sync NEWS

Merge branch 'master' into PHP-7.0.0
* master: (24 commits) 5.5.29 next fix merge fix test fix merge fix test virtual_file_ex uses emalloc in 5.6+ __wakeup doesn't have to be final update NEWS fix test update NEWS Fix bug #70019 - limit extracted files to given directory Do not do convert_to_* on unserialize, it messes up references Fixed bug #70098 (Real memory usage doesn't decrease) Fix #69793 - limit what we accept when unserializing exception Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList) Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject ignore signatures for packages too Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage Fixed bug #69892 Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes ...
2026-11-12 03:30:50 +00:00 · 2015-08-05 06:56:40 +02:00 · 2015-08-05 06:15:16 +02:00 · 2015-08-04 20:20:01 +02:00 · 2015-08-04 20:18:28 +02:00 · 2015-08-04 20:16:27 +02:00
3 changed files with 32 additions and 3 deletions
@@ -21,6 +21,12 @@ PHP                                                                        NEWS
    (Hugh Davenport)
  . Fixed bug #70182 (Segfault in ZEND_ASSIGN_DIV_SPEC_CV_UNUSED_HANDLER).
    (Hugh Davenport)
+  . Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive
+    method calls). (Stas)
+  . Fixed bug #69892 (Different arrays compare indentical due to integer key
+    truncation). (Nikita)
+  . Fixed bug #70121 (unserialize() could lead to unexpected methods execution
+    / NULL pointer deref). (Stas)

 - Curl:
  . Fixed bug #70163 (curl_setopt_array() type confusion). (Laruence)
@@ -33,9 +39,32 @@ PHP                                                                        NEWS
  . Fixed bug #70111 (Segfault when a function uses both an explicit return
    type and an explicit cast). (Laruence)

+- OpenSSL:
+  . Fixed bug #70014 (openssl_random_pseudo_bytes() is not cryptographically
+    secure). (Stas)
+
+- Phar:
+  . Improved fix for bug #69441. (Anatol Belski)
+  . Fixed bug #70019 (Files extracted from archive may be placed outside of 
+    destination directory). (Anatol Belski)
+
 - Phpdbg: 
  . Fixed bug #70138 (Segfault when displaying memory leaks). (Bob)

+- SOAP:
+  . Fixed bug #70081 (SoapClient info leak / null pointer dereference via
+     multiple type confusions). (Stas)
+
+- SPL:
+  . Fixed bug #70068 (Dangling pointer in the unserialization of ArrayObject
+    items). (sean.heelan)
+  . Fixed bug #70166 (Use After Free Vulnerability in unserialize() with
+    SPLArrayObject). (taoguangchen at icloud dot com)
+  . Fixed bug #70168 (Use After Free Vulnerability in unserialize() with
+    SplObjectStorage). (taoguangchen at icloud dot com)
+  . Fixed bug #70169 (Use After Free Vulnerability in unserialize() with
+    SplDoublyLinkedList). (taoguangchen at icloud dot com)
+
 - Standard:
  . Fixed bug #70140 (str_ireplace/php_string_tolower - Arbitrary Code
  . Implemented #70112 (Allow "dirname" to go up various times). (Remi)
@@ -120,7 +120,7 @@ int zend_sprintf(char *buffer, const char *format, ...);
 PHP_MAJOR_VERSION=7
 PHP_MINOR_VERSION=0
 PHP_RELEASE_VERSION=0
-PHP_EXTRA_VERSION="-dev"
+PHP_EXTRA_VERSION="beta3"
 PHP_VERSION="$PHP_MAJOR_VERSION.$PHP_MINOR_VERSION.$PHP_RELEASE_VERSION$PHP_EXTRA_VERSION"
 PHP_VERSION_ID=`expr [$]PHP_MAJOR_VERSION \* 10000 + [$]PHP_MINOR_VERSION \* 100 + [$]PHP_RELEASE_VERSION`

