delta/php-git.git, branch php-5.6.12 git.php.net: repository/php-src.git 5.6.12 2015-08-06T07:55:57+00:00 Ferenc Kovacs tyrael@php.net 2015-08-06T07:55:57+00:00 f2722bdbc60403300a033ee8091a2da31f7c90c1 






Merge branch 'PHP-5.5' into PHP-5.6
2015-08-06T07:23:18+00:00

Anatol Belski
ab@php.net

2015-07-28T15:42:37+00:00

f14dc0519c8d87e8fa18920a86bf8dee42e2b502

* PHP-5.5:
  Fixed bug #70002 TS issues with temporary dir handling





* PHP-5.5:
  Fixed bug #70002 TS issues with temporary dir handling







__wakeup doesn't have to be final
2015-08-06T07:17:51+00:00

Stanislav Malyshev
stas@php.net

2015-08-04T23:13:26+00:00

bbc213d3cf5488fdd79caddd76ebf2af10f4ac85












virtual_file_ex uses emalloc in 5.6+
2015-08-06T07:15:24+00:00

Stanislav Malyshev
stas@php.net

2015-08-04T23:31:57+00:00

ab2abe322f5c6192424cb14dcc0828d7c8b95ba1












fix test
2015-08-06T07:15:23+00:00

Stanislav Malyshev
stas@php.net

2015-08-04T23:45:20+00:00

f6fdc293ce4f58d0df3d9596542d87be81aca9a7












Merge branch 'PHP-5.5' into PHP-5.6
2015-08-06T06:52:09+00:00

Stanislav Malyshev
stas@php.net

2015-08-04T22:29:13+00:00

7e254ac00ea88a5e6f585fb089c240e88d99b506

* PHP-5.5:
  update NEWS
  fix test
  update NEWS
  Fix bug #70019 - limit extracted files to given directory
  Do not do convert_to_* on unserialize, it messes up references
  Fix #69793 - limit what we accept when unserializing exception
  Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList)
  Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject
  ignore signatures for packages too
  Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage
  Fixed bug #69892
  Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes
  Improved fix for Bug #69441
  Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items)
  Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref)
  Fix bug #70081: check types for SOAP variables

Conflicts:
	ext/soap/php_http.c
	ext/spl/spl_observer.c





* PHP-5.5:
  update NEWS
  fix test
  update NEWS
  Fix bug #70019 - limit extracted files to given directory
  Do not do convert_to_* on unserialize, it messes up references
  Fix #69793 - limit what we accept when unserializing exception
  Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList)
  Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject
  ignore signatures for packages too
  Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage
  Fixed bug #69892
  Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes
  Improved fix for Bug #69441
  Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items)
  Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref)
  Fix bug #70081: check types for SOAP variables

Conflicts:
	ext/soap/php_http.c
	ext/spl/spl_observer.c







updated libs_versions.txt
2015-08-06T06:50:10+00:00

Anatol Belski
ab@php.net

2015-07-24T18:23:07+00:00

a3423aae54d1bb02849e6d9a514b266d01274a64












fix config.w32
2015-07-23T07:26:34+00:00

Anatol Belski
ab@php.net

2015-07-23T05:34:31+00:00

e85113388235fc7fe645a862d59f8f3fae0e3f8e












fix C99 compat
2015-07-23T07:26:24+00:00

Anatol Belski
ab@php.net

2015-07-23T05:31:54+00:00

e85f8e112d6874f2a8b9b2d1ec1a31aae07e7d41












5.6.12RC1
2015-07-22T07:43:46+00:00

Julien Pauli
jpauli@php.net

2015-07-22T07:43:46+00:00

b5275ff36acfb3ffa78849bcfeb1194aab69e87c