summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* 5.4.36php-5.4.36PHP-5.4.36Stanislav Malyshev2014-12-163-4/+4
|
* add CVEStanislav Malyshev2014-12-161-1/+1
|
* add missing test fileStanislav Malyshev2014-12-161-0/+7
|
* Fix bug #68594 - Use after free vulnerability in unserialize()Stanislav Malyshev2014-12-164-32/+64
|
* Fix undefined behaviour in strnatcmpAndrea Faulds2014-12-131-2/+2
|
* update NEWSStanislav Malyshev2014-12-111-0/+1
|
* move the test to the right placeAnatol Belski2014-12-111-0/+0
|
* Fixed bug #68545 NULL pointer dereference in unserialize.cAnatol Belski2014-12-113-33/+56
|
* Fixed possible read after end of buffer and use after free.Dmitry Stogov2014-12-081-2/+6
|
* Revert unintentional docblock changeChris Christoff2014-12-051-1/+1
| | | | | | | | Revert unintentional docblock change It looks like commit dd8e59da8f5aafd9d77a0f1f17e5e272d09f643f introduced an unintended docbloc change. I have reverted this change in this commit.
* make sure that we don't truncate the stack trace and cause false test ↵Ferenc Kovacs2014-12-021-0/+1
| | | | failures when the test is executed in a directory with long path
* update newsStanislav Malyshev2014-11-302-5/+8
|
* Apply error-code-salt fix to Windows tooLeigh2014-11-300-0/+0
| | | | | Conflicts: ext/standard/crypt.c
* Bug fixes in light of failing bcrypt testsLeigh2014-11-302-1/+3
| | | | | Conflicts: ext/standard/crypt.c
* Add tests from 1.3. Add missing tests.Leigh2014-11-301-2/+31
| | | | 3 of the missing tests fail. // TODO
* Upgrade crypt_blowfish to version 1.3Leigh2014-11-301-19/+24
|
* update for LiteSpeedStanislav Malyshev2014-11-231-0/+3
|
* Revert "made lsapi_main.c compatible with PHP7/phpng ."Stanislav Malyshev2014-11-221-92/+26
| | | | | This reverts commit 9fb816f45ad9baa46b91514e70f755eb88539e85. Not a security-related fix.
* made lsapi_main.c compatible with PHP7/phpng .George Wang2014-11-201-26/+92
|
* 5.4.36-devStanislav Malyshev2014-11-113-4/+6
|
* Fixed bug #66584 Segmentation fault on statement deallocationMatteo Beccati2014-11-113-2/+71
|
* update NEWSFerenc Kovacs2014-11-121-0/+4
|
* Partial fix for bug #68365 (zend_mm_heap corrupted after memory overflow in ↵Dmitry Stogov2014-11-071-1/+1
| | | | zend_hash_copy)
* update NEWSStanislav Malyshev2014-11-031-0/+4
|
* Fix bug #63595 GMP memory management conflicts with other libraries using GMPRemi Collet2014-11-031-26/+0
| | | | | | | | | | | | | | | | | | Drop use of php memory allocators as this raise various conflicts with other extensions and libraries which use libgmp. No other solution found. We cannot for ensure correct use of allocator with shared lib. Some memory can allocated before php init Some memory can be freed after php shutdown Known broken run cases - php + curl + gnutls + gmp - mod_gnutls + mod_php + gnutls + gmp - php + freetds + gnutls + gmp - php + odbc + freetds + gnutls + gmp - php + php-mapi (zarafa) + gnutls + gmp
* Initialize the offset table - PCRE may sometimes miss offsetsStanislav Malyshev2014-11-031-1/+1
|
* set default response code to 200George Wang2014-11-031-2/+2
|
* fix NEWS & versionStanislav Malyshev2014-10-223-5/+5
|
* NEWSRemi Collet2014-10-221-0/+6
|
* Fix bug #68283: fileinfo: out-of-bounds read in elf note headersRemi Collet2014-10-221-0/+7
| | | | | | | Upstream commit https://github.com/file/file/commit/39c7ac1106be844a5296d3eb5971946cc09ffda0 CVE -2014-3710
* Fix bug #68113 (Heap corruption in exif_thumbnail())Stanislav Malyshev2014-10-134-3/+24
|
* Fix bug #68089 - do not accept options with embedded \0Stanislav Malyshev2014-10-133-0/+27
| | | | | Conflicts: ext/curl/interface.c
* Fixed bug #68044: Integer overflow in unserialize() (32-bits only)Stanislav Malyshev2014-10-134-4/+19
|
* Fix bug #68027 - fix date parsing in XMLRPC libStanislav Malyshev2014-10-133-6/+56
|
* update NEWSArd Biesheuvel2014-10-101-0/+3
| | | | Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
* Fixed a bug that causes crash when environment variable is access while ↵George Wang2014-10-031-1/+2
| | | | parsing php.ini
* Add hash to EXTENSIONS fileSara Golemon2014-10-021-0/+6
|
* Set an LDAP error code when failing ldap_bind due to null bytesMatthew Daley2014-09-281-2/+21
| | | | | | | | Some applications check a LDAP link's error code after seeing ldap_bind fail due to a null byte bind attempt and hence incorrectly receive the last set error code. Fix by setting an LDAP error code before returning in this case.
* This test should passJohannes Schlüter2014-09-271-2/+0
|
* - Updated to version 2014.8 (2014h)Derick Rethans2014-09-261-608/+610
|
* update NEWSStanislav Malyshev2014-09-261-1/+4
|
* Revert xp_ssl.c to the state of 5.4.32 due to regressionsStanislav Malyshev2014-09-261-61/+0
|
* Fixed bug #66242 (don't assume char is signed)Ard Biesheuvel2014-09-201-1/+1
| | | | | | | | | This fixes a bug in libmagic where a cast to 'char' is assumed to result in sign extension to occur. However, unqualified 'char' is unsigned on architectures such as ARM, so the cast needs to be to 'signed char' explicitly. Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
* Fixed freetype test on multiple environmentsMatteo Beccati2014-09-162-30/+4
| | | | | | Some environments, apparently regardless to the freetype version, output 155, while others 156. I guess we can accept both ;) This reverts commit 592df890276604c790d02be26b1b3c3710b3b888.
* Fix NEWSRemi Collet2014-09-151-2/+1
| | | | | - #65641 mod_proxy-fcgi is not fixed (still open) - #67606 mod_fastcgi is fixed in ee275e34c8b303945945c650d4bc90dcc2ac0b17
* Bug #41631: Fix regression from first attempt (6569db8)Daniel Lowrey2014-09-091-1/+1
|
* Bug #67965: Fix blocking behavior in non-blocking crypto streamsDaniel Lowrey2014-09-091-11/+13
|
* Fixed #67985 - Incorrect last used array index copied to new array after unsetTjerk Meesters2014-09-093-0/+21
| | | | In master zend_array_dup() is used to do this properly; this is a workaround.
* Fine tuned the order of adding request variables.George Wang2014-09-081-1/+2
|
* Update LSAPI to 6.7, added support for 'filter_input'.George Wang2014-09-032-7/+67
| | | | Fixed a crash in CLI mode.