mirrors/php-src
0
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2024-11-27 20:03:40 +08:00
Code Issues Packages Projects Releases Wiki Activity
3cad07b84f
php-src/NEWS

2665 lines
102 KiB
Plaintext
Raw Normal View History

remove BOM from NEWS
2015-07-21 22:36:36 +08:00
PHP NEWS
Please add in any changes/bug fixes you've made - we need to keep a details ChangeLog...
1999-07-23 07:54:54 +08:00
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
move dev to 7.0.24
2017-08-15 15:33:30 +08:00
?? ??? 2017 PHP 7.0.24
[ci skip] update NEWS
2017-08-19 08:40:17 +08:00
- Core:
. Fixed #75042 run-tests.php issues with EXTENSION block). (John Boehr)
NEWS
2017-08-18 20:52:11 +08:00
- CURL:
. Fixed bug #75093 (OpenSSL support not detected). (Remi)
move dev to 7.0.24
2017-08-15 15:33:30 +08:00
31 Aug 2017 PHP 7.0.23
move to 7.0.23 for dev
2017-07-18 16:25:40 +08:00
Fixed bug #74947 (Segfault in scanner on INF number)
2017-07-21 11:52:56 +08:00
- Core:
. Fixed bug #74947 (Segfault in scanner on INF number). (Laruence)
Fixed bug #74954 (null deref and segfault in zend_generator_resume())
2017-07-22 17:14:00 +08:00
. Fixed bug #74954 (null deref and segfault in zend_generator_resume()). (Bob)
Fix bug #74725 (html_errors=1 breaks unhandled exceptions)
2017-08-12 08:35:27 +08:00
. Fixed bug #74725 (html_errors=1 breaks unhandled exceptions). (Andrea)
Fixed bug #74947 (Segfault in scanner on INF number)
2017-07-21 11:52:56 +08:00
Fixed finding CURL on systems with multiarch support fixes https://bugs.php.net/bug.php?id=74125 This commit makes the cURL config script aware of debian/ubuntu [multiarch support][1] which installs architecture specific headers in a different location. It checks whether the `dpkg-architecture` script exists and is executeable, if that is the case, the multiarch architecture is detected by calling `dpkg-architecture -qDEB_HOST_MULTIARCH` as documented in [debian multiarch implementation docs][2]: > `/usr/include/<triplet>`: used for arch-varying headers [1]: https://wiki.debian.org/Multiarch [2]: https://wiki.debian.org/Multiarch/Implementation
2017-07-14 19:45:33 +08:00
- cURL:
. Fixed bug #74125 (Fixed finding CURL on systems with multiarch support).
(cebe)
update NEWS
2017-08-03 03:49:21 +08:00
- Date:
. Fixed bug #75002 (Null Pointer Dereference in timelib_time_clone). (Derick)
Bugfix #74993 Wrong reflection param into for some intl: lookup_*() methods
2017-07-27 05:59:29 +08:00
- Intl:
. Fixed bug #74993 (Wrong reflection on some locale_* functions). (Sara)
Fix #71606: Segmentation fault mb_strcut with HTML-ENTITIES The HTML decoding filter uses the `opaque` member of mbfl_convert_filter as buffer, but there was no copy constructor defined, what caused double frees when the filter is copied (what happens multiple times in mb_strcut(), for instance).
2016-07-30 22:58:43 +08:00
- Mbstring:
. Fixed bug #71606 (Segmentation fault mb_strcut with HTML-ENTITIES encoding).
(cmb)
Fixed bug #62934
2017-07-28 19:02:25 +08:00
. Fixed bug #62934 (mb_convert_kana() does not convert iteration marks).
(Nikita)
Fix Bug #75001: Wrong reflection on mb_eregi_replace
2017-07-28 19:41:09 +08:00
. Fixed bug #75001 (Wrong reflection on mb_eregi_replace). (Fabien
Villepinte)
Fix #71606: Segmentation fault mb_strcut with HTML-ENTITIES The HTML decoding filter uses the `opaque` member of mbfl_convert_filter as buffer, but there was no copy constructor defined, what caused double frees when the filter is copied (what happens multiple times in mb_strcut(), for instance).
2016-07-30 22:58:43 +08:00
[ci skip] update NEWS
2017-07-22 20:12:45 +08:00
- MySQLi:
. Fixed bug #74968 (PHP crashes when calling mysqli_result::fetch_object with
an abstract class). (Anatol)
Expose oci_unregister_taf_callback()
2017-07-26 13:22:44 +08:00
- OCI8:
. Expose oci_unregister_taf_callback() (Tianfang Yang)
Fix bug #74991 - include_path has a 4096 char (minus "__DIR__:") limit, in some PHAR cases
2017-07-26 14:16:37 +08:00
- phar:
. Fixed bug #74991 (include_path has a 4096 char limit in some cases).
(bwbroersma)
Fixed bug #74949 (null pointer dereference in _function_string)
2017-07-27 11:23:06 +08:00
- Reflection:
. Fixed bug #74949 (null pointer dereference in _function_string). (Laruence)
[ci skip] update NEWS
2017-07-26 23:29:37 +08:00
- Session:
. Fixed bug #74833 (SID constant created with wrong module number). (Anatol)
Fixed bug #74950 (nullpointer deref in simplexml_element_getDocNamespaces)
2017-07-21 18:16:11 +08:00
- SimpleXML:
. Fixed bug #74950 (nullpointer deref in simplexml_element_getDocNamespaces).
(Laruence)
Fixed #74699 - Broken ArrayIterator unserializing
2017-06-06 14:37:05 +08:00
- SPL:
Fixed bug #75049 (spl_autoload_unregister can't handle spl_autoload_functions results)
2017-08-09 11:28:53 +08:00
. Fixed bug #75049 (spl_autoload_unregister can't handle
spl_autoload_functions results). (Laruence)
Fixed #74699 - Broken ArrayIterator unserializing
2017-06-06 14:37:05 +08:00
. Fixed bug #74669 (Unserialize ArrayIterator broken). (Andrew Nester)
Updated NEWS
2017-08-01 22:01:43 +08:00
. Fixed bug #75015 (Crash in recursive iterator destructors). (Julien)
move to 7.0.23 for dev
2017-07-18 16:25:40 +08:00
Fixed bug #74103 and bug #75054 Directly fail unserialization when trying to acquire an r/R reference to an UNDEF HT slot. Previously this left an UNDEF and later deleted the index/key from the HT. What actually caused the issue here is a combination of two factors: First, the key deletion was performed using the hash API, rather than the symtable API, such that the element was not actually removed if it used an integral string key. Second, a subsequent deletion operation, while collecting trailing UNDEF ranges, would mark the element as available for reuse (leaving a corrupted HT state with nNumOfElemnts > nNumUsed). Fix this by failing early and dropping the deletion code.
2017-08-12 19:00:39 +08:00
- Standard:
Fixed bug #75075 (unpack with X* causes infinity loop)
2017-08-15 12:34:13 +08:00
. Fixed bug #75075 (unpack with X* causes infinity loop). (Laruence)
Fixed bug #74103 and bug #75054 Directly fail unserialization when trying to acquire an r/R reference to an UNDEF HT slot. Previously this left an UNDEF and later deleted the index/key from the HT. What actually caused the issue here is a combination of two factors: First, the key deletion was performed using the hash API, rather than the symtable API, such that the element was not actually removed if it used an integral string key. Second, a subsequent deletion operation, while collecting trailing UNDEF ranges, would mark the element as available for reuse (leaving a corrupted HT state with nNumOfElemnts > nNumUsed). Fix this by failing early and dropping the deletion code.
