delta/php-git.git, branch php-7.3.24

Prepare for 7.3.24

2020-10-27T09:39:16+00:00

Revert "Fix out-of-bounds write"

2020-10-26T14:54:40+00:00

This reverts commit bf6873a18e3b6b00f82a645c0893a281ae8eadb8.

CVE-2020-26159 is bogus; the "bug" was apparently a false positive
reported by Coverity, and the "fix" apparently wrong, see
.

Closes GH-6357.

(cherry picked from commit be6d72b3a445a37f48b021e3e8e85e3a00924d71)

Prepare for 7.3.24RC1

2020-10-13T07:50:09+00:00

Fix #80226: imap_sort() leaks sortpgm memory

2020-10-12T21:16:31+00:00

We need to free what we have allocated.

Closes GH-6327.

Fix #80216: imap_mail_compose() does not validate types/encodings

2020-10-12T14:27:49+00:00

We need to check whether the given `type`s and `encoding`s are within
bounds to avoid segfaults and out-of-bound reads.

Closes GH-6323.

Fix #80223: imap_mail_compose() leaks envelope on malformed bodies

2020-10-12T13:08:30+00:00

We have to clean up even on failure.

Closes GH-6322.

Fix #80220: imap_mail_compose() may leak memory

2020-10-12T11:31:30+00:00

Unless `topbod` is of `TYPEMULTIPART`, `mail_free_body()` does not free
the `nested.part`; while we could do this ourselves, instead we just
ignore additional bodies in this case, i.e. we don't attach them in the
first place.

Closes GH-6321.

Detect self-addition of array more accurately

2020-10-12T09:24:31+00:00

While the zvals may be different, they may still point to the
same array.

Fixes oss-fuzz #26245.

Deindirect source elements in zend_hash_merge

2020-10-12T09:24:27+00:00

If the RHS has INDIRECT elements, we do not those to be added to
the LHS verbatim. As we're using UPDATE_INDIRECT, we might even
create a nested INDIRECT that way.

This is a side-quest of oss-fuzz #26245.

Fixed test for bug #48097 due to confirmed data changes in timelib

2020-10-11T13:53:52+00:00