Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix bug #77540 - Invalid Read on exif_process_SOFn | Stanislav Malyshev | 2019-03-03 | 3 | -2/+24 |
| | |||||
* | Fix integer overflows on 32-bits | Stanislav Malyshev | 2019-03-03 | 1 | -7/+7 |
| | |||||
* | Fix #77431 SplFileInfo::__construct() accepts NUL bytes | Christoph M. Becker | 2019-03-03 | 2 | -1/+10 |
| | | | | | `SplFileInfo::__construct()` has to expect a path instead of a string, analogous to `SplFileObject::__construct()`. | ||||
* | Fix bug #77396 - Null Pointer Dereference in phar_create_or_parse_filename | Stanislav Malyshev | 2019-03-03 | 2 | -0/+18 |
| | |||||
* | Use pkg-config for ICU, as the old icu-config has been deprecated | Derick Rethans | 2019-02-07 | 1 | -32/+66 |
| | |||||
* | Bump for 7.1.27 | Sara Golemon | 2019-01-08 | 3 | -5/+8 |
| | |||||
* | Still leaking for some reason, XFAIL for now, I'll look into it later. | Stanislav Malyshev | 2019-01-07 | 1 | -0/+2 |
| | |||||
* | Merge branch 'PHP-5.6' into PHP-7.1 | Stanislav Malyshev | 2019-01-06 | 6 | -2/+22 |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * PHP-5.6: Fix bug #77418 - Heap overflow in utf32be_mbc_to_code [ci skip] Add NEWS Fix more issues with encodilng length Fix #77270: imagecolormatch Out Of Bounds Write on Heap Fix bug #77380 (Global out of bounds read in xmlrpc base64 code) Fix bug #77371 (heap buffer overflow in mb regex functions - compile_string_node) Fix bug #77370 - check that we do not read past buffer end when parsing multibytes Fix #77269: Potential unsigned underflow in gdImageScale Fix bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext) Fix bug #77242 (heap out of bounds read in xmlrpc_decode()) Regenerate certs for openssl tests | ||||
| * | Fix bug #77418 - Heap overflow in utf32be_mbc_to_code | Stanislav Malyshev | 2019-01-06 | 6 | -5/+25 |
| | | |||||
| * | [ci skip] Add NEWS | Stanislav Malyshev | 2019-01-06 | 1 | -0/+22 |
| | | |||||
| * | Fix more issues with encodilng length | Stanislav Malyshev | 2019-01-06 | 6 | -14/+38 |
| | | | | | | | | Should fix bug #77381, bug #77382, bug #77385, bug #77394. | ||||
| * | Fix #77270: imagecolormatch Out Of Bounds Write on Heap | Christoph M. Becker | 2019-01-06 | 2 | -2/+20 |
| | | | | | | | | | | | | | | At least some of the image reading functions may return images which use color indexes greater than or equal to im->colorsTotal. We cater to this by always using a buffer size which is sufficient for `gdMaxColors` in `gdImageColorMatch()`. | ||||
| * | Fix bug #77380 (Global out of bounds read in xmlrpc base64 code) | Stanislav Malyshev | 2019-01-06 | 2 | -2/+19 |
| | | |||||
| * | Fix bug #77371 (heap buffer overflow in mb regex functions - ↵ | Stanislav Malyshev | 2019-01-06 | 2 | -0/+11 |
| | | | | | | | | compile_string_node) | ||||
| * | Fix bug #77370 - check that we do not read past buffer end when parsing ↵ | Stanislav Malyshev | 2019-01-06 | 2 | -0/+22 |
| | | | | | | | | multibytes | ||||
