Stanislav Malyshev
184d4e9fde
prep for 5.4.41
2015-05-12 12:38:38 -07:00
Stanislav Malyshev
9c0813fd48
Add test for bug #69522
2015-05-11 01:10:35 -07:00
Stanislav Malyshev
634aa0a2db
Update tests
2015-05-11 00:12:39 -07:00
Stanislav Malyshev
ba1d9cc4b7
Fix bug #69522 - do not allow int overflow
2015-05-10 23:06:08 -07:00
Stanislav Malyshev
e2bbf0a2df
Forgot test file
2015-05-10 02:24:29 -07:00
Stanislav Malyshev
c591f022f8
Fix bug #69403 and other int overflows
2015-05-10 02:20:08 -07:00
Stanislav Malyshev
be9b2a95ad
Fixed bug #69418 - more s->p fixes for filenames
2015-05-10 02:09:38 -07:00
Stanislav Malyshev
4605d536d2
Fixed bug #69364 - use smart_str to assemble strings
2015-05-09 23:04:25 -07:00
Stanislav Malyshev
c27f012b7a
Fix bug #69453 - don't try to cut empty string
2015-04-29 22:51:43 -07:00
Stanislav Malyshev
ac28329354
Fix bug #69545 - avoid overflow when reading list
2015-04-29 22:50:18 -07:00
Stanislav Malyshev
95fa727992
Upgrade to PCRE 8.37 due to various bugfixes
2015-04-29 22:27:07 -07:00
Anatol Belski
9c5c3ff022
fix VC9 build with PCRE
2015-04-28 13:15:39 +02:00
Stanislav Malyshev
23917b451b
Upgrade PCRE to 8.36, it fixes some crashes
...
We probably will need to go to 8.37 once it is released.
2015-04-27 23:16:54 -07:00
Hannes Magnusson
983f155e1c
phpweb now publishes SHA256s -- and please don't cc php-announce@ - make it seperate mail
2015-04-17 10:05:32 -07:00
Xinchen Hui
0d562a8f44
Fixed res leak
2015-04-14 21:15:50 -07:00
Dmitry Stogov
cee9722028
Fixed recently introduced memory leak
2015-04-14 11:08:38 -07:00
Stanislav Malyshev
9af582bbe0
fix non-standard C
2015-04-14 00:46:47 -07:00
Stanislav Malyshev
e10272c628
5.4.41 next
2015-04-14 00:30:58 -07:00
Stanislav Malyshev
d3aeb8a204
Merge branch 'PHP-5.4.40' into PHP-5.4
...
* PHP-5.4.40:
update NEWS
Fix bug #69441 (Buffer Overflow when parsing tar/zip/phar in phar_set_inode)
fix memory leak & add test
Fix tests
fix CVE num
Fix bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability)
Fix test
Additional fix for bug #69324
More fixes for bug #69152
Fixed bug #69353 (Missing null byte checks for paths in various PHP extensions)
Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar)
Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
2015-04-14 00:26:53 -07:00
Stanislav Malyshev
ae46d1ce19
fix CVE num
2015-04-14 00:25:55 -07:00
Stanislav Malyshev
d734e75599
update NEWS
2015-04-14 00:22:09 -07:00
Stanislav Malyshev
aa2eca2e48
Merge branch 'PHP-5.4' into PHP-5.4.40
...
* PHP-5.4:
fix CVE num
2015-04-14 00:08:57 -07:00
Stanislav Malyshev
f59b67ae50
Fix bug #69441 (Buffer Overflow when parsing tar/zip/phar in phar_set_inode)
2015-04-14 00:03:50 -07:00
Remi Collet
ff70b40dc9
fix type in fix for #69085
2015-04-13 14:41:39 +02:00
Stanislav Malyshev
45facd15fb
fix memory leak & add test
2015-04-12 22:38:34 -07:00
Stanislav Malyshev
a643ccfb90
Fix tests
2015-04-12 20:55:35 -07:00
Stanislav Malyshev
9bed19a1e0
fix CVE num
2015-04-12 20:47:27 -07:00
Stanislav Malyshev
d82d68742c
Fix bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability)
2015-04-12 01:30:33 -07:00
Stanislav Malyshev
1defbb25ed
Fix test
2015-04-12 00:56:02 -07:00
Stanislav Malyshev
12d3bdee3d
Additional fix for bug #69324
...
Not so happy about duplication but needed due to bug #69429
2015-04-11 16:53:22 -07:00
Stanislav Malyshev
a894a8155f
More fixes for bug #69152
2015-04-11 16:53:22 -07:00
Stanislav Malyshev
4435b9142f
Fixed bug #69353 (Missing null byte checks for paths in various PHP extensions)
2015-04-11 16:53:22 -07:00
Stanislav Malyshev
9faaee66fa
Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar)
2015-04-11 16:53:21 -07:00
Stanislav Malyshev
0ea75af9be
Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
2015-04-11 16:53:21 -07:00
Stanislav Malyshev
809610f5ea
Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
2015-04-11 16:53:21 -07:00
Stanislav Malyshev
f938112c49
Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
2015-04-11 16:53:21 -07:00
Xinchen Hui
920a0afbf8
Fixed bug #68901 (use after free)
2015-04-11 16:28:07 -07:00
Xinchen Hui
9a404df382
Fixed bug #68740 (NULL Pointer Dereference)
...
(cherry picked from commit 124fb22a13 )
2015-04-05 22:48:10 -07:00
Stanislav Malyshev
5ae20c6247
Fix bug #66550 (SQLite prepared statement use-after-free)
2015-04-05 22:36:26 -07:00
Remi Collet
bd31cb7563
Better fix for #68601 for perf
...
https://bitbucket.org/libgd/gd-libgd/commits/81e9a993f2893d651d225646378e3fd1b7465467
2015-04-05 17:36:47 -07:00
Remi Collet
afbf725e73
Fix bug #68601 buffer read overflow in gd_gif_in.c
2015-04-05 17:33:52 -07:00
Stanislav Malyshev
caecd88237
Revert "Merge branch 'PHP-5.4' of https://git.php.net/repository/php-src into PHP-5.4"
...
This reverts commit fe0ca2745f , reversing
changes made to 968fbc6acf .
2015-04-01 23:43:33 -07:00
Dmitry Stogov
75f40ae1f3
Fixed bug #69293
2015-03-27 18:40:58 +03:00
Xinchen Hui
fe0ca2745f
Merge branch 'PHP-5.4' of https://git.php.net/repository/php-src into PHP-5.4
2015-03-25 13:05:08 +08:00
Stanislav Malyshev
968fbc6acf
Bacport fix bug #68741 - Null pointer dereference
2015-03-22 18:30:05 -07:00
Stanislav Malyshev
fb83c76dee
Check that the type is correct
2015-03-22 18:17:47 -07:00
Stanislav Malyshev
95b9c34f02
add CVEs
2015-03-19 22:54:48 -07:00
Dmitry Stogov
51856a76f8
Fixed bug #69152
2015-03-19 11:36:01 +03:00
Stanislav Malyshev
4c3b73b6df
5.4.40 next
2015-03-17 22:37:16 -07:00
Stanislav Malyshev
ef8fc4b53d
Fix bug #69253 - ZIP Integer Overflow leads to writing past heap boundary
2015-03-17 21:59:56 -07:00
Stanislav Malyshev
fb04dcf6db
Fix bug #69248 - heap overflow vulnerability in regcomp.c
...
Merged from https://github.com/garyhouston/regex/commit/70bc2965604b6b8aaf260049e64c708dddf85334
2015-03-17 17:04:57 -07:00
Stanislav Malyshev
8b14d3052f
add test for bug #68976
2015-03-17 17:03:46 -07:00
Stanislav Malyshev
646572d6d3
Fixed bug #68976 - Use After Free Vulnerability in unserialize()
2015-03-17 13:20:22 -07:00
Stanislav Malyshev
bfb669891e
Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration options)
2015-03-17 13:05:43 -07:00
Stanislav Malyshev
9ba4db5e5d
fix tests
2015-03-17 12:55:35 -07:00
Stanislav Malyshev
1291d6bbee
Fix bug #69207 - move_uploaded_file allows nulls in path
2015-03-17 12:47:58 -07:00
Xinchen Hui
ef2db26c60
Merge branch 'arginfo' of https://github.com/realityking/php-src into PHP-5.4
2015-03-08 22:53:19 +08:00
Dmitry Stogov
c8eaca013a
Added type checks
2015-03-03 10:43:48 +03:00
Dmitry Stogov
0c136a2abd
Added type checks
2015-03-03 09:44:46 +03:00
Dmitry Stogov
d5248f67b5
Check variable type before its usage as IS_ARRAY.
2015-03-02 12:27:36 +03:00
George Wang
8584cc010a
Fixed a bug that header value is not terminated by '\0' when accessed through getenv().
2015-02-25 10:48:19 -05:00
Ferenc Kovacs
c17a17e44b
fix typo in bug#
2015-02-18 19:47:07 +01:00
Remi Collet
c6a26cb39d
add CVE
2015-02-18 06:44:41 +01:00
Stanislav Malyshev
24f8a68d0a
5.4.39 next
2015-02-17 07:34:00 +01:00
Stanislav Malyshev
bdfe457a2c
Port for for bug #68552
2015-02-17 06:53:02 +01:00
Stanislav Malyshev
7b18981830
Fix bug #68942 (Use after free vulnerability in unserialize() with DateTimeZone)
...
Conflicts:
ext/date/php_date.c
2015-02-17 06:43:51 +01:00
Felipe Pena
82d347a477
- BFN
2015-02-17 01:14:05 -02:00
Felipe Pena
8f9ab04d93
- Fixed bug #67827 (broken detection of system crypt sha256/sha512 support)
2015-02-17 00:23:47 -02:00
Felipe Pena
e08bef442c
- Fixed bug #67427 (SoapServer cannot handle large messages) patch by: brandt at docoloc dot de
2015-02-16 13:07:26 -02:00
Yasuo Ohgaki
5b6269a253
Update NEWS
2015-02-14 05:34:57 +09:00
Yasuo Ohgaki
a8722f5330
Add NULL byte protection to exec, system and passthru
2015-02-14 05:25:04 +09:00
George Wang
5e3f0f5671
Fixed #68790 (Missing return)
2015-02-07 12:16:54 -05:00
Stanislav Malyshev
f001c63073
Update header handling to RFC 7230
2015-02-05 20:08:12 -08:00
Stanislav Malyshev
7efbd70b03
fix sizeof size
2015-02-01 12:40:38 -08:00
Stanislav Malyshev
94d6cb4a78
fix TSRM
2015-01-31 23:34:14 -08:00
Stanislav Malyshev
b30a6d6018
Use better constant since MAXHOSTNAMELEN may mean shorter name
2015-01-31 21:46:56 -08:00
Stanislav Malyshev
2cdbd3537f
use right sizeof for memset
2015-01-31 21:30:58 -08:00
Stanislav Malyshev
0f9c708229
Add mitigation for CVE-2015-0235 (bug #68925 )
2015-01-31 19:08:13 -08:00
Ferenc Kovacs
61ad5e24ea
fix some factual errors in the process
2015-01-22 21:27:38 +01:00
Stanislav Malyshev
b3b155ffe2
format
2015-01-20 11:57:17 -08:00
Stanislav Malyshev
547f62ed2a
add CVE
2015-01-20 11:54:45 -08:00
Stanislav Malyshev
ef4896d956
add protection against nulls
2015-01-20 11:46:10 -08:00
Stanislav Malyshev
8825311ce1
5.4.38 next
2015-01-20 10:38:33 -08:00
Stanislav Malyshev
e63f7b47e1
Merge branch 'bug68710' into PHP-5.4
...
* bug68710:
Fix for bug #68710 (Use After Free Vulnerability in PHP's unserialize())
2015-01-20 01:02:26 -08:00
Stanislav Malyshev
fc6aa939f5
Merge branch 'bug68799' into PHP-5.4
...
