PHP_5_2 compat - add pestrndup if undefined

partial refactor - move signature verification into its own function, in preparation for tar/zip signature support.
next is signature creation

[DOC] add phar.cache_list, a PATH_SEPARATOR-separated list of full paths to phar archives to cache
at startup. This caches the manifest, so that on first access to a phar archive, no file manife

[DOC] add phar.cache_list, a PATH_SEPARATOR-separated list of full paths to phar archives to cache
at startup. This caches the manifest, so that on first access to a phar archive, no file manifest parsing occurs.

This could use further tweaking. For instance, the full copy of the manifest into the current process may be unnecessary if refcounting could be external
to the manifest. This would be another significant gain. With APC, I measure a slight perf increase to 19 req/sec up from 16 req/sec, without it approaches
regular PHP at 3.8 req/sec (regular is 4 req/sec). This is benching phpMyAdmin

show more ...

add openssl signing support. This adds an extra parameter
for the contents of the exported private key to Phar->setSignatureAlgorithm, and expects the public key to be in
a file named blah.p

add openssl signing support. This adds an extra parameter
for the contents of the exported private key to Phar->setSignatureAlgorithm, and expects the public key to be in
a file named blah.phar.pubkey in the same directory as the phar blah.phar. This works with openssl static or
shared and fails gracefully if openssl is not present without adding a dependency. config.w32 needs updating to match config.m4 [DOC]

show more ...

MFB: refactor function names for clarity. No functionality change

refactor function names for clarity. No functionality change

- MFB fix offset detection in tar files

fix offset detection in tar files

enable by default statically instead of shared
this is done by removing zlib/bz2 explicit dependencies because they are unnecessary
we only ever use the stream filter, and the check for exist

enable by default statically instead of shared
this is done by removing zlib/bz2 explicit dependencies because they are unnecessary
we only ever use the stream filter, and the check for existence has
been moved to runtime where it is after startup

show more ...

enable by default statically instead of shared
this is done by removing zlib/bz2 explicit dependencies because they are unnecessary
we only ever use the stream filter, and the check for exist

enable by default statically instead of shared
this is done by removing zlib/bz2 explicit dependencies because they are unnecessary
we only ever use the stream filter, and the check for existence has
been moved to runtime where it is after startup

show more ...

MFB: plug security hole of unfettered creation access to .phar magic directory

fix potentially major security hole: modification/creation of files in .phar directory enabled in many locations
which then allows easy creation of tar/zip-based phar archives with a simple renam

fix potentially major security hole: modification/creation of files in .phar directory enabled in many locations
which then allows easy creation of tar/zip-based phar archives with a simple rename even when phar.readonly=1. Plug the hole very tightly, allowing read access to
files, and also excluding them from opendir() output

show more ...

- MFH
- Make internal code forward-compatible. This included a binary cast in the default stub, hence test updates.

- Make internal code back-compatible. This included a binary cast in the default stub, hence many test updates.
- Just over a third of tests pass. Test manifests are broken currently.

This commit was manufactured by cvs2svn to create branch 'PHP_5_3'.

optimize phar filename extension detection to first search through known phars. This eliminates several stat/realpath calls for archives with lots of files

[DOC]
remove phar.extract_list
remove Phar::getExtractList()

fix alias overloading handling for archives that are not in use

fix default format conversion, increase code coverage

implement symbolic link support within a tar-based phar archive
this also resulted in a major fix for mounted directories, which were recycling the 'link' field which
could cause stupid confl

implement symbolic link support within a tar-based phar archive
this also resulted in a major fix for mounted directories, which were recycling the 'link' field which
could cause stupid conflicts with actual links, so move that to new 'tmp' field.

show more ...

new test for bad checksum, fix tar.c to catch tar archives with a corrupted first entry, fix memleak on bad checksum

COMPLETELY rework filename extension detection. Now the only requirements are:
1 - executable phars must contain '.phar' in the filename
2 - non-executable phars must not contain '.phar' and

COMPLETELY rework filename extension detection. Now the only requirements are:
1 - executable phars must contain '.phar' in the filename
2 - non-executable phars must not contain '.phar' and must have an extension of at least 1 character

In addition, phar filenames must exist if opened for read, and the directory containing the phar must exist if opened for creation
if opened for creation, the file must not already exist
[DOC]

show more ...

rename is_zip parameter of phar_parse_metadata to more accurately reflect what it is

add interception for readfile [DOC]

another attempt at fixing mac OS X compile, remove unused obsolete code