2017-08-12 19:00:39 +08:00
. Fixed bug #74103 (heap-use-after-free when unserializing invalid array
size). (Nikita)
. Fixed bug #75054 (A Denial of Service Vulnerability was found when
performing deserialization). (Nikita)
Fixed bug #73793 (WDDX uses wrong decimal seperator) The WDDX specification[1] requires to serialize floats with a decimal point, but `snprintf()` is locale-dependent and may use a decimal comma. We fix that afterwards by replacing an eventual comma with a point. [1] <http://xml.coverpages.org/wddx0090-dtd-19980928.txt>
2017-08-14 02:51:53 +08:00
- WDDX:
. Fixed bug #73793 (WDDX uses wrong decimal seperator). (cmb)
Bug #74975: Different serialization for classes
2017-07-23 11:29:18 +08:00
- XMLRPC:
. Fixed bug #74975 (Incorrect xmlrpc serialization for classes with declared
properties). (blar)
move to 7.0.23 for dev
2017-07-18 16:25:40 +08:00
03 Aug 2017 PHP 7.0.22
move next
2017-06-20 20:05:50 +08:00
fix bug #74780 parse_url() borken when query string contains colon
2017-06-21 02:03:13 +08:00
- Core:
Updated NEWS
2017-06-30 02:23:37 +08:00
. Fixed bug #74832 (Loading PHP extension with already registered function
name leads to a crash). (jpauli)
fix bug #74780 parse_url() borken when query string contains colon
2017-06-21 02:03:13 +08:00
. Fixed bug #74780 (parse_url() borken when query string contains colon).
(jhdxr)
Fix configure error This patch fixes configure error on some systems such as Alpine. ``` line 3472: test: =: unary operator expected ``` One of the fixes has been suggested also here already: https://bugs.php.net/bug.php?id=39835 Thank you for considering merging this.
2017-06-15 08:30:39 +08:00
. Fixed bug #74761 (Unary operator expected error on some systems). (petk)
Fixed bug #73900
2017-06-26 01:48:17 +08:00
. Fixed bug #73900 (Use After Free in unserialize() SplFixedArray). (nikic)
Fixed bug 74913 redirecting incorrect include <sys/poll.h>
2017-07-13 03:23:41 +08:00
. Fixed bug #74913 (fixed incorrect poll.h include). (petk)
Fixed bug #74906 redirecting incorrect include <sys/errno.h>
2017-07-12 06:41:43 +08:00
. Fixed bug #74906 (fixed incorrect errno.h include). (petk)
move next
2017-06-20 20:05:50 +08:00
Fixed bug #74852 (property_exists returns true on unknown DateInterval property)
2017-07-08 20:04:25 +08:00
- Date:
. Fixed bug #74852 (property_exists returns true on unknown DateInterval
property). (jhdxr)
Fix NEWS entry location
2017-07-07 10:13:21 +08:00
- OCI8:
. Fixed bug #74625 (Integer overflow in oci_bind_array_by_name). (Ingmar Runge)
Fixed bug #74840 (Opcache overwrites argument of GENERATOR_RETURN within finally)
2017-07-01 17:52:03 +08:00
- Opcache:
. Fixed bug #74840 (Opcache overwrites argument of GENERATOR_RETURN within
finally). (Bob)
Fixed #69356: PDOStatement::debugDumpParams() truncates query
2017-06-29 17:14:38 +08:00
- PDO:
. Fixed bug #69356 (PDOStatement::debugDumpParams() truncates query). (Adam
Baratz)
fix bug #73471 PHP freezes with AppendIterator
2017-04-30 13:33:53 +08:00
- SPL:
. Fixed bug #73471 (PHP freezes with AppendIterator). (jhdxr)
[ci skip] update NEWS
2017-07-09 21:01:37 +08:00
- SQLite3:
. Fixed bug #74883 (SQLite3::__construct() produces "out of memory" exception
with invalid flags). (Anatol)
Fixed bug #73173 Patch by tloi at fortinet dot com.
2017-06-26 02:14:58 +08:00
- Wddx:
. Fixed bug #73173 (huge memleak when wddx_unserialize).
(tloi at fortinet dot com)
Fixed bug #73944 (inflate_init() dictionary option) - add NEWS entry
2017-06-25 16:57:36 +08:00
- zlib:
. Fixed bug #73944 (dictionary option of inflate_init() does not work).
(wapmorgan)
move next
2017-06-20 20:05:50 +08:00
06 Jul 2017 PHP 7.0.21
time to move next
2017-05-23 18:31:03 +08:00
Fixed bug #74657 (Undefined constants in array properties result in broken properties)
2017-05-27 12:06:43 +08:00
- Core:
Forgotten NEWs update
2017-06-13 12:20:42 +08:00
. Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly
parsed). (Manuel Mausz)
Fixed bug #74657 (Undefined constants in array properties result in broken properties)
2017-05-27 12:06:43 +08:00
. Fixed bug #74658 (Undefined constants in array properties result in broken
properties). (Laruence)
Bugfix #74556 stream_socket_get_name() returns empty string The original bug report had it returning '\0', but with a fix to abstract name handling (6d2d0bbda7) it now actually returns ''. Neither of these are good, as per unix(7) an empty socket name indicates an unbound name and "should not be inspected".
2017-05-28 22:23:57 +08:00
. Fixed misparsing of abstract unix domain socket names. (Sara)
update NEWS
2017-07-04 17:29:00 +08:00
. Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in
zval_get_type). (Nikita)
[ci skip] sync NEWS
2017-07-05 18:31:21 +08:00
. Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from
unserialize). (Nikita)
. Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
(Stas)
. Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via
php_parse_date()). (Derick)
Fixed bug #74657 (Undefined constants in array properties result in broken properties)
2017-05-27 12:06:43 +08:00
Fixed bug #69373 xmlNodeSetContentLen() calls xmlFreeNode() on node->children. This causes problems if there are other references around to those children.
2017-06-03 06:38:02 +08:00
- DOM:
. Fixed bug #69373 (References to deleted XPath query results). (ttoohey)
[ci skip] sync NEWS
2017-07-05 18:31:21 +08:00
- GD:
. Fixed bug #74435 (Buffer over-read into uninitialized memory). (cmb)
Fixed bug #73473: Stack Buffer Overflow in msgfmt_parse_message
2017-05-29 21:13:52 +08:00
- Intl:
. Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message). (libnex)
NEWS
2017-06-13 14:50:02 +08:00
. Fixed bug #74705 (Wrong reflection on Collator::getSortKey and
collator_get_sort_key). (Tyson Andre, Remi)
[ci skip] sync NEWS
2017-07-04 18:12:51 +08:00
. Fixed bug #73634 (grapheme_strpos illegal memory access). (Stas)
Fixed bug #73473: Stack Buffer Overflow in msgfmt_parse_message
2017-05-29 21:13:52 +08:00
NEWS
2017-05-30 21:45:09 +08:00
- Mbstring:
. Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227,
CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)
Update NEWS
2017-06-20 12:37:16 +08:00
- OCI8:
Fixed bug #74625 (Integer overflow in oci_bind_array_by_name).
2017-05-22 14:58:18 +08:00
. Add TAF callback (PR #2459). (KoenigsKind)
Update NEWS
2017-06-20 12:37:16 +08:00
Fixed bug #74663 (Segfault with opcache.memory_protect and validate_timestamp)
2017-05-27 22:42:17 +08:00
- Opcache:
. Fixed bug #74663 (Segfault with opcache.memory_protect and
validate_timestamp). (Laruence)
[ci skip] sync NEWS
2017-07-05 18:31:21 +08:00
- OpenSSL:
. Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
(Stas)
- PCRE:
. Fixed bug #74087 (Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)).
