67399 (putenv with empty variable may lead to crash) | Stanislav Malyshev | 2014-07-18 | 2 | -55/+63 |
| | | | | | Conflicts: ext/standard/basic_functions.c | ||||
* | Fixed Bug #67413 fileinfo: cdf_read_property_info insufficient boundary chec | Remi Collet | 2014-07-18 | 1 | -1/+5 |
| | | | | | | | Upstream: https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d Adapted for C standard. | ||||
* | Bug #67412 fileinfo: cdf_count_chain insufficient boundary check | Remi Collet | 2014-07-18 | 1 | -3/+4 |
| | | | | | Upstream: https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382 | ||||
* | Fixed Bug #67411 fileinfo: cdf_check_stream_offset insufficient boundary check | Remi Collet | 2014-07-18 | 1 | -2/+4 |
| | | | | | | | | Upstream: https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67 Conflicts: ext/fileinfo/libmagic/cdf.c | ||||
* | Fixed Bug #67410 fileinfo: mconvert incorrect handling of truncated pascal ↵ | Remi Collet | 2014-07-18 | 1 | -3/+11 |
| | | | | | | | string size Upstream https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08 | ||||
* | Fix bug #67498 - phpinfo() Type Confusion Information Leak Vulnerability | Stanislav Malyshev | 2014-07-18 | 2 | -4/+19 |
| | |||||
* | Fix bug #67326 fileinfo: cdf_read_short_sector insufficient boundary check | Remi Collet | 2014-07-18 | 1 | -2/+2 |
| | | | | | Upstream fix https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391.patch Only revelant part applied | ||||
* | fix bug #67253: timelib_meridian_with_check out-of-bounds read | Stanislav Malyshev | 2014-07-18 | 4 | -101/+151 |
| | | | | | Conflicts: ext/date/lib/parse_date.c | ||||
* | Fix bug #67252: convert_uudecode out-of-bounds read | Stanislav Malyshev | 2014-07-18 | 2 | -0/+16 |
| | |||||
* | Fix bug #67250 (iptcparse out-of-bounds read) | Stanislav Malyshev | 2014-07-18 | 2 | -0/+11 |
| | |||||
* | Fix bug #67247 spl_fixedarray_resize integer overflow | Stanislav Malyshev | 2014-07-18 | 2 | -1/+14 |
| | |||||
* | Fix bug #67328 (fileinfo: numerous file_printf calls resulting in ↵ | Stanislav Malyshev | 2014-07-18 | 1 | -12/+4 |
| | | | | | | performance degradation) Upstream patch: https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d | ||||
* | Fix bug #67327: fileinfo: CDF infinite loop in nelements DoS | Stanislav Malyshev | 2014-07-18 | 1 | -1/+7 |
| | | | | Upstream fix: https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0 | ||||
* | backport this piece from 5.6, related to the #66307 fix | Anatol Belski | 2014-07-18 | 1 | -1/+2 |
| | | | | | Conflicts: ext/fileinfo/libmagic/readcdf.c | ||||
* | Fixed bug #66307 Fileinfo crashes with powerpoint files | Anatol Belski | 2014-07-18 | 3 | -2/+7 |
| | | | | | | Conflicts: ext/fileinfo/libmagic/readcdf.c ext/fileinfo/tests/finfo_file_002.phpt | ||||
* | Fixed bug #66060 (Heap buffer over-read in DateInterval) | Remi Collet | 2014-07-18 | 2 | -2/+2 |
| | | | | | Conflicts: ext/date/lib/parse_iso_intervals.c | ||||
* | Fix bug #65873 - Integer overflow in exif_read_data() | Stanislav Malyshev | 2014-07-18 | 1 | -1/+6 |
