|
Revision tags: php-7.1.0RC3, php-5.6.27RC1, php-7.0.12RC1, php-5.6.26, php-7.1.0RC2, php-7.0.11, php-5.6.26RC1, php-7.1.0RC1, php-7.0.11RC1, php-7.1.0beta3, php-5.6.25, php-7.0.10, php-7.1.0beta2, php-5.6.25RC1, php-7.0.10RC1, php-7.1.0beta1, php-5.6.24, php-7.0.9, php-5.5.38, php-5.6.24RC1, php-7.1.0alpha3, php-7.0.9RC1 |
|
| #
adc95c51 |
| 23-Jun-2016 |
Dmitry Stogov |
Fixed compilation warnings
|
|
Revision tags: php-7.1.0alpha2, php-7.0.8, php-5.6.23, php-5.5.37, php-5.6.23RC1, php-7.0.8RC1, php-7.1.0alpha1, php-5.6.22, php-5.5.36, php-7.0.7, php-5.6.22RC1, php-7.0.7RC1, php-7.0.6, php-5.6.21, php-5.5.35, php-5.6.21RC1, php-7.0.6RC1, php-5.6.20, php-5.5.34, php-7.0.5, php-5.6.20RC1, php-7.0.5RC1, php-5.6.19, php-5.5.33, php-7.0.4, php-5.6.19RC1, php-7.0.4RC1, php-5.6.18, php-7.0.3 |
|
| #
2c691f06 |
| 02-Feb-2016 |
Anatol Belski |
reapply the sysconf error check patch
|
|
Revision tags: php-5.5.32 |
|
| #
377d353c |
| 02-Feb-2016 |
Anatol Belski |
add error check to sysconf call
|
| #
f4d7bbf4 |
| 28-Jan-2016 |
Anatol Belski |
backport the escapeshell* functions hardening branch
|
| #
a9048d10 |
| 28-Jan-2016 |
Anatol Belski |
extend _SC_ARG_MAX usage onto platforms where it's available
|
|
Revision tags: php-5.6.18RC1, php-7.0.3RC1 |
|
| #
c527549e |
| 12-Jan-2016 |
Anatol Belski |
Fixed bug #71039 exec functions ignore length but look for NULL termination
|
| #
22a5ccab |
| 12-Jan-2016 |
Anatol Belski |
Follow up on bug #71270
Using the max allowed command line length for an underlying OS.
|
|
Revision tags: php-5.6.17, php-5.5.31, php-7.0.2 |
|
| #
2871c70e |
| 03-Jan-2016 |
libnex |
Patch for Heap Buffer Overflow in EscapeShell
Proposed patch for bug #71270
|
| #
49493a2d |
| 01-Jan-2016 |
Lior Kaplan |
Happy new year (Update copyright to 2016)
|
|
Revision tags: php-7.0.2RC1, php-5.6.17RC1, php-7.0.1RC1, php-7.0.0, php-5.6.16, php-7.0.0RC8, php-7.0.0RC7, php-5.6.16RC1, php-5.6.15, php-7.0.0RC6, php-7.0.1, php-5.6.15RC1, php-7.0.0RC5, php-5.5.30, php-5.6.14, php-7.0.0RC4, php-5.6.14RC1, php-7.0.0RC3, php-5.6.13, php-7.0.0RC2, php-5.5.29, php-5.4.45, php-5.6.13RC1, php-7.0.0RC1, php-5.6.12, php-5.5.28, php-7.0.0beta3, php-5.4.44, php-5.6.12RC1, php-7.0.0beta2, php-7.0.0beta1, php-5.6.11, php-5.5.27 |
|
| #
c75d245e |
| 08-Jul-2015 |
Xinchen Hui |
Revert "Fixed invalid read"
I must be confused while switching from master to 5.6
This reverts commit 94957a7091d2d87d3b75c8395a3a11a4fbecaea1.
|
| #
94957a70 |
| 08-Jul-2015 |
Xinchen Hui |
Fixed invalid read
|
|
Revision tags: php-5.4.43 |
|
| #
4a2e40bb |
| 30-Jun-2015 |
Dmitry Stogov |
Use ZSTR_ API to access zend_string elements (this is just renaming without semantick changes).
|
|
Revision tags: php-5.6.11RC1, php-5.5.27RC1 |
|
| #
a621781f |
| 23-Jun-2015 |
Christoph M. Becker |
Fixed bug #69768 (escapeshell*() doesn't cater to !)
