delta/php-git.git, branch php-7.3.27 git.php.net: repository/php-src.git Prepare for 7.3.27 2021-02-02T09:38:52+00:00 Christoph M. Becker cmbecker69@gmx.de 2021-02-02T09:38:52+00:00 c800ecda065b5642dde6aff5484d58d91d77f66c 






Revert "Updated to version 2021.1 (2021a)"
2021-02-01T12:41:32+00:00

Christoph M. Becker
cmbecker69@gmx.de

2021-02-01T12:41:32+00:00

57257a43357a4d7c2118afffc34136de4bb10817

This reverts commit 491488d21707062fa8e9b9187db3585fb0d347da, since
PHP-7.3 is in security mode, and this does not look security related.





This reverts commit 491488d21707062fa8e9b9187db3585fb0d347da, since
PHP-7.3 is in security mode, and this does not look security related.







Fix bug #80672 - Null Dereference in SoapClient
2021-02-01T05:15:23+00:00

Stanislav Malyshev
stas@php.net

2021-02-01T05:15:23+00:00

3c939e3f69955d087e0bb671868f7267dfb2a502












Rm unneeded function
2021-01-27T08:13:43+00:00

Stanislav Malyshev
stas@php.net

2021-01-27T08:13:43+00:00

9c673083cd46ee2a954a62156acbe4b6e657c048












Alternative fix for bug 77423
2021-01-27T06:54:58+00:00

Christoph M. Becker
cmbecker69@gmx.de

2021-01-19T10:23:25+00:00

4a89e726bd4d0571991dc22a9a1ad4509e8fe347

That bug report originally was about `parse_url()` misbehaving, but the
security aspect was actually only regarding `FILTER_VALIDATE_URL`.
Since the changes to `parse_url_ex()` apparently affect userland code
which is relying on the sloppy URL parsing[1], this alternative
restores the old parsing behavior, but ensures that the userinfo is
checked for correctness for `FILTER_VALIDATE_URL`.

[1] <https://github.com/php/php-src/commit/5174de7cd33c3d4fa591c9c93859ff9989b07e8c#commitcomment-45967652>





That bug report originally was about `parse_url()` misbehaving, but the
security aspect was actually only regarding `FILTER_VALIDATE_URL`.
Since the changes to `parse_url_ex()` apparently affect userland code
which is relying on the sloppy URL parsing[1], this alternative
restores the old parsing behavior, but ensures that the userinfo is
checked for correctness for `FILTER_VALIDATE_URL`.

[1] <https://github.com/php/php-src/commit/5174de7cd33c3d4fa591c9c93859ff9989b07e8c#commitcomment-45967652>







Updated to version 2021.1 (2021a)
2021-01-25T10:44:04+00:00

Derick Rethans
github@derickrethans.nl

2021-01-25T10:44:04+00:00

491488d21707062fa8e9b9187db3585fb0d347da












[ci skip] Fix order
2021-01-04T09:45:15+00:00

Stanislav Malyshev
stas@php.net

2021-01-04T09:45:04+00:00

65d7ade6842bcf06b3d2ed59a796bdd78d073df9












[ci skip] Unpdate NEWS
2021-01-04T09:43:45+00:00

Stanislav Malyshev
stas@php.net

2021-01-04T09:43:45+00:00

8967e66559445a3cec7c96d5e8685e9c170fe2b0












Merge branch 'PHP-7.2' into PHP-7.3
2021-01-02T05:06:07+00:00

Stanislav Malyshev
stas@php.net

2021-01-02T05:06:07+00:00

128fca40376140c60b47a1c3750bb6435866838e

* PHP-7.2:
  Fix #77423: parse_url() will deliver a wrong host to user





* PHP-7.2:
  Fix #77423: parse_url() will deliver a wrong host to user







Fix #77423: parse_url() will deliver a wrong host to user
2021-01-02T04:08:01+00:00

Christoph M. Becker
cmbecker69@gmx.de

2020-05-13T07:36:52+00:00

2d3d72412a6734e19a38ed10f385227a6238e4a6

To avoid that `parse_url()` returns an erroneous host, which would be
valid for `FILTER_VALIDATE_URL`, we make sure that only userinfo which
is valid according to RFC 3986 is treated as such.

For consistency with the existing url parsing code, we use ctype
functions, although that is not necessarily correct.





To avoid that `parse_url()` returns an erroneous host, which would be
valid for `FILTER_VALIDATE_URL`, we make sure that only userinfo which
is valid according to RFC 3986 is treated as such.

For consistency with the existing url parsing code, we use ctype
functions, although that is not necessarily correct.