Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | 5.4.36php-5.4.36PHP-5.4.36 | Stanislav Malyshev | 2014-12-16 | 3 | -4/+4 |
| | |||||
* | add CVE | Stanislav Malyshev | 2014-12-16 | 1 | -1/+1 |
| | |||||
* | add missing test file | Stanislav Malyshev | 2014-12-16 | 1 | -0/+7 |
| | |||||
* | Fix bug #68594 - Use after free vulnerability in unserialize() | Stanislav Malyshev | 2014-12-16 | 4 | -32/+64 |
| | |||||
* | Fix undefined behaviour in strnatcmp | Andrea Faulds | 2014-12-13 | 1 | -2/+2 |
| | |||||
* | update NEWS | Stanislav Malyshev | 2014-12-11 | 1 | -0/+1 |
| | |||||
* | move the test to the right place | Anatol Belski | 2014-12-11 | 1 | -0/+0 |
| | |||||
* | Fixed bug #68545 NULL pointer dereference in unserialize.c | Anatol Belski | 2014-12-11 | 3 | -33/+56 |
| | |||||
* | Fixed possible read after end of buffer and use after free. | Dmitry Stogov | 2014-12-08 | 1 | -2/+6 |
| | |||||
* | Revert unintentional docblock change | Chris Christoff | 2014-12-05 | 1 | -1/+1 |
| | | | | | | | | Revert unintentional docblock change It looks like commit dd8e59da8f5aafd9d77a0f1f17e5e272d09f643f introduced an unintended docbloc change. I have reverted this change in this commit. | ||||
* | make sure that we don't truncate the stack trace and cause false test ↵ | Ferenc Kovacs | 2014-12-02 | 1 | -0/+1 |
| | | | | failures when the test is executed in a directory with long path | ||||
* | update news | Stanislav Malyshev | 2014-11-30 | 2 | -5/+8 |
| | |||||
* | Apply error-code-salt fix to Windows too | Leigh | 2014-11-30 | 0 | -0/+0 |
| | | | | | Conflicts: ext/standard/crypt.c | ||||
* | Bug fixes in light of failing bcrypt tests | Leigh | 2014-11-30 | 2 | -1/+3 |
| | | | | | Conflicts: ext/standard/crypt.c | ||||
* | Add tests from 1.3. Add missing tests. | Leigh | 2014-11-30 | 1 | -2/+31 |
| | | | | 3 of the missing tests fail. // TODO | ||||
* | Upgrade crypt_blowfish to version 1.3 | Leigh | 2014-11-30 | 1 | -19/+24 |
| | |||||
* | update for LiteSpeed | Stanislav Malyshev | 2014-11-23 | 1 | -0/+3 |
| | |||||
* | Revert "made lsapi_main.c compatible with PHP7/phpng ." | Stanislav Malyshev | 2014-11-22 | 1 | -92/+26 |
| | | | | | This reverts commit 9fb816f45ad9baa46b91514e70f755eb88539e85. Not a security-related fix. | ||||
* | made lsapi_main.c compatible with PHP7/phpng . | George Wang | 2014-11-20 | 1 | -26/+92 |
| | |||||
* | 5.4.36-dev | Stanislav Malyshev | 2014-11-11 | 3 | -4/+6 |
| | |||||
* | Fixed bug #66584 Segmentation fault on statement deallocation | Matteo Beccati | 2014-11-11 | 3 | -2/+71 |
| | |||||
* | update NEWS | Ferenc Kovacs | 2014-11-12 | 1 | -0/+4 |
| | |||||
* | Partial fix for bug #68365 (zend_mm_heap corrupted after memory overflow in ↵ | Dmitry Stogov | 2014-11-07 | 1 | -1/+1 |
| | | | | zend_hash_copy) | ||||
* | update NEWS | Stanislav Malyshev | 2014-11-03 | 1 | -0/+4 |
| | |||||
* | Fix bug #63595 GMP memory management conflicts with other libraries using GMP | Remi Collet | 2014-11-03 | 1 | -26/+0 |
| | | | | | | | | | | | | | | | | | | Drop use of php memory allocators as this raise various conflicts with other extensions and libraries which use libgmp. No other solution found. We cannot for ensure correct use of allocator with shared lib. Some memory can allocated before php init Some memory can be freed after php shutdown Known broken run cases - php + curl + gnutls + gmp - mod_gnutls + mod_php + gnutls + gmp - php + freetds + gnutls + gmp - php + odbc + freetds + gnutls + gmp - php + php-mapi (zarafa) + gnutls + gmp | ||||
* | Initialize the offset table - PCRE may sometimes miss offsets | Stanislav Malyshev | 2014-11-03 | 1 | -1/+1 |
| | |||||
