summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* 5.5.36php-5.5.36PHP-5.5.36Julien Pauli2016-05-253-4/+3
|
* Fix memory leak in imagescale()Stanislav Malyshev2016-05-242-4/+4
|
* Update NEWSStanislav Malyshev2016-05-241-2/+12
|
* Better fix for bug #72135Stanislav Malyshev2016-05-241-4/+5
|
* Fixed bug #72227: imagescale out-of-bounds readStanislav Malyshev2016-05-232-8/+23
| | | | Ported from https://github.com/libgd/libgd/commit/4f65a3e4eedaffa1efcf9ee1eb08f0b504fbc31a
* Fix bug #72241: get_icu_value_internal out-of-bounds readStanislav Malyshev2016-05-222-117/+132
|
* Fix bug #72135 - don't create strings with lengths outside int rangeStanislav Malyshev2016-05-151-23/+27
|
* Add check for string overflow to all string add operationsStanislav Malyshev2016-05-091-0/+7
|
* Fix bug #72114 - int/size_t confusion in freadStanislav Malyshev2016-05-092-0/+18
|
* Updated NEWSJulien Pauli2016-05-021-5/+8
|
* Backport of fixed for bug #71331 - Uninitialized pointer in ↵Julien Pauli2016-05-024-2/+18
|\ | | | | | | phar_make_dirstream()
| * Fixed bug #71331 - Uninitialized pointer in phar_make_dirstream()Stanislav Malyshev2016-04-284-2/+18
| |
* | Update PHP 5.5 NEWS entries with CVE infoLior Kaplan2016-05-011-27/+34
| |
* | Added CVEJulien Pauli2016-04-291-1/+1
|/
* Updated NEWSJulien Pauli2016-04-271-0/+3
|
* Fix memory leakStanislav Malyshev2016-04-261-0/+3
|
* Fix bug #72099: xml_parse_into_struct segmentation faultStanislav Malyshev2016-04-262-53/+70
|
* 5.5.36 nowJulien Pauli2016-04-263-5/+24
|
* Fix bug #72094 - Out of bounds heap read access in exif header processingStanislav Malyshev2016-04-246-2/+76
|
* Fix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definitionStanislav Malyshev2016-04-243-22/+57
| | | | | We can not modify result since it can be copy of _zero_ or _one_, etc. and "copy" in bcmath is just bumping the refcount.
* Fix bug #72061 - Out-of-bounds reads in zif_grapheme_stripos with negative ↵Stanislav Malyshev2016-04-242-5/+22
| | | | offset
* Fix for bug #71912 (libgd: signedness vulnerability)Stanislav Malyshev2016-04-183-0/+19
|
* Typo in NEWSJulien Pauli2016-03-311-1/+1
|
* fix borked mainstream patchAnatol Belski2016-03-311-1/+1
|
* 5.5.35 nowJulien Pauli2016-03-293-5/+25
|
* fix dir separator in testAnatol Belski2016-03-291-2/+2
|
* Fixed bug #71527 Buffer over-write in finfo_open with malformed magic fileAnatol Belski2016-03-293-1/+21
| | | | | The actual fix is applying the upstream patch from https://github.com/file/file/commit/6713ca45e7757297381f4b4cdb9cf5e624a9ad36
* Fixed bug #71704 php_snmp_error() Format String VulnerabilityAnatol Belski2016-03-281-1/+1
| | | | | Conflicts: ext/snmp/snmp.c
* Merge branch 'PHP-5.5.34' into PHP-5.5Stanislav Malyshev2016-03-280-0/+0
|\ | | | | | | | | * PHP-5.5.34: Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut
| * Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcutStanislav Malyshev2016-03-281-17/+17
| |
* | Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcutStanislav Malyshev2016-03-282-20/+20
|/
* Fix bug #71798 - Integer Overflow in php_raw_url_encodeStanislav Malyshev2016-03-272-4/+4
|
* Fix bug #71860: Require valid paths for phar filenamesStanislav Malyshev2016-03-209-37/+41
|
* Going for 5.5.34Julien Pauli2016-03-023-4/+8
|
* fix test fileStanislav Malyshev2016-03-011-0/+0
|
* Fix versionStanislav Malyshev2016-03-011-3/+3
|
* Update NEWSStanislav Malyshev2016-03-012-4/+11
|
* Fix bug #71498: Out-of-Bound Read in phar_parse_zipfile()Stanislav Malyshev2016-02-214-3/+21
|
* Fixed bug #71587 - Use-After-Free / Double-Free in WDDX DeserializeStanislav Malyshev2016-02-142-4/+58
|
* add error check to sysconf callAnatol Belski2016-02-021-0/+11
|
* Going for 5.5.33 nowJulien Pauli2016-02-023-5/+13
|
* fix testsStanislav Malyshev2016-02-014-52/+52
|
* fix NEWSStanislav Malyshev2016-02-011-3/+3
|
* update NEWSStanislav Malyshev2016-02-011-0/+11
|
* Merge branch 'PHP-5.5' into PHP-5.5.32Stanislav Malyshev2016-02-0150-1511/+3141
|\ | | | | | | | | | | * PHP-5.5: Upgrade bundled PCRE to 8.38 Fixed NEWS file entry
| * Upgrade bundled PCRE to 8.38Stanislav Malyshev2016-01-3151-1511/+3144
| |
| * Fixed NEWS file entryJulien Pauli2016-01-281-2/+4
| |
* | Fixed bug #71488: Stack overflow when decompressing tar archivesStanislav Malyshev2016-01-313-6/+32
| |
* | update NEWSAnatol Belski2016-01-281-0/+6
| |
* | add missing headers for SIZE_MAXAnatol Belski2016-01-281-0/+9
| |