summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Fix 5.5.35php-5.5.35PHP-5.5.35Julien Pauli2016-04-271-2/+2
|
* 5.5.35Julien Pauli2016-04-273-11/+8
|
* Fix memory leakStanislav Malyshev2016-04-261-0/+3
|
* Fix bug #72099: xml_parse_into_struct segmentation faultStanislav Malyshev2016-04-262-53/+70
|
* 5.5.36 nowJulien Pauli2016-04-263-5/+24
|
* Fix bug #72094 - Out of bounds heap read access in exif header processingStanislav Malyshev2016-04-246-2/+76
|
* Fix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definitionStanislav Malyshev2016-04-243-22/+57
| | | | | We can not modify result since it can be copy of _zero_ or _one_, etc. and "copy" in bcmath is just bumping the refcount.
* Fix bug #72061 - Out-of-bounds reads in zif_grapheme_stripos with negative ↵Stanislav Malyshev2016-04-242-5/+22
| | | | offset
* Fix for bug #71912 (libgd: signedness vulnerability)Stanislav Malyshev2016-04-183-0/+19
|
* Typo in NEWSJulien Pauli2016-03-311-1/+1
|
* fix borked mainstream patchAnatol Belski2016-03-311-1/+1
|
* 5.5.35 nowJulien Pauli2016-03-293-5/+25
|
* fix dir separator in testAnatol Belski2016-03-291-2/+2
|
* Fixed bug #71527 Buffer over-write in finfo_open with malformed magic fileAnatol Belski2016-03-293-1/+21
| | | | | The actual fix is applying the upstream patch from https://github.com/file/file/commit/6713ca45e7757297381f4b4cdb9cf5e624a9ad36
* Fixed bug #71704 php_snmp_error() Format String VulnerabilityAnatol Belski2016-03-281-1/+1
| | | | | Conflicts: ext/snmp/snmp.c
* Merge branch 'PHP-5.5.34' into PHP-5.5Stanislav Malyshev2016-03-280-0/+0
|\ | | | | | | | | * PHP-5.5.34: Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut
| * Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcutStanislav Malyshev2016-03-281-17/+17
| |
* | Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcutStanislav Malyshev2016-03-282-20/+20
|/
* Fix bug #71798 - Integer Overflow in php_raw_url_encodeStanislav Malyshev2016-03-272-4/+4
|
* Fix bug #71860: Require valid paths for phar filenamesStanislav Malyshev2016-03-209-37/+41
|
* Going for 5.5.34Julien Pauli2016-03-023-4/+8
|
* fix test fileStanislav Malyshev2016-03-011-0/+0
|
* Fix versionStanislav Malyshev2016-03-011-3/+3
|
* Update NEWSStanislav Malyshev2016-03-012-4/+11
|
* Fix bug #71498: Out-of-Bound Read in phar_parse_zipfile()Stanislav Malyshev2016-02-214-3/+21
|
* Fixed bug #71587 - Use-After-Free / Double-Free in WDDX DeserializeStanislav Malyshev2016-02-142-4/+58
|
* add error check to sysconf callAnatol Belski2016-02-021-0/+11
|
* Going for 5.5.33 nowJulien Pauli2016-02-023-5/+13
|
* fix testsStanislav Malyshev2016-02-014-52/+52
|
* fix NEWSStanislav Malyshev2016-02-011-3/+3
|
* update NEWSStanislav Malyshev2016-02-011-0/+11
|
* Merge branch 'PHP-5.5' into PHP-5.5.32Stanislav Malyshev2016-02-0150-1511/+3141
|\ | | | | | | | | | | * PHP-5.5: Upgrade bundled PCRE to 8.38 Fixed NEWS file entry
| * Upgrade bundled PCRE to 8.38Stanislav Malyshev2016-01-3151-1511/+3144
| |
| * Fixed NEWS file entryJulien Pauli2016-01-281-2/+4
| |
* | Fixed bug #71488: Stack overflow when decompressing tar archivesStanislav Malyshev2016-01-313-6/+32
| |
* | update NEWSAnatol Belski2016-01-281-0/+6
| |
* | add missing headers for SIZE_MAXAnatol Belski2016-01-281-0/+9
| |
* | backport the escapeshell* functions hardening branchAnatol Belski2016-01-283-5/+73
| |
* | add testsAnatol Belski2016-01-284-0/+44
| |
* | Fix bug #71459 - Integer overflow in iptcembed()Stanislav Malyshev2016-01-261-1/+6
| |
* | Fixed bug #71323 - Output of stream_get_meta_data can be falsified by its inputStanislav Malyshev2016-01-1615-227/+260
| |
* | Fix bug #71391: NULL Pointer Dereference in phar_tar_setupmetadata()Stanislav Malyshev2016-01-163-0/+21
| |
* | Fix bug #71335: Type Confusion in WDDX Packet DeserializationStanislav Malyshev2016-01-132-1/+35
| |
* | Merge branch 'bug71354' into PHP-5.5.32Stanislav Malyshev2016-01-133-0/+14
|\ \ | |/ |/| | | | | * bug71354: Fix bug #71354 - remove UMR when size is 0
| * Fix bug #71354 - remove UMR when size is 0Stanislav Malyshev2016-01-133-0/+14
| |
* | fix the fix for bug #70976 (imagerotate)Remi Collet2016-01-122-4/+4
| |
* | 5.5.32 nowJulien Pauli2016-01-072-4/+4
|/
* Update NEWSStanislav Malyshev2016-01-051-1/+5
|
* Improve fix for bug #70976Stanislav Malyshev2015-12-281-1/+1
|
* Fixed bug #70661 (Use After Free Vulnerability in WDDX Packet Deserialization)Stanislav Malyshev2015-12-283-1/+72
|