summaryrefslogtreecommitdiff
path: root/ext
Commit message (Expand)AuthorAgeFilesLines
* Fixed testphp-5.5.30PHP-5.5.30Julien Pauli2015-09-301-1/+1
* Better fix for bug #70433Stanislav Malyshev2015-09-283-3/+5
* fix memory leakStanislav Malyshev2015-09-281-0/+1
* FIx bug #70433 - Uninitialized pointer in phar_make_dirstream when zip entry ...Stanislav Malyshev2015-09-283-1/+24
* Fix bug #69720: Null pointer dereference in phar_get_fp_offset()Stanislav Malyshev2015-09-283-1/+45
* Merge branch 'PHP-5.4' into PHP-5.5Julien Pauli2015-09-021-0/+2
|\
| * Merge branch 'PHP-5.6'PHP-5.4Matteo Beccati2015-09-021-0/+2
* | Merge branch 'PHP-5.5' into PHP-5.5.29Stanislav Malyshev2015-09-013-3/+3
|\ \
| * \ Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-09-013-3/+3
| |\ \ | | |/
| | * fix unit testsStanislav Malyshev2015-09-013-3/+3
* | | Merge branch 'PHP-5.5' into PHP-5.5.29Stanislav Malyshev2015-09-013-1/+72
|\ \ \ | |/ /
| * | Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-09-0124-834/+977
| |\ \ | | |/
| | * Improve fix for #70172Stanislav Malyshev2015-09-013-1/+72
* | | Merge branch 'PHP-5.4.45' into PHP-5.5.29Stanislav Malyshev2015-09-012-5/+23
|\ \ \ | | |/ | |/|
| * | Fix bug #70312 - HAVAL gives wrong hashes in specific casesStanislav Malyshev2015-09-012-5/+23
* | | Merge branch 'PHP-5.4.45' into PHP-5.5.29Stanislav Malyshev2015-09-011-1/+1
|\ \ \ | |/ /
| * | fix testStanislav Malyshev2015-09-011-1/+1
* | | Merge branch 'PHP-5.4.45' into PHP-5.5.29Stanislav Malyshev2015-09-0116-267/+587
|\ \ \ | |/ /
| * | add testStanislav Malyshev2015-09-011-0/+50
| * | Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoubly...Stanislav Malyshev2015-09-013-1/+56
| * | Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObject...Stanislav Malyshev2015-09-012-0/+52
| * | Fix bug #70172 - Use After Free Vulnerability in unserialize()Stanislav Malyshev2015-08-314-42/+121
| * | Fix bug #70388 - SOAP serialize_function_call() type confusionStanislav Malyshev2015-08-312-44/+69
| * | Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when c...Stanislav Malyshev2015-08-302-39/+72
| * | Improve fix for #70385Stanislav Malyshev2015-08-291-2/+2
| * | Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)Stanislav Malyshev2015-08-282-76/+100
| * | Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte val...Stanislav Malyshev2015-08-281-104/+104
* | | More fixes for bug #70219Stanislav Malyshev2015-08-282-2/+51
* | | Merge branch 'PHP-5.4.45' into PHP-5.5.29Stanislav Malyshev2015-08-257-564/+298
|\ \ \ | |/ / | | / | |/ |/|
| * Fix bug #70219 (Use after free vulnerability in session deserializer)Stanislav Malyshev2015-08-236-498/+228
| * Fix for bug #69782Stanislav Malyshev2015-08-161-69/+73
* | Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-08-0418-143/+349
|\ \ | |/
| * Fix bug #70019 - limit extracted files to given directoryStanislav Malyshev2015-08-043-4/+68
| * Do not do convert_to_* on unserialize, it messes up referencesStanislav Malyshev2015-08-043-79/+85
| * Fix #69793 - limit what we accept when unserializing exceptionStanislav Malyshev2015-08-012-0/+18
| * Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoubl...Stanislav Malyshev2015-08-012-12/+43
| * Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArra...Stanislav Malyshev2015-08-012-0/+32
| * ignore signatures for packages tooStanislav Malyshev2015-08-011-3/+20
| * Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObject...Stanislav Malyshev2015-08-012-33/+54
| * Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytesStanislav Malyshev2015-07-261-4/+2
| * Improved fix for Bug #69441Stanislav Malyshev2015-07-261-5/+8
| * Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items)Stanislav Malyshev2015-07-262-43/+56
| * Fix bug #70081: check types for SOAP variablesStanislav Malyshev2015-07-261-10/+13
* | Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-07-071-1/+1
|\ \ | |/
| * Better fix for bug #69958Stanislav Malyshev2015-07-072-9/+15
| * Fix bug #69669 (mysqlnd is vulnerable to BACKRONYM)Stanislav Malyshev2015-07-071-25/+40
| * Fix bug #69923 - Buffer overflow and stack smashing error in phar_fix_filepathStanislav Malyshev2015-07-071-2/+8
| * Fix bug #69958 - Segfault in Phar::convertToData on invalid fileStanislav Malyshev2015-07-073-34/+50
* | Merge branch 'PHP-5.5' of git.php.net:php-src into PHP-5.5Stanislav Malyshev2015-07-071-1/+1
|\ \
| * \ Merge branch 'PHP-5.4' into PHP-5.5Ferenc Kovacs2015-07-071-1/+1
| |\ \ | | |/