@@ -3,6 +3,6 @@
 #define PHP_MAJOR_VERSION 7
 #define PHP_MINOR_VERSION 0
 #define PHP_RELEASE_VERSION 0
-#define PHP_EXTRA_VERSION "-dev"
-#define PHP_VERSION "7.0.0-dev"
+#define PHP_EXTRA_VERSION "beta3"
+#define PHP_VERSION "7.0.0beta3"
 #define PHP_VERSION_ID 70000
Author	SHA1	Message	Date
Anatol Belski	1674bd9b15	sync NEWS	2015-08-05 06:56:40 +02:00
Anatol Belski	69168b4d0c	Merge branch 'master' into PHP-7.0.0 * master: (24 commits) 5.5.29 next fix merge fix test fix merge fix test virtual_file_ex uses emalloc in 5.6+ __wakeup doesn't have to be final update NEWS fix test update NEWS Fix bug #70019 - limit extracted files to given directory Do not do convert_to_* on unserialize, it messes up references Fixed bug #70098 (Real memory usage doesn't decrease) Fix #69793 - limit what we accept when unserializing exception Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList) Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject ignore signatures for packages too Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage Fixed bug #69892 Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes ...	2015-08-05 06:15:16 +02:00
Anatol Belski	02f762f146	sync NEWS	2015-08-04 20:20:01 +02:00
Anatol Belski	738729274f	set versions	2015-08-04 20:18:28 +02:00
Anatol Belski	72bbde5e78	Merge branch 'master' into PHP-7.0.0 * master: run credits script	2015-08-04 20:16:27 +02:00
Anatol Belski	29f0493075	Merge branch 'master' into PHP-7.0.0 * master: (174 commits) Fixed possible access to uninitialized data (prevents valgrind issues in Zend/tests/bug70089.phpt) Added NEWS entry Get rid of ZEND_FAST_CALL_UNBOUND Move most "finally" related code-generation from pass_two() to compiler. Try to fix finally issue Fix further leaks Fix valgrind errors in phpdbg Fix last invalid read Also revert debugging run-tests.php changes... Fix a few valgrind errors in phpdbg Fix breaking on HANDLE_EXCEPTION (opline_before_exception) Remove unneded space(s) Fixed tests (system dependent numbers are replaced with %d) Fixed test updated UPGRADING Give better credit in NEWS Fixed bug #70182 (Segfault in ZEND_ASSIGN_OP handlers) more info for UPGRADING.INTERNALS updated NEWS Fixed bug #70183 null pointer deref (segfault) in zend_eval_const_expr fix inconsistent dll linkage ...	2015-08-04 11:38:46 +02:00
Anatol Belski	0f60a746e4	fix merge mistake	2015-07-21 05:55:54 -07:00
Anatol Belski	735a7c6a56	one more test from `ef1b588f6a`	2015-07-21 05:52:12 -07:00
Anatol Belski	94e7c770ba	readd test from `3bb70fe290`	2015-07-21 05:51:09 -07:00
Anatol Belski	26abfc8bc9	readd commit `3bb70fe290`	2015-07-21 05:49:36 -07:00
Anatol Belski	ec4350e4c8	bump versions	2015-07-21 12:40:58 +02:00
Anatol Belski	3e971e7d5c	sync NEWS	2015-07-21 12:34:30 +02:00
Anatol Belski	b148ef4496	Merge branch 'master' into PHP-7.0.0 * master: (204 commits) Reverted `ad4533fdba` update UPGRADING updated NEWS fix comment libwebp support for linux Replaced libvpx by libwebp (first draft; Windows only) update news with bug #70022 Change E_ERROR and some E_WARNING to E_RECOVERABLE_ERROR. Add tests for json_last_error()/json_last_error_msg() failures updated NEWS updated NEWS Exclude opcache from a few opcode related tests updated NEWS updated NEWS Fix #66387: Stack overflow with imagefilltoborder Fix various Windows issues (e.g. dir separators) Remove bogus exception_save() from FETCH_CLASS Fix readline/libedit build Do not use readline when not having a tty This is important for e.g. run-tests.php Add show_unexecuted option to phpdbg_end_oplog() ... Conflicts: Zend/tests/temporary_cleaning_001.phpt Zend/tests/temporary_cleaning_003.phpt Zend/tests/temporary_cleaning_004.phpt Zend/tests/temporary_cleaning_005.phpt Zend/zend_compile.c Zend/zend_compile.h sapi/phpdbg/phpdbg_opcode.c	2015-07-21 12:27:50 +02:00
Anatol Belski	ad8a73dd55	Revert "Fixed bug #62210 (Exceptions can leak temporary variables. As a part of the fix serious refactoring was done. op_array->brk_cont_array was removed, and replaced with more general and speed efficient op_array->T_liveliness. ZEND_GOTO opcode is always replaced by ZEND_JMP at compile time). (Bob, Dmitry, Laruence)" This reverts commit `5ee8413259`.	2015-07-10 12:06:56 +02:00
Anatol Belski	ceefc0947a	Revert "Tuned off dubugging of live ranges" This reverts commit `404dc93d35`.	2015-07-10 12:06:33 +02:00
