Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | phpt file to bug #73135 | Edgar R. Sandi | 2016-11-12 | 1 | -0/+24 |
| | |||||
* | Merge branch 'PHP-5.6' into PHP-7.0 | Christoph M. Becker | 2016-08-20 | 1 | -1/+1 |
|\ | |||||
| * | Improvements to fix #72714, suggested by nikic | Christoph M. Becker | 2016-08-20 | 1 | -1/+1 |
| | | |||||
* | | Merge branch 'PHP-5.6' into PHP-7.0 | Christoph M. Becker | 2016-08-20 | 1 | -0/+35 |
|\ \ | |/ | |||||
| * | Fix #72714: _xml_startElementHandler() segmentation fault | Christoph M. Becker | 2016-08-20 | 1 | -0/+35 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The issue is caused by an integer overflow when the `long` passed as XML_OPTION_SKIP_TAGSTART is assigned to `xml_parser::toffset` which is declared as `int`. We can simply work around this issue, by clipping resulting negative values to 0 (and raising a notice in this case), because the reasonable range for this value is certainly catered to by positive `int`s. However, there still remains the issue that `xml_parser::toffset` is later added to `char *`s, which can cause OOB reads, so we make sure that the upper bound never exceeds the strlen(). We eschew optimizing `SKIP_TAGSTART` wrt. to the potentially duplicate strlen() call, because that code path is unexpected anyway. | ||||
* | | Merge branch 'PHP-5.6' into PHP-7.0 | Christoph M. Becker | 2016-08-17 | 1 | -0/+74 |
|\ \ | |/ | |||||
| * | #72085: SEGV on unknown address zif_xml_parse | Christoph M. Becker | 2016-08-17 | 1 | -0/+74 |
| | | | | | | | | | | We better make sure that the ZVALs we're accessing as arrays are indeed arrays. | ||||
* | | Merge branch 'PHP-5.6' into PHP-7.0 | Anatol Belski | 2016-04-27 | 1 | -0/+17 |
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | * PHP-5.6: Fix memory leak Fix bug #72099: xml_parse_into_struct segmentation fault 5.5.36 now Fix bug #72094 - Out of bounds heap read access in exif header processing Fix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definition Fix bug #72061 - Out-of-bounds reads in zif_grapheme_stripos with negative offset Fix for bug #71912 (libgd: signedness vulnerability) Typo in NEWS | ||||
| * | Merge branch 'PHP-5.5' into PHP-5.6 | Stanislav Malyshev | 2016-04-26 | 1 | -0/+17 |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * PHP-5.5: Fix memory leak Fix bug #72099: xml_parse_into_struct segmentation fault 5.5.36 now Fix bug #72094 - Out of bounds heap read access in exif header processing Fix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definition Fix bug #72061 - Out-of-bounds reads in zif_grapheme_stripos with negative offset Fix for bug #71912 (libgd: signedness vulnerability) Typo in NEWS Conflicts: configure.in main/php_version.h | ||||
| | * | Fix bug #72099: xml_parse_into_struct segmentation fault | Stanislav Malyshev | 2016-04-26 | 1 | -0/+17 |
| | | | |||||
* | | | Merge branch 'PHP-5.6' | Christoph M. Becker | 2015-09-09 | 1 | -0/+2 |
|\ \ \ | |/ / | | | | | | | | | | * PHP-5.6: Skip test for old glibc iconv | ||||
| * | | Skip test for old glibc iconv | Christoph M. Becker | 2015-09-09 | 1 | -0/+2 |
| |/ | | | | | | | | | | | | | bug32001.phpt has a high failure rate for the submitted reports. According to several samples it seems the iconv implementation of glibc 2.12 (released 2010-05) is the culprit. It seems appropriate to skip the test for such old versions. | ||||
* | | Deprecate PHP 4 constructors | Andrea Faulds | 2015-03-31 | 1 | -1/+1 |
| | | |||||
* | | Use "float" and "integer" in typehint and zpp errors | Andrea Faulds | 2014-12-21 | 23 | -131/+131 |
| | | |||||
* | | Skip buncha tests on 32-bit | Andrea Faulds | 2014-11-29 | 3 | -2/+3 |
|/ | |||||
* | this test depends on the simplexml ext, not just on xml | Ferenc Kovacs | 2014-08-24 | 1 | -21/+0 |
| | |||||
* | Merge branch 'PHP-5.3' into PHP-5.4 | Johannes Schlüter | 2013-07-10 | 1 | -0/+15 |
|\ | |||||
| * | add test for bug #65236 | Johannes Schlüter | 2013-07-10 | 1 | -0/+15 |
| | | |||||
* | | Merge branch 'PHP-5.3' into PHP-5.4 | Xinchen Hui | 2012-10-10 | 3 | -0/+0 |
|\ \ | |/ | |||||
| * | Remove executable permission on phpt | Xinchen Hui | 2012-10-10 | 3 | -0/+0 |
| | | |||||
