|
Revision tags: php-5.4.26RC1, php-5.5.10RC1, php-5.6.0alpha2 |
|
| #
f4cfaf36 |
| 10-Feb-2014 |
Dmitry Stogov |
Use better data structures (incomplete)
|
|
Revision tags: php-5.5.9, php-5.4.25, php-5.5.9RC1, php-5.4.25RC1, php-5.6.0alpha1, php-5.5.8, php-5.4.24 |
|
| #
c081ce62 |
| 03-Jan-2014 |
Xinchen Hui |
Bump year
|
| #
47c90277 |
| 03-Jan-2014 |
Xinchen Hui |
Bump year
|
| #
c0d060f5 |
| 03-Jan-2014 |
Xinchen Hui |
Bump year
|
|
Revision tags: php-5.4.24RC1, php-5.5.8RC1, php-5.5.7, php-5.4.23, php-5.3.28, php-5.5.7RC1, php-5.4.23RC1, php-5.4.22, php-5.5.6, php-5.4.22RC1, php-5.5.6RC1, php-5.4.21, php-5.5.5, php-5.4.21RC1, php-5.5.5RC1, php-5.5.4, php-5.4.20, php-5.5.4RC1, php-5.4.20RC1, php-5.5.3, php-5.4.19, php-5.5.2, php-5.4.18, php-5.5.2RC1, php-5.4.18RC2, php-5.5.1, php-5.4.18RC1, php-5.3.27, php-5.4.17, php-5.5.0, php-5.3.27RC1, php-5.4.17RC1, php-5.5.0RC3, php-5.3.26, php-5.4.16, php-5.5.0RC2, php-5.3.26RC1, php-5.4.16RC1, php-5.5.0RC1, php-5.3.25, php-5.4.15, php-5.3.25RC1, php-5.5.0beta4, php-5.4.15RC1, php-5.4.14, php-5.3.24, php-5.5.0beta3, php-5.3.24RC1, php-5.4.14RC1, php-5.5.0beta2, php-5.5.0beta1, php-5.3.23, php-5.4.13, php-5.5.0alpha6, php-5.3.23RC1, php-5.4.13RC1, php-5.3.22, php-5.5.0alpha5, php-5.4.12, php-5.3.22RC2, php-5.4.12RC2, php-5.3.22RC1, php-5.4.12RC1, php-5.5.0alpha4, php-5.3.21, php-5.4.11, php-5.5.0alpha3, php-5.3.21RC1, php-5.4.11RC1 |
|
| #
a666285b |
| 01-Jan-2013 |
Xinchen Hui |
Happy New Year
|
| #
0a7395e0 |
| 01-Jan-2013 |
Xinchen Hui |
Happy New Year
|
| #
a2045ff3 |
| 01-Jan-2013 |
Xinchen Hui |
Happy New Year~
|
|
Revision tags: php-5.3.20, php-5.4.10, php-5.5.0alpha2, php-5.3.20RC1, php-5.4.10RC1, php-5.3.19, php-5.4.9, php-5.5.0alpha1, php-5.3.19RC1, php-5.4.9RC1, php-5.3.18, php-5.4.8, php-5.3.18RC1, php-5.4.8RC1, php-5.3.17, php-5.4.7, php-5.4.7RC1, php-5.3.16, php-5.4.6, php-5.4.6RC1, php-5.4.5, php-5.3.15, php-5.3.15RC1, php-5.4.5RC1 |
|
| #
5b3f4d25 |
| 24-Jun-2012 |
Nikita Popov |
Fix memory allocation checks for base64 encode
base64_encode used safe_emalloc, but one of the arguments was derived from a
multiplication, thus making the allocation unsafe again.
Fix memory allocation checks for base64 encode
base64_encode used safe_emalloc, but one of the arguments was derived from a
multiplication, thus making the allocation unsafe again.
There was a size check in place, but it was off by a factor of two as it
didn't account for the signedness of the integer type.
The unsafe allocation is not exploitable, but still causes funny behavior
when the sized overflows into a negative number.
To fix the issue the *4 factor is moved into the size argument (where it is
known to be safe), so safe_emalloc can carry out the multiplication.
The size check is removed as it doesn't really make sense once safe_emalloc
works correctly. (Would only cause base64_encode to silently return false
instead of throwing an error. Also could cause problems with other uses of
the base64 encoding API, which all don't check for a NULL return value.)
Furthermore the (length + 2) < 0 check is replaced with just length < 0.
Allowing lengths -2 and -1 doesn't make sense semantically and also is not
honored in the following code (negative length would access unallocated
memory.)
Actually the length < 0 check doesn't make sense altogether, but I left it
there just to be safe.
show more ...
