summaryrefslogtreecommitdiff
path: root/ext
Commit message (Expand)AuthorAgeFilesLines
* Fix bug #77418 - Heap overflow in utf32be_mbc_to_codeStanislav Malyshev2019-01-065-2/+21
* Fix more issues with encodilng lengthStanislav Malyshev2019-01-066-14/+38
* Fix #77270: imagecolormatch Out Of Bounds Write on HeapChristoph M. Becker2019-01-062-2/+20
* Fix bug #77380 (Global out of bounds read in xmlrpc base64 code)Stanislav Malyshev2019-01-062-2/+19
* Fix bug #77371 (heap buffer overflow in mb regex functions - compile_string_n...Stanislav Malyshev2019-01-062-0/+11
* Fix bug #77370 - check that we do not read past buffer end when parsing multi...Stanislav Malyshev2019-01-062-0/+22
* Fix #77269: Potential unsigned underflow in gdImageScaleChristoph M. Becker2019-01-062-9/+30
* Fix bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext)Stanislav Malyshev2019-01-062-1/+15
* Fix bug #77242 (heap out of bounds read in xmlrpc_decode())Stanislav Malyshev2019-01-062-0/+13
* Regenerate certs for openssl testsAlexander Kurilo2019-01-025-44/+91
* Fix null pointer deref in qprint-encode filter (bug #77231)Stanislav Malyshev2018-12-032-1/+12
* Fix bug #77143 - add more checks to buffer readsStanislav Malyshev2018-12-034-10/+40
* Fix #77020: null pointer dereference in imap_mailStanislav Malyshev2018-12-032-1/+15
* Fix TSRM signature - php_stream_stat macro has it's own TSRMStanislav Malyshev2018-12-021-1/+1
* Regenerate certificates for openssl testsAlexander Kurilo2018-12-024-73/+58
* Improve test for bug77022Stanislav Malyshev2018-12-021-1/+5
* Fix bug #77022 - use file mode or umask for new filesStanislav Malyshev2018-12-013-2/+46
* Add DISPLAY_INI_ENTRIES for imapStanislav Malyshev2018-11-281-0/+2
* Disable rsh/ssh functionality in imap by default (bug #77153)Stanislav Malyshev2018-11-203-0/+42
* Fixed bug #76459 windows linkinfo lacks openbasedir checkAnatol Belski2018-07-161-1/+12
* Fix bug #76557: heap-buffer-overflow (READ of size 48) while reading exif dataStanislav Malyshev2018-07-163-1/+83
* Fix bug #76423 - Int Overflow lead to Heap OverFlow in exif_thumbnail_extract...Stanislav Malyshev2018-07-163-1/+23
* Fix test portabilityAnatol Belski2018-04-241-2/+4
* Fix tsrm_lsStanislav Malyshev2018-04-231-1/+1
* Merge remote-tracking branch 'security/bug76249' into PHP-5.6Stanislav Malyshev2018-04-232-0/+21
|\
| * Fix testStanislav Malyshev2018-04-221-2/+4
| * Fix bug #76249 - fail on invalid sequencesStanislav Malyshev2018-04-222-0/+19
* | Merge remote-tracking branch 'security/bug76248' into PHP-5.6Stanislav Malyshev2018-04-232-1/+45
|\ \
| * | Fix bug #76248 - Malicious LDAP-Server Response causes CrashStanislav Malyshev2018-04-222-1/+45
| |/
| * Fix bug #75981: prevent reading beyond buffer startStanislav Malyshev2018-02-262-2/+34
* | Fix #76129 - remove more potential unfiltered outputs for pharStanislav Malyshev2018-04-2313-16/+14
* | Fix #76130: Heap Buffer Overflow (READ: 1786) in exif_iif_add_valueChristoph M. Becker2018-04-224-1/+21
* | Fix bug #75981: prevent reading beyond buffer startStanislav Malyshev2018-02-202-2/+34
|/
* Fixed bug #75571: Potential infinite loop in gdImageCreateFromGifCtxChristoph M. Becker2018-01-013-5/+20
* Fix bug #74782: remove file name from output to avoid XSSStanislav Malyshev2018-01-0114-45/+45
* Backport and apply upstream patch for CVE-2017-14107Anatol Belski2017-10-271-1/+6
* Parametrize the expected value to avoid platform false positivesAnatol Belski2017-10-241-1/+1
* Fixed bug #72535 arcfour encryption stream filter crashes phpAnatol Belski2017-10-242-1/+24
* Fixed bug #75055 Out-Of-Bounds Read in timelib_meridian()Anatol Belski2017-10-245-716/+2336
* Apply upstream patch for CVE-2016-1283Anatol Belski2017-10-242-1/+16
* Patch from the upstream gitRemi Collet2017-07-051-1/+3
* Patch from the upstream gitRemi Collet2017-07-051-1/+8
* Patch from the upstream gitRemi Collet2017-07-051-0/+2
* Patch from the upstream gitRemi Collet2017-07-051-5/+0
* Patch from the upstream gitRemi Collet2017-07-051-2/+6
* Improve fix for #74145Stanislav Malyshev2017-07-041-5/+10
* Fix testsStanislav Malyshev2017-07-042-4/+4
* Fix bug #74087Stanislav Malyshev2017-07-041-1/+1
* Fixed parsing of strange formats with mixed month/day and time stringsDerick Rethans2017-07-042-6370/+5466
* Fix bug #74145 - wddx parsing empty boolean tag leads to SIGSEGVStanislav Malyshev2017-07-043-9/+31