Stanislav Malyshev 97047e7665 Merge branch 'PHP-5.6' ... * PHP-5.6: update NEWS fix test update NEWS Fix bug #70019 - limit extracted files to given directory Do not do convert_to_* on unserialize, it messes up references Fix #69793 - limit what we accept when unserializing exception Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList) Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject ignore signatures for packages too Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage Fixed bug #69892 Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes Improved fix for Bug #69441 Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items) Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref) Fix bug #70081: check types for SOAP variables Conflicts: Zend/zend_exceptions.c ext/date/php_date.c ext/openssl/openssl.c ext/phar/phar_internal.h ext/soap/php_http.c ext/spl/spl_array.c ext/spl/spl_dllist.c ext/spl/spl_observer.c ext/standard/tests/serialize/bug69152.phpt sapi/cli/tests/005.phpt		2015-08-04 16:14:24 -07:00
..
apache2handler	Merge branch 'PHP-5.6'	2015-04-14 01:28:06 -07:00
cgi	integrate the applink shim in the other bins	2015-07-03 07:11:14 +02:00
cli	Merge branch 'PHP-5.6'	2015-08-04 16:14:24 -07:00
embed	made ZEND_TSRMLS_CACHE_* macros look like function calls	2015-02-16 17:19:32 +01:00
fpm	Use ZSTR_ API to access zend_string elements (this is just renaming without semantick changes).	2015-06-30 13:59:27 +03:00
litespeed	bump API version to 6.8	2015-06-22 23:39:35 -04:00
phpdbg	Fix further leaks	2015-08-04 01:22:04 +02:00
tests	Fixed sapi/tests (maybe needs some run-test.php people's reviewing)	2015-05-27 17:37:34 +08:00