When delayed variable substitution is enabled (can be set in the
Registry, for instance), !ENV! works similar to %ENV%, and so ! shou
Fixed bug #69768 (escapeshell*() doesn't cater to !)
When delayed variable substitution is enabled (can be set in the
Registry, for instance), !ENV! works similar to %ENV%, and so ! should
be escaped like %.
show more ...
|
|
Revision tags: php-7.0.0alpha2, php-5.5.26, php-7.0.0alpha1, php-5.6.10, php-5.4.42 |
|
| #
563462fb |
| 10-Jun-2015 |
Stanislav Malyshev |
Fixed bug #69646 (OS command injection vulnerability in escapeshellarg)
|
| #
80367584 |
| 01-Jun-2015 |
Stanislav Malyshev |
Fix bug #69646 OS command injection vulnerability in escapeshellarg
|
|
Revision tags: POST_PHP7_NSAPI_REMOVAL, PRE_PHP7_NSAPI_REMOVAL, php-5.6.10RC1, php-5.5.26RC1, php-5.5.25, php-5.6.9, php-5.4.41, php-5.6.9RC1, php-5.5.25RC1, php-5.6.8, php-5.5.24, php-5.4.40, php-5.6.8RC1, php-5.5.24RC1 |
|
| #
d146d150 |
| 19-Mar-2015 |
Dmitry Stogov |
Optimize zend_string_realloc() add more specialized versions zend_string_extend() and zend_string_truncate()
|
|
Revision tags: php-5.6.7, php-5.5.23, php-5.4.39, php-5.6.7RC1, php-5.5.23RC1, POST_PHP7_EREG_MYSQL_REMOVALS, PRE_PHP7_EREG_MYSQL_REMOVALS, php-5.6.6, php-5.5.22, php-5.4.38 |
|
| #
7d0e3c01 |
| 13-Feb-2015 |
Yasuo Ohgaki |
Added NULL byte protection to exec, system and passthru.
|
| #
a8722f53 |
| 13-Feb-2015 |
Yasuo Ohgaki |
Add NULL byte protection to exec, system and passthru
|
|
Revision tags: POST_PHP7_REMOVALS, PRE_PHP7_REMOVALS, php-5.6.6RC1, php-5.5.22RC1, php-5.5.21, php-5.6.5, php-5.4.37 |
|
| #
fc33f52d |
| 15-Jan-2015 |
Xinchen Hui |
bump year
|
| #
0579e827 |
| 15-Jan-2015 |
Xinchen Hui |
bump year
|
| #
73c1be26 |
| 15-Jan-2015 |
Xinchen Hui |
Bump year
|
|
Revision tags: php-5.5.21RC1, php-5.6.5RC1 |
|
| #
b7a7b1a6 |
| 03-Jan-2015 |
Stanislav Malyshev |
trailing whitespace removal
|
|
Revision tags: POST_NATIVE_TLS_MERGE, PRE_NATIVE_TLS_MERGE, php-5.5.20, php-5.4.36, php-5.6.4 |
|
| #
bdeb220f |
| 13-Dec-2014 |
Anatol Belski |
first shot remove TSRMLS_* things
|
|
Revision tags: php-5.6.4RC1, php-5.5.20RC1 |
|
| #
4b953534 |
| 19-Nov-2014 |
Veres Lajos |
typo fixes - https://github.com/vlajos/misspell_fixer
|
| #
82c2e3f2 |
| 14-Nov-2014 |
Anatol Belski |
fix build
ifdef this var declaration to avoid the vs warning
|
