Fix #81211: Symlinks are followed when creating PHAR archive

It is insufficient to check whether the `base` is contained in `fname`;
we also need to ensure that `fname` is properly separ

Fix #81211: Symlinks are followed when creating PHAR archive

It is insufficient to check whether the `base` is contained in `fname`;
we also need to ensure that `fname` is properly separated. And of
course, `fname` has to start with `base`.

show more ...

Fix bug #79082 - Files added to tar with Phar::buildFromIterator have all-access permissions

Fix # 79171: heap-buffer-overflow in phar_extract_file

We must not access memory outside of the allocated buffer.

Fix bug #79082 - Files added to tar with Phar::buildFromIterator have all-access permissions

Fix #76584: PharFileInfo::decompress not working

We actually have to decompress, when told to do so.

Fix #77919: Potential UAF in Phar RSHUTDOWN

We have to properly clean up in case phar_flush() is failing.

We also make the expectation of the respective test case less liberal
t

Fix #77919: Potential UAF in Phar RSHUTDOWN

We have to properly clean up in case phar_flush() is failing.

We also make the expectation of the respective test case less liberal
to avoid missing such bugs in the future.

show more ...

Fix TSRM signature - php_stream_stat macro has it's own TSRM

Fix bug #77022 - use file mode or umask for new files

Remove unused Git attributes ident

The $Id$ keywords were used in Subversion where they can be substituted
with filename, last revision number change, last changed date, and last
use

Remove unused Git attributes ident

The $Id$ keywords were used in Subversion where they can be substituted
with filename, last revision number change, last changed date, and last
user who changed it.

In Git this functionality is different and can be done with Git attribute
ident. These need to be defined manually for each file in the
.gitattributes file and are afterwards replaced with 40-character
hexadecimal blob object name which is based only on the particular file
contents.

This patch simplifies handling of $Id$ keywords by removing them since
they are not used anymore.

show more ...

It's safer to use zval_ptr_dtor() for iterator keys.

Use zval_ptr_dtor() instead of zval_dtor() in internal functions that destroy new created object (This is safer and produces less code)

Replace legacy zval_dtor() by zval_ptr_dtor_nogc() or even more specialized destructors.
zval_dtor() doesn't make a lot of sense in PHP-7.* and it's used incorrectly in some places.
Its occur

Replace legacy zval_dtor() by zval_ptr_dtor_nogc() or even more specialized destructors.
zval_dtor() doesn't make a lot of sense in PHP-7.* and it's used incorrectly in some places.
Its occurances should be replaced by zval_ptr_dtor() or zval_ptr_dtor_nogc(), or even more specialized destructors.

show more ...

phar module, unsignedness check changes.
while at it, correcting seemingly subtle bug when checking
extension validity.

Use zend_string_release_ex() instread of zend_string_release() in places, where we sure about string persistence.

Fix #76129 - remove more potential unfiltered outputs for phar

Move to unsigned types in phar

Preventing integer overflows in principle, which allows to avoid additional
range checks. The phar format is based on 32-bit lengths, so the storage
si

Move to unsigned types in phar

Preventing integer overflows in principle, which allows to avoid additional
range checks. The phar format is based on 32-bit lengths, so the storage
sizes was kept same.

show more ...

Remove return types from some magic method in protos

__construct, __destruct, __wakeup does not have return types defined.

Fixed bug #65414

Fixed bug #65414

Don't loop over indexes in Phar::extractTo()

Instead use a more idiomatic foreach loop. The behavior is not
strictly the same, but I see no reason why this specific case
should enfor

Don't loop over indexes in Phar::extractTo()

Instead use a more idiomatic foreach loop. The behavior is not
strictly the same, but I see no reason why this specific case
should enforce continuously indexed integer keys.

Also handle references in the array while at it.

show more ...

Fixed bug #54289

If a directory is passed to Phar::extractTo(), loop over all
entries and extract all files with the given prefix.

Access HashTable.u.flags through HT_FLAGS() macro.

year++

year++

year++