| * | - Fixed bug #49687 (utf8_decode vulnerabilities and deficiencies in the number | Gustavo André dos Santos Lopes | 2010-10-27 | 1 | -0/+24 |
| | | | | | | | | | | | | | | | | of reported malformed sequences). (Gustavo) #Made a public interface for get_next_char/utf-8 in trunk to use in utf8_decode. #In PHP 5.3, trunk's get_next_char was copied to xml.c because 5.3's #get_next_char is different and is not prepared to recover appropriately from #errors. | ||||
* | | Fixed bug #62328 (implementing __toString and a cast to string fails) | Xinchen Hui | 2012-08-12 | 1 | -0/+21 |
| | | | | | | | | __toString should has a high priority | ||||
* | | Changed silent conversion of array to string to produce a notice. (Patrick) | Stanislav Malyshev | 2011-10-21 | 28 | -28/+28 |
| | | |||||
* | | - remove magic quotes support, functions are kept (see the NEWS entry for ↵ | Pierre Joye | 2011-07-22 | 5 | -10/+0 |
| | | | | | | | | the details) for BC reasons but do not allow to set enable MQ, missing tests changes in 5.4 | ||||
* | | - Fixed bug #49687 (utf8_decode vulnerabilities and deficiencies in the number | Gustavo André dos Santos Lopes | 2010-10-27 | 1 | -0/+24 |
|/ | | | | | | | | of reported malformed sequences). (Gustavo) #Made a public interface for get_next_char/utf-8 in trunk to use in utf8_decode. #In PHP 5.3, trunk's get_next_char was copied to xml.c because 5.3's #get_next_char is different and is not prepared to recover appropriately from #errors. | ||||
* | Fixed bug #50576 (XML_OPTION_SKIP_TAGSTART option has no effect). | Pierrick Charron | 2010-01-05 | 1 | -0/+133 |
| | |||||
* | - Fix test | Jani Taskinen | 2009-12-14 | 1 | -3/+1 |
| | |||||
* | fix test | Antony Dovgal | 2009-01-13 | 1 | -2/+2 |
| | |||||
* | MFH: fix bug #46699: (xml_parse crash when parser is namespace aware) | Rob Richards | 2008-12-12 | 1 | -0/+33 |
| | | | | | | fix a couple warnings add test | ||||
* | Remove duff comment produced by the test generator tool | Ant Phillips | 2008-12-05 | 7 | -29/+0 |
| | |||||
* | XML tests: checked on PHP 5.2.6, 5.3 and 6.0 (Windows, Linux and Linux 64 bit). | Ant Phillips | 2008-12-03 | 57 | -0/+8001 |
| | |||||
* | Support for closures | Dmitry Stogov | 2008-07-17 | 1 | -0/+47 |
| | |||||
* | fix test names | Antony Dovgal | 2008-05-14 | 1 | -1/+1 |
| | |||||
* | Fixed bug #43957 (utf8_decode() bogus conversion of partial multibyte UTF8 char) | Rasmus Lerdorf | 2008-01-29 | 1 | -0/+13 |
| | |||||
* | fix test | Hannes Magnusson | 2006-09-02 | 1 | -3/+1 |
| | |||||
* | fix bug #38454 (warning upon disabling handler via xml_set_element_handler) | Rob Richards | 2006-08-15 | 1 | -0/+71 |
| | | | | | | fix bug #38427 (unicode causes xml_parser to misbehave) add test | ||||
* | MFH: fix test | Rob Richards | 2006-01-04 | 1 | -2/+0 |
| | |||||
* | - MFH Fix test by splitting it | Marcus Boerger | 2005-12-23 | 2 | -82/+188 |
| | |||||
* | - MFH Do not test output escaping here | Marcus Boerger | 2005-12-23 | 3 | -24/+24 |
| | |||||
* | add skipif conditions | Antony Dovgal | 2005-12-21 | 10 | -3/+26 |
| | |||||
* | MFH: Fixed bug #35447 (xml_parse_into_struct() chokes on the UTF-8 BOM) | Rob Richards | 2005-12-19 | 1 | -0/+48 |
| | | | | | add test | ||||
* | MFH: Hiding bugs is not purpose of the regression tests. | foobar | 2005-11-01 | 1 | -1/+3 |
| | |||||
* | Improve iconv skip conditions | Ilia Alshanetsky | 2005-10-30 | 1 | -1/+1 |
| | |||||
* | This test failed because libxml versions differ.. | foobar | 2005-08-07 | 1 | -7/+7 |
| | |||||
* | Added test for bug #27908 | foobar | 2005-07-31 | 1 | -0/+19 |
| | |||||
* | - Fix test. | foobar | 2005-07-31 | 1 | -3/+3 |
| | |||||
* | - If you ask me both (expat and libxml) are not really accurate about byte | Marcus Boerger | 2005-07-17 | 2 | -0/+92 |
| | | | | | | | positions and columns...however the line number information is now correct for both so for the moment we live with the situation that they return different byte and column information. | ||||
* | fix test | Antony Dovgal | 2005-06-29 | 1 | -1/+2 |
| | |||||
* | nuke crap, end scripts always with ?> | foobar | 2005-06-03 | 1 | -2/+3 |
| | |||||
* | Add skipif, test requires iconv. | Magnus M��tt� | 2005-06-03 | 1 | -0/+3 |
| |