| * | Fix #77269: Potential unsigned underflow in gdImageScale | Christoph M. Becker | 2019-01-06 | 2 | -9/+30 |
| | | | | | | | | | | | | Belatedly, we're porting the respective upstream patch[1]. [1] <https://github.com/libgd/libgd/commit/60bfb401ad5a4a8ae995dcd36372fe15c71e1a35> | ||||
| * | Fix bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext) | Stanislav Malyshev | 2019-01-06 | 2 | -1/+15 |
| | | |||||
| * | Fix bug #77242 (heap out of bounds read in xmlrpc_decode()) | Stanislav Malyshev | 2019-01-06 | 2 | -0/+13 |
| | | |||||
| * | Regenerate certs for openssl tests | Alexander Kurilo | 2019-01-02 | 5 | -44/+91 |
| | | |||||
* | | Add NEWS | Stanislav Malyshev | 2019-01-06 | 1 | -0/+25 |
| | | |||||
* | | Fix test | Stanislav Malyshev | 2019-01-06 | 1 | -0/+2 |
| | | |||||
* | | Fix #77369 - memcpy with negative length via crafted DNS response | Stanislav Malyshev | 2019-01-06 | 1 | -0/+7 |
| | | |||||
* | | Fix more issues with encodilng length | Stanislav Malyshev | 2019-01-06 | 6 | -14/+38 |
| | | | | | | | | Should fix bug #77381, bug #77382, bug #77385, bug #77394. | ||||
* | | Fix #77270: imagecolormatch Out Of Bounds Write on Heap | Christoph M. Becker | 2019-01-06 | 2 | -2/+20 |
| | | | | | | | | | | | | | | At least some of the image reading functions may return images which use color indexes greater than or equal to im->colorsTotal. We cater to this by always using a buffer size which is sufficient for `gdMaxColors` in `gdImageColorMatch()`. | ||||
* | | Fix bug #77380 (Global out of bounds read in xmlrpc base64 code) | Stanislav Malyshev | 2019-01-06 | 2 | -2/+19 |
| | | |||||
* | | Fix bug #77371 (heap buffer overflow in mb regex functions - ↵ | Stanislav Malyshev | 2019-01-06 | 2 | -0/+11 |
| | | | | | | | | compile_string_node) | ||||
* | | Fix bug #77370 - check that we do not read past buffer end when parsing ↵ | Stanislav Malyshev | 2019-01-06 | 2 | -0/+22 |
| | | | | | | | | multibytes | ||||
* | | Fix #77269: Potential unsigned underflow in gdImageScale | Christoph M. Becker | 2019-01-06 | 2 | -9/+30 |
| | | | | | | | | | | | | Belatedly, we're porting the respective upstream patch[1]. [1] <https://github.com/libgd/libgd/commit/60bfb401ad5a4a8ae995dcd36372fe15c71e1a35> | ||||
* | | Fix bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext) | Stanislav Malyshev | 2019-01-06 | 2 | -1/+15 |
| | | |||||
* | | Fix bug #77242 (heap out of bounds read in xmlrpc_decode()) | Stanislav Malyshev | 2019-01-06 | 2 | -0/+13 |
| | | |||||
* | | Regenerate certs for openssl tests | Alexander Kurilo | 2019-01-06 | 5 | -44/+91 |
| | | |||||
* | | add imap.enable_insecure_rsh in php.ini | Remi Collet | 2018-12-08 | 2 | -0/+14 |
| | | |||||
* | | missing entry for #77020 | Remi Collet | 2018-12-08 | 1 | -0/+3 |
| | | |||||
* | | Merge branch 'PHP-7.0' into PHP-7.1 | Ferenc Kovacs | 2018-12-05 | 0 | -0/+0 |
|\ \ | |||||
| * \ | Merge branch 'PHP-5.6' into PHP-7.0PHP-7.0 | Ferenc Kovacs | 2018-12-05 | 0 | -0/+0 |
| |\ \ | | |/ | |||||
| | * | 5.6.40 will be next. probably not | Ferenc Kovacs | 2018-12-05 | 3 | -5/+7 |
