<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/php-git.git/sapi, branch php-7.3.12</title>
<subtitle>git.php.net: repository/php-src.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/'/>
<entry>
<title>Merge branch 'PHP-7.2' into PHP-7.3</title>
<updated>2019-10-21T20:17:19+00:00</updated>
<author>
<name>Stanislav Malyshev</name>
<email>stas@php.net</email>
</author>
<published>2019-10-21T20:17:19+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=57b4dcbe77ac0d031333e6fca0a6b74766b7f375'/>
<id>57b4dcbe77ac0d031333e6fca0a6b74766b7f375</id>
<content type='text'>
* PHP-7.2:
  Fix bug #78599 (env_path_info underflow can lead to RCE) (CVE-2019-11043)
  bump versions after release
  set versions for release
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* PHP-7.2:
  Fix bug #78599 (env_path_info underflow can lead to RCE) (CVE-2019-11043)
  bump versions after release
  set versions for release
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'PHP-7.1' into PHP-7.2</title>
<updated>2019-10-21T20:17:09+00:00</updated>
<author>
<name>Stanislav Malyshev</name>
<email>stas@php.net</email>
</author>
<published>2019-10-21T20:17:09+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=4b5cdda0c793ef4f225a82d448183044441ca2b5'/>
<id>4b5cdda0c793ef4f225a82d448183044441ca2b5</id>
<content type='text'>
* PHP-7.1:
  Fix bug #78599 (env_path_info underflow can lead to RCE) (CVE-2019-11043)
  bump versions after release
  set versions for release
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* PHP-7.1:
  Fix bug #78599 (env_path_info underflow can lead to RCE) (CVE-2019-11043)
  bump versions after release
  set versions for release
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix bug #78599 (env_path_info underflow can lead to RCE) (CVE-2019-11043)</title>
<updated>2019-10-21T05:50:04+00:00</updated>
<author>
<name>Jakub Zelenka</name>
<email>bukka@php.net</email>
</author>
<published>2019-10-12T14:56:16+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=ab061f95ca966731b1c84cf5b7b20155c0a1c06a'/>
<id>ab061f95ca966731b1c84cf5b7b20155c0a1c06a</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix #78413: php-fpm request_terminate_timeout does not take effect after fastcgi_finish_request</title>
<updated>2019-09-30T10:54:09+00:00</updated>
<author>
<name>Sergei Turchanov</name>
<email>turchanov@farpost.com</email>
</author>
<published>2019-08-28T04:37:52+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=e546d721e8c61fb1218335dc75b1874033c3ca24'/>
<id>e546d721e8c61fb1218335dc75b1874033c3ca24</id>
<content type='text'>
To retain legacy behavior I decided to add an option to control request
termination logic. If request_terminate_timeout_track_finished is set,
then request will be tracked for time limits even after
fastcgi_finish_request was called.

This patch depends on the fix provided in BUG 78469 (otherwise php-fpm
workers listening on named pipes on Windows will be erroneously terminated)
(PR #4636)
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
To retain legacy behavior I decided to add an option to control request
termination logic. If request_terminate_timeout_track_finished is set,
then request will be tracked for time limits even after
fastcgi_finish_request was called.

This patch depends on the fix provided in BUG 78469 (otherwise php-fpm
workers listening on named pipes on Windows will be erroneously terminated)
(PR #4636)
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'PHP-7.2' into PHP-7.3</title>
<updated>2019-09-17T10:19:39+00:00</updated>
<author>
<name>Nikita Popov</name>
<email>nikita.ppv@gmail.com</email>
</author>
<published>2019-09-17T10:19:39+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=3a2fa489ddcb7557e6c55de7fb488e4f32031bde'/>
<id>3a2fa489ddcb7557e6c55de7fb488e4f32031bde</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Add tilde to allowed status/ping path</title>
<updated>2019-09-17T10:19:21+00:00</updated>
<author>
<name>Drakano</name>
<email>drakano@arcor.de</email>
</author>
<published>2019-09-12T08:18:30+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=252ebce0d7dc05695c6bfaad493e2626e1a2233f'/>
<id>252ebce0d7dc05695c6bfaad493e2626e1a2233f</id>
<content type='text'>
Because of user specific webdirs it should be possible to set a
status/ping path like "/~username/status".

