clones/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2024-09-25 11:57:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
77b9acd326
php-src/ext/soap
History
Stanislav Malyshev 9b1a224d4e Merge branch 'PHP-5.6' 
* PHP-5.6: (21 commits)
  fix unit tests
  update NEWS
  add NEWS for fixes
  Improve fix for #70172
  Fix bug #70312 - HAVAL gives wrong hashes in specific cases
  fix test
  add test
  Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList
  Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage
  Fix bug #70172 - Use After Free Vulnerability in unserialize()
  Fix bug #70388 - SOAP serialize_function_call() type confusion
  Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories
  Improve fix for #70385
  Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)
  Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes)
  Fix bug #70219 (Use after free vulnerability in session deserializer)
  Fix bug ##70284 (Use after free vulnerability in unserialize() with GMP)
  Fix for bug #69782
  Add CVE IDs asigned (post release) to PHP 5.4.43
  Add CVE IDs asigned to #69085 (PHP 5.4.39)
  ...

Conflicts:
	ext/exif/exif.c
	ext/gmp/gmp.c
	ext/pcre/php_pcre.c
	ext/session/session.c
	ext/session/tests/session_decode_variation3.phpt
	ext/soap/soap.c
	ext/spl/spl_observer.c
	ext/standard/var.c
	ext/standard/var_unserializer.c
	ext/standard/var_unserializer.re
	ext/xsl/xsltprocessor.c
2015-09-02 00:37:20 -07:00
..
interop typo fixes - https://github.com/vlajos/misspell_fixer 2014-11-23 14:52:47 -08:00
tests Merge branch 'PHP-5.6' 2015-09-02 00:37:20 -07:00
config.m4 fix arg order, CFLAGS is the fifth arg in m4 2014-10-17 16:03:40 +02:00
config.w32 improve searchability for libxml2 headers 2015-05-10 22:22:03 +02:00
CREDITS
package.xml Remove these old references to the DSP files we don't use anymore 2015-06-22 13:29:42 +02:00
php_encoding.c Cleanup (removed dead code) 2015-07-01 22:18:40 +03:00
php_encoding.h bump year 2015-01-15 23:27:30 +08:00
php_http.c fix datatype 2015-08-07 10:12:20 +02:00
php_http.h bump year 2015-01-15 23:27:30 +08:00
php_packet_soap.c Use ZSTR_ API to access zend_string elements (this is just renaming without semantick changes). 2015-06-30 04:05:24 +03:00
php_packet_soap.h bump year 2015-01-15 23:27:30 +08:00
php_schema.c Use ZSTR_ API to access zend_string elements (this is just renaming without semantick changes). 2015-06-30 04:05:24 +03:00
php_schema.h bump year 2015-01-15 23:27:30 +08:00
php_sdl.c Cleanup (removed dead code) 2015-07-01 22:18:40 +03:00
php_sdl.h bump year 2015-01-15 23:27:30 +08:00
php_soap.h switch to the unified globals accessor where appropriate 2015-07-29 13:26:35 +02:00
php_xml.c - Fix merge 2015-02-16 13:09:40 -02:00
php_xml.h bump year 2015-01-15 23:27:30 +08:00
soap.c Merge branch 'PHP-5.6' 2015-09-02 00:37:20 -07:00
TODO Merge branch 'pull-request/341' 2013-06-10 14:30:59 -07:00
TODO.old typo fixes - https://github.com/vlajos/misspell_fixer 2014-11-23 14:52:47 -08:00