(Stas)
PDO_OCI: support IC 12.2 in configure option
2017-06-20 14:00:22 +08:00
- PDO_OCI:
. Support Instant Client 12.2 in --with-pdo-oci configure option.
(Tianfang Yang)
Fixed bug #74673 (Segfault when cast Reflection object to string with undefined constant)
2017-05-31 12:39:26 +08:00
- Reflection:
. Fixed bug #74673 (Segfault when cast Reflection object to string with
undefined constant). (Laruence)
Fixed bug #74478
2017-05-25 00:00:48 +08:00
- SPL:
. Fixed bug #74478 (null coalescing operator failing with SplFixedArray).
(jhdxr)
time to move next
2017-05-23 18:31:03 +08:00
NEWS
2017-06-13 14:14:34 +08:00
- Standard:
. Fixed bug #74708 (Invalid Reflection signatures for random_bytes and
random_int). (Tyson Andre, Remi)
[ci skip] sync NEWS
2017-07-04 18:12:51 +08:00
. Fixed bug #73648 (Heap buffer overflow in substr). (Stas)
NEWS
2017-06-13 14:14:34 +08:00
Bugfix #74598 ftp:// ignores context
2017-05-28 12:12:49 +08:00
- FTP:
. Fixed bug #74598 (ftp:// wrapper ignores context arg). (Sara)
Fix Bug #74386 Phar::__construct(): wrong number of parameters by reflection
2017-05-10 18:40:21 +08:00
- PHAR:
. Fixed bug #74386 (Phar::__construct reflection incorrect). (villfa)
Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY)
2017-06-13 22:15:47 +08:00
- SOAP
. Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY).
(Dmitry)
Bugfix #74556 stream_socket_get_name() returns empty string The original bug report had it returning '\0', but with a fix to abstract name handling (6d2d0bbda7) it now actually returns ''. Neither of these are good, as per unix(7) an empty socket name indicates an unbound name and "should not be inspected".
2017-05-28 22:23:57 +08:00
- Streams:
. Fixed bug #74556 (stream_socket_get_name() returns '\0'). (Sara)
time to move next
2017-05-23 18:31:03 +08:00
8 Jun 2017 PHP 7.0.20
move next
2017-04-25 20:06:17 +08:00
Fixed bug #74546 (SIGILL in ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_CONST_HANDLER())
2017-05-08 11:32:08 +08:00
- Core:
Fixed bug #74600 (crash (SIGSEGV) in _zend_hash_add_or_update_i)
2017-05-16 19:32:13 +08:00
. Fixed bug #74600 (crash (SIGSEGV) in _zend_hash_add_or_update_i).
(Laruence)
Fixed bug #74546 (SIGILL in ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_CONST_HANDLER())
2017-05-08 11:32:08 +08:00
. Fixed bug #74546 (SIGILL in ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_CONST).
(Laruence)
Fix bug #74468 wrong reflection on Collator::sortWithSortKeys
2017-04-18 23:03:42 +08:00
- intl:
. Fixed bug #74468 (wrong reflection on Collator::sortWithSortKeys). (villfa)
move next
2017-04-25 20:06:17 +08:00
[ci skip] update NEWS
2017-05-07 19:04:21 +08:00
- MySQLi:
. Fixed bug #74547 (mysqli::change_user() doesn't accept null as $database
argument w/strict_types). (Anatol)
Fixed bug #74596 (SIGSEGV with opcache.revalidate_path enabled) Yeah, no test script is provided.. I got some troubles to make a one
2017-05-16 13:22:08 +08:00
- Opcache:
. Fixed bug #74596 (SIGSEGV with opcache.revalidate_path enabled). (Laruence)
[ci skip] update NEWS
2017-05-02 20:53:32 +08:00
- phar:
. Fixed bug #51918 (Phar::webPhar() does not handle requests sent through PUT
and DELETE method). (Christian Weiske)
[ci skip] update NEWS
2017-05-02 18:38:04 +08:00
- Standard:
. Fixed bug #74510 (win32/sendmail.c anchors CC header but not BCC).
(Damian Wadley, Anatol)
Fix bug #74457 Wrong reflection on XMLReader::expand
2017-04-17 17:20:47 +08:00
- xmlreader:
. Fixed bug #74457 (Wrong reflection on XMLReader::expand). (villfa)
move next
2017-04-25 20:06:17 +08:00
11 May 2017 PHP 7.0.19
prepare next
2017-03-28 17:49:04 +08:00
Fixed bug #74408 (Endless loop bypassing execution time limit)
2017-04-11 18:46:16 +08:00
- Core:
Add missing NEWS entries for 7.0.19
2017-04-24 04:03:35 +08:00
. Fixed bug #74188 (Null coalescing operator fails for undeclared static
class properties). (tpunt)
Fixed bug #74408 (Endless loop bypassing execution time limit)
2017-04-11 18:46:16 +08:00
. Fixed bug #74408 (Endless loop bypassing execution time limit). (Laruence)
[ci skip] update NEWS
2017-04-16 20:54:19 +08:00
. Fixed bug #74410 (stream_select() is broken on Windows Nanoserver).
(Matt Ficken)
[ci skip] update NEWS
2017-04-23 04:39:59 +08:00
. Fixed bug #74337 (php-cgi.exe crash on facebook callback).
(Anton Serbulov)
[ci skip] update NEWS
2017-04-27 17:35:00 +08:00
. Patch for bug #74216 was reverted. (Anatol)
Fixed bug #74408 (Endless loop bypassing execution time limit)
2017-04-11 18:46:16 +08:00
Fixed bug #74404 (wrong reflection on DateTimeZone::getTransitions)
2017-04-10 19:48:51 +08:00
- Date:
. Fixed bug #74404 (Wrong reflection on DateTimeZone::getTransitions).
(krakjoe)
Fixed bug #74080 Add datetime constant for RFC7231
2017-04-02 00:56:31 +08:00
. Fixed bug #74080 (add constant for RFC7231 format datetime). (duncan3dc)
Fixed bug #74404 (wrong reflection on DateTimeZone::getTransitions)
2017-04-10 19:48:51 +08:00
NEWS
2017-04-13 13:10:37 +08:00
- DOM:
. Fixed bug #74416 (Wrong reflection on DOMNode::cloneNode).
(Remi, Fabien Villepinte)
Fixed bug #74379 (syntax error compile error in libmagic/apprentice.c)
2017-04-10 11:44:41 +08:00
- Fileinfo:
. Fixed bug #74379 (syntax error compile error in libmagic/apprentice.c).
(Laruence)
fix bug #74343 compile fails on solaris 11 with system libgd
2017-03-30 23:27:40 +08:00
- GD:
. Fixed bug #74343 (compile fails on solaris 11 with system gd2 library).
(krakjoe)
prepare next
2017-03-28 17:49:04 +08:00
Fixed bug #74433 Wrong reflection on the Normalizer methods
2017-04-13 19:25:13 +08:00
- intl:
. Fixed bug #74433 (wrong reflection for Normalizer methods). (villfa)
Fixed bug #74439 Wrong reflection on the Locale methods
2017-04-14 20:08:26 +08:00
. Fixed bug #74439 (wrong reflection for Locale methods). (villfa)
Fixed bug #74433 Wrong reflection on the Normalizer methods
2017-04-13 19:25:13 +08:00
[ci skip] update NEWS
2017-04-27 17:35:00 +08:00
- MySQLi:
. Fixed bug #74432 (mysqli_connect adding ":3306" to $host if $port parameter
not given). (Anatol)
Missed NEWS
2017-04-10 11:22:08 +08:00
- MySQLnd:
Add support for MySQL 8's Unicode types
2017-04-14 22:30:10 +08:00
. Added support for MySQL 8.0 types. (Johannes)
Missed NEWS
2017-04-10 11:22:08 +08:00
. Fixed bug #74376 (Invalid free of persistent results on error/connection
loss). (Yussuf Khalil)
Fixed bug #74341 Added support for ASN.1 UTCTime without seconds part (being 11 characters long instead of 13). Additionally, fixed incorrect handling of DST on systems without gmtoff.
