summaryrefslogtreecommitdiff
path: root/ext/soap/php_http.c
Commit message (Collapse)AuthorAgeFilesLines
* Support content_type stream context option in soapVincent JARDIN2019-05-211-2/+21
| | | | | | | | | | | | | | | Allows overriding the HTTP header using the HTTP context: $client = new SoapClient('http://url.wsdl&v=latest', [ 'stream_context' => stream_context_create([ 'http' => [ 'content_type' => 'foobarX', ], ]), ]); This is a backport of c55af3c65ac116bbd935bd3d695869d88056c49c to the PHP 7.2 branch.
* Trim trailing whitespace in source code filesPeter Kokot2018-10-131-1/+1
|
* year++Xinchen Hui2018-01-021-1/+1
|
* Update copyright headers to 2017Sammy Kaye Powers2017-01-021-1/+1
|
* Merge branch 'pull-request/2152'Joe Watkins2016-10-201-1/+8
|\
| * soap #69137 - Invert logic to be correctKeith Smiley2016-10-131-1/+1
| |
| * soap #69137 - Fix SSL verify when using a proxyKeith Smiley2016-10-031-1/+8
| | | | | | | | | | | | | | | | | | Name verification was failing because the OpenSSL extension was picking the proxy server's address when guessing which name to compare to the SSL certificate. This scenario is already handled for stream wrappers in http_fopen_wrapper.c. This patch applies the same fix to the SOAP extension: when a proxy is used, set peer_name explicitly on the stream context.
* | Fix some insecure usages of php_randLeigh2016-07-051-2/+6
| |
* | Fixed compilation warningsDmitry Stogov2016-06-221-3/+3
| |
* | Added ZEND_ATTRIBUTE_FORMAT to some middind functions.Dmitry Stogov2016-06-211-1/+1
|/ | | | | "%p" replaced by ZEND_LONG_FMT to avoid compilation warnings. Fixed most incorrect use cases of format specifiers.
* Eliminate usages of _PP macrosNikita Popov2016-03-031-10/+0
| | | | | | | | | | | | | These are either in debug code (fix them), commented out (drop them) or in dead compatibility macros (drop them). One usage was in php_stream_get_from_zval(), which we have not used since at least PHP 5.2 and, judging from the fact that nobody complained about it causing compile errors in PHP 7, nobody else uses it either, so drop it. There are still remaining uses in mysqli embedded and odbc birdstep. These probably need to be dropped outright.
* Fix bug #71610: Type Confusion Vulnerability - SOAP / make_http_soap_request()Stanislav Malyshev2016-02-211-0/+2
|
* Merge branch 'PHP-5.6' into PHP-7.0Lior Kaplan2016-01-011-1/+1
|\ | | | | | | | | * PHP-5.6: Happy new year (Update copyright to 2016)
| * Happy new year (Update copyright to 2016)Lior Kaplan2016-01-011-1/+1
| |
* | Fixed bug #70715 (Segmentation fault inside soap client)Xinchen Hui2015-10-151-1/+5
| |
* | Fixed bug #70709 (SOAP Client generates Segfault)Xinchen Hui2015-10-151-1/+6
| |
* | Fixed memory leak and avoid reallocationsDmitry Stogov2015-09-241-68/+79
| |
* | fix datatypeAnatol Belski2015-08-071-1/+1
| |
* | Merge branch 'PHP-5.6'Stanislav Malyshev2015-08-041-3/+4
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * PHP-5.6: update NEWS fix test update NEWS Fix bug #70019 - limit extracted files to given directory Do not do convert_to_* on unserialize, it messes up references Fix #69793 - limit what we accept when unserializing exception Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList) Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject ignore signatures for packages too Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage Fixed bug #69892 Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes Improved fix for Bug #69441 Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items) Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref) Fix bug #70081: check types for SOAP variables Conflicts: Zend/zend_exceptions.c ext/date/php_date.c ext/openssl/openssl.c ext/phar/phar_internal.h ext/soap/php_http.c ext/spl/spl_array.c ext/spl/spl_dllist.c ext/spl/spl_observer.c ext/standard/tests/serialize/bug69152.phpt sapi/cli/tests/005.phpt
| * Merge branch 'PHP-5.5' into PHP-5.6Stanislav Malyshev2015-08-041-10/+13
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * PHP-5.5: update NEWS fix test update NEWS Fix bug #70019 - limit extracted files to given directory Do not do convert_to_* on unserialize, it messes up references Fix #69793 - limit what we accept when unserializing exception Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList) Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject ignore signatures for packages too Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage Fixed bug #69892 Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes Improved fix for Bug #69441 Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items) Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref) Fix bug #70081: check types for SOAP variables Conflicts: ext/soap/php_http.c ext/spl/spl_observer.c
| | * Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-08-041-10/+13
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * PHP-5.4: Fix bug #70019 - limit extracted files to given directory Do not do convert_to_* on unserialize, it messes up references Fix #69793 - limit what we accept when unserializing exception Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList) Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject ignore signatures for packages too Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage Fixed bug #69892 Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes Improved fix for Bug #69441 Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items) Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref) Fix bug #70081: check types for SOAP variables Conflicts: .gitignore ext/date/php_date.c ext/spl/spl_array.c ext/spl/spl_observer.c
| | | * Fix bug #70081: check types for SOAP variablesStanislav Malyshev2015-07-261-10/+13
| | | |
| * | | Merge branch 'PHP-5.5' into PHP-5.6Reeze Xia2015-03-031-8/+15
| |\ \ \ | | |/ / | | | | | | | | | | | | | | | | | | | | * PHP-5.5: Improve fix for bug 67741 Added type checks Added type checks
* | | | Fixed bug #70079 (Segmentation fault after more than 100 SoapClient calls)Xinchen Hui2015-07-161-0/+2
| | | |
* | | | Fixed Bug #70032 (make_http_soap_request calls ↵Xinchen Hui2015-07-091-1/+1
| | | | | | | | | | | | | | | | zend_hash_get_current_key_ex(,,,NULL))
* | | | Use ZSTR_ API to access zend_string elements (this is just renaming without ↵Dmitry Stogov2015-06-301-21/+21
| | | | | | | | | | | | | | | | semantick changes).