| | |||||
* | let make test report the run-test result | Xinchen Hui | 2014-07-18 | 1 | -0/+2 |
| | |||||
* | Fix bug #67251 - date_parse_from_format out-of-bounds read | Stanislav Malyshev | 2014-06-15 | 3 | -2/+48 |
| | | | | | | Conflicts: ext/date/lib/parse_date.c ext/date/lib/parse_date.re | ||||
* | Fix bug #67249: printf out-of-bounds read | Stanislav Malyshev | 2014-06-13 | 2 | -2/+12 |
| | |||||
* | Fix potential segfault in dns_get_record() | Sara Golemon | 2014-06-13 | 1 | -0/+4 |
| | | | | | | If the remote sends us a packet with a malformed TXT record, we could end up trying to over-consume the packet and wander off into overruns. | ||||
* | Fix bug #67390 insecure temporary file use in the configure script | Remi Collet | 2014-06-13 | 1 | -1/+1 |
| | |||||
* | fix typo in ODBC code | Stanislav Malyshev | 2014-05-18 | 1 | -1/+1 |
| | |||||
* | Fix bug #67060: use default mode of 660 | Stanislav Malyshev | 2014-05-11 | 3 | -3/+7 |
| | |||||
* | fix the primary qa email address and update the list of available people ↵ | Ferenc Kovacs | 2014-01-24 | 1 | -2/+2 |
| | | | | being able to add moderators to our lists | ||||
* | Revert "Fix #62479: Some chars not parsed in passwords" | Will Fitch | 2014-01-19 | 3 | -88/+2 |
| | | | | This reverts commit e6bb90c66a5306f3db7ca38206b27685177a65cc. | ||||
* | Fix #62479: Some chars not parsed in passwords | Will Fitch | 2014-01-18 | 3 | -2/+88 |
| | | | | | This fixes an issue where backslashes and spaces aren't correctly parsed for passwords. | ||||
* | Updated release process | Julien Pauli | 2013-12-13 | 1 | -77/+79 |
| | |||||
* | fix dir separator in cve-2013-6420 test | Anatol Belski | 2013-12-11 | 1 | -1/+1 |
| | |||||
* | 5.3.29-dev | Stanislav Malyshev | 2013-12-10 | 3 | -4/+6 |
| | |||||
* | Fix CVE-2013-6420 - memory corruption in openssl_x509_parse | Stanislav Malyshev | 2013-12-10 | 4 | -5/+64 |
| | |||||
* | Merge branch 'PHP-5.3' of https://git.php.net/repository/php-src into PHP-5.3 | Christopher Jones | 2013-08-19 | 1 | -0/+1 |
|\ | | | | | | | | | * 'PHP-5.3' of https://git.php.net/repository/php-src: fix using wrong buffer pointer | ||||
| * | fix using wrong buffer pointer | Stanislav Malyshev | 2013-08-19 | 1 | -0/+1 |
|/ | |||||
* | Fix CVE-2013-4073 - handling of certs with null bytes | Stanislav Malyshev | 2013-08-13 | 4 | -2/+135 |
| | |||||
* | Merge branch 'PHP-5.3' of https://git.php.net/repository/php-src into PHP-5.3 | Christopher Jones | 2013-07-22 | 2 | -6/+19 |
|\ | | | | | | | | | | | | | | | # By Johannes Schlüter # Via Christopher Jones (1) and Johannes Schlüter (1) * 'PHP-5.3' of https://git.php.net/repository/php-src: Merge PHP 5.3.27 NEWS add test for bug #65236 | ||||
| * | Merge branch 'PHP-5.3' of https://git.php.net/repository/php-src into PHP-5.3 | Christopher Jones | 2013-07-10 | 2 | -6/+19 |
| |\ |/ / | | | | | | | | | * 'PHP-5.3' of https://git.php.net/repository/php-src: Merge PHP 5.3.27 NEWS add test for bug #65236 | ||||
| * | Merge PHP 5.3.27 NEWS | Johannes Schlüter | 2013-07-10 | 1 | -6/+4 |
| | |