* bug68799:
Fix bug #68799 : Free called on unitialized pointer
2015-01-20 01:00:11 -08:00
Daniel Lowrey
0a76610459
Update NEWS
2015-01-14 18:03:27 +01:00
Daniel Lowrey
e2fe8e164f
Fixed bug #55618 (use case-insensitive cert name matching)
2015-01-14 18:02:50 +01:00
Stanislav Malyshev
2fc178cf44
Fix bug #68799 : Free called on unitialized pointer
2015-01-11 00:51:05 -08:00
Anatol Belski
ebb98e7aeb
updated libmagic.patch in 5.4
2015-01-04 17:04:13 +01:00
Anatol Belski
ede59c8feb
Fixed bug #68735 fileinfo out-of-bounds memory access
2015-01-04 14:20:21 +01:00
Remi Collet
919abf0cb1
removed dead code
2015-01-04 09:40:19 +01:00
Stanislav Malyshev
b585a3aed7
Fix for bug #68710 (Use After Free Vulnerability in PHP's unserialize())
2015-01-01 16:19:05 -08:00
Stanislav Malyshev
f9ad308669
FIx bug #68618 (out of bounds read crashes php-cgi)
2014-12-30 01:23:05 -08:00
Ferenc Kovacs
cd387b4575
add missing NEWS entry
2014-12-17 02:10:36 +01:00
Stanislav Malyshev
8fe4cc6d28
5.4.37
2014-12-16 11:44:41 -08:00
Stanislav Malyshev
53f129a44d
add CVE
2014-12-16 10:16:31 -08:00
Stanislav Malyshev
b75867fff0
add missing test file
2014-12-16 10:15:17 -08:00
Stanislav Malyshev
630f9c33c2
Fix bug #68594 - Use after free vulnerability in unserialize()
2014-12-16 10:15:17 -08:00
Andrea Faulds
034e6decb3
Fix undefined behaviour in strnatcmp
2014-12-13 22:27:10 +00:00
Stanislav Malyshev
97df260b27
update NEWS
2014-12-11 10:41:17 -08:00
Anatol Belski
0323f66fa2
move the test to the right place
2014-12-11 10:39:47 -08:00
Anatol Belski
13f1c276ab
Fixed bug #68545 NULL pointer dereference in unserialize.c
2014-12-11 10:39:37 -08:00
Dmitry Stogov
dd791cd717
Fixed possible read after end of buffer and use after free.
2014-12-08 12:18:27 +03:00
Chris Christoff
0e985d3726
Revert unintentional docblock change
...
Revert unintentional docblock change
It looks like commit dd8e59da8f
introduced an unintended docbloc change. I have reverted this
change in this commit.
2014-12-05 13:57:03 -08:00
Ferenc Kovacs
b28c3eb47e
make sure that we don't truncate the stack trace and cause false test failures when the test is executed in a directory with long path
2014-12-02 19:17:58 +01:00
Stanislav Malyshev
84be568366
update news
2014-11-30 21:37:39 -08:00
Leigh
301b7f990a
Apply error-code-salt fix to Windows too
...
Conflicts:
ext/standard/crypt.c
2014-11-30 21:07:31 -08:00
Leigh
7e870c596d
Bug fixes in light of failing bcrypt tests
...
Conflicts:
ext/standard/crypt.c
2014-11-30 21:06:39 -08:00
Leigh
2d9d10fbbf
Add tests from 1.3. Add missing tests.
...
3 of the missing tests fail. // TODO
2014-11-30 21:05:40 -08:00
Leigh
29f51e1ca9
Upgrade crypt_blowfish to version 1.3
2014-11-30 21:05:32 -08:00
Stanislav Malyshev
7dbc5e5c69
update for LiteSpeed
2014-11-23 18:05:26 -08:00
Stanislav Malyshev
96cde1841a
Revert "made lsapi_main.c compatible with PHP7/phpng ."
...
This reverts commit 9fb816f45a .
Not a security-related fix.
2014-11-22 00:38:04 -08:00
George Wang
9fb816f45a
made lsapi_main.c compatible with PHP7/phpng .
2014-11-20 16:49:01 -05:00
Stanislav Malyshev
98b22864ff
5.4.36-dev
2014-11-11 16:31:38 -08:00
Matteo Beccati
2323e95df9
Fixed bug #66584 Segmentation fault on statement deallocation
2014-11-11 16:25:31 -08:00
Ferenc Kovacs
db5ad4c51f
update NEWS
2014-11-12 00:18:13 +01:00
Dmitry Stogov
9dfa843a38
Partial fix for bug #68365 (zend_mm_heap corrupted after memory overflow in zend_hash_copy)
2014-11-07 09:46:49 +03:00
Stanislav Malyshev
0ddcf2a919
update NEWS
2014-11-03 11:43:15 -08:00
Remi Collet
7740edae36
Fix bug #63595 GMP memory management conflicts with other libraries using GMP
...
Drop use of php memory allocators as this raise various conflicts
with other extensions and libraries which use libgmp.
No other solution found.
We cannot for ensure correct use of allocator with shared lib.
Some memory can allocated before php init
Some memory can be freed after php shutdown
Known broken run cases
- php + curl + gnutls + gmp
- mod_gnutls + mod_php + gnutls + gmp
- php + freetds + gnutls + gmp
- php + odbc + freetds + gnutls + gmp
- php + php-mapi (zarafa) + gnutls + gmp
2014-11-03 11:42:15 -08:00
Stanislav Malyshev
c351b47ce8
Initialize the offset table - PCRE may sometimes miss offsets
2014-11-03 11:31:02 -08:00
George Wang
1a2ec3fc60
set default response code to 200
2014-11-03 11:42:01 -05:00
Stanislav Malyshev
4d54c4bdf0
fix NEWS & version
2014-10-22 13:16:29 -07:00
Remi Collet
de4fff0fb3
NEWS
2014-10-22 15:39:49 +02:00
Remi Collet
1803228597
Fix bug #68283 : fileinfo: out-of-bounds read in elf note headers
...
Upstream commit
https://github.com/file/file/commit/39c7ac1106be844a5296d3eb5971946cc09ffda0
CVE -2014-3710
2014-10-22 15:37:04 +02:00
Stanislav Malyshev
287c91c1f0
Fix bug #68113 (Heap corruption in exif_thumbnail())
2014-10-13 23:17:45 -07:00
Stanislav Malyshev
ab0939e5e5
Fix bug #68089 - do not accept options with embedded \0
...
Conflicts:
ext/curl/interface.c
2014-10-13 23:16:06 -07:00
Stanislav Malyshev
56754a7f9e
Fixed bug #68044 : Integer overflow in unserialize() (32-bits only)
2014-10-13 23:14:25 -07:00
Stanislav Malyshev
88412772d2
Fix bug #68027 - fix date parsing in XMLRPC lib
2014-10-13 23:12:11 -07:00
Ard Biesheuvel
82b07b62c0
update NEWS
...
Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org >
2014-10-10 11:40:07 +02:00
George Wang
26ff3a4c1e
Fixed a bug that causes crash when environment variable is access while parsing php.ini
2014-10-03 16:41:32 -04:00
Sara Golemon
4e7b31a0db
Add hash to EXTENSIONS file
2014-10-02 18:54:46 -07:00
Matthew Daley
fcbe20d357
Set an LDAP error code when failing ldap_bind due to null bytes
...
Some applications check a LDAP link's error code after seeing ldap_bind
fail due to a null byte bind attempt and hence incorrectly receive the
last set error code.
Fix by setting an LDAP error code before returning in this case.
2014-09-28 12:23:52 -07:00
Johannes Schlüter
2711948d14
This test should pass
2014-09-27 02:17:26 +02:00
Derick Rethans
16e2d954fc
- Updated to version 2014.8 (2014h)
2014-09-26 16:26:59 +01:00
Stanislav Malyshev
28ed0119ac
update NEWS
2014-09-26 00:55:49 -07:00
Stanislav Malyshev
408b172017
Revert xp_ssl.c to the state of 5.4.32 due to regressions
2014-09-26 00:44:24 -07:00
Ard Biesheuvel
e64da8c20d
Fixed bug #66242 (don't assume char is signed)
...
This fixes a bug in libmagic where a cast to 'char' is assumed to result
in sign extension to occur. However, unqualified 'char' is unsigned on
architectures such as ARM, so the cast needs to be to 'signed char'
explicitly.
Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org >
2014-09-20 16:39:48 -07:00
Matteo Beccati
00525b824a
Fixed freetype test on multiple environments
...
Some environments, apparently regardless to the freetype version, output 155, while others 156. I guess we can accept both ;)
This reverts commit 592df89027 .
2014-09-16 10:19:29 +02:00
Remi Collet
2775dc2b44
Fix NEWS
...
- #65641 mod_proxy-fcgi is not fixed (still open)
- #67606 mod_fastcgi is fixed in ee275e34c8
2014-09-15 08:23:25 +02:00
Daniel Lowrey
372844918a
Bug #41631 : Fix regression from first attempt ( 6569db8)
2014-09-09 09:01:42 -06:00
Daniel Lowrey
f86b2193a4
Bug #67965 : Fix blocking behavior in non-blocking crypto streams
2014-09-09 07:37:57 -06:00
Tjerk Meesters
99f0760bfb
Fixed #67985 - Incorrect last used array index copied to new array after unset
...
In master zend_array_dup() is used to do this properly; this is a workaround.
2014-09-09 17:58:45 +08:00
George Wang
d2e1a04b10
Fine tuned the order of adding request variables.
2014-09-08 23:58:05 -04:00
George Wang
582f42b8d4
Update LSAPI to 6.7, added support for 'filter_input'.
...
Fixed a crash in CLI mode.
2014-09-03 11:24:45 -04:00
Matteo Beccati
592df89027
Fixed test with freetype >= 2.4.12
2014-09-03 09:43:29 +02:00
Stanislav Malyshev
5e95b61639
5.4.34 is next
2014-09-02 15:03:04 -07:00
Stanislav Malyshev
fe551c089a
Revert "Fix bug #67644 - Memory corruption & crash during ob_start function callback"
...
This reverts commit 53fa6c5b6b .
The change breaks tests, so not putting it into 5.4.
2014-09-02 14:15:39 -07:00
Stanislav Malyshev
53fa6c5b6b
Fix bug #67644 - Memory corruption & crash during ob_start function callback
2014-09-02 12:31:03 -07:00
Stanislav Malyshev
30aceaf1a7
update NEWS
2014-09-01 12:13:43 -07:00
Stanislav Malyshev
197095c29e
Merge branch 'pull-request/770' into PHP-5.4
...
* pull-request/770:
Only destruct if EG(active) in zend_shutdown(). (bug #65463 , #66036 )
Fix typo from commit 32314f6b6
Fix destruction order in zend_shutdown (bug #65463 , #66036 )
2014-09-01 12:11:42 -07:00
Derick Rethans
e665a07ab9
- Updated to version 2014.7 (2014g)
2014-09-01 16:40:49 +01:00
Stanislav Malyshev
b206b0e29d
fix NEWS for fcgi fix merge
2014-08-28 23:10:32 -07:00
David Zuelke
ee275e34c8
restore FPM compatibility with mod_fastcgi broken since #694 / 67541, fixes bug 67606
2014-08-28 23:06:00 -07:00
Chris Wright
32be79dcfa
Fix stream_select() issue with OpenSSL buffer
...
Ensure data from OpenSSL internal buffer has been
transfered to PHP stream buffer before a select()
emulation operation is performed
Addresses bug #65137
https://bugs.php.net/bug.php?id=65137
Conflicts:
ext/openssl/xp_ssl.c
2014-08-27 13:25:50 +01:00
Ferenc Kovacs
52f35b984c
update the GIT-RULES with the 5.6 and the release branches
2014-08-27 00:47:09 +02:00
Lior Kaplan
bda1cc6946
Bug #67730 : Add tests by Ryan Mauger <ryan@rmauger.co.uk>
2014-08-25 00:29:05 +03:00
Ferenc Kovacs
cb41a7bad1
this test depends on the simplexml ext, not just on xml
2014-08-24 00:08:09 +02:00
Keyur Govande
437612f656
Only destruct if EG(active) in zend_shutdown(). (bug #65463 , #66036 )
2014-08-23 14:17:37 +00:00
Michael Wallner
54fbbded37
fix bug #67865
2014-08-21 22:41:36 +02:00
Remi Collet
9185cfd539
NEWS
2014-08-20 15:16:53 +02:00
Anatol Belski
20941b71aa
fixed variable corruption under win x64
2014-08-20 15:08:52 +02:00
Lior Kaplan
276bead9c4
Add NEWS entry for bug #67730
...