2017-03-30 22:20:52 +08:00
- OpenSSL:
Fix bug #73833 (null character not allowed in openssl_pkey_get_private)
2017-04-25 00:11:36 +08:00
. Fixed bug #73833 (null character not allowed in openssl_pkey_get_private).
(Jakub Zelenka)
Fix bug #73711 (Segfault in openssl_pkey_new when generating DSA or DH key)
2017-04-24 03:30:14 +08:00
. Fixed bug #73711 (Segfault in openssl_pkey_new when generating DSA or DH
key). (Jakub Zelenka)
Fixed bug #74341 Added support for ASN.1 UTCTime without seconds part (being 11 characters long instead of 13). Additionally, fixed incorrect handling of DST on systems without gmtoff.
2017-03-30 22:20:52 +08:00
. Fixed bug #74341 (openssl_x509_parse fails to parse ASN.1 UTCTime without
seconds). (Moritz Fain)
Add missing NEWS entries for 7.0.19
2017-04-24 04:03:35 +08:00
. Added OpenSSL 1.1.0 support. (Jakub Zelenka)
Fixed bug #74341 Added support for ASN.1 UTCTime without seconds part (being 11 characters long instead of 13). Additionally, fixed incorrect handling of DST on systems without gmtoff.
2017-03-30 22:20:52 +08:00
Fix of Bug #74383: Wrong reflection on Phar::running
2017-04-10 06:30:35 +08:00
- phar:
fix news
2017-04-10 13:44:20 +08:00
. Fixed bug #74383 (phar method parameters reflection correction).
(mhagstrand)
Fix of Bug #74383: Wrong reflection on Phar::running
2017-04-10 06:30:35 +08:00
Fix bug #74409
2017-04-11 14:27:17 +08:00
- Standard:
. Fixed bug #74409 (Reflection information for ini_get_all() is incomplete).
(Sebastian Bergmann)
Add missing NEWS entries for 7.0.19
2017-04-24 04:03:35 +08:00
. Fixed bug #72071 (setcookie allows max-age to be negative). (Craig Duncan)
Fix bug #74409
2017-04-11 14:27:17 +08:00
[ci skip] update NEWS
2017-04-25 19:59:20 +08:00
- Streams:
. Fixed bug #74429 (Remote socket URI with unique persistence identifier
broken). (Sara)
fixed bug #74413 wrong reflection on SQLite3::enableExceptions
2017-04-11 19:13:21 +08:00
- SQLite3:
. Fixed bug #74413 (incorrect reflection for SQLite3::enableExceptions).
(krakjoe)
prepare next
2017-03-28 17:49:04 +08:00
13 Apr 2017 PHP 7.0.18
prepare next
2017-02-28 16:46:11 +08:00
Fixed bug #73370 If len=0 malloc() is allowed to return NULL.
2017-03-10 03:47:06 +08:00
- Core:
. Fixed bug #73370 (falsely exits with "Out of Memory" when using
USE_ZEND_ALLOC=0). (Nikita)
Fixed bug #73960
2017-03-10 04:09:36 +08:00
. Fixed bug #73960 (Leak with instance method calling static method with
referenced return). (Nikita)
Fix bug #74265
2017-03-18 03:19:40 +08:00
. Fixed bug #74265 (Build problems after 7.0.17 release: undefined reference
to `isfinite'). (Nikita)
Fix bug where `yield from` is captured too greedily In the following piece of code: ```php function from1234($x) { return $x; } function foo($x) { yield from1234($x); } ``` The statement inside foo is taken as `yield from` `1234($x)` which is neither the intent, nor even legal syntax for an fcall. Do a lookahead for breaking non-label characters after the `yield from` and only accept it if they occur.
2017-03-24 03:27:33 +08:00
. Fixed bug #74302 (yield fromLABEL is over-greedy). (Sara)
Fixed bug #73370 If len=0 malloc() is allowed to return NULL.
2017-03-10 03:47:06 +08:00
update NEWS
2017-03-28 19:12:27 +08:00
- Apache:
. Reverted patch for bug #61471, fixes bug #74318. (Anatol)
Fixed bug #72096 Swatch time value incorrect for dates before 1970
2016-06-04 03:28:20 +08:00
- Date:
. Fixed bug #72096 (Swatch time value incorrect for dates before 1970). (mcq8)
PHP bug #74004 Fix for DOMDocument loadHTML and loadHTMLFile ignore LIBXML_NOWARNING and LIBXML_NOERROR flags.
2017-01-28 04:20:07 +08:00
- DOM:
. Fixed bug #74004 (LIBXML_NOWARNING flag ingnored on loadHTML*).
(somedaysummer)
prepare next
2017-02-28 16:46:11 +08:00
update NEWS
2017-03-28 17:43:02 +08:00
- iconv:
. Fixed bug #74230 (iconv fails to fail on surrogates). (Anatol)
Add missing NEWS
2017-04-12 11:23:19 +08:00
- OCI8:
. Fixed uninitialized data causing random crash. (Dmitry)
sync NEWS for bug #74159
2017-03-03 03:45:15 +08:00
- OpenSSL:
Replace NEWS entry for #74159 with #72333 The #74159 is duplicate
2017-03-15 02:41:23 +08:00
. Fixed bug #72333 (fwrite() on non-blocking SSL sockets doesn't work).
(Jakub Zelenka)
sync NEWS for bug #74159
2017-03-03 03:45:15 +08:00
Fixed bug #71003: Add PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT
2016-06-09 16:45:40 +08:00
- PDO MySQL:
. Fixed bug #71003 (Expose MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT to PDO
interface). (Thomas Orozco)
Fixed bug #74240 (deflate_add can allocate too much memory)
2017-03-13 12:11:30 +08:00
- Streams:
Add NEWS entry for bab0b99f
2017-03-10 03:47:29 +08:00
. Fixed bug #74216 (Correctly fail on invalid IP address ports). (Sara)
Fixed bug #74240 (deflate_add can allocate too much memory)
2017-03-13 12:11:30 +08:00
- Zlib:
. Fixed bug #74240 (deflate_add can allocate too much memory). (Matt Bonneau)
prepare next
2017-02-28 16:46:11 +08:00
16 Mar 2017 PHP 7.0.17
bump versions for next in dev
2017-01-31 18:18:23 +08:00
Fix bug #73807
2017-02-02 23:04:02 +08:00
- Core:
Fixed bug #73989 (PHP 7.1 Segfaults within Symfony test suite)
2017-02-13 19:16:17 +08:00
. Fixed bug #73989 (PHP 7.1 Segfaults within Symfony test suite).
(Dmitry, Laruence)
Fixed bug #74084 (Out of bound read - zend_mm_alloc_small)
2017-02-12 20:34:08 +08:00
. Fixed bug #74084 (Out of bound read - zend_mm_alloc_small). (Laruence)
Fix bug #73807
2017-02-02 23:04:02 +08:00
. Fixed bug #73807 (Performance problem with processing large post request).
