<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/php-git.git, branch PHP-7.4</title>
<subtitle>git.php.net: repository/php-src.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/'/>
<entry>
<title>Fix #73533: Invalid memory access in php_libxml_xmlCheckUTF8</title>
<updated>2021-03-24T10:50:50+00:00</updated>
<author>
<name>Christoph M. Becker</name>
<email>cmbecker69@gmx.de</email>
</author>
<published>2021-03-23T15:13:57+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=498eb8e0529fbe1dd8a91ae3ee8592eda868d3aa'/>
<id>498eb8e0529fbe1dd8a91ae3ee8592eda868d3aa</id>
<content type='text'>
A string passed to `php_libxml_xmlCheckUTF8()` may be longer than
1&lt;&lt;31-1 bytes, so we're better using a `size_t`.

Closes GH-6802.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
A string passed to `php_libxml_xmlCheckUTF8()` may be longer than
1&lt;&lt;31-1 bytes, so we're better using a `size_t`.

Closes GH-6802.
</pre>
</div>
</content>
</entry>
<entry>
<title>Properly initialize PS(mod) on RINIT</title>
<updated>2021-03-23T12:12:19+00:00</updated>
<author>
<name>Christoph M. Becker</name>
<email>cmbecker69@gmx.de</email>
</author>
<published>2021-03-22T12:21:07+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=688e56d0ac6446dcdac2621c26586eb2de92f9b0'/>
<id>688e56d0ac6446dcdac2621c26586eb2de92f9b0</id>
<content type='text'>
We need to do that in case a user handler has been set.  However, we
can't do that in `php_rinit_session_globals()` since that function is
called by PHP function `session_destroy()` too, but in that case we
don't want to reset PS(mod).

Closes GH-6795.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
We need to do that in case a user handler has been set.  However, we
can't do that in `php_rinit_session_globals()` since that function is
called by PHP function `session_destroy()` too, but in that case we
don't want to reset PS(mod).

Closes GH-6795.
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix #80889: amendment</title>
<updated>2021-03-22T21:17:35+00:00</updated>
<author>
<name>Christoph M. Becker</name>
<email>cmbecker69@gmx.de</email>
</author>
<published>2021-03-22T21:14:01+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=838951c2d6612efbf6adeb5b1abc7fced808dc39'/>
<id>838951c2d6612efbf6adeb5b1abc7fced808dc39</id>
<content type='text'>
`session_set_save_handler()` may be called with callables instead of an
object; we need to cater to that as well.

We also extract a set_user_save_handler_ini() function to avoid code
duplication.

Closes GH-6796.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
`session_set_save_handler()` may be called with callables instead of an
object; we need to cater to that as well.

We also extract a set_user_save_handler_ini() function to avoid code
duplication.

Closes GH-6796.
</pre>
</div>
</content>
</entry>
<entry>
<title>Use ServerClientTestCase in a test for default_socket_timeout=-1</title>
<updated>2021-03-21T21:19:40+00:00</updated>
<author>
<name>Jakub Zelenka</name>
<email>bukka@php.net</email>
</author>
<published>2020-11-27T17:29:23+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=bc7ea73da59dde1c205859b73768593cc37de31d'/>
<id>bc7ea73da59dde1c205859b73768593cc37de31d</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix NEWS entry position for the latest FPM fix</title>
<updated>2021-03-21T18:58:57+00:00</updated>
<author>
<name>Jakub Zelenka</name>
<email>bukka@php.net</email>
</author>
<published>2021-03-21T18:58:57+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=538f95b1b7c88949afea9fc690397309115d8d40'/>
<id>538f95b1b7c88949afea9fc690397309115d8d40</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix bug #80024: Duplication of info about inherited socket after pool removing</title>
<updated>2021-03-21T18:52:07+00:00</updated>
<author>
<name>Jakub Zelenka</name>
<email>bukka@php.net</email>
</author>
<published>2021-02-28T21:08:17+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=c483b59124bda89f86d8a54bcbdb8e5b89fa40ea'/>
<id>c483b59124bda89f86d8a54bcbdb8e5b89fa40ea</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix #80889: Cannot set save handler when save_handler is invalid</title>
<updated>2021-03-19T15:59:54+00:00</updated>
<author>
<name>Christoph M. Becker</name>
<email>cmbecker69@gmx.de</email>
</author>
<published>2021-03-19T13:47:49+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=06bfada99bcff9bd2e3a5e959effa2237c07939b'/>
<id>06bfada99bcff9bd2e3a5e959effa2237c07939b</id>
<content type='text'>
There is no need to require a (valid) save_handler to be set, when a
user handler is supposed to be set.  We just have to make sure, that
no user handler is already set in this case.

