Commit message (Expand) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | 5.4.39php-5.4.39PHP-5.4.39 | Stanislav Malyshev | 2015-03-17 | 3 | -4/+4 |
* | Fix bug #69253 - ZIP Integer Overflow leads to writing past heap boundary | Stanislav Malyshev | 2015-03-17 | 2 | -1/+5 |
* | Fix bug #69248 - heap overflow vulnerability in regcomp.c | Stanislav Malyshev | 2015-03-17 | 2 | -1/+12 |
* | add test for bug #68976 | Stanislav Malyshev | 2015-03-17 | 1 | -0/+37 |
* | Fixed bug #68976 - Use After Free Vulnerability in unserialize() | Stanislav Malyshev | 2015-03-17 | 3 | -32/+35 |
* | Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration... | Stanislav Malyshev | 2015-03-17 | 2 | -1/+7 |
* | fix tests | Stanislav Malyshev | 2015-03-17 | 3 | -3/+3 |
* | Fix bug #69207 - move_uploaded_file allows nulls in path | Stanislav Malyshev | 2015-03-17 | 2 | -1/+4 |
* | Added type checks | Dmitry Stogov | 2015-03-03 | 2 | -9/+18 |
* | Added type checks | Dmitry Stogov | 2015-03-03 | 3 | -27/+46 |
* | Check variable type before its usage as IS_ARRAY. | Dmitry Stogov | 2015-03-02 | 1 | -1/+2 |
* | Fixed a bug that header value is not terminated by '\0' when accessed through... | George Wang | 2015-02-25 | 1 | -6/+25 |
* | fix typo in bug# | Ferenc Kovacs | 2015-02-18 | 1 | -1/+1 |
* | add CVE | Remi Collet | 2015-02-18 | 1 | -1/+1 |
* | 5.4.39 next | Stanislav Malyshev | 2015-02-17 | 3 | -5/+7 |
* | Port for for bug #68552 | Stanislav Malyshev | 2015-02-17 | 2 | -4/+9 |
* | Fix bug #68942 (Use after free vulnerability in unserialize() with DateTimeZone) | Stanislav Malyshev | 2015-02-17 | 2 | -7/+12 |
* | - BFN | Felipe Pena | 2015-02-17 | 1 | -1/+7 |
* | - Fixed bug #67827 (broken detection of system crypt sha256/sha512 support) | Felipe Pena | 2015-02-17 | 1 | -8/+8 |
* | - Fixed bug #67427 (SoapServer cannot handle large messages) patch by: brandt... | Felipe Pena | 2015-02-16 | 1 | -0/+3 |
* | Update NEWS | Yasuo Ohgaki | 2015-02-14 | 1 | -0/+1 |
* | Add NULL byte protection to exec, system and passthru | Yasuo Ohgaki | 2015-02-14 | 2 | -0/+29 |
* | Fixed #68790 (Missing return) | George Wang | 2015-02-07 | 1 | -1/+1 |
* | Update header handling to RFC 7230 | Stanislav Malyshev | 2015-02-05 | 5 | -16/+14 |
* | fix sizeof size | Stanislav Malyshev | 2015-02-01 | 1 | -1/+1 |
* | fix TSRM | Stanislav Malyshev | 2015-01-31 | 1 | -2/+2 |
* | Use better constant since MAXHOSTNAMELEN may mean shorter name | Stanislav Malyshev | 2015-01-31 | 5 | -12/+16 |
* | use right sizeof for memset | Stanislav Malyshev | 2015-01-31 | 1 | -1/+1 |
* | Add mitigation for CVE-2015-0235 (bug #68925) | Stanislav Malyshev | 2015-01-31 | 5 | -2/+44 |
* | fix some factual errors in the process | Ferenc Kovacs | 2015-01-22 | 1 | -6/+7 |
* | format | Stanislav Malyshev | 2015-01-20 | 1 | -1/+2 |
* | add CVE | Stanislav Malyshev | 2015-01-20 | 1 | -1/+2 |
* | add protection against nulls | Stanislav Malyshev | 2015-01-20 | 1 | -0/+5 |
* | 5.4.38 next | Stanislav Malyshev | 2015-01-20 | 3 | -6/+7 |
* | Merge branch 'bug68710' into PHP-5.4 | Stanislav Malyshev | 2015-01-20 | 4 | -3/+32 |
|\ | |||||
| * | Fix for bug #68710 (Use After Free Vulnerability in PHP's unserialize()) | Stanislav Malyshev | 2015-01-01 | 4 | -3/+32 |
* | | Merge branch 'bug68799' into PHP-5.4 | Stanislav Malyshev | 2015-01-20 | 4 | -2/+68 |
|\ \ | |||||
| * | | Fix bug #68799: Free called on unitialized pointer | Stanislav Malyshev | 2015-01-11 | 3 | -1/+64 |
| |/ | |||||
* | | Update NEWS | Daniel Lowrey | 2015-01-14 | 1 | -0/+3 |
* | | Fixed bug #55618 (use case-insensitive cert name matching) | Daniel Lowrey | 2015-01-14 | 1 | -2/+2 |
* | | updated libmagic.patch in 5.4 | Anatol Belski | 2015-01-04 | 1 | -315/+139 |
* | | Fixed bug #68735 fileinfo out-of-bounds memory access | Anatol Belski | 2015-01-04 | 4 | -2/+28 |
* | | removed dead code | Remi Collet | 2015-01-04 | 5 | -1544/+2 |
|/ | |||||
* | FIx bug #68618 (out of bounds read crashes php-cgi) | Stanislav Malyshev | 2014-12-30 | 2 | -2/+7 |
* | add missing NEWS entry | Ferenc Kovacs | 2014-12-17 | 1 | -0/+3 |
* | 5.4.37 | Stanislav Malyshev | 2014-12-16 | 3 | -5/+7 |
* | add CVE | Stanislav Malyshev | 2014-12-16 | 1 | -1/+1 |
* | add missing test file | Stanislav Malyshev | 2014-12-16 | 1 | -0/+7 |
* | Fix bug #68594 - Use after free vulnerability in unserialize() | Stanislav Malyshev | 2014-12-16 | 4 | -32/+64 |
* | Fix undefined behaviour in strnatcmp | Andrea Faulds | 2014-12-13 | 1 | -2/+2 |