(Nikita)
BUG #73998: Numeric properties are not accessible from get_object_vars
2017-02-01 01:25:05 +08:00
. Fixed bug #73998 (array_key_exists fails on arrays created by
get_object_vars). (mhagstrand)
Fix bug #73954
2017-02-05 09:30:20 +08:00
. Fixed bug #73954 (NAN check fails on Alpine Linux with musl). (Andrea)
Fix detection of isnan and isinf The isnan() and isinf() are C99 macros not functions. Also fix is_infinite(-INF) in case isinf is not defined.
2017-02-03 01:52:27 +08:00
. Fixed bug #74039 (is_infinite(-INF) returns false). (Christian Schmidt)
Disable RTLD_DEEPBIND when compiling with AddressSanitizer (-fsanitize=address). The AddressSanitizer doesn't support RTLD_DEEPBIND resulting in erratic errors when deinitializing phar module and possibly others. Clang use __has_feature() macro to indicate compilation with AddressSanitizer while gcc uses __SANITIZE_ADDRESS__ define. Fixes bug #73677.
2017-02-16 15:57:30 +08:00
. Fixed bug #73677 (Generating phar.phar core dump with gcc ASAN enabled
build). (ondrej)
Fix bug #73807
2017-02-02 23:04:02 +08:00
Fixed bug #61471
2017-01-18 17:50:21 +08:00
- Apache:
. Fixed bug #61471 (Incomplete POST does not timeout but is passed to PHP).
(Zheng Shao)
Upgrade timelib to 2017.01 This fixes: - Fixed bug #72719 (Relative datetime format ignores weekday on sundays only). - Fixed bug #73294 (DateTime wrong when date string is negative). - Fixed bug #73489 (wrong timestamp when call setTimeZone multi times with UTC offset). - Fixed bug #73858 (first/last day of' flag is not being reset). - Fixed bug #73942 ($date->modify('Friday this week') doesn't return a Friday if $date is a Sunday). - Fixed bug #74057 (wrong day when using "this week" in strtotime).
2017-02-13 04:17:01 +08:00
- Date:
. Fixed bug #72719 (Relative datetime format ignores weekday on sundays
only). (Derick)
. Fixed bug #73294 (DateTime wrong when date string is negative). (Derick)
. Fixed bug #73489 (wrong timestamp when call setTimeZone multi times with
UTC offset). (xiami, Derick)
. Fixed bug #73858 (first/last day of' flag is not being reset). (Derick)
. Fixed bug #73942 ($date->modify('Friday this week') doesn't return a Friday
if $date is a Sunday). (Derick)
. Fixed bug #74057 (wrong day when using "this week" in strtotime). (Derick)
Fixed bug #69860
2017-02-09 15:22:37 +08:00
- FPM:
. Fixed bug #69860 (php-fpm process accounting is broken with keepalive).
(Denis Yeldandi)
Fix bug #73127 gost-crypto hash was incorrect if input data contained long 0xFF sequence, due to a carry-propagation bug.
2017-02-18 10:53:13 +08:00
- Hash:
. Fixed bug #73127 (gost-crypto hash incorrect if input data contains long
0xFF sequence). (Grundik)
Fix bug #74031 Fix incorrect parameter count for imagepng function
2017-02-02 17:24:00 +08:00
- GD:
. Fixed bug #74031 (ReflectionFunction for imagepng is missing last two
parameters). (finwe)
Fixed bug #74021
2017-02-01 18:43:55 +08:00
- Mysqlnd:
. Fixed bug #74021 (fetch_array broken data. Data more then MEDIUMBLOB).
(Andrew Nester, Nikita)
Fixed bug #74019 (Segfault with list)
2017-02-10 14:24:01 +08:00
- Opcache:
Fixed bug #74152 (if statement says true to a null variable)
2017-02-23 12:33:17 +08:00
. Fixed bug #74152 (if statement says true to a null variable). (Laruence)
Fixed bug #74019 (Segfault with list)
2017-02-10 14:24:01 +08:00
. Fixed bug #74019 (Segfault with list). (Laruence)
[ci skip] update NEWS
2017-02-02 21:19:35 +08:00
- OpenSSL:
. Fixed bug #74022 (PHP Fast CGI crashes when reading from a pfx file).
(Anatol)
Fixed bug #54379 (PDO_OCI: UTF-8 output gets truncated) This was a modification of an incomplete PR #2276.
2017-03-02 12:28:01 +08:00
- PDO_OCI:
. Fixed bug #54379 (PDO_OCI: UTF-8 output gets truncated). (gureedo / Oracle)
update NEWS
2017-02-02 08:33:41 +08:00
- Standard:
Fixed bug #74148 (ReflectionFunction incorrectly reports the number of arguments)
2017-02-23 11:02:23 +08:00
. Fixed bug #74148 (ReflectionFunction incorrectly reports the number of
arguments). (Laruence)
update NEWS
2017-02-02 08:33:41 +08:00
. Fixed bug #74005 (mail.add_x_header causes RFC-breaking lone line feed).
(Anatol)
Fixed bug #73118
2017-02-11 12:58:25 +08:00
. Fixed bug #73118 (is_callable callable name reports misleading value for
anonymous classes). (Adam Saponara)
Fixed bug #74105 If getrandom syscall is unavailable (ENOSYS), try to fallback on /dev/urandom.
2017-02-16 07:06:46 +08:00
. Fixed bug #74105 (PHP on Linux should use /dev/urandom when getrandom is
not available). (Benjamin Robin)
bump versions for next in dev
2017-01-31 18:18:23 +08:00
Fixed #73496 (Invalid memory access in zend_inline_hash_func) no test script is added because it requre too much memory
2017-02-12 18:55:19 +08:00
- Streams:
. Fixed bug #73496 (Invalid memory access in zend_inline_hash_func).
(Laruence)
[ci skip] update NEWS
2017-02-15 23:33:49 +08:00
. Fixed bug #74090 (stream_get_contents maxlength>-1 returns empty string).
(Anatol)
Fixed #73496 (Invalid memory access in zend_inline_hash_func) no test script is added because it requre too much memory
2017-02-12 18:55:19 +08:00
bump versions for next in dev
2017-01-31 18:18:23 +08:00
16 Feb 2017 PHP 7.0.16
move dev to next
2017-01-05 08:12:18 +08:00
update NEWS
2017-01-09 03:07:16 +08:00
- Core:
Fixed bug #73916 (zend_print_flat_zval_r doesn't consider reference)
2017-01-13 13:04:37 +08:00
. Fixed bug #73916 (zend_print_flat_zval_r doesn't consider reference).
(Laruence)
update NEWS
2017-01-09 03:07:16 +08:00
. Fixed bug #73876 (Crash when exporting **= in expansion of assign op).
Fixed bug #73916 (zend_print_flat_zval_r doesn't consider reference)
2017-01-13 13:04:37 +08:00
(Sara)
Fixed #73969 - Fixed segmentation fault when debug_print_backtrace called
2017-01-22 23:59:59 +08:00
. Fixed bug #73969 (segfault in debug_print_backtrace). (andrewnester)
Fixed #73973 - debug_zval_dump() assertion error for resource consts with --enable-debug
2017-01-24 21:38:30 +08:00
. Fixed bug #73973 (assertion error in debug_zval_dump). (andrewnester)
update NEWS
2017-01-09 03:07:16 +08:00
[ci skip] news entry for PR #2337
2017-01-26 13:50:46 +08:00
- DOM:
. Fixed bug #54382 (getAttributeNodeNS doesn't get xmlns* attributes).
(aboks)
NEWS
2017-01-21 00:46:11 +08:00
- DTrace:
. Fixed bug #73965 (DTrace reported as enabled when disabled). (Remi)
Fixed bug #67583 As fcgi_request is an opaque struct as of PHP 7, expose a new API function fcgi_end() which does fcgi_flush() with end=1 and checks/ sets the ->ended flag.