* | | | Merge branch 'PHP-5.6'Dmitry Stogov2015-03-031-9/+15
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * PHP-5.6: Added type checks Fixed bug #67741 (auto_prepend_file messes up __LINE__) Check variable type before its usage as IS_ARRAY. Fixed a bug that header value is not terminated by '\0' when accessed through getenv(). Conflicts: ext/soap/php_encoding.c ext/soap/php_http.c ext/soap/soap.c
| * \ \ \ Merge branch 'PHP-5.5' into PHP-5.6Dmitry Stogov2015-03-031-8/+15
| |\ \ \ \ | | |/ / / | |/| / / | | |/ / | | | | | | | | | | | | | | | | * PHP-5.5: Added type checks Fixed bug #67741 (auto_prepend_file messes up __LINE__) Check variable type before its usage as IS_ARRAY. Fixed a bug that header value is not terminated by '\0' when accessed through getenv().
| | * | Merge branch 'PHP-5.4' into PHP-5.5Dmitry Stogov2015-03-031-8/+15
| | |\ \ | | | |/ | | | | | | | | | | | | | | | | | | | | | | | | * PHP-5.4: Added type checks Conflicts: ext/soap/soap.c
| | | * Added type checksDmitry Stogov2015-03-031-8/+15
| | | |
| | | * Bump yearXinchen Hui2014-01-031-1/+1
| | | |
| | | * Merge branch 'pull-request/341'Stanislav Malyshev2013-06-101-1/+1
| | | | | | | | | | | | | | | | | | | | * pull-request/341: (23 commits) typofixes
| | | * Happy New YearXinchen Hui2013-01-011-1/+1
| | | |
| | * | Bump yearXinchen Hui2015-01-151-1/+1
| | | |
| | * | Bump yearXinchen Hui2014-01-031-1/+1
| | | |
| | * | typo fixesVeres Lajos2013-07-151-1/+1
| | | |
| * | | bump yearXinchen Hui2015-01-151-1/+1
| | | |
| * | | fix bug #67955Philip Hofstetter2014-09-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | this fixes a regression from 6c2a8068207a02b3d7ae7416a9967dad0a81e61f. smart_str_appendl is expecting the length as the length of the string, but key_length is the byte length of the key, including the 0 terminator. As such, the cookie name appeneded to the header would now also include the 0 terminator of the key name which then would be sent to the server.
* | | | Cleanup resource handling APIsXinchen Hui2015-02-021-2/+2
| | | |
* | | | bump yearXinchen Hui2015-01-151-1/+1
| | | |
* | | | trailing whitespace removalStanislav Malyshev2015-01-101-8/+8
| | | |
* | | | Drop duplicate arg from hash_get_current_key_exNikita Popov2014-12-261-3/+3
| | | |
* | | | first shot remove TSRMLS_* thingsAnatol Belski2014-12-131-38/+38
| | | |
* | | | Rename smart_str_append to smart_str_append_smart_strNikita Popov2014-09-211-1/+1
| | | | | | | | | | | | | | | | It's used only rarely and I'm running out of append names...
* | | | s/PHP 5/PHP 7/Johannes Schlüter2014-09-191-1/+1
| | | |
* | | | Fix SOAP warningsNikita Popov2014-09-051-2/+1
| | | |
* | | | Fix invalid zend_string free in soapNikita Popov2014-09-041-44/+37
| | | | | | | | | | | | | | | | By making get_http_headers() return the zend_string* directly.
* | | | master renames phase 3Anatol Belski2014-08-251-1/+1
| | | |
* | | | master renames phase 1Anatol Belski2014-08-251-61/+61
| | | |
* | | | fixes to %pd format usageAnatol Belski2014-08-241-1/+1
| | | |
View Lorry Controller Status