Fixed SNMP_ERR_TOOBIG handling for bulk walk operations

NEWS

Fixed Bug #66321 (ZipArchive::open() ze_obj->filename_len not real)

Fixed reavlidate_path=1 behavior to avoid caching of symlinks values.

Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
Fix bug #65873 - Integer overflow in exif_read_data()

Fix bug #65873 - Integer overflow in exif_read_data()

Test pushing

Disallowed JMP into a finally block.

Update NEWS for 5.5.7 release

Fixed bug #65784 (Segfault with finally).

Fixed bug #65486 mysqli_poll() is broken on Win x64

While this issue is visible in mysqli_poll() functions, the cause
lays deeper in the stream to socket casting API. On Win x64 the

Fixed bug #65486 mysqli_poll() is broken on Win x64

While this issue is visible in mysqli_poll() functions, the cause
lays deeper in the stream to socket casting API. On Win x64 the
SOCKET datatype is a 64 or 32 bit unsigned, while on Linux/Unix-like
it's 32 bit signed integer. The game of casting 32 bit var to/from
64 bit pointer back and forth is the best way to break it.

Further more, while socket and file descriptors are always integers
on Linux, those are different things using different APIs on Windows.
Even though using integer instead of SOCKET might work on Windows, this
issue might need to be revamped more carefully later. By this time
this patch is tested well with phpt and apps and shows no regressions,
neither in mysqli_poll() nor in any other parts.

show more ...

Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
Switch to using freetype-config for freetype detection.

NEWS

Fixed bug #66112 (Use after free condition in SOAP extension). (martin dot koegler at brz dot gv dot at)

Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
Replace invalid code with a proper #error

Replace invalid code with a proper #error

This code creates a nasty error as mentioned in bugs #31131, #37062
Patch taken from Debian's PHP package: 044-strtod_arm_fix

Switch to using freetype-config for freetype detection.

This fixes GD compilation against libfreetype 2.5.1 and later after they made
the rather interesting decision to change their incl

Switch to using freetype-config for freetype detection.

This fixes GD compilation against libfreetype 2.5.1 and later after they made
the rather interesting decision to change their include directory layout in a
point release.

The original suggestion in the bug was to use pkg-config, but my inclination is
to use freetype-config instead: we should be able to get the same configuration
information without actually needing pkg-config installed, since pkg-config is
by no means guaranteed to exist on many Unices and distros, whereas
freetype-config should always be present if a libfreetype build environment is
installed. Let's try it out and see what happens.

Fixes bug #64405 (Use freetype-config for determining freetype2 dir(s)).

show more ...

Merge branch 'PHP-5.3' into PHP-5.4

* PHP-5.3:
5.3.29-dev
Fix CVE-2013-6420 - memory corruption in openssl_x509_parse

Conflicts:
configure.in
mai

Merge branch 'PHP-5.3' into PHP-5.4

* PHP-5.3:
5.3.29-dev
Fix CVE-2013-6420 - memory corruption in openssl_x509_parse

Conflicts:
configure.in
main/php_version.h

show more ...

5.3.29-dev

Fix CVE-2013-6420 - memory corruption in openssl_x509_parse

BFN

Fixed bug #61645 (fopen and O_NONBLOCK)

if a mode like "rn" was passed to fopen(), then
php_stream_parse_fopen_modes() would assign O_WRONLY to
flags, because O_NONBLOCK tainted flag

Fixed bug #61645 (fopen and O_NONBLOCK)

if a mode like "rn" was passed to fopen(), then
php_stream_parse_fopen_modes() would assign O_WRONLY to
flags, because O_NONBLOCK tainted flags for the r/w/+ check

show more ...

BFN

Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
Remove 128.0.0.0/16 and 191.255.0.0/16 from the reserved list.

Remove 128.0.0.0/16 and 191.255.0.0/16 from the reserved list.

These were returned to the general allocation pool by RFC 3330, and hence
shouldn't cause an IP address validation failure

Remove 128.0.0.0/16 and 191.255.0.0/16 from the reserved list.

These were returned to the general allocation pool by RFC 3330, and hence
shouldn't cause an IP address validation failure due to being reserved. At
least 128.0.0.0/16 is in use on the public Internet today.

Fixes bug #66229 (128.0.0.0/16 isn't reserved any longer).

show more ...