| | | | |||||
* | | | Merge branch 'PHP-7.0' into PHP-7.1 | Anatol Belski | 2018-12-04 | 0 | -0/+0 |
|\ \ \ | |/ / | | | | | | | | | | * PHP-7.0: Sync NEWS [ci skip] | ||||
| * | | Sync NEWS [ci skip] | Anatol Belski | 2018-12-04 | 1 | -1/+8 |
| | | | |||||
* | | | Merge branch 'PHP-7.0' into PHP-7.1 | Stanislav Malyshev | 2018-12-03 | 2 | -1/+12 |
|\ \ \ | |/ / | | | | | | | | | | * PHP-7.0: Fix null pointer deref in qprint-encode filter (bug #77231) | ||||
| * | | Merge branch 'PHP-5.6' into PHP-7.0 | Stanislav Malyshev | 2018-12-03 | 2 | -1/+12 |
| |\ \ | | |/ | | | | | | | | | | * PHP-5.6: Fix null pointer deref in qprint-encode filter (bug #77231) | ||||
| | * | Fix null pointer deref in qprint-encode filter (bug #77231) | Stanislav Malyshev | 2018-12-03 | 3 | -1/+16 |
| | | | |||||
* | | | Merge branch 'PHP-7.0' into PHP-7.1 | Stanislav Malyshev | 2018-12-03 | 6 | -11/+55 |
|\ \ \ | |/ / | | | | | | | | | | | | | | | | * PHP-7.0: Fix bug #77143 - add more checks to buffer reads Fix bug #77143 - add more checks to buffer reads Fix #77020: null pointer dereference in imap_mail | ||||
| * | | Merge branch 'PHP-5.6' into PHP-7.0 | Stanislav Malyshev | 2018-12-03 | 1 | -1/+1 |
| |\ \ | | |/ | | | | | | | | | | * PHP-5.6: Fix bug #77143 - add more checks to buffer reads | ||||
| | * | Fix bug #77143 - add more checks to buffer reads | Stanislav Malyshev | 2018-12-03 | 5 | -11/+42 |
| | | | |||||
| * | | Merge branch 'PHP-5.6' into PHP-7.0 | Stanislav Malyshev | 2018-12-03 | 6 | -11/+55 |
| |\ \ | | | | | | | | | | | | | | | | | | | | | * PHP-5.6: Fix bug #77143 - add more checks to buffer reads Fix #77020: null pointer dereference in imap_mail | ||||
| | * | | Fix bug #77143 - add more checks to buffer reads | Stanislav Malyshev | 2018-12-03 | 5 | -11/+42 |
| | |/ | |||||
| | * | Fix #77020: null pointer dereference in imap_mail | Stanislav Malyshev | 2018-12-03 | 3 | -1/+16 |
| | | | | | | | | | | | | | | | | | | If an empty $message is passed to imap_mail(), we must not set message to NULL, since _php_imap_mail() is not supposed to handle NULL pointers (opposed to pointers to NUL). | ||||
* | | | Don't need interactive progress on git clones in Travis | Philip Prindeville | 2018-12-02 | 1 | -0/+3 |
| | | | | | | | | | | | | | | | | | | | | | Travis logs are usually inspected after the build completes, by which time progress info is useless. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> | ||||
* | | | Merge branch 'PHP-7.0' into PHP-7.1 | Stanislav Malyshev | 2018-12-02 | 5 | -74/+63 |
|\ \ \ | |/ / | | | | | | | | | | | | | | | | * PHP-7.0: Fix TSRM signature - php_stream_stat macro has it's own TSRM Regenerate certificates for openssl tests Improve test for bug77022 | ||||
| * | | Merge branch 'PHP-5.6' into PHP-7.0 | Stanislav Malyshev | 2018-12-02 | 5 | -74/+63 |
| |\ \ | | |/ | | | | | | | | | | | | | | | | * PHP-5.6: Fix TSRM signature - php_stream_stat macro has it's own TSRM Regenerate certificates for openssl tests Improve test for bug77022 |