Fixed bug #74670

Validate that "C" serialization payload is followed by "}" prior to
calling the unserialize() handler. This mitigates issues caused by
unserialize() not correctly ha

Fixed bug #74670

Validate that "C" serialization payload is followed by "}" prior to
calling the unserialize() handler. This mitigates issues caused by
unserialize() not correctly handling strings that are not NUL
terminated. Making sure that there is a "}" at the end avoids the
problem.

show more ...

Fixed bug #63217

Don't automatically convert literal string keys to integers on
array access, as we may be dealing with an ArrayAccess object,
rather than a plain array.

Add ssl/tls streams options for min and max proto version

Update NEWS, UPGRADING and default php.ini files with syslog changes

Merge branch 'PHP-7.2'

* PHP-7.2:
Fix #76556: get_debug_info handler for BreakIterator shows wrong type

Merge branch 'PHP-7.1' into PHP-7.2

* PHP-7.1:
Fix #76556: get_debug_info handler for BreakIterator shows wrong type

Fix #76556: get_debug_info handler for BreakIterator shows wrong type

We use the retrieved type for the "type" element instead of the text.
This has been confused during the PHP 7 upgrad

Fix #76556: get_debug_info handler for BreakIterator shows wrong type

We use the retrieved type for the "type" element instead of the text.
This has been confused during the PHP 7 upgrade[1].

[1] http://git.php.net/?p=php-src.git;a=commit;h=1d793348067e5769144c0f7efd86428a4137baec

show more ...

Merge branch 'PHP-7.2'

* PHP-7.2:
Fix #71848: getimagesize with $imageinfo returns false

Merge branch 'PHP-7.1' into PHP-7.2

* PHP-7.1:
Fix #71848: getimagesize with $imageinfo returns false

Fix #71848: getimagesize with $imageinfo returns false

Some JFIF images contain empty APP segments, i.e. those which consist
only of the marker bytes and the length, but without actual c

Fix #71848: getimagesize with $imageinfo returns false

Some JFIF images contain empty APP segments, i.e. those which consist
only of the marker bytes and the length, but without actual content.
It appears to be doubtful to have empty APP segments, but we should
apply the robustness principle, and accept these, instead of simply
failing in this case.

We choose to add empty APP segments to $imageinfo with an empty string
as value, instead of NULL, or even to omit these segments altogether.

This patch also fixes the potential issue that php_stream_read() might
not read the supposed number of bytes, which could result in garbage to
be added to the read value.

show more ...

[ci skip] Update NEWS

[ci skip] Update NEWS

[ci skip] Update NEWS

Merge branch 'PHP-7.2'

Merge branch 'PHP-7.1' into PHP-7.2

Fixed bug #76532 (excessive memory usage in mb_strimwidth)

[ci skip] Update NEWS

Update NEWS

Update NEWS

Fixed bug #76536 (PHP crashes with core dump when throwing exception in error handler). (Laruence)

Fixed bug #76538

Fixed bug #76439

Update NEWS

Update NEWS

Fixed bug #76534 (PHP hangs on 'illegal string offset on string references with an error handler)