2017-01-08 05:51:18 +08:00
- FPM:
. Fixed bug #67583 (double fastcgi_end_request on max_children limit).
(Dmitry Saprykin)
Fix Bug #69865 php-fpm does not close stderr when using syslog
2015-07-22 19:44:21 +08:00
. Fixed bug #69865 (php-fpm does not close stderr when using syslog).
(m6w6)
Fixed bug #67583 As fcgi_request is an opaque struct as of PHP 7, expose a new API function fcgi_end() which does fcgi_flush() with end=1 and checks/ sets the ->ended flag.
2017-01-08 05:51:18 +08:00
Fix #73968: Premature failing of XBM reading We must take into account the line padding, when we're reading XBM files. We deliberately ignore the potential integer overflow here, because that would be caught by gdImageCreate() or even earlier if `bytes==0`, what happens in libgd00094.phpt which we adapt accordingly.
2017-01-21 08:21:03 +08:00
- GD:
. Fixed bug #73968 (Premature failing of XBM reading). (cmb)
Fixed bug #69993
2016-08-12 22:52:18 +08:00
- GMP:
. Fixed bug #69993 (test for gmp.h needs to test machine includes).
(Jordan Gigov)
NEWS
2017-01-18 20:02:03 +08:00
- Intl:
. Fix bug #73956 (Link use CC instead of CXX). (Remi)
Fixed bug #73933 (error/segfault with ldap_mod_replace and opcache)
2017-01-17 15:34:19 +08:00
- LDAP:
. Fixed bug #73933 (error/segfault with ldap_mod_replace and opcache).
(Laruence)
Fix bug #73949 leak in mysqli_fetch_object
2017-01-19 02:22:57 +08:00
- MySQLi:
. Fixed bug #73949 (leak in mysqli_fetch_object). (krakjoe)
Fix bug #69899
2016-09-30 16:49:08 +08:00
- Mysqlnd:
. Fixed bug #69899 (segfault on close() after free_result() with mysqlnd).
(Richard Fussenegger)
update NEWS
2017-01-31 05:34:14 +08:00
- Opcache:
. Fixed bug #73983 (crash on finish work with phar in cli + opcache).
(Anatol)
Merge branch 'pull-request/1755' * pull-request/1755: Fix bug #71519 Add 'serialNumberHex' variable to openssl_x509_parse
2017-01-06 15:40:20 +08:00
- OpenSSL:
. Fixed bug #71519 (add serial hex to return value array). (xrobau)
update NEWS and UPGRADING
2017-01-07 01:32:33 +08:00
- PDO_Firebird:
. Implemented FR #72583 (All data are fetched as strings). (Dorin Marcoci)
Fixed #73959 - lastInsertId fails to throw an exception in pdsql
2017-01-21 02:39:45 +08:00
- PDO_PgSQL:
. Fixed bug #73959 (lastInsertId fails to throw an exception for wrong
sequence name). (andrewnester)
Merge branch 'pull-request/2278' into PHP-7.0 * pull-request/2278: Fix #70417: PharData::compress() doesn't close temp file
2017-01-06 01:45:16 +08:00
- Phar:
. Fixed bug #70417 (PharData::compress() doesn't close temp file). (cmb)
move dev to next
2017-01-05 08:12:18 +08:00
Fixed bug #71219 configure script incorrectly checks for ttyname_r
2017-01-11 16:09:10 +08:00
- posix:
. Fixed bug #71219 (configure script incorrectly checks for ttyname_r). (atoth)
Merge branch 'pull-request/1360' into PHP-7.0 * pull-request/1360: Fixed bug #69582 session not readable by root in CLI news entry for PR #1360
2017-01-06 14:02:36 +08:00
- Session:
. Fixed bug #69582 (session not readable by root in CLI). (EvgeniySpinov)
Fixed bug #73896 (spl_autoload() crashes when calls magic _call())
2017-01-09 20:11:33 +08:00
- SPL:
. Fixed bug #73896 (spl_autoload() crashes when calls magic _call()). (Dmitry)
Merge branch 'pull-request/1588' into PHP-7.0 * pull-request/1588: Fixed #69442 closing of fd incorrect when PTS enabled
2017-01-06 14:55:09 +08:00
- Standard:
. Fixed bug #69442 (closing of fd incorrect when PTS enabled). (jaytaph)
http_fopen_wrapper.c - Handle HTTP headers with varying white space The stream handler assumed all HTTP headers contained exactly one space, but the standard says there may be zero or more. Should fix Bug #47021, and any other edge cases caused by a web server sending unusual spacing, e.g. the MIME type discovered from Content-Type: can no longer contain leading whitespace. We strip trailing whitespace from the headers added into $http_response_header as well.
2016-03-31 06:12:03 +08:00
. Fixed bug #47021 (SoapClient stumbles over WSDL delivered with
"Transfer-Encoding: chunked"). (Rowan Collins)
Fixed #72974 imap is undefined service on AIX
2017-01-09 13:13:46 +08:00
. Fixed bug #72974 (imap is undefined service on AIX). (matthieu.sarter)
Fixed bug #72979 money_format stores wrong length on AIX
2017-01-09 13:31:41 +08:00
. Fixed bug #72979 (money_format stores wrong length AIX). (matthieu.sarter)
Fixed bug #70601 (Segfault in gc_remove_from_buffer())
2015-10-04 10:38:56 +08:00
Merge branch 'pull-request/1755' * pull-request/1755: Fix bug #71519 Add 'serialNumberHex' variable to openssl_x509_parse
2017-01-06 15:40:20 +08:00
- ZIP:
http_fopen_wrapper.c - Handle HTTP headers with varying white space The stream handler assumed all HTTP headers contained exactly one space, but the standard says there may be zero or more. Should fix Bug #47021, and any other edge cases caused by a web server sending unusual spacing, e.g. the MIME type discovered from Content-Type: can no longer contain leading whitespace. We strip trailing whitespace from the headers added into $http_response_header as well.
2016-03-31 06:12:03 +08:00
. Fixed bug #70103 (ZipArchive::addGlob ignores remove_all_path option). (cmb,
Mitch Hagstrand)
Merge branch 'pull-request/1755' * pull-request/1755: Fix bug #71519 Add 'serialNumberHex' variable to openssl_x509_parse
2017-01-06 15:40:20 +08:00
move dev to next
2017-01-05 08:12:18 +08:00
19 Jan 2017 PHP 7.0.15
move dev to next
2016-11-22 18:49:09 +08:00
Fixed bug #73585 (Logging of "Internal Zend error - Missing class information" missing class name) Actually, I doubt how thing bug could be triggered
2016-11-24 12:02:02 +08:00
- Core:
Fixed bug #73792 (invalid foreach loop hangs script)
2016-12-20 21:48:57 +08:00
. Fixed bug #73792 (invalid foreach loop hangs script). (Dmitry)
Fixed bug #73663 ("Invalid opcode 65/16/8" occurs with a variable created with list())
2016-12-06 17:17:59 +08:00
. Fixed bug #73663 ("Invalid opcode 65/16/8" occurs with a variable created
with list()). (Laruence)
Fixed bug #73585 (Logging of "Internal Zend error - Missing class information" missing class name) Actually, I doubt how thing bug could be triggered
2016-11-24 12:02:02 +08:00
. Fixed bug #73585 (Logging of "Internal Zend error - Missing class
information" missing class name). (Laruence)
Fix #73753 - Unpacked Arrays and Duplication
2016-12-21 06:48:43 +08:00
. Fixed bug #73753 (unserialized array pointer not advancing). (David Walker)
[ci skip] sync NEWS
2017-01-17 17:54:53 +08:00
. Fixed bug #73825 (Heap out of bounds read on unserialize in
finish_nested_data()). (Stas)
. Fixed bug #73831 (NULL Pointer Dereference while unserialize php object).