Included in 5.4.32 with commit 706aefb
2014-08-20 00:54:19 +03:00
Lior Kaplan
359bc0ee2f
Add CVE ID for bug #67539
2014-08-20 00:51:37 +03:00
Sara Golemon
cbe1597b74
Switch use of strtok() to gd_strtok_r()
...
strtok() is not thread safe, so this will potentially break in
very bad ways if used in ZTS mode.
I'm not sure why gd_strtok_r() exists since it seems to do the
same thing as strtok_r(), but I'll assume it's a portability
decision and do as the Romans do.
2014-08-19 13:16:44 -07:00
Stanislav Malyshev
5a7039035c
Merge tag 'PHP-5.4.32' into PHP-5.4
...
5.4.32
* tag 'PHP-5.4.32':
5.4.32
fix potentially missing NUL termination
Fix bug #67730 - Null byte injection possible with imagexxx functions
Fixed bug #67717 - segfault in dns_get_record
Fix bug #67716 - Segfault in cdf.c
5.4.32 RC1
Conflicts:
configure.in
main/php_version.h
2014-08-19 01:33:45 -07:00
Stanislav Malyshev
eb2360602e
5.4.32
2014-08-19 00:40:27 -07:00
Remi Collet
88c48a4b95
NEWS
2014-08-19 08:40:18 +02:00
Remi Collet
2fefae4771
Fixed Sec Bug #67717 segfault in dns_get_record CVE-2014-3597
...
Incomplete fix for CVE-2014-4049
Check possible buffer overflow
- pass real buffer end to dn_expand calls
- check buffer len before each read
2014-08-19 08:33:49 +02:00
Stanislav Malyshev
2b10db8e10
fix potentially missing NUL termination
2014-08-18 23:04:24 -07:00
Stanislav Malyshev
706aefb781
Fix bug #67730 - Null byte injection possible with imagexxx functions
2014-08-18 22:49:10 -07:00
Stanislav Malyshev
529da0f74c
Fixed bug #67717 - segfault in dns_get_record
2014-08-18 22:37:25 -07:00
Lior Kaplan
1504f7d630
Correct typo in comments: 'initialized'
2014-08-17 21:32:53 +03:00
Veres Lajos
3f42f2f5d1
typofixes
2014-08-17 15:44:02 +03:00
Keyur Govande
0407bdf252
Add NEWS
2014-08-15 23:08:29 +00:00
Keyur Govande
7bfe9bf951
Merge branch 'pull-request/772' into PHP-5.4
...
* pull-request/772:
Fix failing tests
Patch for bug #67839 (mysqli does not handle 4-byte floats correctly)
Before the patch, a value of 9.99 in a FLOAT column came out of mysqli
as 9.9998998641968. This is because it would naively cast a 4-byte float
into PHP's internal 8-byte double.
To fix this, with GCC we use the built-in decimal support to "up-convert"
the 4-byte float to a 8-byte double.
When that is not available, we fall back to converting the float
to a string and then converting the string to a double. This mimics
what MySQL does.
2014-08-15 23:06:55 +00:00
Remi Collet
7ba1409a1a
Fix bug #67716 - Segfault in cdf.c
2014-08-14 17:44:19 -07:00
Remi Collet
35f32637b0
Fix bug #67716 - Segfault in cdf.c
2014-08-14 17:21:20 -07:00
Stanislav Malyshev
eab42649ab
fix test
2014-08-14 17:07:28 -07:00
Anatol Belski
b7cd099ae0
split the glob() test to test different basedir
2014-08-14 17:04:51 -07:00
Anatol Belski
ad492ca932
fixed glob() edge case on windows, ref bug #47358
2014-08-14 16:58:16 -07:00
Pierre Joye
481c4715d4
- fix bug #47358 , glob returns error, should be empty array()
...
Conflicts:
ext/standard/dir.c
2014-08-14 16:56:22 -07:00
Keyur Govande
4e2c01617f
Fix failing tests
2014-08-14 18:20:26 +00:00
Keyur Govande
c044164a96
Patch for bug #67839 (mysqli does not handle 4-byte floats correctly)
...
Before the patch, a value of 9.99 in a FLOAT column came out of mysqli
as 9.9998998641968. This is because it would naively cast a 4-byte float
into PHP's internal 8-byte double.
To fix this, with GCC we use the built-in decimal support to "up-convert"
the 4-byte float to a 8-byte double.
When that is not available, we fall back to converting the float
to a string and then converting the string to a double. This mimics
what MySQL does.
2014-08-14 18:19:56 +00:00
Johannes Schlüter
aeb633543b
Merge branch 'PHP-5.3' into PHP-5.4
2014-08-14 17:13:44 +02:00
Johannes Schlüter
7311087cf0
Update Git rules
2014-08-14 17:08:02 +02:00
Johannes Schlüter
1355ea60cc
Back to -dev (with EOL notice in NEWS)
2014-08-14 17:05:20 +02:00
Keyur Govande
5e338836ff
Fix typo from commit 32314f6b6
2014-08-14 01:14:11 +00:00
Keyur Govande
32314f6b67
Fix destruction order in zend_shutdown (bug #65463 , #66036 )
...
If Apache or a similar SAPI receives a signal during PHP processing
it calls zend_shutdown() without calling shutdown_executor().
#65463 : If a module like Gearman or Memcached is loaded,
in the unfixed version it is unloaded by zend_destroy_modules() before the
CG(CLASS_TABLE) is destructed. When CG(CLASS_TABLE) is destructed,
any pointers to methods (specifically around destruction) in the unloaded
module's .so are now dangling and the process segfaults.
#66036 : Any subclasses of an internal class like ArrayObject need
to be destructed in order: subclass first and then the internal class. In the
unfixed version zend_shutdown() clears the CG(CLASS_TABLE) from the head
of the list onwards, so internal classes are destructed first and user-defined
classes last. Internal classes are alloc/deallocated with malloc/free while
user-defined classes with emalloc/efree. If there's shared data between them
then efree() could be called instead of free() leading to a seg-fault.
2014-08-14 00:55:14 +00:00
Johannes Schlüter
babeca356b
It's 2014 already, fix copyright year where user visible
...
Left out all file headers
2014-08-13 21:22:50 +02:00
Johannes Schlüter
1847cf10c1
PHP 5.3.29
2014-08-13 18:36:10 +02:00
Tjerk Meesters
f6896e4395
Fixed #66091
2014-08-13 20:12:42 +08:00
Anatol Belski
8c247af1fc
updated NEWS
2014-08-12 11:50:26 +02:00
Anatol Belski
daa1fb8ba6
backported the fix for bug #41577
2014-08-12 11:49:46 +02:00
Ferenc Kovacs
39dd715382
fix the failing date tests introduced with the latest timezonedb update
...
Derick confirmed on irc that the new/current behavior is the correct and that the tests should be updated to reflect it
2014-08-12 10:34:54 +02:00
Anatol Belski
84a4041ba4
fix TS build
2014-08-07 19:49:59 +02:00
Daniel Lowrey
1ff30fd88c
Update NEWS
2014-08-07 12:37:50 -04:00
Daniel Lowrey
6569db8808
Bug #41631 : Observe socket read timeouts in SSL streams
2014-08-07 11:47:42 -04:00
Anatol Belski
7189039d65
wrap int8_t and int16_t with #ifdef to avoid possible clashes
2014-08-07 15:20:17 +02:00
Derick Rethans
7df4087b98
- Updated to version 2014.6 (2014f)
2014-08-07 10:22:09 +01:00
Andrey Hristov
d72b943262
Add EXPECTF
2014-08-06 15:27:29 +03:00
Andrey Hristov
9444bc7997
Merge branch 'PHP-5.4' of git.php.net:php-src into PHP-5.4
2014-08-06 14:52:55 +03:00
Andrey Hristov
547451796c
Fix handling of multi-result sets with PS...used to clean not only
...
the result set but the whole PS.
2014-08-06 14:52:12 +03:00
Stanislav Malyshev
65cf73c931
5.4.33-dev now
2014-08-05 21:24:55 -07:00
Stanislav Malyshev
fd28010e20
5.4.32 RC1
2014-08-05 21:03:35 -07:00
Michael Wallner
e4ff7f2ee3
Fixed Bug #67724
...
(chained zlib filters silently fail with large amounts of data)
Use the same buffer size zlib uses internally to avoid
Z_DATA_ERROR on massively compressed data
2014-08-05 15:44:43 +02:00
Remi Collet
f59506cd27
typo
2014-08-04 11:08:30 +02:00
Remi Collet
d3b5ed0787
NEWS
2014-08-04 10:46:53 +02:00
Remi Collet
cf4753691d
Fixed Bug #66901 php-gd 'c_color' NULL pointer dereference
...
Upstream https://bitbucket.org/libgd/gd-libgd/commits/463c3bd09bfe8e924e19acad7a2a6af16953a704
Notice: this fix don't manage monochrome/monovisual values
but just fix the security issue CVE-2014-2497
failing when trying to load such an image
2014-08-04 10:42:39 +02:00
Anatol Belski
ae74549239
backport the fix for bug #67739
2014-08-04 09:57:08 +02:00
Stanislav Malyshev
61ec9b5b0f
add test
2014-08-04 00:08:08 -07:00
Stanislav Malyshev
eeaec70758
Fix bug #67705 (extensive backtracking in rule regular expression)
2014-08-04 00:05:40 -07:00
Johannes Schlüter
990ecc12fc
PHP 5.3.29RC1
2014-07-31 15:40:51 +02:00
Stanislav Malyshev
0fe07a0e74
Fix missing type checks in various functions
2014-07-31 15:36:24 +02:00
Peter Cowburn
bff84d7c18
Merge branch 'pull-request/754' into PHP-5.4
2014-07-31 14:30:39 +01:00
Peter Cowburn
358aedc454
Bug #51096 - Remove unnecessary ? for first/last day of
2014-07-31 14:21:38 +01:00
Keyur Govande
0a29e4731e
Update NEWS
2014-07-30 18:33:19 +00:00
Michael Wallner
12b2127b72
Fixed bug #67715 (php-milter does not build and crashes randomly).
2014-07-30 20:12:13 +02:00
Rasmus Lerdorf
8b9719d8b9
We need to turn off any strict mode here for this warning to show up
2014-07-30 12:22:48 -04:00
Tjerk Meesters
b3466f862f
Updated NEWS for #67693
2014-07-30 18:16:56 +08:00
Tjerk Meesters
da3add26cf
Fixed bug #67693 - incorrect push to the empty array
2014-07-30 18:15:14 +08:00
Keyur Govande
ab6c1d21f9
Undo inadvertent commit of php_version
2014-07-30 02:34:21 +00:00
Keyur Govande
65364fe7d0
Corrected patch for bug #60616
...
For unixODBC, use ODBC version as defined by it (as of v2.2.14 it is 3.5).
This allows us to use newer features like SQL_DESC_OCTET_LENGTH (which
returns the number of bytes required to store the data). This fixes the issue
in #60616 . If the newer version is not available, over-allocate to accomodate
4-byte Unicode characters for CHAR and VARCHAR datatypes (and their Wide
counterparts).
version.
Fixed a couple of failing tests.
2014-07-30 02:28:31 +00:00
Keyur Govande
00546bc9b7
Fix bug #60616 (odbc_fetch_into returns junk at end of multi-byte char fields)
...
The ODBC extension did not support WVARCHAR. WVARCHAR ends up being handled by
the default handler where vallen is set by the driver to the actual bytes
needed for the field. If it is larger than default-lrl then the output is
corrupted (reading past the buffer) because the return functions don't expect
that to happen. The patch add support to handle WVARCHAR just like a regular
VARCHAR.
