| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|\ \
| |/
| |
| |
| | |
* PHP-7.0:
Fixed bug #73350 (Exception::__toString() cause circular references)
|
| | |
|
| |
| |
| |
| |
| |
| | |
This reverts commit 611ab7fe5b9fe41de56c25b1d348a866794b1fb1.
Overseen strpprintf is there
|
| | |
|
| |
| |
| |
| | |
(cherry picked from commit 40e7baab3c90001beee4c8f0ed0ef79ad18ee0d6)
|
| |
| |
| |
| |
| |
| |
| |
| | |
This reverts commit 611ab7fe5b9fe41de56c25b1d348a866794b1fb1.
Overseen strpprintf is there
(cherry picked from commit 3104882cf873308c43dca20bdfd698dd3470a246)
|
| |
| |
| |
| | |
(cherry picked from commit bec0121733cc5777c4d3fde8e9ff56fe68c039d3)
|
| |
| |
| |
| | |
(cherry picked from commit 611ab7fe5b9fe41de56c25b1d348a866794b1fb1)
|
| |
| |
| |
| | |
(cherry picked from commit 821a230f290b7457d4223001286afe00fe887277)
|
| |
| |
| |
| |
| |
| |
| | |
* PHP-7.0:
Fix bug #73190: memcpy negative parameter _bc_new_num_ex
(cherry picked from commit af1bf873fe4fc70be17fa9f270e8f30666f2d2db)
|
| | |
|
|\ \
| |/
| |
| |
| | |
Conflicts:
Zend/zend_vm_execute.h
|
| | |
|
| | |
|
|\ \
| |/
| |
| |
| |
| |
| |
| | |
* PHP-7.0:
Fixed bug #72581 (previous property undefined in Exception after deserialization)
Conflicts:
Zend/zend_exceptions.c
|
| |
| |
| |
| | |
deserialization)
|
|\ \
| |/
| |
| |
| | |
* PHP-7.0:
Allow "proxy" ovjects to substitute their class names through get_class_name() handler (similar to var_dump() and others).
|
| |
| |
| |
| | |
get_class_name() handler (similar to var_dump() and others).
|
| |
| |
| |
| |
| | |
"%p" replaced by ZEND_LONG_FMT to avoid compilation warnings.
Fixed most incorrect use cases of format specifiers.
|
| | |
|
| | |
|
| |
| |
| |
| | |
but is never used.
|
| |
| |
| |
| |
| |
| |
| | |
"called_scope" made sense only for static method calls, for dynamic calls it was always equal to the class of $this.
Now EG(This) may store IS_OBJECT + $this or IS_UNUSED + "called_scope" (of course, "called_scope" may be NULL).
Some code might need to be adopted to support this change.
Checks (Z_OBJ(EX(This))) might need to be converted into (Z_TYPE(EX(This)) == IS_OBJECT).
|
| | |
|
|\ \
| |/ |
|
| | |
|
|/ |
|
| |
|
|\
| |
| |
| |
| | |
Conflicts:
Zend/zend_exceptions.c
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
This reverts commit b0c77fb80c9bceac37ec266f2d5a20131755c44a.
|
| | |
|
| |
| |
| |
| | |
So revert this part to what it was originally.
|
| |
| |
| |
| | |
Turns out zend_update_property_str already does the copy implicitly.
|
| |
| |
| |
| | |
Minor optimization...
|
| | |
|
| | |
|
|\ \
| |/
| |
| |
| | |
* PHP-5.6:
__wakeup doesn't have to be final
|
| |\
| | |
| | |
| | |
| | | |
* PHP-5.4:
__wakeup doesn't have to be final
|
| | | |
|
|\ \ \
| |/ /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* PHP-5.6:
update NEWS
fix test
update NEWS
Fix bug #70019 - limit extracted files to given directory
Do not do convert_to_* on unserialize, it messes up references
Fix #69793 - limit what we accept when unserializing exception
Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList)
Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject
ignore signatures for packages too
Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage
Fixed bug #69892
Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes
Improved fix for Bug #69441
Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items)
Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref)
Fix bug #70081: check types for SOAP variables
Conflicts:
Zend/zend_exceptions.c
ext/date/php_date.c
ext/openssl/openssl.c
ext/phar/phar_internal.h
ext/soap/php_http.c
ext/spl/spl_array.c
ext/spl/spl_dllist.c
ext/spl/spl_observer.c
ext/standard/tests/serialize/bug69152.phpt
sapi/cli/tests/005.phpt
|
| |\ \
| | |/
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* PHP-5.4:
Fix bug #70019 - limit extracted files to given directory
Do not do convert_to_* on unserialize, it messes up references
Fix #69793 - limit what we accept when unserializing exception
Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList)
Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject
ignore signatures for packages too
Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage
Fixed bug #69892
Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes
Improved fix for Bug #69441
Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items)
Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref)
Fix bug #70081: check types for SOAP variables
Conflicts:
.gitignore
ext/date/php_date.c
ext/spl/spl_array.c
ext/spl/spl_observer.c
|
| | | |
|
| | |
| | |
| | |
| | | |
NULL pointer deref)
|
| | | |
|
| | | |
|