* | set default response code to 200 | George Wang | 2014-11-03 | 1 | -2/+2 |
| | |||||
* | fix NEWS & version | Stanislav Malyshev | 2014-10-22 | 3 | -5/+5 |
| | |||||
* | NEWS | Remi Collet | 2014-10-22 | 1 | -0/+6 |
| | |||||
* | Fix bug #68283: fileinfo: out-of-bounds read in elf note headers | Remi Collet | 2014-10-22 | 1 | -0/+7 |
| | | | | | | | Upstream commit https://github.com/file/file/commit/39c7ac1106be844a5296d3eb5971946cc09ffda0 CVE -2014-3710 | ||||
* | Fix bug #68113 (Heap corruption in exif_thumbnail()) | Stanislav Malyshev | 2014-10-13 | 4 | -3/+24 |
| | |||||
* | Fix bug #68089 - do not accept options with embedded \0 | Stanislav Malyshev | 2014-10-13 | 3 | -0/+27 |
| | | | | | Conflicts: ext/curl/interface.c | ||||
* | Fixed bug #68044: Integer overflow in unserialize() (32-bits only) | Stanislav Malyshev | 2014-10-13 | 4 | -4/+19 |
| | |||||
* | Fix bug #68027 - fix date parsing in XMLRPC lib | Stanislav Malyshev | 2014-10-13 | 3 | -6/+56 |
| | |||||
* | update NEWS | Ard Biesheuvel | 2014-10-10 | 1 | -0/+3 |
| | | | | Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> | ||||
* | Fixed a bug that causes crash when environment variable is access while ↵ | George Wang | 2014-10-03 | 1 | -1/+2 |
| | | | | parsing php.ini | ||||
* | Add hash to EXTENSIONS file | Sara Golemon | 2014-10-02 | 1 | -0/+6 |
| | |||||
* | Set an LDAP error code when failing ldap_bind due to null bytes | Matthew Daley | 2014-09-28 | 1 | -2/+21 |
| | | | | | | | | Some applications check a LDAP link's error code after seeing ldap_bind fail due to a null byte bind attempt and hence incorrectly receive the last set error code. Fix by setting an LDAP error code before returning in this case. | ||||
* | This test should pass | Johannes Schlüter | 2014-09-27 | 1 | -2/+0 |
| | |||||
* | - Updated to version 2014.8 (2014h) | Derick Rethans | 2014-09-26 | 1 | -608/+610 |
| | |||||
* | update NEWS | Stanislav Malyshev | 2014-09-26 | 1 | -1/+4 |
| | |||||
* | Revert xp_ssl.c to the state of 5.4.32 due to regressions | Stanislav Malyshev | 2014-09-26 | 1 | -61/+0 |
| | |||||
* | Fixed bug #66242 (don't assume char is signed) | Ard Biesheuvel | 2014-09-20 | 1 | -1/+1 |
| | | | | | | | | | This fixes a bug in libmagic where a cast to 'char' is assumed to result in sign extension to occur. However, unqualified 'char' is unsigned on architectures such as ARM, so the cast needs to be to 'signed char' explicitly. Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> | ||||
* | Fixed freetype test on multiple environments | Matteo Beccati | 2014-09-16 | 2 | -30/+4 |
| | | | | | | Some environments, apparently regardless to the freetype version, output 155, while others 156. I guess we can accept both ;) This reverts commit 592df890276604c790d02be26b1b3c3710b3b888. | ||||
* | Fix NEWS | Remi Collet | 2014-09-15 | 1 | -2/+1 |
| | | | | | - #65641 mod_proxy-fcgi is not fixed (still open) - #67606 mod_fastcgi is fixed in ee275e34c8b303945945c650d4bc90dcc2ac0b17 | ||||
* | Bug #41631: Fix regression from first attempt (6569db8) | Daniel Lowrey | 2014-09-09 | 1 | -1/+1 |
| | |||||
* | Bug #67965: Fix blocking behavior in non-blocking crypto streams | Daniel Lowrey | 2014-09-09 | 1 | -11/+13 |
| | |||||
* | Fixed #67985 - Incorrect last used array index copied to new array after unset | Tjerk Meesters | 2014-09-09 | 3 | -0/+21 |
| | | | | In master zend_array_dup() is used to do this properly; this is a workaround. | ||||
* | Fine tuned the order of adding request variables. | George Wang | 2014-09-08 | 1 | -1/+2 |
| | |||||
* | Update LSAPI to 6.7, added support for 'filter_input'. | George Wang | 2014-09-03 | 2 | -7/+67 |
| | | | | Fixed a crash in CLI mode. |