summaryrefslogtreecommitdiff
path: root/ext/standard/var_unserializer.c
Commit message (Expand)AuthorAgeFilesLines
* Fixed bug #74103 and bug #75054Nikita Popov2017-08-121-493/+506
* Fixed bug #74111Nikita Popov2017-07-041-512/+487
* fix datatypeAnatol Belski2017-07-041-1/+1
* Fixed bug #74101 and bug #74614Nikita Popov2017-07-041-32/+36
* Merge branch 'PHP-5.6' into PHP-7.0Nikita Popov2017-01-051-500/+546
|\
| * Implement delayed __wakeupNikita Popov2017-01-051-509/+564
* | Update copyright headers to 2017Sammy Kaye Powers2017-01-041-1/+1
* | Use correct string release functionStanislav Malyshev2017-01-021-1/+1
* | Fix error reportingStanislav Malyshev2017-01-021-2/+2
* | Merge branch 'PHP-5.6' into PHP-7.0Stanislav Malyshev2017-01-021-506/+497
|\ \ | |/
| * Merge branch 'PHP-5.6.30' into PHP-5.6Stanislav Malyshev2017-01-021-503/+494
| |\
| | * Fix bug #73825 - Heap out of bounds read on unserialize in finish_nested_data()Stanislav Malyshev2016-12-301-33/+47
* | | Merge branch 'PHP-5.6' into PHP-7.0Nikita Popov2017-01-011-480/+505
|\ \ \ | |/ /
| * | FIx bug #70213Nikita Popov2017-01-011-474/+499
| |/
| * Fix bug #73052 - Memory Corruption in During Deserialized-object DestructionStanislav Malyshev2016-09-121-30/+31
* | Bug #72663 - part 2Nikita Popov2016-08-171-4/+32
* | Bug #72663 - part 1Nikita Popov2016-08-171-5/+13
* | Merge branch 'PHP-5.6' into PHP-7.0Stanislav Malyshev2016-08-171-14/+15
|\ \ | |/
| * Improve fix for #72663Stanislav Malyshev2016-08-161-31/+37
| * Update commentStanislav Malyshev2016-08-161-1/+1
| * Fix bug #72663 - destroy broken object when unserializingStanislav Malyshev2016-08-161-33/+37
* | Use zend_string_safe_allocXinchen Hui2016-04-271-1/+1
* | Improved fix for #71940Xinchen Hui2016-04-071-17/+15
* | Fixed bug #71940 (Unserialize crushes on restore object reference)Xinchen Hui2016-04-071-17/+19
* | Merge branch 'PHP-5.6' into PHP-7.0Xinchen Hui2016-03-171-16/+27
|\ \ | |/
| * Fixed bug #71840 (Unserialize accepts wrongly data)Xinchen Hui2016-03-171-22/+32
* | Eliminate usages of _PP macrosNikita Popov2016-03-031-17/+16
* | Fixed bug #71311: Use-after-free vulnerability in SPL(ArrayObject, unserialize)Stanislav Malyshev2016-01-171-27/+32
* | Merge branch 'PHP-5.6' into PHP-7.0Lior Kaplan2016-01-011-1/+1
|\ \ | |/
| * Happy new year (Update copyright to 2016)Lior Kaplan2016-01-011-1/+1
* | Also fixed 'r'Xinchen Hui2015-11-241-40/+52
* | Indent (not sure why it was messed)Xinchen Hui2015-11-241-8/+8
* | Fixed bug #70963 (Unserialize shows UNKNOW in result)Xinchen Hui2015-11-241-18/+24
* | Cleanup: removed deprecated commented codeDmitry Stogov2015-09-221-75/+31
* | Don't allocate memory for empty HashTables.Dmitry Stogov2015-09-171-21/+22
* | Merge branch 'PHP-5.6'Stanislav Malyshev2015-09-021-35/+48
|\ \ | |/
| * Merge branch 'PHP-5.5' into PHP-5.6Stanislav Malyshev2015-09-011-64/+71
| |\
| | * Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-09-011-65/+72
| | |\
| | | * Fix bug #70172 - Use After Free Vulnerability in unserialize()Stanislav Malyshev2015-08-311-35/+41
| | | * Fix bug #70219 (Use after free vulnerability in session deserializer)Stanislav Malyshev2015-08-231-34/+34
| * | | Merge branch 'PHP-5.5' into PHP-5.6Stanislav Malyshev2015-03-171-32/+34
| |\ \ \ | | |/ /
| | * | Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-03-171-32/+34
| | |\ \ | | | |/
| | | * Fixed bug #68976 - Use After Free Vulnerability in unserialize()Stanislav Malyshev2015-03-171-31/+32
| * | | Merge branch 'PHP-5.5' into PHP-5.6Xinchen Hui2015-03-011-35/+33
| |\ \ \ | | |/ /
| | * | Fixed bug #69139 (Crash in gc_zval_possible_root on unserialize)Xinchen Hui2015-03-011-35/+33
| * | | Merge branch 'PHP-5.5' into PHP-5.6Stanislav Malyshev2015-01-201-1/+1
| |\ \ \ | | |/ /
| | * | Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-01-201-2/+2
| | |\ \ | | | |/
| | | * Fix for bug #68710 (Use After Free Vulnerability in PHP's unserialize())Stanislav Malyshev2015-01-011-2/+2
| | * | Bump yearXinchen Hui2015-01-151-1/+1
| | |/
| * | bump yearXinchen Hui2015-01-151-1/+1