|
|
Revision tags: php-5.3.14, php-5.4.4, php-5.3.14RC2, php-5.4.4RC2, php-5.3.14RC1, php-5.4.4RC1, php-5.3.13, php-5.4.3, php-5.4.2, php-5.3.12, php-5.3.11, php-5.4.1, php-5.3.11RC2, php-5.4.1RC2, php-5.3.11RC1, php-5.4.1RC1, PHP-5.4.1-RC1, php-5.4.0, php-5.4.0RC8, php-5.3.10, php-5.4.0RC7, php-5.4.0RC6, php-5.3.9, php-5.4.0RC5 |
|
| #
e4ca0ed0 |
| 01-Jan-2012 |
Felipe Pena |
- Year++
|
| #
8775a375 |
| 01-Jan-2012 |
Felipe Pena |
- Year++
|
| #
4e198252 |
| 01-Jan-2012 |
Felipe Pena |
- Year++
|
|
Revision tags: php-5.3.9RC4, php-5.4.0RC4, php-5.3.9RC3, php-5.4.0RC3, php-5.3.9RC2, php-5.4.0RC2, php-5.4.0RC1, php-5.3.9RC1, php-5.4.0beta2, php-5.4.0beta1 |
|
| #
2ef05a8f |
| 12-Sep-2011 |
Ilia Alshanetsky |
Fixed bug #55273 (base64_decode() with strict rejects whitespace after pad)
|
| #
9915700f |
| 12-Sep-2011 |
Ilia Alshanetsky |
Fixed bug #55273 (base64_decode() with strict rejects whitespace after pad)
|
| #
3d3a6a3b |
| 12-Sep-2011 |
Ilia Alshanetsky |
Fixed bug #55273 (base64_decode() with strict rejects whitespace after pad)
|
|
Revision tags: yaf-2.1.0, php-5.3.8, php-5.3.7, php-5.3.7RC5, php-5.4.0alpha3, php-5.3.7RC4, php-5.3.7RC3, php-5.4.0alpha2, php-5.3.7RC2, php-5.4.0alpha1, php-5.3.7RC1, php-5.3.6, php-5.3.6RC3, php-5.3.6RC2, php-5.3.6RC1, php-5.2.17, php-5.3.5 |
|
| #
927bf09c |
| 01-Jan-2011 |
Felipe Pena |
- Year++
|
| #
0203cc3d |
| 01-Jan-2011 |
Felipe Pena |
- Year++
|
|
Revision tags: php-5.2.16, php-5.2.15, php-5.3.4, php-5.2.15RC2, php-5.3.4RC2 |
|
| #
3239a25e |
| 26-Nov-2010 |
Ilia Alshanetsky |
Missing bit from previous commit
|
| #
4bc5cac3 |
| 26-Nov-2010 |
Ilia Alshanetsky |
Fixed bug #52327 (base64_decode() improper handling of leading padding in strict mode)
|
|
Revision tags: php-5.3.4RC1, php-5.2.15RC1, PHP_5_2_15RC1, oci8-1.4.3, php-5.2.14, php-5.3.3, php-5.3.3RC3, php-5.2.14RC3, php-5.3.3RC2, php-5.2.14RC2, php-5.3.3RC1, php-5.2.14RC1, php-5.3.2, php-5.2.13, php-5.3.2RC3, php-5.3.2RC2, php-5.2.13RC2, php-5.2.13RC1 |
|
| #
9ba1e816 |
| 03-Jan-2010 |
Sebastian Bergmann |
sed -i "s#1997-2009#1997-2010#g" **/*.c **/*.h **/*.php
|
|
Revision tags: php-5.3.2RC1, php-5.2.12, php-5.2.12RC4, php-5.2.12RC3, php-5.2.12RC2, php-5.3.1, php-5.3.1RC4, php-5.2.12RC1, php-5.3.1RC3, php-5.3.1RC2, oci8-1.4.0, php-5.2.11, php-5.2.11RC3, php-5.3.1RC1, php-5.2.11RC2, php-5.2.11RC1, php-5.3.0, php-5.3.0RC4, php-5.2.10, php-5.2.10RC2, php-5.3.0RC3, php-5.2.10RC1, php-5.3.0RC2, php-5.3.0RC1, RELEASE_1_3_5, php-5.2.9, php-5.2.9RC3, php-5.2.9RC2, php-5.2.9RC1, php-5.3.0beta1 |
|
| #
4eb69ead |
| 25-Jan-2009 |
Ilia Alshanetsky |
Improved fix for bug #47174 & added a test
|
| #
bd9ad75f |
| 21-Jan-2009 |
Ilia Alshanetsky |
Fixed bug #47174 (base64_decode() interprets pad char in mid string as
terminator)
|
| #
08659c2d |
| 31-Dec-2008 |
Sebastian Bergmann |
MFH: Bump copyright year, 3 of 3.
|
|
Revision tags: NEWS, php-5.2.8, BEFORE_HEAD_NS_CHANGES_MERGE, php-5.3.0alpha3, php-5.3.0alpha2, php-5.2.7, php-5.2.7RC5, php-5.2.7RC4, BEFORE_HEAD_NS_CHANGE, BEFORE_NS_RULES_CHANGE, php-5.2.7RC3, php-5.2.7RC2, php-5.2.7RC1 |
|
| #
8a77e555 |
| 23-Sep-2008 |
Nuno Lopes |
clean some dead code (with static analysis help)
|
|
Revision tags: php-4.4.9, php-5.3.0alpha1, php-4.4.9RC1, BEFORE_NEW_PARAMETER_PARSE, RELEASE_1_2_5, RELEASE_2_0_0b1, php-5.2.6, RELEASE_1_0_2, php-5.2.6RC5, php-5.2.6RC4, php-5.2.6RC3, RELEASE_2_0_0a2, RELEASE_2_0_0a1, php-5.2.6RC2, php-5.2.6RC1, RELEASE_1_3_1, php-4.4.8 |
|
| #
d1dded87 |
| 31-Dec-2007 |
Sebastian Bergmann |
MFH: Bump copyright year, 2 of 2.
|
|
Revision tags: php-4.4.8RC1, RELEASE_1_2_3, php-5.2.5 |
|
| #
44c7a737 |
| 05-Nov-2007 |
Jani Taskinen |
MFH
|
