summaryrefslogtreecommitdiff
path: root/ext/soap/php_http.c
Commit message (Collapse)AuthorAgeFilesLines
* Fix bug #71610: Type Confusion Vulnerability - SOAP / make_http_soap_request()Stanislav Malyshev2016-03-011-0/+2
|
* Merge branch 'PHP-5.6' into PHP-7.0Lior Kaplan2016-01-011-1/+1
|\ | | | | | | | | * PHP-5.6: Happy new year (Update copyright to 2016)
| * Happy new year (Update copyright to 2016)Lior Kaplan2016-01-011-1/+1
| |
* | Fixed bug #70715 (Segmentation fault inside soap client)Xinchen Hui2015-10-151-1/+5
| |
* | Fixed bug #70709 (SOAP Client generates Segfault)Xinchen Hui2015-10-151-1/+6
| |
* | Fixed memory leak and avoid reallocationsDmitry Stogov2015-09-241-68/+79
| |
* | fix datatypeAnatol Belski2015-08-071-1/+1
| |
* | Merge branch 'PHP-5.6'Stanislav Malyshev2015-08-041-3/+4
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * PHP-5.6: update NEWS fix test update NEWS Fix bug #70019 - limit extracted files to given directory Do not do convert_to_* on unserialize, it messes up references Fix #69793 - limit what we accept when unserializing exception Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList) Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject ignore signatures for packages too Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage Fixed bug #69892 Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes Improved fix for Bug #69441 Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items) Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref) Fix bug #70081: check types for SOAP variables Conflicts: Zend/zend_exceptions.c ext/date/php_date.c ext/openssl/openssl.c ext/phar/phar_internal.h ext/soap/php_http.c ext/spl/spl_array.c ext/spl/spl_dllist.c ext/spl/spl_observer.c ext/standard/tests/serialize/bug69152.phpt sapi/cli/tests/005.phpt
| * Merge branch 'PHP-5.5' into PHP-5.6Stanislav Malyshev2015-08-041-10/+13
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * PHP-5.5: update NEWS fix test update NEWS Fix bug #70019 - limit extracted files to given directory Do not do convert_to_* on unserialize, it messes up references Fix #69793 - limit what we accept when unserializing exception Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList) Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject ignore signatures for packages too Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage Fixed bug #69892 Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes Improved fix for Bug #69441 Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items) Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref) Fix bug #70081: check types for SOAP variables Conflicts: ext/soap/php_http.c ext/spl/spl_observer.c
| | * Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-08-041-10/+13
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * PHP-5.4: Fix bug #70019 - limit extracted files to given directory Do not do convert_to_* on unserialize, it messes up references Fix #69793 - limit what we accept when unserializing exception Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList) Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject ignore signatures for packages too Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage Fixed bug #69892 Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes Improved fix for Bug #69441 Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items) Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref) Fix bug #70081: check types for SOAP variables Conflicts: .gitignore ext/date/php_date.c ext/spl/spl_array.c ext/spl/spl_observer.c
| | | * Fix bug #70081: check types for SOAP variablesStanislav Malyshev2015-07-261-10/+13
| | | |
| * | | Merge branch 'PHP-5.5' into PHP-5.6Reeze Xia2015-03-031-8/+15
| |\ \ \ | | |/ / | | | | | | | | | | | | | | | | | | | | * PHP-5.5: Improve fix for bug 67741 Added type checks Added type checks
* | | | Fixed bug #70079 (Segmentation fault after more than 100 SoapClient calls)Xinchen Hui2015-07-161-0/+2
| | | |
* | | | Fixed Bug #70032 (make_http_soap_request calls ↵Xinchen Hui2015-07-091-1/+1
| | | | | | | | | | | | | | | | zend_hash_get_current_key_ex(,,,NULL))
* | | | Use ZSTR_ API to access zend_string elements (this is just renaming without ↵Dmitry Stogov2015-06-301-21/+21
| | | | | | | | | | | | | | | | semantick changes).