Closes GH-6788.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
There is no need to require a (valid) save_handler to be set, when a
user handler is supposed to be set.  We just have to make sure, that
no user handler is already set in this case.

Closes GH-6788.
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix #80783: PDO ODBC truncates BLOB records at every 256th byte</title>
<updated>2021-03-18T14:13:27+00:00</updated>
<author>
<name>Christoph M. Becker</name>
<email>cmbecker69@gmx.de</email>
</author>
<published>2021-02-25T13:38:42+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=bccca0b53aa60a62e2988c750fc73c02d109e642'/>
<id>bccca0b53aa60a62e2988c750fc73c02d109e642</id>
<content type='text'>
It is not guaranteed, that the driver inserts only a single NUL byte at
the end of the buffer.  Apparently, there is no way to find out the
actual data length in the buffer after calling `SQLGetData()`, so we
adjust after the next `SQLGetData()` call.

We also prevent PDO::ODBC_ATTR_ASSUME_UTF8 from fetching garbage, by
fetching all chunks with the same C type.

Closes GH-6716.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
It is not guaranteed, that the driver inserts only a single NUL byte at
the end of the buffer.  Apparently, there is no way to find out the
actual data length in the buffer after calling `SQLGetData()`, so we
adjust after the next `SQLGetData()` call.

We also prevent PDO::ODBC_ATTR_ASSUME_UTF8 from fetching garbage, by
fetching all chunks with the same C type.

Closes GH-6716.
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix locale switch back to C in pcre</title>
<updated>2021-03-18T09:48:43+00:00</updated>
<author>
<name>Nikita Popov</name>
<email>nikita.ppv@gmail.com</email>
</author>
<published>2021-03-18T09:48:43+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=4be867e9103a415c598d5a15f95fec274d1b7825'/>
<id>4be867e9103a415c598d5a15f95fec274d1b7825</id>
<content type='text'>
The compile context is shared between patterns, so we need to set
the character tables unconditionally in case we switched from
a non-C locale to the C locale.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The compile context is shared between patterns, so we need to set
the character tables unconditionally in case we switched from
a non-C locale to the C locale.
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix #66783: UAF when appending DOMDocument to element</title>
<updated>2021-03-17T11:37:18+00:00</updated>
<author>
<name>Christoph M. Becker</name>
<email>cmbecker69@gmx.de</email>
</author>
<published>2021-03-15T09:26:50+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=a08847ab39bb512d500cf196981a3e8780c83600'/>
<id>a08847ab39bb512d500cf196981a3e8780c83600</id>
<content type='text'>
According to the DOM standard, elements may only contain element, text,
processing instruction and comment nodes[1].  It is also specified that
a HierarchyRequestError should be thrown if a document is to be
inserted[2].  We follow that standard, and prevent the use-after-free
this way.

[1] &lt;https://dom.spec.whatwg.org/#node-trees&gt;
[2] &lt;https://dom.spec.whatwg.org/#mutation-algorithms&gt;

Closes GH-6765.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
According to the DOM standard, elements may only contain element, text,
processing instruction and comment nodes[1].  It is also specified that
a HierarchyRequestError should be thrown if a document is to be
inserted[2].  We follow that standard, and prevent the use-after-free
this way.

[1] &lt;https://dom.spec.whatwg.org/#node-trees&gt;
[2] &lt;https://dom.spec.whatwg.org/#mutation-algorithms&gt;

Closes GH-6765.
</pre>
</div>
</content>
</entry>
</feed>