2014-07-28 23:15:23 +00:00
Stanislav Malyshev
3e167ba990
fix NEWS
2014-07-28 00:38:10 -07:00
Stanislav Malyshev
b4a4db467b
Fix missing type checks in various functions
2014-07-27 02:42:49 -07:00
Stanislav Malyshev
d0a244f1f3
update NEWS
2014-07-24 22:55:39 -07:00
Xinchen Hui
51c38a0997
Fixed bug #67539 (ArrayIterator use-after-free due to object change during sorting)
2014-07-24 22:54:14 -07:00
Xinchen Hui
61e0f8599d
Fixed Bug #67538 (SPL Iterators use-after-free)
2014-07-24 22:53:46 -07:00
Dmitry Saprykin
d491b2f916
Fix bug #67496 Save command history when exiting interactive shell with control-c
2014-07-24 17:58:39 +02:00
Johannes Schlüter
71d3a69425
Fix bug #55496 Interactive mode doesn't force a newline before the prompt
2014-07-24 16:53:51 +02:00
Anatol Belski
dc3a5d783f
fix nmake snap when ext name is different in target dll
2014-07-21 14:45:49 +02:00
Lior Kaplan
0678dc8d91
Enable $ replacement in exif, ldap, pdo_pgsql and tidy
2014-07-21 01:45:36 +03:00
Yasuo Ohgaki
ad744263ca
Update NEWS
2014-07-19 10:11:42 +09:00
Yasuo Ohgaki
e946de29d2
Fixed bug #66827 Session raises E_NOTICE when session name variable is array
2014-07-19 09:52:31 +09:00
Stanislav Malyshev
1ffb7fddc2
update NEWS
2014-07-18 16:49:00 -07:00
Stanislav Malyshev
c74efe1b2e
Fix bug #67492 : unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion
...
Conflicts:
ext/spl/spl_array.c
ext/spl/tests/SplObjectStorage_unserialize_bad.phpt
2014-07-18 16:31:59 -07:00
Xinchen Hui
b5051ff939
Fixed bug #67359 (Segfault in recursiveDirectoryIterator)
2014-07-18 16:28:58 -07:00
Stanislav Malyshev
e2ba5c7987
Fix bug #66127 (Segmentation fault with ArrayObject unset)
2014-07-18 16:28:16 -07:00
Stanislav Malyshev
8e9777a1f1
Fix test - because of big #67397 we don't allow overlong locales anymore
2014-07-18 16:27:11 -07:00
Stanislav Malyshev
e644aad3f9
Fix bug #67397 (Buffer overflow in locale_get_display_name->uloc_getDisplayName (libicu 4.8.1))
2014-07-18 16:26:51 -07:00
Stanislav Malyshev
8ab4e2e90d
Fix bug #67349 : Locale::parseLocale Double Free
2014-07-18 16:26:05 -07:00
Stanislav Malyshev
b512adf78d
Fixed bug #67399 (putenv with empty variable may lead to crash)
...
Conflicts:
ext/standard/basic_functions.c
2014-07-18 16:24:54 -07:00
Remi Collet
2fe5bcbeb5
Fixed Bug #67413 fileinfo: cdf_read_property_info insufficient boundary chec
...
Upstream:
https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d
Adapted for C standard.
2014-07-18 16:21:01 -07:00
Remi Collet
892def5f12
Bug #67412 fileinfo: cdf_count_chain insufficient boundary check
...
Upstream:
https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382
2014-07-18 16:20:19 -07:00
Remi Collet
8d1d038509
Fixed Bug #67411 fileinfo: cdf_check_stream_offset insufficient boundary check
...
Upstream:
https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67
Conflicts:
ext/fileinfo/libmagic/cdf.c
2014-07-18 16:19:30 -07:00
Remi Collet
6bd5a06894
Fixed Bug #67410 fileinfo: mconvert incorrect handling of truncated pascal string size
...
Upstream
https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08
2014-07-18 16:17:36 -07:00
Stanislav Malyshev
ec002bd837
Fix bug #67498 - phpinfo() Type Confusion Information Leak Vulnerability
2014-07-18 16:14:42 -07:00
Remi Collet
52de149ebc
Fix bug #67326 fileinfo: cdf_read_short_sector insufficient boundary check
...
Upstream fix https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391.patch
Only revelant part applied
2014-07-18 16:13:07 -07:00
Stanislav Malyshev
2326401fc1
fix bug #67253 : timelib_meridian_with_check out-of-bounds read
...
Conflicts:
ext/date/lib/parse_date.c
2014-07-18 16:11:54 -07:00
Stanislav Malyshev
7f527897fe
Fix bug #67252 : convert_uudecode out-of-bounds read
2014-07-18 16:05:52 -07:00
Stanislav Malyshev
d4b67896ec
Fix bug #67250 (iptcparse out-of-bounds read)
2014-07-18 16:02:52 -07:00
Stanislav Malyshev
84605098bc
Fix bug #67247 spl_fixedarray_resize integer overflow
2014-07-18 15:59:59 -07:00
Stanislav Malyshev
ee1ab62763
Fix bug #67328 (fileinfo: numerous file_printf calls resulting in performance degradation)
...
Upstream patch: https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d
2014-07-18 15:52:00 -07:00
Stanislav Malyshev
d77ea459bd
Fix bug #67327 : fileinfo: CDF infinite loop in nelements DoS
...
Upstream fix: https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0
2014-07-18 15:50:58 -07:00
Anatol Belski
44be7b7f27
backport this piece from 5.6, related to the #66307 fix
...
Conflicts:
ext/fileinfo/libmagic/readcdf.c
2014-07-18 15:50:04 -07:00
Anatol Belski
0335d2ef3e
Fixed bug #66307 Fileinfo crashes with powerpoint files
...
Conflicts:
ext/fileinfo/libmagic/readcdf.c
ext/fileinfo/tests/finfo_file_002.phpt
2014-07-18 15:48:18 -07:00
Remi Collet
a0bb3fd679
Fixed bug #66060 (Heap buffer over-read in DateInterval)
...
Conflicts:
ext/date/lib/parse_iso_intervals.c
2014-07-18 15:39:37 -07:00
Stanislav Malyshev
eca037a51d
Fix bug #65873 - Integer overflow in exif_read_data()
2014-07-18 15:37:15 -07:00
Xinchen Hui
f3230e3522
let make test report the run-test result
2014-07-18 15:33:59 -07:00
Anatol Belski
c5ccaf1d04
implemented copy libs of core exts in phpize mode
2014-07-18 18:38:57 +02:00
Anatol Belski
35b077f53e
fix copy the ext dll into the prefix path in phpize mode
2014-07-18 11:39:38 +02:00
Anatol Belski
8044d0680b
fix default prefix in phpize mode
2014-07-18 11:36:44 +02:00
Anatol Belski
a8e0a623ec
fix file with zero size usage in phpize mode
2014-07-18 11:35:32 +02:00
Lior Kaplan
2dff153b23
Enable build without atoll (e.g old AIX flavours)
2014-07-17 22:58:36 +03:00
Anatol Belski
f0a1e410a3
implemented usage of the non core ext deps in phpize mode
2014-07-17 21:47:15 +02:00
Anatol Belski
b3c6089111
implemented force usage of generated .h and .js deps in phpize mode
2014-07-17 09:25:57 +02:00
Anatol Belski
ce2ad0df18
basic routines for phpize mode to
...
- generate headers for non core ext defines
- generate js deps for non core exts
2014-07-16 21:33:07 +02:00
Anatol Belski
04821a1ee6
added headers install to phpize mode
2014-07-14 09:52:39 +02:00
Tjerk Meesters
f25ff02b54
Updated NEWS for 34407
2014-07-12 11:07:06 +08:00
Tjerk Meesters
4fc0d46ae7
Fix for bug #34407 - ucwords and title case
...
Added support for ranges like trim() has
2014-07-12 10:44:11 +08:00
George Wang
0baaf9fade
Fixed a bug that cannot access custom request header stored in apache_request_headers() though array index.
2014-07-11 14:31:59 -04:00
Anatol Belski
ae313b6037
fix makefile in phpize mode
...
- extend LDFLAGS with dynamically generated ones
- prevend dynamically generated CFLAGS to be overridden by hardcoded ones
2014-07-11 15:05:01 +02:00
Anatol Belski
9f5cf7d41a
fixe output_as_table() when no ext was enabled
2014-07-11 09:36:44 +02:00
Anatol Belski
02b661ecfc
fix end of stream exception when generating makefile
2014-07-10 22:33:55 +02:00
Anatol Belski
1f90dd3359
force ext_dep.js prepend to configure.js in phpize mode
2014-07-10 21:50:37 +02:00
George Wang
e7f36ba693
cleanup file headers.
2014-07-10 15:14:30 -04:00
George Wang
01a1c3067c
Do not kill children process in pre-fork mode when parent process quit.
2014-07-10 15:14:06 -04:00
George Wang
1f46bec9ce
update to LSAPI 6.6
...
Conflicts:
sapi/litespeed/lsapi_main.c
2014-07-10 14:46:43 -04:00
George Wang
e3df0c5f60
Update LiteSpeed SAPI code to V6.4
...
Conflicts:
sapi/litespeed/lsapi_main.c
sapi/litespeed/lsapidef.h
sapi/litespeed/lsapilib.c
sapi/litespeed/lsapilib.h
2014-07-10 14:42:05 -04:00
Anatol Belski
e2b0d97950
turn off PGO in phpize mode
2014-07-10 19:35:26 +02:00
George Wang
a34288fa1a
Fixed typo in Makefile.frag
2014-07-10 12:21:23 -04:00
Stanislav Malyshev
b93ea59665
5.4.31
2014-07-08 21:26:39 -07:00
Stanislav Malyshev
64e4261c9b
fix unstable test
2014-07-08 14:13:46 -07:00
Christian Weiske
0bf50a8302
Fix bug #67587 : Redirection loop on nginx with FPM
...
Redirection will work correctly as long as PATH_INFO is available,
e.g. via the following nginx configuration:
set $path_info $fastcgi_path_info;
fastcgi_param PATH_INFO $path_info;
2014-07-08 12:53:45 -07:00
Anatol Belski
d472434ea0
updated NEWS
2014-07-08 10:06:35 +02:00
Anatol Belski
03214a2aef
Backported the patch from bug #67407 into 5.4
2014-07-08 09:52:35 +02:00
Remi Collet
494034901e
NEWS
2014-07-08 08:30:15 +02:00
Remi Collet
f8acf826c3
Fix Bug #67530 error_log=syslog ignored
...
As for Bug #64915
Systemd use --nodaemonize but need to error_log to file or syslog to be honoured
2014-07-08 08:29:24 +02:00
Adam Harvey
604de67b7d
Fixed bug #66830 (Empty header causes PHP built-in web server to hang).
...
We had an infinite loop in sapi_cli_server_send_headers(): while iterating over
the linked list of headers, when an empty header was hit, continue would go to
the next iteration of the loop without updating h to be the next value in the
linked list. Updating it to always increment regardless of whether the header
is actually valid or not fixes the issue.
2014-07-07 20:36:06 +00:00
Stanislav Malyshev
a7d1cad4c3
change locale - looks like not everybody has sl_SI
2014-07-07 01:35:25 -07:00
Stanislav Malyshev
897b7b68cc
fix format
2014-07-07 00:48:32 -07:00
Stanislav Malyshev
6c8a570a96
Fix bug #67052 (NumberFormatter::parse() resets LC_NUMERIC setting)
2014-07-07 00:36:57 -07:00
Lior Kaplan
716d2a3937
Make sure the generator script also creates a newline at the end of file
...
Similar to commit d6713f39 in master
2014-07-06 22:15:09 -07:00
Lior Kaplan
c5fec9e09d
Add newline at end of file to prevent compilation warning
...
The newline was removed at commit 50d50c2f
2014-07-06 22:15:00 -07:00
Nikita Popov
18989420b6
Add test for bug #67151
2014-07-02 22:39:54 +02:00
Ferenc Kovacs
37a13d2df7
adding a reproduce script for bug #49184
2014-07-02 22:37:58 +02:00
Nikita Popov
3cc6bd10ac
Fix bug #67151 : strtr with empty array crashes
2014-07-02 22:33:20 +02:00
Anatol Belski
5efda71e54
bundle deplister.exe with releases
2014-07-02 11:34:37 +02:00
Michael Wallner
34e686c556
fix integer overflow in {stream,file}_{get,put}_contents()
2014-07-02 09:53:03 +02:00
Adam Harvey
899fe3d8af
Fix ext/pgsql builds with libpq < 7.3.
...
Fixes bug #67550 (Error in code "form" instead of "from", pgsql.c, line 756).
2014-07-01 13:19:22 -07:00
Anatol Belski
6081dd781a
updated libs_version.txt
2014-07-01 10:33:09 +02:00
Anatol Belski
af5f997a5d
updated libmagic.patch
2014-07-01 10:25:20 +02:00
Ferenc Kovacs
48df4464ea
remove the NEWS entry for the reverted fpm fix
2014-06-30 18:37:56 +02:00
Ferenc Kovacs
9c8b42960d
Revert "Fix Bug #67530 error_log=syslog ignored"
...
