Commit Graph

35954 Commits

Author SHA1 Message Date
Stanislav Malyshev
b44c524b7c array_user_key_compare() fix 2007-03-16 19:58:19 +00:00
Stanislav Malyshev
a424d65e0b add test 2007-03-16 19:55:21 +00:00
Stanislav Malyshev
90eff54400 Fix UMR in array_user_key_compare() (MOPB24 by Stefan Esser) 2007-03-16 19:38:58 +00:00
Antony Dovgal
c0aae895c6 BFN 2007-03-16 09:31:20 +00:00
Sebastian Bergmann
d3cb98caf0 Fugbix typo. 2007-03-16 06:41:24 +00:00
Antony Dovgal
6a45f716ae fix #40805 (Failure executing function ibase_execute()) 2007-03-15 22:33:04 +00:00
Antony Dovgal
bfb599b067 BFN 2007-03-15 16:44:35 +00:00
Antony Dovgal
79ed194a64 fix #40815 (using strings like "class::func" and static methods in set_exception_handler() might result in crash) 2007-03-15 16:44:12 +00:00
Antony Dovgal
f6536ed2b2 MFH: remove unnecessary warning in case of exception 2007-03-14 23:47:44 +00:00
Ilia Alshanetsky
7aab16c333 Fixed MOPB-22-2007:PHP session_regenerate_id() Double Free Vulnerability
# Discovered by Stefan Esser
2007-03-14 19:37:07 +00:00
Antony Dovgal
f9d54cbb75 MFH: fix #40750 (openssl stream wrapper ignores default_stream_timeout) 2007-03-14 19:22:14 +00:00
Pierre Joye
b85f4d4077 - leak in extract 2007-03-14 16:36:16 +00:00
Pierre Joye
6e074459fc - add ::open to the safemode check entry 2007-03-14 15:10:37 +00:00
Ilia Alshanetsky
5ed63dd8a9 Fixed a possible memory leak on open_basedir validation 2007-03-14 15:02:20 +00:00
Pierre Joye
fc3a62ed48 - MFH: openbasedir and safemode check in ::open() 2007-03-14 12:06:20 +00:00
Antony Dovgal
6e47537a01 BFN 2007-03-14 11:58:18 +00:00
Antony Dovgal
e5b5f00949 MFH: fix #40800 (cannot disable memory_limit with -1) 2007-03-14 11:58:05 +00:00
Timm Friebe
b9bc7c55d4 - Changed message handler also to handle message #11021
- Adjusted expected output
# Seems newer Sybase versions yielf different error codes for getdate(NULL)
2007-03-14 11:57:45 +00:00
Timm Friebe
ca75503c8f - Fixed segmentation fault in sybase_connect()
# This was introduced by changing sprintf -> spprintf and resulted
# from passing a char* to spprintf() instead of a char**
2007-03-14 11:48:49 +00:00
Timm Friebe
142357d445 - Changed expected output
# select getdate() returns something like "Mar 14 2007 12:44PM", we
# were checking for one additional (nonexistant) whitespace after "Mar"
# which was wrong. Don`t know when and how this changed
2007-03-14 11:46:06 +00:00
Timm Friebe
d8ed658b78 - Changed expected output
# Due to var_export() & __set_state() changes
2007-03-14 11:44:24 +00:00
Pierre Joye
b40b5b5305 - MFH: Fixed possible relative path issues in zip_open in TS mode (old API) 2007-03-14 11:32:25 +00:00
Pierre Joye
1c0b8e6f15 - rename SAFEMODE_CHECKFILE to OPENBASEDIR_CHECKPATH (can be used without
confusing in head without confusion)
- Add safemode and open basedir checks in zip:// wrapper (revert Ilia's
  patch). Bug found by Stefan Esser in his MOPB-20-2007
2007-03-14 11:08:57 +00:00
Pierre Joye
4f5303ab92 - add more cases for getComment 2007-03-14 11:02:29 +00:00
Martin Kraemer
9c62ddde34 Typo 2007-03-14 09:58:14 +00:00
Ilia Alshanetsky
6d70aa1f4e Added missing open_basedir & safe_mode checks to zip:// and bzip://
wrappers.

Issues idendtified by MOPB-20 and MOPB-21
2007-03-14 03:50:18 +00:00
Stanislav Malyshev
c3e4a2854a fix odbc resource handling, patch by Dave Lawson 2007-03-13 00:04:38 +00:00
Antony Dovgal
81f99c721b return false instead of empty string when -length is greater than (len - offset) 2007-03-12 23:42:26 +00:00
Ilia Alshanetsky
c829314963 malloc() -> pemalloc() 2007-03-12 23:21:41 +00:00
Antony Dovgal
165f44c9c3 MFH 2007-03-12 20:55:15 +00:00
Antony Dovgal
5088614ea1 synchronize iconv_substr() behavior with substr()
no MFB so far, since substr() changes are not MFBed either
2007-03-12 19:34:26 +00:00
Dmitry Stogov
ab699d03bc Fixed bug #40770 (Apache child exits when PHP memory limit reached) 2007-03-12 16:59:52 +00:00
Antony Dovgal
ed844bbb3f BFN 2007-03-12 13:10:55 +00:00
Antony Dovgal
30f45e15de MFH: fix #40784 (Case sensivity in constructor's fallback) 2007-03-12 13:10:40 +00:00
Dmitry Stogov
1e13ef2de5 Fixed compilation warning 2007-03-12 07:39:01 +00:00
Edin Kadribasic
ff53da7213 Lib upgrade news 2007-03-12 03:10:08 +00:00
Ilia Alshanetsky
f96245f8b4 malloc() -> pemalloc() 2007-03-11 18:42:19 +00:00
Antony Dovgal
80616688db MFH 2007-03-11 12:56:44 +00:00
Antony Dovgal
e8ede1ec08 fix tests 2007-03-11 12:54:54 +00:00
Ilia Alshanetsky
e82c30c845 Re-added check removed by the previous patch 2007-03-10 20:07:50 +00:00
Ilia Alshanetsky
1453879587 Added additional checks for long input arrays inside
import_request_variables().

# Missing checks identified by Stefan Esser
2007-03-10 19:20:16 +00:00
Pierre Joye
cb11ba761e - MFH: CVE-2007-1001, integer overflow with invalid wbmp images 2007-03-10 12:18:36 +00:00
Pierre Joye
547e4760e0 - #40764, line thickness not respected for horizontal and vertical lines
- add test
 - NEWS entry
2007-03-10 01:13:19 +00:00
Stanislav Malyshev
1e9fd0f002 add testcase 2007-03-09 18:37:03 +00:00
Dmitry Stogov
c2a71f8eb1 Return HTTP 403 in case of "access denied". 2007-03-09 16:46:07 +00:00
Antony Dovgal
982de65f6e fix substr()
it's perfectly legal to do substr("str", 0, 1000000);
2007-03-09 10:04:59 +00:00
Antony Dovgal
c9ded196b4 fix tests 2007-03-09 09:45:14 +00:00
Ilia Alshanetsky
02fae929af Fixed bug #40754 (added substr() & substr_replace() overflow checks). 2007-03-09 01:58:34 +00:00
Ilia Alshanetsky
b3b6db3f03 Add _SESSION to checklist 2007-03-09 01:48:56 +00:00
Ilia Alshanetsky
0fa1427c6e Fixed a possible super-global overwrite inside import_request_variables().
# Reported by Stefano Di Paola
2007-03-09 01:42:20 +00:00