summaryrefslogtreecommitdiff
path: root/ext
Commit message (Expand)AuthorAgeFilesLines
* fix test fileStanislav Malyshev2016-03-011-0/+0
* Fix bug #71498: Out-of-Bound Read in phar_parse_zipfile()Stanislav Malyshev2016-02-214-3/+21
* Fixed bug #71587 - Use-After-Free / Double-Free in WDDX DeserializeStanislav Malyshev2016-02-142-4/+58
* add error check to sysconf callAnatol Belski2016-02-021-0/+11
* fix testsStanislav Malyshev2016-02-014-52/+52
* Merge branch 'PHP-5.5' into PHP-5.5.32Stanislav Malyshev2016-02-0150-1511/+3141
|\
| * Upgrade bundled PCRE to 8.38Stanislav Malyshev2016-01-3150-1511/+3141
* | Fixed bug #71488: Stack overflow when decompressing tar archivesStanislav Malyshev2016-01-313-6/+32
* | add missing headers for SIZE_MAXAnatol Belski2016-01-281-0/+9
* | backport the escapeshell* functions hardening branchAnatol Belski2016-01-283-5/+73
* | add testsAnatol Belski2016-01-284-0/+44
* | Fix bug #71459 - Integer overflow in iptcembed()Stanislav Malyshev2016-01-261-1/+6
* | Fixed bug #71323 - Output of stream_get_meta_data can be falsified by its inputStanislav Malyshev2016-01-1614-213/+244
* | Fix bug #71391: NULL Pointer Dereference in phar_tar_setupmetadata()Stanislav Malyshev2016-01-163-0/+21
* | Fix bug #71335: Type Confusion in WDDX Packet DeserializationStanislav Malyshev2016-01-132-1/+35
* | Merge branch 'bug71354' into PHP-5.5.32Stanislav Malyshev2016-01-133-0/+14
|\ \ | |/ |/|
| * Fix bug #71354 - remove UMR when size is 0Stanislav Malyshev2016-01-133-0/+14
* | fix the fix for bug #70976 (imagerotate)Remi Collet2016-01-122-4/+4
|/
* Improve fix for bug #70976Stanislav Malyshev2015-12-281-1/+1
* Fixed bug #70661 (Use After Free Vulnerability in WDDX Packet Deserialization)Stanislav Malyshev2015-12-282-1/+70
* Fixed bug #70741: Session WDDX Packet Deserialization Type Confusion Vulnerab...Stanislav Malyshev2015-12-282-68/+97
* Fixed #70728Julien Pauli2015-12-222-2/+41
* Fix bug #70976: fix boundary check on gdImageRotateInterpolatedStanislav Malyshev2015-12-072-1/+14
* Merge branch 'pr-1483' into PHP-5.5Ferenc Kovacs2015-10-192-5/+5
|\
| * fixup, both catched by nikicFerenc Kovacs2015-08-241-1/+1
| * use another character device in this test as /dev/console seems that it is di...Ferenc Kovacs2015-08-241-2/+2
| * the de_DE(iso-8859-1) locale is not available on ubuntu by default, but there...Ferenc Kovacs2015-08-241-2/+2
* | Fixed testJulien Pauli2015-09-301-1/+1
* | Better fix for bug #70433Stanislav Malyshev2015-09-283-3/+5
* | fix memory leakStanislav Malyshev2015-09-281-0/+1
* | FIx bug #70433 - Uninitialized pointer in phar_make_dirstream when zip entry ...Stanislav Malyshev2015-09-283-1/+24
* | Fix bug #69720: Null pointer dereference in phar_get_fp_offset()Stanislav Malyshev2015-09-283-1/+45
* | Merge branch 'PHP-5.4' into PHP-5.5Julien Pauli2015-09-021-0/+2
|\ \
| * | Merge branch 'PHP-5.6'PHP-5.4Matteo Beccati2015-09-021-0/+2
* | | Merge branch 'PHP-5.5' into PHP-5.5.29Stanislav Malyshev2015-09-013-3/+3
|\ \ \
| * \ \ Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-09-013-3/+3
| |\ \ \ | | |/ /
| | * | fix unit testsStanislav Malyshev2015-09-013-3/+3
* | | | Merge branch 'PHP-5.5' into PHP-5.5.29Stanislav Malyshev2015-09-013-1/+72
|\ \ \ \ | |/ / /
| * | | Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-09-0124-834/+977
| |\ \ \ | | |/ / | | | / | | |/ | |/|
| | * Improve fix for #70172Stanislav Malyshev2015-09-013-1/+72
* | | Merge branch 'PHP-5.4.45' into PHP-5.5.29Stanislav Malyshev2015-09-012-5/+23
|\ \ \ | | |/ | |/|
| * | Fix bug #70312 - HAVAL gives wrong hashes in specific casesStanislav Malyshev2015-09-012-5/+23
* | | Merge branch 'PHP-5.4.45' into PHP-5.5.29Stanislav Malyshev2015-09-011-1/+1
|\ \ \ | |/ /
| * | fix testStanislav Malyshev2015-09-011-1/+1
* | | Merge branch 'PHP-5.4.45' into PHP-5.5.29Stanislav Malyshev2015-09-0116-267/+587
|\ \ \ | |/ /
| * | add testStanislav Malyshev2015-09-011-0/+50
| * | Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoubly...Stanislav Malyshev2015-09-013-1/+56
| * | Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObject...Stanislav Malyshev2015-09-012-0/+52
| * | Fix bug #70172 - Use After Free Vulnerability in unserialize()Stanislav Malyshev2015-08-314-42/+121
| * | Fix bug #70388 - SOAP serialize_function_call() type confusionStanislav Malyshev2015-08-312-44/+69