fix segfault when using unknown/unsupported save_handler and/or serialize_handler (bug #30282)

Fixed compiler warnings.

Fixed bug #29925 (Added a check to prevent illegal characters in session
key).

fix empty_string issue

Patch submitted by Antony Dovgal <tony2001@phpclub.net>

- Nuke empty_string. It is a reminanent from the time where RETURN_FALSE()
used to return "" and not bool(false). It's not worth keeping it because
STR_FREE() and zval_dtor() always have

- Nuke empty_string. It is a reminanent from the time where RETURN_FALSE()
used to return "" and not bool(false). It's not worth keeping it because
STR_FREE() and zval_dtor() always have to check for it and it slows down
the general case. In addition, it seems that empty_string has been abused
quite a lot, and was used not only for setting zval's but generally in
PHP code instead of "", which wasn't the intention. Last but not least,
nuking empty_string should improve stability as I doubt every place
correctly checked if they are not mistakenly erealloc()'ing it or
calling efree() on it.
NOTE: Some code is probably broken. Each extension maintainer should
check and see that my changes are OK. Also, I haven't had time to touch
PECL yet. Will try and do it tomorrow.

show more ...

- Better stability during premature shutdown of request startup

if statement logic would never eval to false.

Another setting leak in session code (bug #27963).

Fixed bug #27963 (Session lifetime setting may leak between requests).

Fix for Bug #26757: session.save_path defaults to bogus value on win32
Merge from branch with one main difference: the default save_path is
set to the empty string on all platforms, whereas t

Fix for Bug #26757: session.save_path defaults to bogus value on win32
Merge from branch with one main difference: the default save_path is
set to the empty string on all platforms, whereas the code in the
branch only does so for win32.

show more ...

- Fix segfaults on deserialisation of referenced variables.
# ALLOC_INIT_ZVAL() initialises the type field to IS_NULL, while
# MAKE_STD_ZVAL() doesn't. This caused a kind of random crash

- Fix segfaults on deserialisation of referenced variables.
# ALLOC_INIT_ZVAL() initialises the type field to IS_NULL, while
# MAKE_STD_ZVAL() doesn't. This caused a kind of random crash
# when zval_ptr_dtor() was applied on an intact zval created by
# the latter method.
#
# Please check relevant bugs again. There should be some that
# have already been marked as bogus.

show more ...

Fix bug #26005 (Random "cannot change the session ini settings" errors)

Improve error messages

Use zval_ptr_dtor() to free variables as soon as they hit refcount of 0.

Note: You should not be using ZVAL_DELREF() in day to day usage. Instead,
you should use zval_ptr_dtor()

Use zval_ptr_dtor() to free variables as soon as they hit refcount of 0.

Note: You should not be using ZVAL_DELREF() in day to day usage. Instead,
you should use zval_ptr_dtor(). Use ZVAL_DELREF() only if you're
messing with the refcount directly and know what you're doing.
Note #2: For clarity, if you want to initialize a new zval with a refcount
of 0, it's best to do that directly, instead of using ZVAL_DELREF
after allocating the zval...

show more ...

export tsrm id for session globals.

- A belated happy holidays and PHP 5

Fixed bug #24693 (Allow session.use_trans_sid to be enabled/disabled from
inside the script).

- Fixed bug #26548 (Malformed HTTP dates in headers).

Export this so that shared session modules can use it under win32.

- Fixed bug #25780 (ext/session: invalid session.cookie_lifetime causes crash in win32).

Alias session_commit to session_write_close, a more intuitive name
for the functionality.

Fix a segfault which occured when using a storage format not capable
of expressing references (e.g. WDDX) and deserializing a session variable
whose name conflicted with an existing symbol in

Fix a segfault which occured when using a storage format not capable
of expressing references (e.g. WDDX) and deserializing a session variable
whose name conflicted with an existing symbol in the global scope.

PR: #25307
Submitted by: Jani Taskinen
Speling fixes: me

show more ...

\n at the end of the message is not needed

format string fix

- Prevent crash if non-existing save/serializer handler is tried to be used
- Added the registered serializers information to MINFO.