delta/php-git.git, branch php-5.6.28 git.php.net: repository/php-src.git 5.6.28 2016-11-09T01:22:57+00:00 Ferenc Kovacs tyra3l@gmail.com 2016-11-09T01:22:57+00:00 1ee7933f64f0a2ad66105a494b89247be305eda7 






update NEWS
2016-11-09T01:22:16+00:00

Ferenc Kovacs
tyra3l@gmail.com

2016-11-09T01:22:16+00:00

7bded39b2fc14c5a181a93a57bc23af858b585f6












fix memory leak
2016-11-09T00:51:08+00:00

Anatol Belski
ab@php.net

2016-11-08T11:12:58+00:00

87bb51eb9fcf95dd4c71eb1fbb00d00a243f4276












add missing RETURN_STRINGL_CHECK
2016-11-09T00:48:05+00:00

Anatol Belski
ab@php.net

2016-11-06T16:51:25+00:00

e43b3bff6a6f5358712ff18961ffa650224dcdcb

As RETVAL_STRINGL_CHECK is already there, this one is needed for
completion. One place in ext/bz2 is missing that, so it will likely
be useful for other possible fixes.





As RETVAL_STRINGL_CHECK is already there, this one is needed for
completion. One place in ext/bz2 is missing that, so it will likely
be useful for other possible fixes.







fix dir separator in test
2016-11-09T00:47:54+00:00

Anatol Belski
ab@php.net

2016-11-04T17:29:54+00:00

676b64e8f0f3984f101a4429aede4de0a263ba93












Add length check for bzcompress too - fix for bug #73356
2016-11-09T00:47:10+00:00

Stanislav Malyshev
stas@php.net

2016-11-04T05:10:22+00:00

f14da6f0b01e329c3809de93c1b928ad4b4fa6fa












More string length checks & fixes
2016-11-09T00:47:02+00:00

Stanislav Malyshev
stas@php.net

2016-11-04T03:36:52+00:00

18fef10644d865f9d25e49ed501f4f739efe44fc












Fixed bug #73418 Integer Overflow in "_php_imap_mail" leads to crash
2016-11-09T00:46:49+00:00

Anatol Belski
ab@php.net

2016-11-03T16:03:23+00:00

b823b14e374251ad6ab437a9631e4b010ca09b68












Fix #72696: imagefilltoborder stackoverflow on truecolor images
2016-11-09T00:46:37+00:00

Christoph M. Becker
cmbecker69@gmx.de

2016-10-25T11:23:16+00:00

7c27d0329f730d701d18e66db7e85ef7d128712b

We must not allow negative color values be passed to
gdImageFillToBorder(), because that can lead to infinite recursion
since the recursion termination condition will not necessarily be met.





We must not allow negative color values be passed to
gdImageFillToBorder(), because that can lead to infinite recursion
since the recursion termination condition will not necessarily be met.







Fix #72482: Ilegal write/read access caused by gdImageAALine overflow
2016-11-09T00:46:28+00:00

Christoph M. Becker
cmbecker69@gmx.de

2016-10-25T13:14:22+00:00

dd8a2cc2455e61c4507b8f419d345da90fa08238

Instead of rolling our own bounds check we use clip_1d() as it's done
in gdImageLine() and in external libgd. We must not pass the image
width and height, respectively, but rather the largest ordinate value
that is allowed to be accessed, i.e. width-1 and height-1,
respectively.





Instead of rolling our own bounds check we use clip_1d() as it's done
in gdImageLine() and in external libgd. We must not pass the image
width and height, respectively, but rather the largest ordinate value
that is allowed to be accessed, i.e. width-1 and height-1,
respectively.