delta/php-git.git, branch php-7.1.28 git.php.net: repository/php-src.git set versions for 7.1.28 2019-04-02T13:28:17+00:00 Joe Watkins krakjoe@php.net 2019-04-02T13:28:17+00:00 edcb43edfc54d69968531dc4ef37150e21c45f4c 






fix paste issue
2019-04-02T09:05:09+00:00

Remi Collet
remi@remirepo.net

2019-04-02T09:03:40+00:00

dc1cd3daf2521b352b0c9fa6ade7e49a8cc63130












Pointer arithmetic on void pointers is illegal
2019-04-02T08:39:44+00:00

Christoph M. Becker
cmbecker69@gmx.de

2019-04-02T08:37:40+00:00

01a4de5c5821f67daeff487ef9b3047ce7b47c4c

We quick-fix this by casting to char*; it might be more appropriate to
use char pointers in the first place.





We quick-fix this by casting to char*; it might be more appropriate to
use char pointers in the first place.







Fixed bug #77831 - Heap-buffer-overflow in exif_iif_add_value in EXIF
2019-04-02T07:12:26+00:00

Stanislav Malyshev
stas@php.net

2019-04-02T07:12:26+00:00

887a7b571407f7a49a5e7cf1e612d21ef83fedb4












Update NEWS
2019-04-01T06:11:15+00:00

Stanislav Malyshev
stas@php.net

2019-04-01T06:11:15+00:00

c684d32fb877aa7335842e8b9e7506ef51620e1a












Fix bug #77753 - Heap-buffer-overflow in php_ifd_get32s
2019-04-01T06:09:06+00:00

Stanislav Malyshev
stas@php.net

2019-03-18T05:54:46+00:00

f3aefc6d071b807ddacae0a0bc49f09c38e18490












Validate subject encoding in mb_split and mb_ereg_match
2019-03-28T06:20:27+00:00

Nikita Popov
nikita.ppv@gmail.com

2019-02-11T11:31:59+00:00

0ecac37c40a27ffbd59f34b5920735ee0b7f994c

We were already validating the subject encoding in most functions,
but not these two.





We were already validating the subject encoding in most functions,
but not these two.







Validate pattern against mbregex encoding
2019-03-28T06:19:46+00:00

Nikita Popov
nikita.ppv@gmail.com

2019-02-11T11:10:40+00:00

40fe50daf6069f73d0be43d8fcd7d5953053c10d

Oniguruma does not consistently perform this validation itself (at least
on older versions), so make sure we check pattern encoding validity on the
PHP side.





Oniguruma does not consistently perform this validation itself (at least
on older versions), so make sure we check pattern encoding validity on the
PHP side.







SQLite3: add DEFENSIVE config for SQLite >= 3.26.0 as a mitigation strategy against potential security flaws
2019-03-11T17:02:03+00:00

bohwaz
github.bohwaz@miam.kd2.org

2018-12-16T21:52:37+00:00

58c25bf679125a2da354db58ddc6b0cf6d10ee00












Sync with behavior change in OpenSSL 1.1.1b
2019-03-08T14:47:32+00:00

Anatol Belski
ab@php.net

2019-02-28T11:48:47+00:00

66bd861fcd2a508d5321d8a3be6158f5026aafc6

A behavior change in revealed by some openssl_decrypt() based test,
where an encrypt API is used with a decrypt context. The EVP_Cipher*
functions will automatically choose the right operation depending on the
context passed.

(cherry picked from commit 19a44ffb7be91344550fa700830b8e62a73031ba)





A behavior change in revealed by some openssl_decrypt() based test,
where an encrypt API is used with a decrypt context. The EVP_Cipher*
functions will automatically choose the right operation depending on the
context passed.

(cherry picked from commit 19a44ffb7be91344550fa700830b8e62a73031ba)