Closes GH-4698.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Because of user specific webdirs it should be possible to set a
status/ping path like "/~username/status".

Closes GH-4698.
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix bug #78334 (fpm log prefix message includes wrong stdout/stderr notation)</title>
<updated>2019-08-26T17:05:11+00:00</updated>
<author>
<name>Tsuyoshi Sadakata</name>
<email>sadapon2008@gmail.com</email>
</author>
<published>2019-07-25T14:22:45+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=ffcf57fa187f55b6e2cf3e6de43b03332cc750de'/>
<id>ffcf57fa187f55b6e2cf3e6de43b03332cc750de</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Remove test for bug #77185</title>
<updated>2019-07-22T10:40:26+00:00</updated>
<author>
<name>Nikita Popov</name>
<email>nikita.ppv@gmail.com</email>
</author>
<published>2019-07-22T10:40:26+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=b59a9381b989c5c434b30482b1c1b8493f3ceb27'/>
<id>b59a9381b989c5c434b30482b1c1b8493f3ceb27</id>
<content type='text'>
Seems to be very unreliable in CI.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Seems to be very unreliable in CI.
</pre>
</div>
</content>
</entry>
<entry>
<title>Reduce number of workers in test</title>
<updated>2019-07-22T09:18:38+00:00</updated>
<author>
<name>Nikita Popov</name>
<email>nikita.ppv@gmail.com</email>
</author>
<published>2019-07-22T09:18:38+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=5e4dbce5864811122110b49298e8b3eeb8b9d4b0'/>
<id>5e4dbce5864811122110b49298e8b3eeb8b9d4b0</id>
<content type='text'>
4 seems to be enough to reliably reproduce the issue. Let's see
if this works better in CI.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
4 seems to be enough to reliably reproduce the issue. Let's see
if this works better in CI.
</pre>
</div>
</content>
</entry>
<entry>
<title>Prevent use after free in fpm_event_epoll_wait</title>
<updated>2019-07-22T08:32:58+00:00</updated>
<author>
<name>Maksim Nikulin</name>
<email>mnikulin@plesk.com</email>
</author>
<published>2019-01-23T05:19:29+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/php-git.git/commit/?id=bdf24f8d6d9d495ece354d6fd2dd6ed169198a2e'/>
<id>bdf24f8d6d9d495ece354d6fd2dd6ed169198a2e</id>
<content type='text'>
epoll event backend does not guarantee that child input/output events
are reported before SIGCHILD due to finished worker. While a bunch of
events received by epoll is being processed, child-related structures
may be removed before dispatching of an I/O event for the same child.
The result may be attempt to access to memory region allocated for
another purpose, segfault of the master process, and unavailable web
sites.

Postpone processing of SIGCHILD events till other events in the same
bunch are processed.

Fix Bug #62418 php-fpm master process crashes
Fix Bug #65398 Race condition between SIGCHLD and child stdout/stderr event leads to segfault
Fix Bug #75112 php-fpm crashing, hard to reproduce
Fix Bug #77114 php-fpm master segfaults in fpm_event_epoll_wait/fpm_event_fire
Fix Bug #77185 Use-after-free in FPM master event handling
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
epoll event backend does not guarantee that child input/output events
are reported before SIGCHILD due to finished worker. While a bunch of
events received by epoll is being processed, child-related structures
may be removed before dispatching of an I/O event for the same child.
The result may be attempt to access to memory region allocated for
another purpose, segfault of the master process, and unavailable web
sites.

Postpone processing of SIGCHILD events till other events in the same
bunch are processed.

Fix Bug #62418 php-fpm master process crashes
Fix Bug #65398 Race condition between SIGCHLD and child stdout/stderr event leads to segfault
Fix Bug #75112 php-fpm crashing, hard to reproduce
Fix Bug #77114 php-fpm master segfaults in fpm_event_epoll_wait/fpm_event_fire
Fix Bug #77185 Use-after-free in FPM master event handling
</pre>
</div>
</content>
</entry>
</feed>
