summaryrefslogtreecommitdiff
path: root/ext/standard/var_unserializer.c
Commit message (Expand)AuthorAgeFilesLines
* Use interned empty and "one char" strings.Dmitry Stogov2017-05-181-448/+428
* Make sure lengths and refs are unsigned in unserialize()Nikita Popov2017-03-231-194/+138
* Fixed bug #74300xKhorasan2017-03-231-19/+8
* Enable HT RC assertions with escape-hatchNikita Popov2017-01-231-9/+15
* Merge branch 'PHP-7.1'Nikita Popov2017-01-051-3/+3
|\
| * Add Z_EXTRA macroNikita Popov2017-01-051-3/+3
* | Merge branch 'PHP-7.1'Nikita Popov2017-01-051-501/+547
|\ \ | |/
| * Merge branch 'PHP-7.0' into PHP-7.1Nikita Popov2017-01-051-500/+546
| |\
| | * Merge branch 'PHP-5.6' into PHP-7.0Nikita Popov2017-01-051-500/+546
| | |\
| | | * Implement delayed __wakeupNikita Popov2017-01-051-509/+564
| | * | Update copyright headers to 2017Sammy Kaye Powers2017-01-041-1/+1
| * | | Update copyright headers to 2017Sammy Kaye Powers2017-01-041-1/+1
| * | | Merge branch 'PHP-7.0' into PHP-7.1Stanislav Malyshev2017-01-021-1/+1
| |\ \ \ | | |/ /
| | * | Use correct string release functionStanislav Malyshev2017-01-021-1/+1
| * | | Merge branch 'PHP-7.0' into PHP-7.1Stanislav Malyshev2017-01-021-2/+2
| |\ \ \ | | |/ /
| | * | Fix error reportingStanislav Malyshev2017-01-021-2/+2
* | | | Re-add var_unserializer.cStanislav Malyshev2017-01-031-0/+1432
* | | | Merge branch 'PHP-7.1'Stanislav Malyshev2017-01-021-1441/+0
|\ \ \ \ | |/ / /
| * | | Merge branch 'PHP-7.0' into PHP-7.1Stanislav Malyshev2017-01-021-506/+497
| |\ \ \ | | |/ /
| | * | Merge branch 'PHP-5.6' into PHP-7.0Stanislav Malyshev2017-01-021-506/+497
| | |\ \ | | | |/
| | | * Merge branch 'PHP-5.6.30' into PHP-5.6Stanislav Malyshev2017-01-021-503/+494
| | | |\
| | | | * Fix bug #73825 - Heap out of bounds read on unserialize in finish_nested_data()Stanislav Malyshev2016-12-301-33/+47
* | | | | Merge branch 'PHP-7.1'Nikita Popov2017-01-011-477/+503
|\ \ \ \ \ | |/ / / /
| * | | | Merge branch 'PHP-7.0' into PHP-7.1Nikita Popov2017-01-011-9/+11
| |\ \ \ \ | | |/ / /
| | * | | Merge branch 'PHP-5.6' into PHP-7.0Nikita Popov2017-01-011-480/+505
| | |\ \ \ | | | |/ /
| | | * | FIx bug #70213Nikita Popov2017-01-011-474/+499
| | | |/
| | | * Fix bug #73052 - Memory Corruption in During Deserialized-object DestructionStanislav Malyshev2016-09-121-30/+31
* | | | Merge branch 'DedupNANINF'Andrea Faulds2016-10-261-505/+482
|\ \ \ \ | |/ / / |/| | |
| * | | Deduplicate NAN/INF portability, move to ZendAndrea Faulds2016-03-201-35/+36
* | | | Followup for bug #72785Nikita Popov2016-09-061-482/+508
* | | | Fix bug #72785 - allowed_classes only applies to outermost unserialize()Stanislav Malyshev2016-09-051-46/+48
* | | | Merge branch 'PHP-7.0' into PHP-7.1Xinchen Hui2016-08-171-512/+524
|\ \ \ \ | | |/ / | |/| |
| * | | Bug #72663 - part 2Nikita Popov2016-08-171-4/+32
| * | | Bug #72663 - part 1Nikita Popov2016-08-171-5/+13
| * | | Merge branch 'PHP-5.6' into PHP-7.0Stanislav Malyshev2016-08-171-14/+15
| |\ \ \ | | | |/ | | |/|
| | * | Improve fix for #72663Stanislav Malyshev2016-08-161-31/+37
| | * | Update commentStanislav Malyshev2016-08-161-1/+1
| | * | Fix bug #72663 - destroy broken object when unserializingStanislav Malyshev2016-08-161-33/+37
* | | | Hide (un)serialize data from ABINikita Popov2016-08-151-482/+541
* | | | Added ZEND_ATTRIBUTE_FORMAT to some middind functions.Dmitry Stogov2016-06-211-1/+1
|/ / /
* | | Use zend_string_safe_allocXinchen Hui2016-04-271-1/+1
* | | Improved fix for #71940Xinchen Hui2016-04-071-17/+15
* | | Fixed bug #71940 (Unserialize crushes on restore object reference)Xinchen Hui2016-04-071-17/+19
| |/ |/|
* | Merge branch 'PHP-5.6' into PHP-7.0Xinchen Hui2016-03-171-16/+27
|\ \ | |/
| * Fixed bug #71840 (Unserialize accepts wrongly data)Xinchen Hui2016-03-171-22/+32
* | Eliminate usages of _PP macrosNikita Popov2016-03-031-17/+16
* | Fixed bug #71311: Use-after-free vulnerability in SPL(ArrayObject, unserialize)Stanislav Malyshev2016-01-171-27/+32
* | Merge branch 'PHP-5.6' into PHP-7.0Lior Kaplan2016-01-011-1/+1
|\ \ | |/
| * Happy new year (Update copyright to 2016)Lior Kaplan2016-01-011-1/+1
* | Also fixed 'r'Xinchen Hui2015-11-241-40/+52