(Stas)
. Fixed bug #73832 (Use of uninitialized memory in unserialize()). (Stas)
. Fixed bug #73092 (Unserialize use-after-free when resizing object's
properties hash table). (Nikita)
. Fixed bug #69425 (Use After Free in unserialize()). (Nikita)
. Fixed bug #72731 (Type Confusion in Object Deserialization). (Nikita)
move dev to next
2016-11-22 18:49:09 +08:00
update NEWS
2016-12-12 00:39:08 +08:00
- COM:
. Fixed bug #73679 (DOTNET read access violation using invalid codepage).
(Anatol)
news entry for PR #2267
2017-01-02 19:57:45 +08:00
- DOM:
. Fixed bug #67474 (getElementsByTagNameNS filter on default ns). (aboks)
[ci skip] sync NEWS
2017-01-17 17:54:53 +08:00
- EXIF:
. Bug bug #73737 (FPE when parsing a tag format). (Stas)
- GD:
. Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)
. Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)
- GMP:
. Fixed bug #70513 (GMP Deserialization Type Confusion Vulnerability).
(Nikita)
Fix Bug #73462 - Persistent connections don't set $connect_errno Persistent connections skipped resetting $connect_error and $connect_errno values This adds the "clear error" line to persistent connections for consistency
2016-11-09 06:23:04 +08:00
- Mysqli:
. Fixed bug #73462 (Persistent connections don't set $connect_errno).
(darkain)
Fix off by 1 problem. The problem was manifestated only with BIT columns and only when more than one row was fetched. The problem was coming from the fact that in pre-7.0 times mysqlnd was using a no-copy optimization. This optimization kept the strings (and also the BIT mask equivalents as strings) in the packet and the zval referred to them. 7.0+ zvals cannot use no-copy and always copy. Because of this the allocated memory for the packet was reduced by 1 by the person who ported the driver, but the starting address of the bit area wasn't reduced. Because of this the bit_area started at wrong address and the length decoded wrong.
2016-12-13 03:11:02 +08:00
- Mysqlnd:
. Fixed issue with decoding BIT columns when having more than one rows in the
result set. 7.0+ problem. (Andrey)
Fix for sporadic segfault with MYSQLI_OPT_INT_AND_FLOAT_NATIVE Fixes bug #73800 news entry for PR #2250
2016-12-21 23:37:17 +08:00
. Fixed bug #73800 (sporadic segfault with MYSQLI_OPT_INT_AND_FLOAT_NATIVE).
(vanviegen)
Fix off by 1 problem. The problem was manifestated only with BIT columns and only when more than one row was fetched. The problem was coming from the fact that in pre-7.0 times mysqlnd was using a no-copy optimization. This optimization kept the strings (and also the BIT mask equivalents as strings) in the packet and the zval referred to them. 7.0+ zvals cannot use no-copy and always copy. Because of this the allocated memory for the packet was reduced by 1 by the person who ported the driver, but the starting address of the bit area wasn't reduced. Because of this the bit_area started at wrong address and the length decoded wrong.
2016-12-13 03:11:02 +08:00
Fix #73612: preg_*() may leak memory We have to make sure that collectible zvals end up in the GC root buffer, to avoid memory leaks.
2016-11-26 22:34:27 +08:00
- PCRE:
. Fixed bug #73612 (preg_*() may leak memory). (cmb)
update NEWS
2016-12-08 04:22:34 +08:00
- PDO_Firebird:
. Fixed bug #72931 (PDO_FIREBIRD with Firebird 3.0 not work on returning
statement). (Dorin Marcoci)
[ci skip] sync NEWS
2017-01-17 17:54:53 +08:00
- Phar:
. Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)
. Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
. Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)
Fixed bug #73586 (php_user_filter::$stream is not set to the stream the filter is working on).
2016-11-28 17:54:47 +08:00
Fixed bug #73615 (phpdbg without option never load .phpdbginit at startup)
2016-11-30 09:56:47 +08:00
- Phpdbg:
. Fixed bug #73615 (phpdbg without option never load .phpdbginit at startup).
(Bob)
Fixed issue getting executable lines from custom wrappers See also krakjoe/phpdbg#161
2016-12-07 01:27:31 +08:00
. Fixed issue getting executable lines from custom wrappers. (Bob)
Fixed bug #73704 (phpdbg shows the wrong line in files with shebang)
2016-12-22 07:38:47 +08:00
. Fixed bug #73704 (phpdbg shows the wrong line in files with shebang). (Bob)
Fixed bug #73615 (phpdbg without option never load .phpdbginit at startup)
2016-11-30 09:56:47 +08:00
Fix bug #46103
2016-12-19 00:10:19 +08:00
- Reflection:
. Fixed bug #46103 (ReflectionObject memory leak). (Nikita)
[ci skip] sync NEWS
2017-01-17 17:54:53 +08:00
- Streams:
. Fixed bug #73586 (php_user_filter::$stream is not set to the stream the
filter is working on). (Dmitry)
Revert "Fix #73530: Unsetting result set may reset other result set" This reverts commit eb570294a289b45d0dd38efc71065d6b0d314c4b. That commit caused a regression, so it's probably best to revert it, and to tackle the issue for the next minor release.
2016-12-29 19:41:39 +08:00
- SQLite3:
. Reverted fix for bug #73530 (Unsetting result set may reset other result
set). (cmb)
update NEWS
2016-12-19 08:07:08 +08:00
- Standard:
Merge branch 'PHP-5.6' into PHP-7.0
2017-01-01 21:12:26 +08:00
. Fixed bug #73594 (dns_get_record does not populate $additional out
parameter). (Bruce Weirdan)
FIx bug #70213
2017-01-01 21:10:49 +08:00
. Fixed bug #70213 (Unserialize context shared on double class lookup).
(Taoguang Chen)
Fixed bug #73154 The object that is being serialized may be destroyed during the execution of __sleep(), so operate on a copy instead.
2017-01-02 02:24:41 +08:00
. Fixed bug #73154 (serialize object with __sleep function crash). (Nikita)
Add NEWS entries
2017-01-03 06:35:27 +08:00
. Fixed bug #70490 (get_browser function is very slow). (Nikita)
. Fixed bug #73265 (Loading browscap.ini at startup causes high memory usage).
(Nikita)
Merge branch 'pull-request/1312' into PHP-7.0 * pull-request/1312: get_defined_functions extra parameter to exclude disabled functions news entry for PR #1312
2017-01-04 21:32:37 +08:00
. Fixed bug #31875 (get_defined_functions additional param to exclude
disabled functions). (willianveiga)
Fix bug #46103
2016-12-19 00:10:19 +08:00
Fixed bug #73373 (deflate_add does not verify that output was not truncated)
2016-12-22 22:29:17 +08:00
- Zlib:
. Fixed bug #73373 (deflate_add does not verify that output was not truncated).
