summaryrefslogtreecommitdiff
path: root/NEWS
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'PHP-7.2' into PHP-7.3Christoph M. Becker2019-08-061-0/+1
|\ | | | | | | | | * PHP-7.2: Fix #78282: atime and mtime mismatch
| * Fix #78282: atime and mtime mismatchChristoph M. Becker2019-08-061-0/+1
| | | | | | | | | | | | | | | | The fix for bug #78241 assumed that `time_t` would always be 64bit, but actually is 32bit for x86. We therefore enforce 64bit arithmetic to avoid wrapping. (cherry picked from commit bf242d58e77d50d4d8fdaaaca7ede686ec4467c0)
* | Fix #78346: strip_tags no longer handling nested php tagsChristoph M. Becker2019-08-021-0/+1
| | | | | | | | | | | | When the strip tags state machine has been flattened, an if statement has mistakenly been treated as else if. We fix this, and also simplify a bit right away.
* | Merge branch 'PHP-7.2' into PHP-7.3Christoph M. Becker2019-08-021-0/+1
|\ \ | |/ | | | | | | * PHP-7.2: Fix #78179: MariaDB server version incorrectly detected
| * Fix #78179: MariaDB server version incorrectly detectedChristoph M. Becker2019-08-021-0/+3
| | | | | | | | | | | | | | | | As of MariaDB 10.0.2, the server reports a fake version number as work- around for replication issues[1]. We apply the same "fix" as in the MariaDB client to cater to this. [1] <https://github.com/MariaDB/server/commit/c50ee6c23dbeb090963580754bec2f0a96ac0557#diff-5b45fa673c88c06a9651c7906364f592>
| * Fixed bug #78363Nikita Popov2019-08-021-0/+3
| |
| * add security NEW entries + reorder [ci skip]Remi Collet2019-07-301-14/+23
| |
* | Add test for bug #78363Nikita Popov2019-08-021-0/+3
| |
* | Fix 78213: Empty row pocketChristoph M. Becker2019-07-311-0/+3
| | | | | | | | | | We have to ensure that we don't create an arena which is smaller than its header, regardless of the configured alignment.
* | Add security related NEWS entries [ci skip]Christoph M. Becker2019-07-301-0/+10
| |
* | Merge branch 'PHP-7.2' into PHP-7.3Nikita Popov2019-07-291-0/+2
|\ \ | |/
| * Fix bug #78326Albert Casademont2019-07-291-0/+2
| | | | | | | | | | Similar to what fread() does, truncate the stream_get_contents() result if the original buffer was way too large.
| * Fixed bug #78333Nikita Popov2019-07-291-0/+4
| | | | | | | | | | Don't dereference float/double values at unknown address, instead memcpy it into an aligned stack slot and dereference that.
* | Update NEWS [ci skip]Christoph M. Becker2019-07-291-3/+1
| | | | | | | | | | The fix has been cherry-picked into PHP-7.3.8, so the bug will be fixed already there.
* | Fixed bug #78341Nikita Popov2019-07-291-0/+3
| | | | | | | | | | | | The smart branch logic assumed b->start refers to the old offsets, while b->start was already adjusted to the new offsets at this point. Delay the change until later.
* | Merge branch 'PHP-7.2' into PHP-7.3Nikita Popov2019-07-291-0/+4
|\ \
| * | Fixed bug #78333Nikita Popov2019-07-291-0/+4
| | | | | | | | | | | | | | | Don't dereference float/double values at unknown address, instead memcpy it into an aligned stack slot and dereference that.
* | | Merge branch 'PHP-7.2' into PHP-7.3Christoph M. Becker2019-07-291-0/+4
|\ \ \ | | |/ | |/| | | | | | | * PHP-7.2: Fix #78342: Bus error in configure test for iconv //IGNORE
| * | Fix #78342: Bus error in configure test for iconv //IGNOREChristoph M. Becker2019-07-291-0/+4
| |/ | | | | | | | | We have to check the return value of iconv_open() for error, to avoid that and potentially other undesired behavior of iconv().
| * Update NEWSPeter Kokot2019-07-231-0/+3
| |
* | Update NEWSPeter Kokot2019-07-231-0/+3
| |
* | Prevent use after free in fpm_event_epoll_waitMaksim Nikulin2019-07-221-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | epoll event backend does not guarantee that child input/output events are reported before SIGCHILD due to finished worker. While a bunch of events received by epoll is being processed, child-related structures may be removed before dispatching of an I/O event for the same child. The result may be attempt to access to memory region allocated for another purpose, segfault of the master process, and unavailable web sites. Postpone processing of SIGCHILD events till other events in the same bunch are processed. Fix Bug #62418 php-fpm master process crashes Fix Bug #65398 Race condition between SIGCHLD and child stdout/stderr event leads to segfault Fix Bug #75112 php-fpm crashing, hard to reproduce Fix Bug #77114 php-fpm master segfaults in fpm_event_epoll_wait/fpm_event_fire Fix Bug #77185 Use-after-free in FPM master event handling
* | Merge branch 'PHP-7.2' into PHP-7.3Nikita Popov2019-07-181-0/+4
|\ \ | |/
| * Fixed bug #77946Abyr Valg2019-07-181-0/+4
| | | | | | | | Save multi_info_read() result into easy handle.