This reverts commit a0ecb3794f .
2014-06-30 18:37:23 +02:00
Ferenc Kovacs
a7d1656b96
Fix bug #67091 : make install fails to install libphp5.so on FreeBSD 10.0
...
Simplest fix is to remove the specific checks for freebsd1* as it also matches freebsd10,
and nobody should be using >=PHP 5.4 with freebsd 1.x(if it is even possible to make it
to compile there).
2014-06-30 01:31:10 +02:00
Ferenc Kovacs
cc22f021fe
removing the format added by mistake, props to Solar Designer for spotting this.
2014-06-27 16:27:36 +02:00
Remi Collet
334758794d
NEWS
2014-06-27 09:50:01 +02:00
Remi Collet
bf328b1681
Fix Bug #67531 syslog cannot be set in pool configuration
...
error_log is listed in FPM_PHP_INI_TO_EXPAND,
but should not be expand when value = syslog
2014-06-27 09:47:28 +02:00
Remi Collet
a0ecb3794f
Fix Bug #67530 error_log=syslog ignored
...
As for Bug #64915
Systemd use --nodaemonize but need to error_log to file or syslog to be honoured
2014-06-27 09:45:53 +02:00
Stanislav Malyshev
2db96fea2d
update the date
2014-06-26 21:15:47 -07:00
Stanislav Malyshev
b23460063f
better explanation
2014-06-26 15:25:19 -07:00
Stanislav Malyshev
ad9ed232e7
more extensive note on unserialize() change
2014-06-26 10:35:47 -07:00
Stanislav Malyshev
9d1d25e625
Fix test - because of big #67397 we don't allow overlong locales anymore
2014-06-24 11:21:43 -07:00
Stanislav Malyshev
3488cf6fd8
Merge branch 'PHP-5.4.30' into PHP-5.4
...
* PHP-5.4.30:
5.4.30
Better fix for bug #67072 with more BC provisions
Fix bug #67498 - phpinfo() Type Confusion Information Leak Vulnerability
update CVE
Fix bug #67492 : unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion
Fix bug #67397 (Buffer overflow in locale_get_display_name->uloc_getDisplayName (libicu 4.8.1))
Fix bug #67349 : Locale::parseLocale Double Free
add CVEs
Fix potential segfault in dns_get_record()
Fix bug #66127 (Segmentation fault with ArrayObject unset)
5.4.30 rc1
Conflicts:
configure.in
main/php_version.h
2014-06-24 10:23:36 -07:00
Stanislav Malyshev
08e7252abf
update NEWS
2014-06-24 10:20:33 -07:00
Stanislav Malyshev
79457d1964
5.4.30
2014-06-24 10:17:49 -07:00
Stanislav Malyshev
6d97b4b2b3
Better fix for bug #67072 with more BC provisions
2014-06-23 22:16:25 -07:00
Stanislav Malyshev
fb0128af2a
Fix bug #67498 - phpinfo() Type Confusion Information Leak Vulnerability
2014-06-23 00:22:59 -07:00
Stanislav Malyshev
f3dd77714d
update CVE
2014-06-23 00:07:08 -07:00
Stanislav Malyshev
c42d5cf5de
Better fix for bug #67072 with more BC provisions
2014-06-21 21:29:11 -07:00
Stanislav Malyshev
88223c5245
Fix bug #67492 : unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion
2014-06-21 19:46:16 -07:00
Stanislav Malyshev
6027c56fd7
Fix bug #67397 (Buffer overflow in locale_get_display_name->uloc_getDisplayName (libicu 4.8.1))
2014-06-21 18:44:14 -07:00
Stanislav Malyshev
aef6432fbe
Fix bug #67349 : Locale::parseLocale Double Free
2014-06-21 18:38:41 -07:00
Stanislav Malyshev
300e0418a4
add CVEs
2014-06-21 18:37:08 -07:00
Dmitry Stogov
680ddabac1
Fixed MarinaDB support
2014-06-20 13:56:32 +04:00
Lior Kaplan
4106d48d1c
Update copyright year to 2014
2014-06-17 23:57:20 +03:00
Lior Kaplan
945938d33c
Update copyright year to 2014
2014-06-17 23:56:46 +03:00
Lior Kaplan
6f3bcb0d6e
Update copyright year for re2c generated files
2014-06-16 23:28:36 +03:00
Lior Kaplan
2d576c2a99
Update copyright year to 2014
2014-06-16 23:27:45 +03:00
Lior Kaplan
e667d23178
Update copyright year for re2c files as well
2014-06-16 23:26:50 +03:00
Bob Weinand
0a3979e08b
Fix patch for bug #67436
2014-06-16 11:10:50 +02:00
Bob Weinand
4053dbe29f
Merge branch 'pull-request/695' into PHP-5.4
2014-06-16 00:35:20 +02:00
Levi Morrison
6c9c44905e
Added tests for bug 67436
2014-06-15 16:31:39 -06:00
Bob Weinand
a84a2d4ace
Fixed wrong XFAIL test - already fixed
2014-06-15 23:52:41 +02:00
Lior Kaplan
d9432d6a50
Fix typo in Bug #67406 NEWS entry
2014-06-16 00:26:01 +03:00
Bob Weinand
85d3ac5763
Updated NEWS
2014-06-15 22:32:47 +02:00
Bob Weinand
ca29063da5
Fix bug #67436
2014-06-15 22:18:25 +02:00
Sara Golemon
21525d0413
Fix potential segfault in dns_get_record()
...
If the remote sends us a packet with a malformed TXT record,
we could end up trying to over-consume the packet and wander
off into overruns.
2014-06-15 01:04:24 -07:00
Stanislav Malyshev
b053c4f4f6
update NEWS
2014-06-15 00:46:31 -07:00
Stanislav Malyshev
3c328f0984
Fix bug #67251 - date_parse_from_format out-of-bounds read
...
Conflicts:
ext/date/lib/parse_date.c
ext/date/lib/parse_date.re
2014-06-15 00:33:24 -07:00
Stanislav Malyshev
d780c2a673
Fix bug #67249 : printf out-of-bounds read
2014-06-13 16:43:56 -07:00
Sara Golemon
d400b74296
Fix potential segfault in dns_get_record()
...
If the remote sends us a packet with a malformed TXT record,
we could end up trying to over-consume the packet and wander
off into overruns.
2014-06-13 16:42:55 -07:00
Remi Collet
08334293f8
Fix bug #67390 insecure temporary file use in the configure script
2014-06-13 16:41:13 -07:00
Derick Rethans
ce70b920e4
- Updated to version 2014.5 (2014e)
2014-06-13 23:26:42 +01:00
Adam Harvey
b51f82f260
Follow 308 Permanent Redirect responses.
...
Fixes bug #67430 (http:// wrapper doesn't follow 308 redirects).
2014-06-12 18:12:53 -07:00
Adam Harvey
fe67674809
Add 308 and 426 to the HTTP response code map in the CLI server.
...
Implements FR #67429 (CLI server is missing some new HTTP response codes).
2014-06-12 17:54:29 -07:00
Adam Harvey
1b9cbab9a7
Keep 308-399 HTTP response codes when header('Location:') is called.
...
Fixes bug #67428 (header('Location: foo') will override a 308-399 response
code).
2014-06-12 17:35:05 -07:00
Sara Golemon
5f2a30e111
NEWS entry for "Fix potential segfault in dns_get_record()"
2014-06-11 14:24:13 -07:00
Sara Golemon
4f73394fdd
Fix potential segfault in dns_get_record()
...
If the remote sends us a packet with a malformed TXT record,
we could end up trying to over-consume the packet and wander
off into overruns.
2014-06-11 13:37:04 -07:00
Stanislav Malyshev
2b04d68972
Fix bug #66127 (Segmentation fault with ArrayObject unset)
2014-06-10 23:24:11 -07:00
Stanislav Malyshev
317bcb96d0
Fix bug #66127 (Segmentation fault with ArrayObject unset)
2014-06-10 23:17:30 -07:00
Stanislav Malyshev
979eed5c6b
5.4.31 next
2014-06-10 23:03:40 -07:00
Stanislav Malyshev
0235a8acdc
5.4.30 rc1
2014-06-10 21:17:37 -07:00
Remi Collet
6256b79a35
NEWS
2014-06-10 14:35:14 +02:00
Remi Collet
25b1dc917a
Fixed Bug #67413 fileinfo: cdf_read_property_info insufficient boundary chec
...
Upstream:
https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d
Adapted for C standard.
2014-06-10 14:33:37 +02:00
Remi Collet
da5d40bae6
NEWS
2014-06-10 14:23:31 +02:00
Remi Collet
40ef6e07e0
Bug #67412 fileinfo: cdf_count_chain insufficient boundary check
...
Upstream:
https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382
2014-06-10 14:22:04 +02:00
Remi Collet
2b33a41162
NEWS
2014-06-10 14:16:00 +02:00
Remi Collet
5c9f967999
Fixed Bug #67411 fileinfo: cdf_check_stream_offset insufficient boundary check
...
Upstream:
https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67
2014-06-10 14:13:14 +02:00
Remi Collet
d02aa44090
NEWS
2014-06-10 14:04:27 +02:00
Remi Collet
e77659a8c8
Fixed Bug #67410 fileinfo: mconvert incorrect handling of truncated pascal string size
...
Upstream
https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08
2014-06-10 14:02:36 +02:00
Remi Collet
949cab09f2
NEWS
2014-06-10 10:31:17 +02:00
Remi Collet
58c6a08e00
Fixed bug #67406 built-in web-server segfaults on startup
...
Reproduce on aarch64.
From select man page:
"select() may update the timeout argument to indicate how much time was left."
So "const" is not ok.
2014-06-10 10:28:34 +02:00
Stanislav Malyshev
62857998c5
Fixed bug #67399 (putenv with empty variable may lead to crash)
2014-06-08 23:09:09 -07:00
Matteo Beccati
5c8c57aa6c
Fixed DOM tests when using libxml2 versions patched against CVE-2014-0191
...
DOMDocument::substituteEntities needs to be set to true in order for
external entities to be parsed.
2014-06-09 07:05:23 +02:00
Stanislav Malyshev
9b5d56fd61
add news
2014-06-08 19:44:27 -07:00
Boro Sitnikovski
aebb23e4db
Bug 49898
...
__getCookies() method implementation
2014-06-08 19:36:18 -07:00
Stanislav Malyshev
e43270cb2a
fix order
2014-06-08 19:03:50 -07:00
Levi Morrison
e030efa4f6
Fix bug 666222
...
This also adds some smaller, isolated tests related to bug 66622.
Conflicts:
Zend/zend_vm_def.h
Zend/zend_vm_execute.h
2014-06-08 18:59:23 -07:00
Jefersson Nathan
33926b19d0
Fixed identation on file
2014-06-08 14:30:01 -07:00
Jefersson Nathan
e51eaaf665
Fix align indentation
2014-06-08 14:28:51 -07:00
Paul Oehler
76a7fd893b
Added support for parsing ssl certificates using GeneralizedTime format.
...
fix bug #65698
fix bug #66636
2014-06-08 14:17:58 -07:00
Jeff Welch
5fd7c2b01d
Remove superfluous echos.
2014-06-08 13:50:22 -07:00
Remi Collet
811f35d0ed
NEWS
2014-06-06 14:17:54 +02:00
Remi Collet
91bcadd85e
Fix bug #67390 insecure temporary file use in the configure script
2014-06-06 14:16:04 +02:00
Remi Collet
56c9e22c1f
drop exec perm on doc files
2014-06-05 17:45:22 +02:00
Remi Collet
127651e9ae
fix test for 5.4/5.5
2014-06-05 17:33:40 +02:00
Remi Collet
15d8c80ead
add test for previous fix
2014-06-05 14:00:00 +02:00
Remi Collet
3f47368738
NEWS
2014-06-05 13:45:25 +02:00
Remi Collet
1fe9f1e4f5
Fix regression introduce in fix for bug #67118
...
The fix was correct but break some code (at least in Horde)
This is a temporary workaround to fix regressioni in 5.4, 5.5 and 5.6
This make php_date_initialize more consistent
- on success return 1 + time initiliazed
- on failure return 0 + time = zero
which is check by DATE_CHECK_INITIALIZED by later method call
Will restore consistency with other date classes in master.