Anatol Belski	2928e412e6	Revert "Remove loop_var_stack" This reverts commit `b3a4c05071`.	2015-07-10 12:06:06 +02:00
Anatol Belski	770571bce9	Revert "ZEND_SEPARATE reuses temporaries" This reverts commit `dfe6fdaa72`.	2015-07-10 12:05:43 +02:00
Anatol Belski	6cdf477254	Revert "Add assertion in liveliness computation" This reverts commit `62062dcd0e`.	2015-07-10 12:05:35 +02:00
Anatol Belski	5784b8f8e6	Revert "Fixed invalid live-range detection" This reverts commit `724e98498a`.	2015-07-10 12:05:26 +02:00
Anatol Belski	ee573eba67	fixed NEWS	2015-07-09 17:34:49 +02:00
Dmitry Stogov	724e98498a	Fixed invalid live-range detection	2015-07-09 17:26:01 +02:00
Nikita Popov	62062dcd0e	Add assertion in liveliness computation Assert that a live-range does not start, while one for the same variable is already active. To satisfy this constraint, explicitly exclude writes from JMP_SET and COALESCE. They were previously also handled correctly, because their result variable was only killed after the second write to it after the false branch. This just makes it more explicit.	2015-07-09 17:25:42 +02:00
Nikita Popov	dfe6fdaa72	ZEND_SEPARATE reuses temporaries	2015-07-09 17:25:26 +02:00
Anatol Belski	8d09c84bd3	update NEWS	2015-07-08 01:35:42 +02:00
Anatol Belski	955303ddc8	bump the versions	2015-07-08 01:20:10 +02:00
Anatol Belski	2a0e037c0d	Merge branch 'master' into PHP-7.0.0 * master: (282 commits) Remove loop_var_stack SQLite3::open/__construct has 2 optional args Better fix for bug #69958 Better fix for bug #69958 Fix bug #69669 (mysqlnd is vulnerable to BACKRONYM) Fix bug #69923 - Buffer overflow and stack smashing error in phar_fix_filepath Fix bug #69958 - Segfault in Phar::convertToData on invalid file Use NULL where possible for exception class Allow NULL for exception_ce fix C89 compat Better fix for bug #69958 update news Fix bug #69669 (mysqlnd is vulnerable to BACKRONYM) Fix bug #69923 - Buffer overflow and stack smashing error in phar_fix_filepath Fix bug #69958 - Segfault in Phar::convertToData on invalid file fix C89 compat added info about the user space stream context for pipes mention pcre.jit in the supplied php.ini-* Fix test related to `c22da81` add missing second argument for ucfirst to the proto ...	2015-07-08 01:17:19 +02:00
Anatol Belski	9876b2c2cf	sync NEWS	2015-06-23 19:33:33 +02:00
Anatol Belski	5ea2b70645	bump version	2015-06-23 19:32:58 +02:00
Anatol Belski	29711264a8	Merge branch 'master' into PHP-7.0.0 * master: (239 commits) Moved NEWS entry for bug #69864 to proper category Moved NEWS entry for bug #69864 to proper category Moved NEWS entry for bug #69864 to proper category updated NEWS updated NEWS Fixed two errors in LDAP tests Fixed two errors in LDAP tests Revert "Simplify php_implode(). Fill the resulting string in direct order." The patch slightly improved performance of string imploding, but reduced speed of integers imploding. Encapsulate FastCGI implementation details. Previously fcgi_request defined in main/fastcgi.h might be treated differently in different files, because of different behavior of #ifdef TCP_NODELAY. This leaded to stack memory corruption and unpredictable crashes. Fixed bug #69905 (null ptr deref and segfault in ZEND_FETCH_DIM_RW_SPEC_VAR_UNUSED_HANDLER) updated NEWS Fixed bug #69864 (Segfault in preg_replace_callback) Simplify php_implode(). Fill the resulting string in direct order. bump API version to 6.8 bump API version to 6.8 bump API version to 6.8 Drop duplicate object-to-type notices Added comments Drop superfluous __toString handling code This macro is defined in zend_virtual_cwd.h, avoid redef ...	2015-06-23 18:49:42 +02:00
Ferenc Kovacs	dbf30365aa	Merge remote-tracking branch 'origin/master' into PHP-7.0.0 * origin/master: add missing NEWS entries add missing NEWS entries Fixed bug #69646 (OS command injection vulnerability in escapeshellarg) add NEWS Fixed bug #68776 fix test update NEWS fix typo Fix bug #69646 OS command injection vulnerability in escapeshellarg Fix #69719 - more checks for nulls in paths fix test description Fixed Buf #68812 Unchecked return value.	2015-06-10 10:49:51 +02:00
Ferenc Kovacs	9cb8cb4797	Merge branch 'master' into PHP-7.0.0 * master: fix hard-coded path in test	2015-06-09 16:42:24 +02:00
Ferenc Kovacs	8a884d628b	7.0.0alpha1	2015-06-09 14:24:39 +02:00