* | | | Merge branch 'PHP-5.6'Dmitry Stogov2015-03-031-9/+15
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * PHP-5.6: Added type checks Fixed bug #67741 (auto_prepend_file messes up __LINE__) Check variable type before its usage as IS_ARRAY. Fixed a bug that header value is not terminated by '\0' when accessed through getenv(). Conflicts: ext/soap/php_encoding.c ext/soap/php_http.c ext/soap/soap.c
| * \ \ \ Merge branch 'PHP-5.5' into PHP-5.6Dmitry Stogov2015-03-031-8/+15
| |\ \ \ \ | | |/ / / | |/| / / | | |/ / | | | | | | | | | | | | | | | | * PHP-5.5: Added type checks Fixed bug #67741 (auto_prepend_file messes up __LINE__) Check variable type before its usage as IS_ARRAY. Fixed a bug that header value is not terminated by '\0' when accessed through getenv().
| | * | Merge branch 'PHP-5.4' into PHP-5.5Dmitry Stogov2015-03-031-8/+15
| | |\ \ | | | |/ | | | | | | | | | | | | | | | | | | | | | | | | * PHP-5.4: Added type checks Conflicts: ext/soap/soap.c
| | | * Added type checksDmitry Stogov2015-03-031-8/+15
| | | |
| | | * Bump yearXinchen Hui2014-01-031-1/+1
| | | |
| | | * Merge branch 'pull-request/341'Stanislav Malyshev2013-06-101-1/+1
| | | | | | | | | | | | | | | | | | | | * pull-request/341: (23 commits) typofixes
| | | * Happy New YearXinchen Hui2013-01-011-1/+1
| | | |
| | * | Bump yearXinchen Hui2015-01-151-1/+1
| | | |
| | * | Bump yearXinchen Hui2014-01-031-1/+1
| | | |
| | * | typo fixesVeres Lajos2013-07-151-1/+1
| | | |
| * | | bump yearXinchen Hui2015-01-151-1/+1
| | | |
| * | | fix bug #67955Philip Hofstetter2014-09-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | this fixes a regression from 6c2a8068207a02b3d7ae7416a9967dad0a81e61f. smart_str_appendl is expecting the length as the length of the string, but key_length is the byte length of the key, including the 0 terminator. As such, the cookie name appeneded to the header would now also include the 0 terminator of the key name which then would be sent to the server.
* | | | Cleanup resource handling APIsXinchen Hui2015-02-021-2/+2
| | | |
* | | | bump yearXinchen Hui2015-01-151-1/+1
| | | |
* | | | trailing whitespace removalStanislav Malyshev2015-01-101-8/+8
| | | |
* | | | Drop duplicate arg from hash_get_current_key_exNikita Popov2014-12-261-3/+3
| | | |
* | | | first shot remove TSRMLS_* thingsAnatol Belski2014-12-131-38/+38
| | | |
* | | | Rename smart_str_append to smart_str_append_smart_strNikita Popov2014-09-211-1/+1
| | | | | | | | | | | | | | | | It's used only rarely and I'm running out of append names...
* | | | s/PHP 5/PHP 7/Johannes Schlüter2014-09-191-1/+1
| | | |
* | | | Fix SOAP warningsNikita Popov2014-09-051-2/+1
| | | |
* | | | Fix invalid zend_string free in soapNikita Popov2014-09-041-44/+37
| | | | | | | | | | | | | | | | By making get_http_headers() return the zend_string* directly.
* | | | master renames phase 3Anatol Belski2014-08-251-1/+1
| | | |
* | | | master renames phase 1Anatol Belski2014-08-251-61/+61
| | | |
* | | | fixes to %pd format usageAnatol Belski2014-08-241-1/+1
| | | |
* | | | ported ext/soapAnatol Belski2014-08-191-2/+2
| | | |
* | | | basic macro replacements, all at onceAnatol Belski2014-08-191-56/+56
| | | |
* | | | cleanupDmitry Stogov2014-08-131-2/+1
| | | |
* | | | Fixed memory leaksDmitry Stogov2014-05-161-12/+14
| | | |
* | | | ext/soap support for phpng (incomplete - just compilable)Dmitry Stogov2014-05-151-247/+239
| | | |
* | | | Cleanup (1-st round)Dmitry Stogov2014-04-151-8/+8
|/ / /
* | | Bump yearXinchen Hui2014-01-031-1/+1
| | |
* | | Avoid interned hash key duplication and hash key length recaclulationDmitry Stogov2013-11-291-2/+3
| | |
* | | typo fixesVeres Lajos2013-07-151-1/+1
|/ /
* | Merge branch 'pull-request/341'Stanislav Malyshev2013-06-101-1/+1
| | | | | | | | | | * pull-request/341: (23 commits) typofixes
* | Added SoapClient constructor option 'ssl_method' to specify ssl methodDmitry Stogov2013-04-301-2/+64
| |
View Lorry Controller Status