2014-06-05 13:39:46 +02:00
Stanislav Malyshev
e06c4f7fe5
update NEWS
2014-06-04 01:09:37 -07:00
Anatol Belski
20568e5028
Fixed regression introduced by patch for bug #67072
...
This applies to 5.4 and 5.5 only as a legacy fix.
2014-06-03 20:43:58 +02:00
Remi Collet
0817a2c767
(re)add cve number in NEWS, from 5.4.29
2014-06-03 11:28:07 +02:00
Remi Collet
21986f98db
NEWS
2014-06-03 11:08:46 +02:00
Remi Collet
4fcb9a9d1b
Fix bug #67326 fileinfo: cdf_read_short_sector insufficient boundary check
...
Upstream fix https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391.patch
Only revelant part applied
2014-06-03 11:05:00 +02:00
Xinchen Hui
38be99b739
Fixed bug #67359 (Segfault in recursiveDirectoryIterator)
2014-06-01 19:41:01 +08:00
Adam Harvey
b5d9983ff4
Check for zero-length keys in spl_array_skip_protected and don't skip them.
...
Fixes bug #67360 (Missing element after ArrayObject::getIterator).
2014-05-29 17:49:32 +00:00
Anatol Belski
d2765e4b8c
updated libmagic.patch for 5.4+
2014-05-27 22:36:12 +02:00
Stanislav Malyshev
76b06780d5
update NEWS
2014-05-27 11:28:53 -07:00
Stanislav Malyshev
091b7642c2
Fix bug #67249 : printf out-of-bounds read
2014-05-27 11:28:22 -07:00
Matteo Beccati
92d54f81d6
Escape non-printable characters in the junit XML output
...
XML doesn't allow most of the characters < 0x20 and binary output
breaks XML parsers. Such characters are not allowed as entities
either, so the generated entities are escaped in order to be printed
as text.
2014-05-27 12:03:38 +02:00
Matteo Beccati
1696166466
Fixed broken XML junit output due to escaping of CDATA sections
...
I've removed CDATA and used htmlspecialchars as the output might not be UTF-8 safe, as pointed out by ircmaxell in 26b37f1792
2014-05-27 11:04:48 +02:00
Anatol Belski
d184f07b3c
backport this piece from 5.6, related to the #66307 fix
2014-05-26 18:05:13 -07:00
Anatol Belski
15ee33eb21
Fixed bug #66307 Fileinfo crashes with powerpoint files
2014-05-26 18:04:27 -07:00
Stanislav Malyshev
4005f06df6
Fix bug #67328 (fileinfo: numerous file_printf calls resulting in performance degradation)
...
Upstream patch: https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d
2014-05-26 18:01:17 -07:00
Stanislav Malyshev
57225f09ed
Fix bug #67327 : fileinfo: CDF infinite loop in nelements DoS
...
Upstream fix: https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0
2014-05-26 17:45:14 -07:00
Matteo Beccati
f9357b44f3
Fix broken Junit output with --disable-cgi
2014-05-25 00:07:52 +02:00
Adam Harvey
319611ffbd
Fix broken test caused by fdb2709.
2014-05-23 15:07:19 +00:00
Adam Harvey
5d1bfd6fbf
Fix run-tests.php with Valgrind >= 3.10.0.
...
The version test that we had in run-tests.php assumed that the major and minor
version numbers were always single digits. This removes that assumption and
also uses version_compare() for the comparison instead of naively converting it
to an integer.
2014-05-22 22:37:08 +00:00
Adam Harvey
fdb2709dd2
Add microseconds to the serialised form of DateTime objects.
...
Fixes bug #67308 (Serialize of DateTime truncates fractions of second).
2014-05-21 14:55:52 -05:00
Matteo Beccati
00a22d4d06
Improved test for bug #62479
2014-05-21 18:58:14 +02:00
Stanislav Malyshev
fa6aaf8c03
Merge branch 'PHP-5.3' into PHP-5.4
...
* PHP-5.3:
fix typo in ODBC code
Fix bug #67060 : use default mode of 660
Conflicts:
ext/odbc/php_odbc.c
2014-05-18 23:43:59 -07:00
Stanislav Malyshev
adc070ca99
fix typo in ODBC code
2014-05-18 23:42:30 -07:00
Stanislav Malyshev
b1c944dfd2
5.4.30 next
2014-05-13 22:20:15 -07:00
Stanislav Malyshev
ffd74a0a29
update NEWS
2014-05-13 17:07:35 -07:00
Stanislav Malyshev
dc92e81922
Merge branch 'bug67251' into PHP-5.4
...
* bug67251:
Fix bug #67251 - date_parse_from_format out-of-bounds read
Conflicts:
ext/date/lib/parse_date.c
2014-05-13 16:52:45 -07:00
Stanislav Malyshev
0094fd0969
Merge branch 'bug67252' into PHP-5.4
...
* bug67252:
fix bug #67253 : timelib_meridian_with_check out-of-bounds read
Fix bug #67252 : convert_uudecode out-of-bounds read
2014-05-13 16:47:27 -07:00
Stanislav Malyshev
9103c9eb4f
Merge branch 'bug67250' into PHP-5.4
...
* bug67250:
Fix bug #67250 (iptcparse out-of-bounds read)
2014-05-13 16:43:10 -07:00
Derick Rethans
3e276d6728
- Updated to version 2014.3 (2014c)
2014-05-13 16:36:58 +01:00
Stanislav Malyshev
6ef8e0f088
fix test - output can be chunked
2014-05-12 10:54:16 -07:00
Stanislav Malyshev
8a22540a95
Fix bug #67060 : use default mode of 660
2014-05-11 23:32:35 -07:00
Stanislav Malyshev
466b8aa444
fix bug #67253 : timelib_meridian_with_check out-of-bounds read
2014-05-11 21:09:11 -07:00
Stanislav Malyshev
1e2818b143
Fix bug #67252 : convert_uudecode out-of-bounds read
2014-05-11 20:29:27 -07:00
Stanislav Malyshev
0a80849250
Fix bug #67251 - date_parse_from_format out-of-bounds read
2014-05-11 19:34:21 -07:00
Stanislav Malyshev
3e9cb6a4a5
Fix bug #67250 (iptcparse out-of-bounds read)
2014-05-11 19:09:19 -07:00
Stanislav Malyshev
2b475eebbe
Fix bug #67247 spl_fixedarray_resize integer overflow
2014-05-11 17:54:27 -07:00
Stanislav Malyshev
14dd6c2d54
fix news
2014-05-11 17:43:28 -07:00
Bob Weinand
62b2eb666d
Updated NEWS
2014-05-11 15:13:40 +02:00
Bob Weinand
5bf6a093ad
Fix Linux specific fail in error traces (cherry-picked and fix for bug #67245 )
...
Linux apparently does not like memcpy in overlapping regions...
2014-05-11 15:11:03 +02:00
Felipe Pena
fb3b8de98d
- Fixed off-by-one in phar_build (patch by crrodriguez at opensuse dot org)
2014-05-11 09:45:17 -03:00
Felipe Pena
c575ab0c88
- Move checking
2014-05-10 11:55:42 -03:00
Felipe Pena
345f6d90d5
- Fixed missing NULL check in SimpleXMLElement::xpath()
2014-05-10 11:53:40 -03:00
Felipe Pena
5bd443a452
- Fixed missing NULL check
2014-05-10 11:39:08 -03:00
Stanislav Malyshev
4392339c3e
oops, 5.4 and 5.5 use malloc in TSRM
2014-05-08 01:59:39 -07:00
Stanislav Malyshev
0cc18fdfba
Fix memory leak in TSRM
2014-05-08 01:00:34 -07:00
Dmitry Stogov
8517001b25
Fixed test (it requires ext/hash)
2014-05-07 00:52:49 +02:00
Dmitry Stogov
f880013c4d
Fixed tests (they might fail from time to time because of session GC)
2014-05-07 00:37:56 +02:00
Adam Harvey
f7cb87f333
Fix author name on the #63228 patch.
2014-05-02 10:23:09 -07:00
Adam Harvey
941c39bd06
Use the right path for the suggested PHP invocation in ext_skel.
...
Fixes bug #67160 (ext_skel outputs incorrect information).
2014-05-01 11:22:20 -07:00
Ferenc Kovacs
1c13ad7c0e
add missing NEWS entry to the correct release where it was added
2014-05-01 10:50:08 +02:00
Stanislav Malyshev
35ceea928b
Fix bug #67060 : use default mode of 660
2014-04-29 09:14:11 -07:00
Anatol Belski
2d625b5f81
Fixed bug #66431 Special Character via COM Interface (CP_UTF8)
2014-04-29 13:40:44 +02:00
Popa Adrian Marius
bb422cb60e
Merge branch 'PHP-5.3' into PHP-5.4
...
* PHP-5.3:
Cleanup ZEND_MODULE_API_NO => 20050922
2014-04-28 12:13:11 +03:00
Popa Adrian Marius
dbcd6304bb
Cleanup ZEND_MODULE_API_NO => 20050922
2014-04-28 12:12:52 +03:00
Anatol Belski
d3dcd61623
fixed test
2014-04-25 17:39:53 +02:00
Anatol Belski
c1aa9baf29
Fixed bug #67118 DateTime constructor crash with invalid data
2014-04-25 17:23:26 +02:00
Stanislav Malyshev
03c703b8bd
add a test case previously broken by a bad fix
2014-04-24 23:58:38 -07:00
Stanislav Malyshev
a328803803
Revert "Fixed bug #64604 "
...
This reverts commit b05c088a3a .
Breaks parsing urls where query has : in it, like: /foo/bar?baz=goo:boo
2014-04-24 23:50:45 -07:00
Anatol Belski
03be983398
fix dll export
2014-04-24 10:51:42 +02:00
Jakub Zelenka
61499bf282
Fix accepting ill-formed UTF-8 characters
...
Conflicts:
ext/phar/phar_path_check.c
2014-04-22 16:55:58 -07:00
Danack
ea4cee93c8
Allow valid multi-byte utf-8 characters to be allowed as file names in phar archives.
2014-04-20 17:19:20 -07:00
Rouven Weßling
68283c9f4a
Fix a compiler warning in php_rand.h
2014-04-20 16:35:36 -07:00
Julio Pintos
49341e992a
Fix #66908 : php-fpm reload leaks epoll_create() file descriptor
...
This patch fixes descriptor leak which could lead to DoS once Max open files is reached
2014-04-20 16:21:49 -07:00
Boro Sitnikovski
a18cec1b86
Fix bug #65701 : Do not use cache for file file copy
2014-04-20 15:22:44 -07:00
Anatol Belski
53c68811ba
UPGRADING note about bug #67072
2014-04-18 15:43:05 +02:00
Anatol Belski
c2acdbdd3d
Improved the fix for bug #67072 , thanks Nikita
2014-04-18 15:13:32 +02:00
Levi Morrison
6e1e98d7b8
These links to ~helly don't work anymore.
2014-04-17 17:20:24 +02:00
Anatol Belski
5328d42899
Fixed bug #67072 Echoing unserialized "SplFileObject" crash
...
The actual issue lays in the unserializer code which doesn't honor
the unserialize callback. By contrast, the serialize callback is
respected. This leads to the situation that even if a class has
disabled the serialization explicitly, user could still construct
a vulnerable string which would result bad things when trying
to unserialize.
This conserns also the classes implementing Serializable as well
as some core classes disabling serialize/unserialize callbacks
explicitly (PDO, SimpleXML, SplFileInfo and co). As of now, the
flow is first to call the unserialize callback (if available),
then call __wakeup. If the unserialize callback returns with no
success, no object is instantiated. This makes the scheme used
by internal classes effective, to disable unserialize just assign
zend_class_unserialize_deny as callback.
2014-04-17 10:48:14 +02:00
Anatol Belski
7a5f1663c6
correct the bug #67081 fix
2014-04-16 15:06:57 +02:00
Anatol Belski
5224614f23
Fixed bug #67081 DOMDocumentType->internalSubset returns entire DOCTYPE tag, not only the subset
2014-04-16 14:13:45 +02:00
Stanislav Malyshev
1d34d82231
5.4.29 is next
2014-04-15 16:51:38 -07:00
Stanislav Malyshev
eea75e7146
Fix test - on CI somebody could create a process in the meantime
2014-04-14 15:44:23 -07:00
Anatol Belski
24b72e7a27
fix windows build
2014-04-14 23:29:38 +02:00
Chuan Ma
a186312832
Fix #66942 : openssl_seal() memory leak
...
