| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
| |
(cherry picked from commit 6689bedd1796380f882fdecc6dcf8da1ff885c2b)
|
|\
| |
| |
| |
| | |
* PHP-7.4:
Fix #73533: Invalid memory access in php_libxml_xmlCheckUTF8
|
| |
| |
| |
| |
| |
| |
| | |
A string passed to `php_libxml_xmlCheckUTF8()` may be longer than
1<<31-1 bytes, so we're better using a `size_t`.
Closes GH-6802.
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Properly initialize PS(mod) on RINIT
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
We need to do that in case a user handler has been set. However, we
can't do that in `php_rinit_session_globals()` since that function is
called by PHP function `session_destroy()` too, but in that case we
don't want to reset PS(mod).
Closes GH-6795.
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Fix #80889: amendment
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
`session_set_save_handler()` may be called with callables instead of an
object; we need to cater to that as well.
We also extract a set_user_save_handler_ini() function to avoid code
duplication.
Closes GH-6796.
|
|\ \
| |/ |
|
| | |
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Fix #80889: Cannot set save handler when save_handler is invalid
|
| |
| |
| |
| |
| |
| |
| |
| | |
There is no need to require a (valid) save_handler to be set, when a
user handler is supposed to be set. We just have to make sure, that
no user handler is already set in this case.
Closes GH-6788.
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Fix #80783: PDO ODBC truncates BLOB records at every 256th byte
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
It is not guaranteed, that the driver inserts only a single NUL byte at
the end of the buffer. Apparently, there is no way to find out the
actual data length in the buffer after calling `SQLGetData()`, so we
adjust after the next `SQLGetData()` call.
We also prevent PDO::ODBC_ATTR_ASSUME_UTF8 from fetching garbage, by
fetching all chunks with the same C type.
Closes GH-6716.
|
| |
| |
| |
| | |
On x86_64 part of structure may be passed in CPU registers.
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Fix locale switch back to C in pcre
|
| |
| |
| |
| |
| |
| | |
The compile context is shared between patterns, so we need to set
the character tables unconditionally in case we switched from
a non-C locale to the C locale.
|
| | |
|
| |
| |
| |
| |
| |
| | |
Add add skipif to test.
(cherry picked from commit aa58db723221ec891d4432621003bfa55dc15edf)
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
The function accepts a bool since PHP 8.0, so it should also return
a bool to keep things consistent.
Furthermore a null return from this functions is not possible.
|
| | |
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Fix #66783: UAF when appending DOMDocument to element
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
According to the DOM standard, elements may only contain element, text,
processing instruction and comment nodes[1]. It is also specified that
a HierarchyRequestError should be thrown if a document is to be
inserted[2]. We follow that standard, and prevent the use-after-free
this way.
[1] <https://dom.spec.whatwg.org/#node-trees>
[2] <https://dom.spec.whatwg.org/#mutation-algorithms>
Closes GH-6765.
|
| |
| |
| |
| | |
as C function argument)
|
| |
| |
| |
| |
| | |
We were not adding RC1/RCN if the MAY_BE_OBJECT came from a class
type and there was no other refcounted type in the union.
|
| | |
|
| | |
|
| | |
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Fix #80817: dba_popen() may cause segfault during RSHUTDOWN
|
| |
| |
| |
| | |
We need to close persistent streams with the proper flag.
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Fix bug #80866
|
| |
| |
| |
| | |
Closes GH-6774.
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Fix bug #80837
|
| |
| |
| |
| | |
The error needs to be reported on the statement, not the connection.
|
| |
| |
| |
| |
| |
| |
| | |
A few additional tests have been added on master that require
lower security level.
(cherry picked from commit c2a6395dcbab20549702e56006f7cd389cefebcd)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
It seems that f3efb9e3fb introduced a "typo" which may result
in the following confusing message:
checking for mmap() using MAP_ANON shared memory support... no=yes
Let's fix this.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Closes GH-6758.
|
| |
| |
| |
| | |
for static Thread Local Storage)
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Fix #51903: simplexml_load_file() doesn't use HTTP headers
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The `encoding` attribute of the XML declaration is optional; it is good
practice to use external encoding information where available if it is
missing. Thus, we check for `charset` info of `Content-Type` headers,
and see whether the encoding is supported.
We cater to trailing parameters and quoted-strings, but not to escaped
backslashes and quotes in quoted-strings, since no known character
encoding contains these anyway.
Co-authored-by: Michael Wallner <mike@php.net>
Closes GH-6747.
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Fix #80838: HTTP wrapper waits for HTTP 1 response after HTTP 101
|
| |
| |
| |
| |
| |
| | |
Don't wait for further responses after a HTTP 101 (Switching Protocols) response
Closes GH-6730.
|
| |
| |
| |
| |
| |
| | |
applied in addition.
Closes GH-6738.
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Print error code if CreateMutex() fails
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This issue came up recently in a bug report[1]; without the error code,
users can barely guess why the function failed.
[1] <https://bugs.php.net/80812>
Closes GH-6745.
|
| |
| |
| |
| | |
passed as argument 2 of memcpy(), which is declared to never be null)
|
| |
| |
| |
| |
| | |
`HAVE_METHOD_SUPPORTED` should have been defined after we updated to
libzip 1.7.1 months ago.
|
| | |
|
|\ \
| |/
| |
| |
| | |
* PHP-7.4:
Fix #78719: http wrapper silently ignores long Location headers
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
When opening HTTP streams, and reading the headers, we currently
discard header lines longer than `HTTP_HEADER_BLOCK_SIZE` (1024 bytes).
While this is not generally forbidden by RFC 7230, section 3.2.5, it
is not generally allowed either, since that may change the "message
framing or response semantics".
We thus fix this by allowing arbitrarily long header lines.
Closes GH-6720.
|