delta/php-git.git, branch php-7.1.1 git.php.net: repository/php-src.git Fix #73869: Signed Integer Overflow gd_io.c 2017-01-17T20:42:56+00:00 Christoph M. Becker cmbecker69@gmx.de 2016-12-17T16:06:58+00:00 9abbc3cc6d0f448435ca38bef694f671bf7303d8 GD2 stores the number of horizontal and vertical chunks as words (i.e. 2 byte unsigned). These values are multiplied and assigned to an int when reading the image, what can cause integer overflows. We have to avoid that, and also make sure that either chunk count is actually greater than zero. If illegal chunk counts are detected, we bail out from reading the image. (cherry picked from commit 5b5d9db3988b829e0b121b74bb3947f01c2796a1) 
GD2 stores the number of horizontal and vertical chunks as words (i.e. 2
byte unsigned). These values are multiplied and assigned to an int when
reading the image, what can cause integer overflows. We have to avoid
that, and also make sure that either chunk count is actually greater
than zero. If illegal chunk counts are detected, we bail out from
reading the image.

(cherry picked from commit 5b5d9db3988b829e0b121b74bb3947f01c2796a1)
Fix #73868: DOS vulnerability in gdImageCreateFromGd2Ctx() 2017-01-17T20:42:35+00:00 Christoph M. Becker cmbecker69@gmx.de 2016-08-16T16:23:36+00:00 c95dcc3bb29df76b8656c960dbfd80b0720ffde8 We must not pretend that there are image data if there are none. Instead we fail reading the image file gracefully. (cherry picked from commit cdb648dc4115ce0722f3cc75e6a65115fc0e56ab) 
We must not pretend that there are image data if there are none. Instead
we fail reading the image file gracefully.

(cherry picked from commit cdb648dc4115ce0722f3cc75e6a65115fc0e56ab)
missing news entries 2017-01-17T19:32:46+00:00 Joe Watkins krakjoe@php.net 2017-01-17T19:31:07+00:00 84aa9d5e9a325db5fa49b06e49f6e71cf483d661 






set version for stable 7.1.1
2017-01-17T18:45:07+00:00

Joe Watkins
krakjoe@php.net

2017-01-17T18:45:07+00:00

efe6d8a49de098c3b80b0579d7a2f537c49a360b












bump versions for 7.1.1RC1
2017-01-05T16:20:10+00:00

Joe Watkins
krakjoe@php.net

2017-01-05T16:20:10+00:00

91fab216df187dafc1430702e4885892eba7c585












Merge branch 'PHP-7.0' into PHP-7.1
2017-01-05T13:02:43+00:00

Anatol Belski
ab@php.net

2017-01-05T13:02:43+00:00

34c1040e2218dfb54649c2bbd0ef958a5826454e

* PHP-7.0:
  Revert "Merge branch 'bugfix_timeout_61471' of https://github.com/axot/php-src into PHP-7.0"





* PHP-7.0:
  Revert "Merge branch 'bugfix_timeout_61471' of https://github.com/axot/php-src into PHP-7.0"







Revert "Merge branch 'bugfix_timeout_61471' of https://github.com/axot/php-src into PHP-7.0"
2017-01-05T12:59:01+00:00

Anatol Belski
ab@php.net

2017-01-05T12:59:01+00:00

57736cc937fc6dfdfb403293d7bf88b264e83e15

This reverts commit a8931df672bb173ef81c10e4fc2a5de23789c935, reversing
changes made to f2f35a2b27d0074ab015b8a37d6563eec74147d5.





This reverts commit a8931df672bb173ef81c10e4fc2a5de23789c935, reversing
changes made to f2f35a2b27d0074ab015b8a37d6563eec74147d5.







Merge branch 'PHP-7.0' into PHP-7.1
2017-01-05T10:38:17+00:00

Nikita Popov
nikic@php.net

2017-01-05T10:38:17+00:00

769e17ce9bc6b93790237622020ac3c08ceb1e18












Merge branch 'PHP-5.6' into PHP-7.0
2017-01-05T10:38:05+00:00

Nikita Popov
nikic@php.net

2017-01-05T10:38:05+00:00

2022dacb9997df2391866df99eb1592a1527fc27












Fix printf modifier
2017-01-05T10:37:06+00:00

Nikita Popov
nikic@php.net

2017-01-05T10:37:06+00:00

900b17b15fd5d29b6575b175b2b120ffab3adc96