Fix #66952 : memory leak in openssl_open()
2014-04-14 13:24:14 -07:00
Stanislav Malyshev
56f9727305
ws fix
2014-04-14 13:16:53 -07:00
Stanislav Malyshev
ad1b9eef98
Fix null byte in LDAP bindings
2014-04-14 10:44:53 -07:00
Stanislav Malyshev
40a9316dff
Fix bug #66171 : better handling of symlinks
2014-04-14 10:44:53 -07:00
Anatol Belski
4268504084
backported some ext/intl tests from 5.6 into 5.4
2014-04-14 16:31:18 +02:00
Anatol Belski
95c57bb646
Fixed bug #67033 Remove reference to Windows 95
2014-04-14 09:32:31 +02:00
Stanislav Malyshev
b80243aece
fix NEWS
2014-04-13 20:16:27 -07:00
Stanislav Malyshev
5e66ce9293
Merge branch 'pull-request/518' into PHP-5.4
...
* pull-request/518:
Fix #66021 (Blank line inside empty array/object)
2014-04-13 18:50:39 -07:00
Ingo Walz
b05c088a3a
Fixed bug #64604
2014-04-13 18:37:40 -07:00
Freek
5558d0db9b
Fix #66562 : Consistency bug where curl_multi_getcontent behaves different from curl_exec
...
curl_exec returns an empty string when data is received from a domain that returns zero content. curl_multi_getcontent
returned null. Now it returns an empty string fixing the incosistency
2014-04-13 18:12:17 -07:00
itxx00
636adf251c
Fix bug #66482 , replace wrong item name 'priority' with 'process.priority' in php-fpm.conf
2014-04-13 17:30:50 -07:00
Stanislav Malyshev
3a2660b302
Fix windows build
2014-04-13 17:02:21 -07:00
Boro Sitnikovski
8c88b6e81c
Fix bug #66721
...
Add NULL check to php_date_parse_tzfile's retval
2014-04-13 15:51:55 -07:00
Jeff Trawick
442264ffd6
fix apr_psprintf format string from e0df4e3dba
2014-04-13 15:36:43 -07:00
Gabor Buella
1010200da5
Fixed bug #67024 - getimagesize should recognize BMP files with negative height
2014-04-13 15:17:04 -07:00
Bob Weinand
beda5093b4
Reverted to 5a0da281e5
...
Discussion: http://news.php.net/php.cvs/76836
2014-04-13 23:01:31 +02:00
Bob Weinand
f07e37c96d
Forgot title in phpt for bug #67064
2014-04-13 19:34:17 +02:00
Bob Weinand
2f3056fecc
Updated NEWS
2014-04-13 19:32:51 +02:00
Bob Weinand
1a4a9eede5
Fix bug #67064 in a BC safe way
...
You can use an optional parameter now when implementing the Countable interface
to get the $mode passed to count().
2014-04-13 19:24:12 +02:00
Ferenc Kovacs
5a0da281e5
fix typo
2014-04-13 01:55:55 +02:00
Bob Weinand
edd90e5ae3
Made usage of php_hash_environment useful by updating instead of just adding argc
2014-04-12 23:53:21 +02:00
Popa Adrian Marius
1c3ed86211
Cleanup $ is not needed for git
2014-04-10 17:42:32 +03:00
Ferenc Kovacs
9540ced221
fix typo
2014-04-10 07:05:07 +02:00
Ferenc Kovacs
2c8aeda6dc
abstract namespace for unix sockets is a linux only feature
2014-04-09 19:01:01 +02:00
Popa Adrian Marius
0ea731fc83
cleanup
2014-04-08 17:51:06 +03:00
Popa Adrian Marius
cc20351134
Fixes bug #66071 : isc_interprete is unsafe and deprecated , it is replaced with fb_iterpret
2014-04-08 17:50:41 +03:00
Anatol Belski
a0beddf5e9
Fixed bug #66084 simplexml_load_string() mangles empty node name
2014-04-05 09:46:24 +02:00
Stanislav Malyshev
7e5de3a1ce
cleanup NEWS
2014-04-03 15:54:00 -07:00
Michael Wallner
d08b4dbf23
Fix Bug #66736 fpassthru broken
2014-04-03 10:40:06 +02:00
Michael Wallner
7ab5c593f7
Fix bug #66182 exit in stream filter produces segfault
...
Unfortunately, a segv caused by exit cannot be tested reliably.
2014-04-03 09:07:35 +02:00
Michael Wallner
1ec83d44a1
Fixed bug #61019 (Out of memory on command stream_get_contents)
2014-04-02 15:36:39 +02:00
Michael Wallner
91a9d24aa3
Fix bug #64330
...
stream_socket_server() creates wrong Abstract Namespace UNIX sockets
2014-04-02 11:09:26 +02:00
Anatol Belski
f244513fc0
updated NEWS
2014-04-01 10:11:40 +02:00
Anatol Belski
fca1501ed6
added test for bug #53965
2014-04-01 10:08:08 +02:00
Anatol Belski
3cb056f523
Fixed bug #53965 <xsl:include> cannot find files w/ relative paths when loaded w/ "file://"
2014-04-01 10:07:18 +02:00
Remi Collet
fca331cae9
NEWS
2014-03-31 16:57:02 +02:00
Remi Collet
2c204a55af
Fixed Bug #66987 Memory corruption in fileinfo ext (bigendian)
...
On little endian:
map->p == php_magic_database
map->magic[i] = pointer into the map
map->p == NULL
map->magic[i] = pointer to allocated memory
On big endian (ppc64, s390x, ...):
map->p != php_magic_database and map->p != NULL
map->magic[i] = pointer into a copy of the map
Trying to efree pointer in the later cause memory corruption
Thanks to dkatulek / Red Hat for the report.
2014-03-31 16:50:47 +02:00
Anatol Belski
1283722589
update lib versions
2014-03-27 18:18:06 +01:00
Derick Rethans
170cf3ec00
- Updated to version 2014.2 (2014b)
2014-03-25 12:17:14 +00:00
Remi Collet
3616db6d38
NEWS
2014-03-25 11:00:47 +01:00
Remi Collet
4374a52e9d
Fixed bug #66946 extensive backtracking in awk rule regular expression
...
CVE-2013-7345
Applied upstream patch:
https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c
Add the magicdata.patch to track patches applied to upstream data file.
2014-03-25 11:00:33 +01:00
Remi Collet
1df558c6a0
Fixed bug #66946 extensive backtracking in awk rule regular expression
...
CVE-2013-7345
Applied upstream patch:
https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c
Add the magicdata.patch to track patches applied to upstream data file.
2014-03-25 10:58:50 +01:00
Anatol Belski
6612e1ba6a
more fixes related to bug #65715
2014-03-24 19:15:02 +01:00
Anatol Belski
5efda763be
updated NEWS
2014-03-24 10:28:21 +01:00
Anatol Belski
17a57ad980
Fixed bug #65715 php5embed.lib isn't provided anymore
2014-03-24 10:24:37 +01:00
Stanislav Malyshev
9b88bc494e
prep for 5.4.27 rc1
2014-03-18 23:19:09 -07:00
Derick Rethans
b30304fb78
- Updated to version 2014.1 (2014a)
2014-03-18 14:48:55 +00:00
Mateusz Kocielski
497b918e62
Merge branch 'PHP-5.3' into PHP-5.4
...
* PHP-5.3:
Fixed off-by-one in php_url_parse_ex
Conflicts:
ext/standard/url.c
2014-03-18 08:54:57 +01:00
Mateusz Kocielski
46566b78c9
Fixed off-by-one in php_url_parse_ex
...
Change order of condition, previously pointer could be derefrenced before
bound check was done.
2014-03-18 08:48:41 +01:00
Remi Collet
87a87c6682
NEWS
2014-03-14 09:51:53 +01:00
Remi Collet
17f6391bf8
Fixed Bug #66833 Default digest algo is still MD5
...
Switch to SHA1, which match internal openssl hardcoded algo.
In most case, won't even be noticed
- priority on user input (default_md)
- fallback on system config
- fallback on this default value
Recent system reject MD5 digest, noticed in bug36732.phpt failure.
While SHA1 is better than MD5, SHA256 is recommenced,
and defined as default algo in provided configuration on
recent system (Fedora 21, RHEL-7, ...). But the idea is to
keep in sync with openssl internal value for PHP internal value.
2014-03-14 09:50:15 +01:00
Michael Meyer
737c187013
Typo fix: sicret -> secret
2014-03-13 12:37:25 +02:00
Tjerk Meesters
ddd7ed9b24
Removed bogus loops
2014-03-11 19:08:18 +08:00
Anatol Belski
1a624e27a6
restored the old code in 5.4/5 related to bug #66872
...
The crash is reproducable in 5.6+ only, so 5.4 and 5.5 are fine
with the old code.
2014-03-11 11:50:14 +01:00
Christopher Jones
4dc8610d34
Merge branch 'PHP-5.4' of https://git.php.net/repository/php-src into PHP-5.4
...
# By Pierre Joye
# Via Pierre Joye
* 'PHP-5.4' of https://git.php.net/repository/php-src :
fix #66872 , invalid argument crashes gmp_testbit
fix #66872 , invalid argument crashes gmp_testbit
add vc12 (2013)
2014-03-10 16:46:39 -07:00
Pierre Joye
8391277fb8
Merge branch 'PHP-5.4' of git.php.net:php-src into PHP-5.4
...
# By Anatol Belski
# Via Anatol Belski
* 'PHP-5.4' of git.php.net:php-src:
updated libmagic.patch
2014-03-10 16:31:09 +01:00
Anatol Belski
b9d494a33b
updated libmagic.patch
2014-03-10 14:12:20 +01:00
Pierre Joye
28fa31d6e5
fix #66872 , invalid argument crashes gmp_testbit
2014-03-10 12:07:58 +01:00
Pierre Joye
af41914e15
fix #66872 , invalid argument crashes gmp_testbit
2014-03-10 12:06:40 +01:00
Pierre Joye
cedc718f73
Merge branch 'PHP-5.4' of git.php.net:php-src into PHP-5.4
...
# By Dmitry Panin (1) and Remi Collet (1)
# Via Nikita Popov
* 'PHP-5.4' of git.php.net:php-src:
Fix HTML entity table generation
Set default Digest Message to use SHA1 instead of MD5 in openssl tests as MD5 signature are now rejected by newer openssl Version.
2014-03-10 12:04:04 +01:00
Dmitry Panin
e2fc6b52f0
Fix HTML entity table generation
2014-03-06 23:10:31 +01:00
Remi Collet
721b9a7c8d
Set default Digest Message to use SHA1 instead of MD5 in openssl tests
...
as MD5 signature are now rejected by newer openssl Version.
Noticed in RHEL-7 and Fedora 21 build.
2014-03-06 10:14:08 +01:00
Pierre Joye
e590aceb5a
Merge branch 'PHP-5.4' of git.php.net:php-src into PHP-5.4
...
# By Anatol Belski (22) and others
# Via Derick Rethans (5) and others
* 'PHP-5.4' of git.php.net:php-src: (176 commits)
NEWS
Fixed Bug #66820 out-of-bounds memory access in fileinfo
Improves fix for memory leak, keep in sync with upstream.
Updated news for #60602
proc_open(): separate environment values that aren't strings
Updated NEWS for #66535
Fixed test case title
[bug 66535] X-PHP-Originating-Script adds newline if no custom headers are given
man page: long option name is --strip, not --stripped
--global have be removed in 5.2
NEWS
test for bug #66762
Fixed Bug #66762 Segfault in mysqli_stmt::bind_result() when link closed
fix tests broken by 633f898f15
add news entry
add clear_env option to FPM config
Reduce test noise on cross Oracle client <-> server version tests. This fix is already in PHP 5.6+
Reduce test noise in cross Oracle client <-> server version testing. This change is already in PHP 5.6+
fixed macro
Make sure value is initialized
...
2014-03-05 10:32:42 +01:00
Remi Collet
c2a9f73c99
NEWS
2014-03-04 20:35:56 +01:00
Remi Collet
a33759fd27
Fixed Bug #66820 out-of-bounds memory access in fileinfo
...