* | Merge branch 'PHP-7.2' into PHP-7.3Nikita Popov2019-07-171-0/+4
|\ \ | |/
| * Fixed bug #69100Nikita Popov2019-07-171-0/+4
| |
| * move NEWS entry [ci skip]Remi Collet2019-07-161-3/+3
| |
* | Update NEWS [ci skip]Christoph M. Becker2019-07-161-4/+5
| |
* | Merge branch 'PHP-7.2' into PHP-7.3Nikita Popov2019-07-161-0/+4
|\ \ | |/
| * Fixed bug #78297Nikita Popov2019-07-161-0/+2
| |
| * next is 7.2.22Remi Collet2019-07-161-2/+5
| |
* | Merge branch 'PHP-7.2' into PHP-7.3Nikita Popov2019-07-151-0/+3
|\ \ | |/
| * Fix bug #77124Nikita Popov2019-07-151-0/+3
| | | | | | | | | | This is a backport of 6fcae63f614d1ed4aaeaff7b13a7a4627b1f1312 to PHP 7.2.
| * Fix #78269 password_hash uses weak options for argon2Remi Collet2019-07-151-0/+1
| |
* | typo [ci skip]Remi Collet2019-07-151-1/+1
| |
* | Fix #78269 password_hash uses weak options for argon2Remi Collet2019-07-151-0/+1
| |
* | Merge branch 'PHP-7.2' into PHP-7.3Nikita Popov2019-07-151-2/+4
|\ \ | |/
| * Fix bug #78291 Missing opcache directivesAndrew Collington2019-07-151-7/+11
| | | | | | | | | | | | | | | | | | New opcache directives have been added recently which are returned if using `ini_get_all('zend opcache')` but are not listed in the directives if using `opcache_get_configuration()`. This fix adds those missing directives as well as if `opcache.mmap_base` is used instead of `opcache.lockfile_path`. Also adds a test to ensure the directives match with both methods of fetching.
* | Merge branch 'PHP-7.2' into PHP-7.3Nikita Popov2019-07-121-0/+4
|\ \ | |/
| * Fixed bug #78279Nikita Popov2019-07-121-0/+4
| | | | | | | | | | Even if we don't initialize the callback on every request, we should still reset our globals to default values...
* | Fix #78212: Segfault in built-in webserverChristoph M. Becker2019-07-111-0/+1
| | | | | | | | | | | | | | | | Since syslog's ident and facility parameters have been added to config[1], vsyslog() segfaults on Windows, if openlog() has not been called before. We bring back the removed lines to fix this. [1] <http://git.php.net/?p=php-src.git;a=commit;h=2475337bd8a0fad0dac03db3f5e7e9d331d53653>
* | Fix bug #78271Nikita Popov2019-07-101-0/+1
| | | | | | | | | | | | | | | | | | | | | | When cleaning nops in the dfa pass, we were always keeping the smart branch inhibiting nop that occurs directly before the jump instruction. However, as we skip unreachable blocks entirely, it may happen that we need to keep a nop that occurs further back, prior to the unreachable blocks. Account for that case now. We should really do something about the smart branch situation, this is very fragile...
* | Merge branch 'PHP-7.2' into PHP-7.3Christoph M. Becker2019-07-091-0/+3
|\ \ | |/ | | | | | | * PHP-7.2: Upgrade to SQLite 3.28.0
| * Merge branch 'PHP-7.1' into PHP-7.2Christoph M. Becker2019-07-091-0/+3
| |\ | | | | | | | | | | | | * PHP-7.1: Upgrade to SQLite 3.28.0
| | * Upgrade to SQLite 3.28.0Christoph M. Becker2019-07-091-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | Over the years, multiple security vulnerabilities[1] have been found and fixed in SQLite3, so it makes sense to update our bundled libsqlite to the latest available version. [1] <https://www.cvedetails.com/vulnerability-list/vendor_id-9237/Sqlite.html>
| | * bump version after releaseJoe Watkins2019-05-281-1/+5
| | |
| | * Fix bug #77967 - Bypassing open_basedir restrictions via file urisStanislav Malyshev2019-05-271-3/+6
| | |
| | * Fix bug #77988 - heap-buffer-overflow on php_jpg_get16Stanislav Malyshev2019-05-271-2/+6
| | |
| | * Update NEWSStanislav Malyshev2019-05-271-3/+13
| | |
| | * Fix bug #77950 - Heap-buffer-overflow in _estrndup via exif_process_IFD_TAGStanislav Malyshev2019-04-301-2/+9
| | | | | | | | | | | | | | | | | | I do not completely understand what is going on there, but I am pretty sure dir_entry <= offset_base if not a normal situation, so we better not to rely on such dir_entry.