Revision tags: php-5.5.37, php-5.6.23RC1, php-7.0.8RC1, php-7.1.0alpha1, php-5.6.22, php-5.5.36, php-7.0.7, php-5.6.22RC1, php-7.0.7RC1, php-7.0.6, php-5.6.21, php-5.5.35 |
|
#
c89b7a48 |
| 27-Apr-2016 |
Xinchen Hui |
Use zend_string_safe_alloc
|
Revision tags: php-5.6.21RC1, php-7.0.6RC1 |
|
#
c8590768 |
| 07-Apr-2016 |
Xinchen Hui |
Improved fix for #71940
|
#
7e042224 |
| 07-Apr-2016 |
Xinchen Hui |
Fixed bug #71940 (Unserialize crushes on restore object reference)
|
Revision tags: php-5.6.20, php-5.5.34, php-7.0.5 |
|
#
6f241f5f |
| 17-Mar-2016 |
Xinchen Hui |
Fixed bug #71840 (Unserialize accepts wrongly data)
|
Revision tags: php-5.6.20RC1, php-7.0.5RC1 |
|
#
5602f642 |
| 03-Mar-2016 |
Nikita Popov |
Eliminate usages of _PP macros These are either in debug code (fix them), commented out (drop them) or in dead compatibility macros (drop them). One usage was in php_stream_get_
Eliminate usages of _PP macros These are either in debug code (fix them), commented out (drop them) or in dead compatibility macros (drop them). One usage was in php_stream_get_from_zval(), which we have not used since at least PHP 5.2 and, judging from the fact that nobody complained about it causing compile errors in PHP 7, nobody else uses it either, so drop it. There are still remaining uses in mysqli embedded and odbc birdstep. These probably need to be dropped outright.
show more ...
|
Revision tags: php-5.6.19, php-5.5.33, php-7.0.4, php-5.6.19RC1, php-7.0.4RC1, php-5.6.18, php-7.0.3, php-5.5.32, php-5.6.18RC1, php-7.0.3RC1 |
|
#
bcd64a9b |
| 18-Jan-2016 |
Stanislav Malyshev |
Fixed bug #71311: Use-after-free vulnerability in SPL(ArrayObject, unserialize)
|
Revision tags: php-5.6.17, php-5.5.31, php-7.0.2 |
|
#
49493a2d |
| 01-Jan-2016 |
Lior Kaplan |
Happy new year (Update copyright to 2016)
|
Revision tags: php-7.0.2RC1, php-5.6.17RC1, php-7.0.1RC1, php-7.0.0, php-5.6.16, php-7.0.0RC8 |
|
#
fd545f4f |
| 24-Nov-2015 |
Xinchen Hui |
Also fixed 'r'
|
#
3e0b2ba5 |
| 24-Nov-2015 |
Xinchen Hui |
Indent (not sure why it was messed)
|
#
91fb1edb |
| 24-Nov-2015 |
Xinchen Hui |
Fixed bug #70963 (Unserialize shows UNKNOW in result) Thanks to ryat for reportinig
|
Revision tags: php-7.0.0RC7, php-5.6.16RC1, php-5.6.15, php-7.0.0RC6, php-7.0.1, php-5.6.15RC1, php-7.0.0RC5, php-5.5.30, php-5.6.14, php-7.0.0RC4 |
|
#
e2e99f16 |
| 22-Sep-2015 |
Dmitry Stogov |
Cleanup: removed deprecated commented code
|
#
8fe171a3 |
| 17-Sep-2015 |
Dmitry Stogov |
Don't allocate memory for empty HashTables.