Upstream fix:
https://github.com/glensc/file/commit/447558595a3650db2886cd2f416ad0beba965801
Notice, test changed, with upstream agreement:
-define OFFSET_OOB(n, o, i) ((n) < (o) || (i) >= ((n) - (o)))
+define OFFSET_OOB(n, o, i) ((n) < (o) || (i) > ((n) - (o)))
2014-03-04 20:32:52 +01:00
Remi Collet
731013ee8e
Improves fix for memory leak, keep in sync with upstream.
...
Previous fix:
http://git.php.net/?p=php-src.git;a=commitdiff;h=10eb0070700382f966bf260e44135e1f724a15d2
Upstream fix:
https://github.com/glensc/file/commit/c0c0032b9e9eb57b91fefef905a3b018bab492d9
2014-03-04 13:41:37 +01:00
Tjerk Meesters
1533f98afd
Updated news for #60602
2014-03-03 05:54:09 +08:00
Tjerk Meesters
e73c05b75e
proc_open(): separate environment values that aren't strings
...
Added a test case
2014-03-03 05:49:52 +08:00
Tjerk Meesters
362b70a32c
Updated NEWS for #66535
2014-03-01 08:47:32 +08:00
Tjerk Meesters
eca13f7909
Fixed test case title
2014-02-28 22:27:32 +08:00
Tjerk Meesters
79b3c2a744
[bug 66535] X-PHP-Originating-Script adds newline if no custom headers are given
...
A newline is added to the mail headers when mail.add_x_header is used and no other headers are passed to mail().
The scenario in which custom headers are used was already fixed in #48620 , back in 2009.
2014-02-28 22:22:07 +08:00
Remi Collet
b1df743b7a
man page: long option name is --strip, not --stripped
2014-02-28 08:12:03 +01:00
Remi Collet
c73b0543f1
--global have be removed in 5.2
2014-02-28 08:10:01 +01:00
Remi Collet
33d372a45f
NEWS
2014-02-27 08:49:08 +01:00
Remi Collet
816a5d2072
test for bug #66762
2014-02-27 08:48:01 +01:00
Remi Collet
9137acc7ec
Fixed Bug #66762 Segfault in mysqli_stmt::bind_result() when link closed
...
Each new mysqli_stmt now increase the refcount of the link object.
So the link is really destroy after all statements.
Only implemented with libmysqlclient, as mysqlnd already implement
this internally.
So, libmysqlclient and mysqlnd have the same behavior.
2014-02-27 08:45:16 +01:00
Ferenc Kovacs
bd961f3e87
fix tests broken by 633f898f15
2014-02-27 02:31:42 +01:00
Antony Dovgal
4d9c556b5d
add news entry
2014-02-25 12:14:50 +04:00
Paul Annesley
eb6941e902
add clear_env option to FPM config
...
This makes it possible to leave the envoronment as is on startup and
pass all the variables to the workers.
The default value of clear_env is "yes", preserving previous behaviour.
Patch by Paul Annesley.
2014-02-25 12:12:09 +04:00
Christopher Jones
ee7671afb5
Reduce test noise on cross Oracle client <-> server version tests.
...
This fix is already in PHP 5.6+
2014-02-24 17:01:30 -08:00
Christopher Jones
8cdefd3d10
Reduce test noise in cross Oracle client <-> server version testing.
...
This change is already in PHP 5.6+
2014-02-24 16:33:41 -08:00
Anatol Belski
c6a4a7cad6
fixed macro
2014-02-24 10:12:18 +01:00
Johannes Schlüter
3f258e6b46
Make sure value is initialized
2014-02-23 14:55:29 +01:00
Johannes Schlüter
756ee95605
We can't dereference dbh if it is NULL
2014-02-23 14:18:24 +01:00
Anatol Belski
ce1fd72776
updated libmagic.patch in 5.4/5
2014-02-20 19:00:05 +01:00
Anatol Belski
10eb007070
fixed leak introduced after CVE/upgrade
2014-02-20 18:53:53 +01:00
Bob Weinand
afa03a470e
Use nicer output for characters < 32 and > 126 in exception strings
...
Using question marks might confuse more than it helps.
Users are wondering what happened to their string...
2014-02-20 17:39:58 +01:00
Daniel Lowrey
633f898f15
Skip failing tests when EC unavailable (RHEL)
2014-02-19 03:57:37 -07:00
Anatol Belski
a289b37f48
updated libmagic.patch
2014-02-18 19:08:16 +01:00
Stanislav Malyshev
ee4b3892f8
update news with CVE
2014-02-18 08:36:51 -08:00
Remi Collet
9f449df1e4
NEWS
2014-02-18 13:56:58 +01:00
Remi Collet
89f864c547
Fixed Bug #66731 file: infinite recursion
...
Upstream commit (available in file-5.17)
https://github.com/glensc/file/commit/3c081560c23f20b2985c285338b52c7aae9fdb0f
https://github.com/glensc/file/commit/cc9e74dfeca5265ad725acc926ef0b8d2a18ee70
2014-02-18 13:54:33 +01:00
Stanislav Malyshev
c612440e0f
5.4.27 now
2014-02-17 21:19:25 -08:00
Stanislav Malyshev
b79d2285df
update NEWS
2014-02-17 21:16:48 -08:00
Daniel Lowrey
a80cec1190
Fixed broken build when EC unavailable
2014-02-17 18:55:39 -05:00
Julien Pauli
b04159eed4
Updated NEWS for #65753
2014-02-17 11:05:34 +01:00
Julien Pauli
786234d351
Export JsonSerializable Interface (bug #65753 )
2014-02-17 10:25:40 +01:00
Yasuo Ohgaki
f275fdcf00
Fixed possbile injections against pg_insert()/pg_delete()/pg_update()/pg_select()
2014-02-16 10:45:15 +09:00
Yasuo Ohgaki
6f14b5ab41
Refactor build_tablename()
2014-02-16 07:51:27 +09:00
Yasuo Ohgaki
9f251548ae
Revise encoding blacklist
2014-02-16 06:21:39 +09:00
Felipe Pena
9d84f6c06e
- Fix ZTS build when HAVE_PQESCAPELITERAL is not set
2014-02-15 11:04:49 -02:00
Yasuo Ohgaki
7ce88b2d8a
Update NEWS
2014-02-15 19:20:34 +09:00
Yasuo Ohgaki
832c21cabf
Refactor and cleanup. WS is cleaned up. Use -b if it is needed.
...
Added compatibility macros, PQescapeStringConn, PGSQLescapeLiteral/Identifier, PGSQLfree.
2014-02-15 18:20:58 +09:00
Daniel Lowrey
5cc851e83e
Update NEWS
2014-02-14 21:41:18 -07:00
mk-j
19524fc6fe
Fix for bug66501 - "key type not supported in this PHP build"
2014-02-14 18:11:46 -07:00
Veres Lajos
35101e9ef4
a few typofixes
2014-02-14 14:51:10 +02:00
Mats Lindh
6188674f1e
Replace old SVN references to Git
2014-02-09 21:17:26 +02:00
Anatol Belski
e41059c633
update libs_version.txt
2014-02-06 09:13:05 +01:00
Hannes Magnusson
1e0fdf0256
Fix year
2014-02-05 10:15:11 -08:00
Anatol Belski
71ebc0a7f3
adapt test to curl 7.35.0 upgrade
...
which is a security one and should be performed as in
http://curl.haxx.se/docs/adv_20140129.html
2014-02-05 15:15:34 +01:00
Stanislav Malyshev
770aeeb40c
tests still failing, so xfail for now until fixed
2014-01-29 23:48:07 -08:00
Yasuo Ohgaki
f5e097d1ed
Fixed bug data->fd not set to -1 for open_basedir failure.
2014-01-30 14:15:29 +09:00
Yasuo Ohgaki
d941ac5b4f
Fixed zend.multibyte tests partially
2014-01-29 15:41:30 +09:00
Andrey Hristov
79cbcd9ded
add text for the new constants
2014-01-28 15:32:59 +02:00
Andrey Hristov
eafe070f86
Merge branch 'PHP-5.4' of git.php.net:php-src into PHP-5.4
2014-01-28 15:23:54 +02:00
Andrey Hristov
d3faae03ec
add new consts
2014-01-28 15:23:41 +02:00
Bob Weinand
e9b4bca5a0
Fixed arginfo of PDO::__construct() to match the docs and zend_parse_parameters definition.
2014-01-28 13:31:52 +01:00
Yasuo Ohgaki
4dee63ca1c
Remove obsolete description
2014-01-27 18:41:31 +09:00
Yasuo Ohgaki
d65ddb633d
Fix English and improve by Stas. Thanks :)
2014-01-26 17:20:13 -08:00
Yasuo Ohgaki
f496aac1f6
Update source docs
2014-01-26 17:20:12 -08:00
Yasuo Ohgaki
76c098395d
Revert "Update source docs"
...
This reverts commit 10d06cd4ff3038d2f02a18936793969e7aee0bda.
2014-01-26 17:20:12 -08:00
Yasuo Ohgaki
60bcf84dda
Update source docs
2014-01-26 17:20:12 -08:00
Stanislav Malyshev
d5560faaa3
drop precision since trigonometric functions are non-portable
...
See: http://stackoverflow.com/questions/21212326/floating-point-arithmetic-and-reproducibility
2014-01-26 15:51:17 -08:00
Stanislav Malyshev
f49965b487
XFAIL multibyte tests until they are fixed (bug 66582)
2014-01-26 15:51:17 -08:00
Derick Rethans
251b914afa
Merge branch '45543-timezone-set' into PHP-5.4
2014-01-26 14:02:19 +01:00
Derick Rethans
22dba2f5f3
Fixed bug #45543 : DateTime::setTimezone can not set timezones without ID.
2014-01-26 14:01:58 +01:00
Stanislav Malyshev
4e308abf28
fix test bug62479.phpt
2014-01-25 23:25:39 -08:00
Stanislav Malyshev
0742de587a
Merge branch 'pull-request/571' into PHP-5.4
...
* pull-request/571:
Implement ldap_modify_batch.
2014-01-25 21:59:57 -08:00
Derick Rethans
fb16bff2ba
Merge branch '44780-fallback' into PHP-5.4
2014-01-25 16:15:50 +01:00
Derick Rethans
e6ab180394
Fixed bug #44780 : some time zone offsets not recognized by timezone_name_from_abbr.
2014-01-25 16:14:51 +01:00
Rouven Weßling
aee6344e24
Add ZEND_ARG_CALLABLE_INFO to allow internal function to type hint against callable.
2014-01-25 00:04:50 +01:00
Ferenc Kovacs
69af357182
Merge branch 'PHP-5.3' into PHP-5.4
...
* PHP-5.3:
fix the primary qa email address and update the list of available people being able to add moderators to our lists
Revert "Fix #62479 : Some chars not parsed in passwords"
Fix #62479 : Some chars not parsed in passwords
2014-01-24 16:07:29 +01:00
Ferenc Kovacs
4b48b29988
fix the primary qa email address and update the list of available people being able to add moderators to our lists
2014-01-24 16:06:58 +01:00
Will Fitch
c4c10a222e
Update gitignore and Makefile for additional entries
2014-01-23 21:28:45 -05:00
Ondřej Hošek
c0e3429904
Implement ldap_modify_batch.
2014-01-22 18:54:11 +01:00
Will Fitch
8aa93b7f2c
Revert "Fix #62479 : Some chars not parsed in passwords"
...
This reverts commit e6bb90c66a .
2014-01-19 13:02:20 -05:00
Will Fitch
e6bb90c66a
Fix #62479 : Some chars not parsed in passwords
...
This fixes an issue where backslashes and spaces aren't
correctly parsed for passwords.
2014-01-18 19:27:00 -05:00
Pierre Joye
9b54901ffb
add vc12 (2013)
2013-11-04 22:19:02 +01:00
Kevin Israel
82a4f1a1a2
Fix #66021 (Blank line inside empty array/object)
...
Changed json_encode() so that when the JSON_PRETTY_PRINT option is specified,
the pair of linefeeds immediately after an opening bracket and before the
corresponding closing bracket is omitted when the array or object contains no
elements or accessible properties (and hence would have a blank line between
the brackets).
2013-11-02 15:59:11 -04:00