summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* update NEWSphp-5.4.37PHP-5.4.37Stanislav Malyshev2015-01-201-1/+1
* add CVEStanislav Malyshev2015-01-201-1/+2
* 5.4.37Stanislav Malyshev2015-01-203-4/+4
* add protection against nullsStanislav Malyshev2015-01-201-0/+5
* Merge branch 'bug68710' into PHP-5.4Stanislav Malyshev2015-01-204-3/+32
|\
| * Fix for bug #68710 (Use After Free Vulnerability in PHP's unserialize())Stanislav Malyshev2015-01-014-3/+32
* | Merge branch 'bug68799' into PHP-5.4Stanislav Malyshev2015-01-204-2/+68
|\ \
| * | Fix bug #68799: Free called on unitialized pointerStanislav Malyshev2015-01-113-1/+64
| |/
* | Update NEWSDaniel Lowrey2015-01-141-0/+3
* | Fixed bug #55618 (use case-insensitive cert name matching)Daniel Lowrey2015-01-141-2/+2
* | updated libmagic.patch in 5.4Anatol Belski2015-01-041-315/+139
* | Fixed bug #68735 fileinfo out-of-bounds memory accessAnatol Belski2015-01-044-2/+28
* | removed dead codeRemi Collet2015-01-045-1544/+2
|/
* FIx bug #68618 (out of bounds read crashes php-cgi)Stanislav Malyshev2014-12-302-2/+7
* add missing NEWS entryFerenc Kovacs2014-12-171-0/+3
* 5.4.37Stanislav Malyshev2014-12-163-5/+7
* add CVEStanislav Malyshev2014-12-161-1/+1
* add missing test fileStanislav Malyshev2014-12-161-0/+7
* Fix bug #68594 - Use after free vulnerability in unserialize()Stanislav Malyshev2014-12-164-32/+64
* Fix undefined behaviour in strnatcmpAndrea Faulds2014-12-131-2/+2
* update NEWSStanislav Malyshev2014-12-111-0/+1
* move the test to the right placeAnatol Belski2014-12-111-0/+0
* Fixed bug #68545 NULL pointer dereference in unserialize.cAnatol Belski2014-12-113-33/+56
* Fixed possible read after end of buffer and use after free.Dmitry Stogov2014-12-081-2/+6
* Revert unintentional docblock changeChris Christoff2014-12-051-1/+1
* make sure that we don't truncate the stack trace and cause false test failure...Ferenc Kovacs2014-12-021-0/+1
* update newsStanislav Malyshev2014-11-302-5/+8
* Apply error-code-salt fix to Windows tooLeigh2014-11-300-0/+0
* Bug fixes in light of failing bcrypt testsLeigh2014-11-302-1/+3
* Add tests from 1.3. Add missing tests.Leigh2014-11-301-2/+31
* Upgrade crypt_blowfish to version 1.3Leigh2014-11-301-19/+24
* update for LiteSpeedStanislav Malyshev2014-11-231-0/+3
* Revert "made lsapi_main.c compatible with PHP7/phpng ."Stanislav Malyshev2014-11-221-92/+26
* made lsapi_main.c compatible with PHP7/phpng .George Wang2014-11-201-26/+92
* 5.4.36-devStanislav Malyshev2014-11-113-4/+6
* Fixed bug #66584 Segmentation fault on statement deallocationMatteo Beccati2014-11-113-2/+71
* update NEWSFerenc Kovacs2014-11-121-0/+4
* Partial fix for bug #68365 (zend_mm_heap corrupted after memory overflow in z...Dmitry Stogov2014-11-071-1/+1
* update NEWSStanislav Malyshev2014-11-031-0/+4
* Fix bug #63595 GMP memory management conflicts with other libraries using GMPRemi Collet2014-11-031-26/+0
* Initialize the offset table - PCRE may sometimes miss offsetsStanislav Malyshev2014-11-031-1/+1
* set default response code to 200George Wang2014-11-031-2/+2
* fix NEWS & versionStanislav Malyshev2014-10-223-5/+5
* NEWSRemi Collet2014-10-221-0/+6
* Fix bug #68283: fileinfo: out-of-bounds read in elf note headersRemi Collet2014-10-221-0/+7
* Fix bug #68113 (Heap corruption in exif_thumbnail())Stanislav Malyshev2014-10-134-3/+24
* Fix bug #68089 - do not accept options with embedded \0Stanislav Malyshev2014-10-133-0/+27
* Fixed bug #68044: Integer overflow in unserialize() (32-bits only)Stanislav Malyshev2014-10-134-4/+19
* Fix bug #68027 - fix date parsing in XMLRPC libStanislav Malyshev2014-10-133-6/+56
* update NEWSArd Biesheuvel2014-10-101-0/+3