|
Revision tags: php-5.6.14RC1, php-7.0.0RC3, php-5.6.13, php-7.0.0RC2, php-5.5.29, php-5.4.45 |
|
#
e8429400 |
| 01-Sep-2015 |
Stanislav Malyshev |
Fix bug #70172 - Use After Free Vulnerability in unserialize()
|
#
df4bf28f |
| 23-Aug-2015 |
Stanislav Malyshev |
Fix bug #70219 (Use after free vulnerability in session deserializer)
|
Revision tags: php-5.6.13RC1, php-7.0.0RC1 |
|
#
adf0e499 |
| 13-Aug-2015 |
Xinchen Hui |
zend_hash_resize seems useless, use zend_hash_extend
|
Revision tags: php-5.6.12, php-5.5.28 |
|
#
feeb2fba |
| 05-Aug-2015 |
Stanislav Malyshev |
fix merge
|
#
73a69c9c |
| 10-Aug-2015 |
Xinchen Hui |
Fixed typo
|
#
be54eb7d |
| 10-Aug-2015 |
Xinchen Hui |
Fixed bug #70211 (php 7 ZEND_HASH_IF_FULL_DO_RESIZE use after free)
|
#
6fc35824 |
| 06-Aug-2015 |
Dmitry Stogov |
Use specialized efree_size()
|
Revision tags: php-7.0.0beta3, php-5.4.44, php-5.6.12RC1, php-7.0.0beta2, php-7.0.0beta1, php-5.6.11, php-5.5.27, php-5.4.43 |
|
#
4a2e40bb |
| 30-Jun-2015 |
Dmitry Stogov |
Use ZSTR_ API to access zend_string elements (this is just renaming without semantick changes).
|
#
4bd22cf1 |
| 29-Jun-2015 |
Dmitry Stogov |
Improved zend_string API (Francois Laupretre) Squashed commit of the following: commit d96eab8d79b75ac83d49d49ae4665f948d15a804 Author: Francois Laupretre <francois@tekwire.net>
Improved zend_string API (Francois Laupretre) Squashed commit of the following: commit d96eab8d79b75ac83d49d49ae4665f948d15a804 Author: Francois Laupretre <francois@tekwire.net> Date: Fri Jun 26 01:23:31 2015 +0200 Use the new 'ZSTR' macros in the rest of the code. Does not change anything to the generated code (thanks to compat macros) but cleaner. commit b3526439104ac7a89a8e0c79dbebf33b22bd01b8 Author: Francois Laupretre <francois@tekwire.net> Date: Thu Jun 25 13:45:06 2015 +0200 Improve zend_string API Add missing methods
show more ...
|
Revision tags: php-5.6.11RC1, php-5.5.27RC1, php-7.0.0alpha2, php-5.5.26, php-7.0.0alpha1, php-5.6.10, php-5.4.42, POST_PHP7_NSAPI_REMOVAL, PRE_PHP7_NSAPI_REMOVAL, php-5.6.10RC1, php-5.5.26RC1, php-5.5.25, php-5.6.9, php-5.4.41, php-5.6.9RC1, php-5.5.25RC1, php-5.6.8, php-5.5.24, php-5.4.40, php-5.6.8RC1, php-5.5.24RC1, php-5.6.7, php-5.5.23, php-5.4.39 |
|
#
780222f9 |
| 17-Mar-2015 |
Stanislav Malyshev |
Fixed bug #68976 - Use After Free Vulnerability in unserialize()
|
#
646572d6 |
| 17-Mar-2015 |
Stanislav Malyshev |
Fixed bug #68976 - Use After Free Vulnerability in unserialize()
|
Revision tags: php-5.6.7RC1, php-5.5.23RC1, POST_PHP7_EREG_MYSQL_REMOVALS, PRE_PHP7_EREG_MYSQL_REMOVALS |
|
#
caebb761 |
| 01-Mar-2015 |
Xinchen Hui |
Fixed bug #69139 (Crash in gc_zval_possible_root on unserialize)
|
Revision tags: php-5.6.6, php-5.5.22, php-5.4.38, POST_PHP7_REMOVALS, PRE_PHP7_REMOVALS, php-5.6.6RC1, php-5.5.22RC1 |
|
#
e4271887 |
| 23-Jan-2015 |
Dmitry Stogov |
Fixed memory leak
|