Commit Graph

74 Commits

Author SHA1 Message Date
Gustavo André dos Santos Lopes
d3fdacb99f - Fixed #55798: serialize followed by unserialize with numeric object prop.
gives integer prop.
2011-09-28 14:47:42 +00:00
Felipe Pena
927bf09c29 - Year++ 2011-01-01 02:19:59 +00:00
Rasmus Lerdorf
0d1ab2f6ac Fix 5.3 as well 2010-08-06 18:20:41 +00:00
Stanislav Malyshev
865f85718f fix SplObjectStorage unserialization (CVE-2010-2225) 2010-06-29 00:58:31 +00:00
Sebastian Bergmann
ebb467ff02 sed -i "s#1997-2009#1997-2010#g" **/*.re **/*.y **/*.l 2010-01-03 08:22:14 +00:00
Felipe Pena
b117752f8b - MFH: Year++ 2009-03-17 23:07:40 +00:00
Matt Wilmas
927880b5cc MFH: Fixed bug #46882 (Serialize / Unserialize misbehaviour under OS with different bit numbers) 2009-03-17 22:04:10 +00:00
Marcus Boerger
7126de4912 - Next step in namespaces, using / as namespace separator. 2008-11-04 15:58:55 +00:00
Dmitry Stogov
78d28494ca Fixed bug #45706 (Unserialization of classes derived from ArrayIterator fails) 2008-08-29 14:59:20 +00:00
Matt Wilmas
7da75d81e7 MFH: Add array_init_size() and use it where array size is known at initialization 2008-05-27 10:29:33 +00:00
Felipe Pena
17c7463331 MFB: Fixed bug #43614 (incorrect processing of numerical string keys of array in arbitrary serialized data) 2008-03-19 03:05:35 +00:00
Dmitry Stogov
cb0991bb85 Fixed bug #42919 (Unserializing of namespaced class object fails) 2007-10-17 10:36:33 +00:00
Yiduo (David) Wang
4b4d634cb9 MFH: Added macros for managing zval refcounts and is_ref statuses 2007-10-07 05:22:07 +00:00
Nuno Lopes
e029a0ee59 fix a few compiler warnings (mostly use of unitialized values) 2007-09-29 11:18:42 +00:00
Jani Taskinen
6bd9f53a63 - fix ws 2007-08-06 18:23:16 +00:00
Ilia Alshanetsky
57f3c5b343 Fixed compiler warning 2007-08-06 16:45:23 +00:00
Dmitry Stogov
fe9a826605 Proper fix for MOPB-29 2007-07-09 14:31:56 +00:00
Antony Dovgal
2c06cea75b MFH: fix compile warning 2007-03-27 09:29:10 +00:00
Stanislav Malyshev
0af75d6b1a fix MOPB-29 - unserialize modifier S does not calculate length correctly
# reported by Stefan Esser
2007-03-23 20:15:22 +00:00
Andrei Zmievski
8f5310afad Support for 'S' format in unserialize() (forward compatibility with PHP
6)
2006-12-15 00:58:08 +00:00
foobar
e3fd31503b bump the year and license version 2006-01-01 12:26:08 +00:00
foobar
020f1ba949 MFH: - Fixed bug #34311 (unserialize() crashes with characters above 191 dec) 2005-09-05 16:22:19 +00:00
foobar
23e671a51e - Bumber up year 2005-08-03 14:08:58 +00:00
Dmitry Stogov
9383e1b858 Fixed bug #30791 (magic methods (__sleep/__wakeup/__toString) call __call if object is overloaded) 2005-06-01 11:03:58 +00:00
foobar
b185ee0315 - Fixed bug with unserialize() with "exotic" letters in class names
# Patch by: Christian Schneider <cschneid@cschneid.com>
2005-05-31 09:41:36 +00:00
Marcus Boerger
22fcd1aac7 - Fix #31442 unserialize broken on 64-bit systems
- Fix one warning
2005-03-10 00:10:21 +00:00
Marcus Boerger
9c08e3ccae - Update signature 2005-03-07 22:27:29 +00:00
Stefan Esser
e2f1b375a2 This way around for correct error messages 2005-02-28 16:32:49 +00:00
Stefan Esser
b7476a5bd6 Drop invalid arrays 2005-02-28 16:22:39 +00:00
Stanislav Malyshev
634a5ec6f8 fix typo 2005-02-27 11:30:41 +00:00
Stanislav Malyshev
8919a7ae08 fix typo 2005-02-24 10:58:16 +00:00
Stefan Esser
0ef1f50383 Correcting bounds check before someone uses this code 2005-02-23 18:26:39 +00:00
Stanislav Malyshev
db3fdce304 Custom object serializer infrastructure - PHP implementation
# The detailed announce on the list will follow
2005-02-23 11:17:52 +00:00
Marcus Boerger
ff8055fc5c - Disallow illegal class names 2005-02-14 20:58:22 +00:00
Ilia Alshanetsky
112eb3b35d Fix handling of INF/NAN in unserialize(). 2005-01-30 16:38:53 +00:00
Ilia Alshanetsky
4a5294788e Fixed bug #31699 (unserialize() float problem on non-English locales). 2005-01-26 16:55:17 +00:00
Stefan Esser
da7001a6c3 Fix compiler warning. 2005-01-17 11:45:09 +00:00
Stefan Esser
135fee7f10 and use it... 2005-01-15 18:30:16 +00:00
Stefan Esser
2c25b9d866 Restore unserialize() speed 2005-01-15 18:18:08 +00:00
Stefan Esser
9a18fb197d Handle already existing elements correctly 2004-12-03 16:02:48 +00:00
Stefan Esser
1094a0d243 Beware of negative indices 2004-12-01 22:42:00 +00:00
Marcus Boerger
abe47301c1 - Earlier detection of failure 2004-09-26 21:47:27 +00:00
Marcus Boerger
8564352f59 - Readd check for nested data (but correct this time) 2004-09-12 12:43:05 +00:00
Marcus Boerger
06ade1ab1c - Check for legal key types 2004-09-12 12:23:16 +00:00
Marcus Boerger
6200c9a5a1 - Remove wrong test 2004-09-12 11:51:13 +00:00
Marcus Boerger
efea880e6f - Add some checks to unserialize() to prevent bufferoverflows 2004-09-05 17:16:02 +00:00
Andi Gutmans
56f8195fe5 - Nuke empty_string. It is a reminanent from the time where RETURN_FALSE()
used to return "" and not bool(false). It's not worth keeping it because
  STR_FREE() and zval_dtor() always have to check for it and it slows down
  the general case. In addition, it seems that empty_string has been abused
  quite a lot, and was used not only for setting zval's but generally in
  PHP code instead of "", which wasn't the intention. Last but not least,
  nuking empty_string should improve stability as I doubt every place
  correctly checked if they are not mistakenly erealloc()'ing it or
  calling efree() on it.
  NOTE: Some code is probably broken. Each extension maintainer should
  check and see that my changes are OK. Also, I haven't had time to touch
  PECL yet. Will try and do it tomorrow.
2004-07-19 07:19:50 +00:00
Marcus Boerger
bc0373b880 Portable solution for bug #27646 that works correct on Windows, too 2004-03-27 00:50:41 +00:00
Marcus Boerger
fdcff80c16 - Allow negative infinity
- Register missing constants, they work anyway but cause an E_NOTICE
# generation by atof() should be portable enough (afaik)
2004-03-23 22:30:25 +00:00
Marcus Boerger
c64376bda5 Bugfix #27646: Cannot serialize/unserialize non-finite numeric values 2004-03-23 20:54:00 +00:00