delta/php-git.git, branch PHP-7.2 git.php.net: repository/php-src.git Fix #77423: parse_url() will deliver a wrong host to user 2021-01-02T04:08:01+00:00 Christoph M. Becker cmbecker69@gmx.de 2020-05-13T07:36:52+00:00 2d3d72412a6734e19a38ed10f385227a6238e4a6 To avoid that `parse_url()` returns an erroneous host, which would be valid for `FILTER_VALIDATE_URL`, we make sure that only userinfo which is valid according to RFC 3986 is treated as such. For consistency with the existing url parsing code, we use ctype functions, although that is not necessarily correct. 
To avoid that `parse_url()` returns an erroneous host, which would be
valid for `FILTER_VALIDATE_URL`, we make sure that only userinfo which
is valid according to RFC 3986 is treated as such.

For consistency with the existing url parsing code, we use ctype
functions, although that is not necessarily correct.
bump version to 7.2.35-dev 2020-09-30T05:36:59+00:00 Remi Collet remi@php.net 2020-09-30T05:36:59+00:00 662083fc4f3a570f5b9180e80c2ddec86a8fded8 






[ci skip] typo
2020-09-29T06:49:56+00:00

Remi Collet
remi@php.net

2020-09-29T06:49:56+00:00

af500b8685c3b2552c13b6c1a2d721d6b027585f












Update NEWS & UPGRADING
2020-09-29T04:38:43+00:00

Stanislav Malyshev
stas@php.net

2020-09-29T04:34:52+00:00

7bc112a142720fdbd553e5bcdbbe98c10d10928a












Do not decode cookie names anymore
2020-09-27T06:47:04+00:00

Stanislav Malyshev
stas@php.net

2020-09-21T01:08:55+00:00

6559fe912661ca5ce5f0eeeb591d928451428ed0












Fix bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV)
2020-09-27T06:46:53+00:00

Stanislav Malyshev
stas@php.net

2020-09-27T05:08:52+00:00

0216630ea2815a5789a24279a1211ac398d4de79












bump version to 7.2.34-dev
2020-08-04T07:55:29+00:00

Remi Collet
remi@php.net

2020-08-04T07:50:07+00:00

6b8ffdbdeb167b6eae68f9beb934268fac90fa83












Update NEWS
2020-08-03T08:14:38+00:00

Stanislav Malyshev
stas@php.net

2020-08-03T08:14:38+00:00

07aeb9171d884a09b7f11ac731d0878f092051ec












Fix #79877: getimagesize function silently truncates after a null byte
2020-08-02T22:33:24+00:00

Christoph M. Becker
cmbecker69@gmx.de

2020-07-21T09:07:43+00:00

ff577b04c0d250473a0ef46f8e332960fec3ca2c

We have to check for NUL bytes if `getimagesize()` has been called.





We have to check for NUL bytes if `getimagesize()` has been called.







Fix #79797: Use of freed hash key in the phar_parse_zipfile function
2020-08-02T22:31:29+00:00

Christoph M. Becker
cmbecker69@gmx.de

2020-07-14T15:04:24+00:00

7355ab81763a3d6a04ac11660e6a16d58838d187

We must not use heap memory after we freed it.





We must not use heap memory after we freed it.