(Matt Bonneau)
move dev to next
2016-11-22 18:49:09 +08:00
08 Dec 2016 PHP 7.0.14
move dev to 7.0.14
2016-10-25 16:29:51 +08:00
Fixded bug #72736 (Slow performance when fetching large dataset with mysqli / PDO)
2016-10-26 20:17:09 +08:00
- Core:
Update NEWS
2016-11-21 11:45:49 +08:00
. Fixed memory leak(null coalescing operator with Spl hash). (Tyson Andre)
Fixded bug #72736 (Slow performance when fetching large dataset with mysqli / PDO)
2016-10-26 20:17:09 +08:00
. Fixded bug #72736 (Slow performance when fetching large dataset with mysqli
/ PDO). (Dmitry)
move dev to 7.0.14
2016-10-25 16:29:51 +08:00
Update NEWS
2016-11-21 11:45:49 +08:00
- Calendar:
. Fix integer overflows (Joshua Rogers)
news entry for #1787
2016-11-13 13:33:59 +08:00
- Date:
. Fixed bug #69587 (DateInterval properties and isset). (jhdxr)
Disabled PHP call tracing by default (it makes significant overhead). This may be enabled again using envirionment variable USE_ZEND_DTRACE=1.
2016-11-18 18:19:30 +08:00
- DTrace:
. Disabled PHP call tracing by default (it makes significant overhead).
This may be enabled again using envirionment variable USE_ZEND_DTRACE=1.
(Dmitry)
Fix bug #73526 (php_json_encode depth issue)
2016-11-21 04:36:03 +08:00
- JSON:
. Fixed bug #73526 (php_json_encode depth issue). (Jakub Zelenka)
JSON: fix config.w32 / Install headers on windows
2017-08-08 21:52:53 +08:00
. Install headers on windows. (Darek Slusarczyk)
Fix bug #73526 (php_json_encode depth issue)
2016-11-21 04:36:03 +08:00
Fixed bug #73483 (Segmentation fault on pcre_replace_callback)
2016-11-20 15:44:27 +08:00
- Mysqlnd:
. Fixed bug #64526 (Add missing mysqlnd.* parameters to php.ini-*). (cmb)
update NEWS
2016-11-08 03:47:06 +08:00
- ODBC:
. Fixed bug #73448 (odbc_errormsg returns trash, always 513 bytes).
(Anatol)
Fixed bug #73402 (Opcache segfault when using class constant to call a method)
2016-10-29 23:41:51 +08:00
- Opcache:
Fix #73546: Logging for opcache has an empty file name
2016-11-17 04:00:52 +08:00
. Fixed bug #69090 (check cached files permissions). (dmitry)
. Fixed bug #73546 (Logging for opcache has an empty file name). (mhagstrand)
5.6.29 will be next
2016-10-28 05:10:59 +08:00
Fixed bug #73392 (A use-after-free in zend allocator management)
2016-10-28 21:21:24 +08:00
- PCRE:
Fixed bug #73483 (Segmentation fault on pcre_replace_callback)
2016-11-20 15:44:27 +08:00
. Fixed bug #73483 (Segmentation fault on pcre_replace_callback). (Laruence)
Fixed bug #73392 (A use-after-free in zend allocator management)
2016-10-28 21:21:24 +08:00
. Fixed bug #73392 (A use-after-free in zend allocator management).
(Laruence)
update NEWS
2016-11-07 00:11:19 +08:00
- PDO_Firebird:
. Fixed bug #73087, #61183, #71494 (Memory corruption in bindParam).
(Dorin Marcoci)
update NEWS
2016-11-22 07:59:40 +08:00
- Postgres:
. Fixed bug #73498 (Incorrect SQL generated for pg_copy_to()). (Craig Duncan)
update NEWS
2016-12-07 03:25:27 +08:00
- Phar:
. Fixed bug #73580 (Phar::isValidPharFilename illegal memory access). (Stas)
Fix bug #73538 Remove any previous default headers and replace with the specified ones, as documented, and as is the case when a single header is passed.
2016-11-21 01:41:14 +08:00
- Soap:
. Fixed bug #73538 (SoapClient::__setSoapHeaders doesn't overwrite SOAP
headers). (duncan3dc)
update NEWS
2016-11-22 02:59:30 +08:00
. Fixed bug #73452 (Segfault (Regression for #69152)). (Dmitry)
Fix bug #73538 Remove any previous default headers and replace with the specified ones, as documented, and as is the case when a single header is passed.
2016-11-21 01:41:14 +08:00
Fixed bug #73423 (Reproducible crash with GDB backtrace)
2016-11-02 12:11:30 +08:00
- SPL:
. Fixed bug #73423 (Reproducible crash with GDB backtrace). (Laruence)
Fix #73530: Unsetting result set may reset other result set Calling sqlite3_reset() when a result set object is freed can cause undesired and maybe even hard to track interference with other result sets. Furthermore, there is no need to call sqlite3_reset(), because that is implicitly called on SQLite3Stmt::execute(), and users are encouraged to explicitly call either SQLite3Result::finalize() or SQLite3Stmt::reset() anyway.
2016-11-16 18:49:04 +08:00
- SQLite3:
. Fixed bug #73530 (Unsetting result set may reset other result set). (cmb)
Updated NEWS
2016-11-17 18:48:32 +08:00
- Standard:
update NEWS
2016-12-07 03:25:27 +08:00
. Fixed bug #73297 (HTTP stream wrapper should ignore HTTP 100 Continue).
(rowan dot collins at gmail dot com)
. Fixed bug #73645 (version_compare illegal write access). (Stas)
- Wddx:
. Fixed bug #73631 (Invalid read when wddx decodes empty boolean element).
(Stas)
Updated NEWS
2016-11-17 18:48:32 +08:00
news entry for #2166
2016-11-13 01:45:16 +08:00
- XML:
. Fixed bug #72135 (malformed XML causes fault) (edgarsandi)
move dev to 7.0.14
2016-10-25 16:29:51 +08:00
10 Nov 2016 PHP 7.0.13
prepare next
2016-09-27 18:49:52 +08:00
Fix bug #73181
2016-09-28 01:47:48 +08:00
- Core:
Fixed bug #73350 (Exception::__toString() cause circular references)
2016-10-22 14:50:21 +08:00
. Fixed bug #73350 (Exception::__toString() cause circular references).
(Laruence)
Fix bug #73181
2016-09-28 01:47:48 +08:00
. Fixed bug #73181 (parse_str() without a second argument leads to crash).
(Nikita)
Fix bug #66773, #66862 This a partial backport of 8754b19. It a) fixes the class/function/constant import table confusion in the namespaced case, and b) restricts conflict checks to a single file based on a filename pointer comparison. It does not fix the issues with filename reuse (e.g. due to eval) and late-bound classes. This part of the change requires globals changes.
2016-10-08 22:56:17 +08:00
. Fixed bug #66773 (Autoload with Opcache allows importing conflicting class
name to namespace). (Nikita)
. Fixed bug #66862 ((Sub-)Namespaces unexpected behaviour). (Nikita)
news entry for pr #2158
2016-10-17 22:50:59 +08:00
. Fix pthreads detection when cross-compiling (ffontaine)
Fixed bug #73337 (try/catch not working with two exceptions inside a same operation)
2016-10-18 19:48:01 +08:00
. Fixed bug #73337 (try/catch not working with two exceptions inside a same
operation). (Dmitry)
Fixed bug #73338 (Exception thrown from error handler may crash)
2016-10-18 20:13:20 +08:00
. Fixed bug #73338 (Exception thrown from error handler causes valgrind
warnings (and crashes)). (Bob, Dmitry)
update NEWS
2016-10-19 01:43:12 +08:00
. Fixed bug #73329 ((Float)"Nano" == NAN). (Anatol)
prepare next
2016-09-27 18:49:52 +08:00
Merge branch 'PHP-5.6' into PHP-7.0
2016-10-01 05:46:28 +08:00
- GD:
Fix #73213: Integer overflow in imageline() with antialiasing We port the respective fixes <https://github.com/libgd/libgd/commit/eca37d620> and <https://github.com/libgd/libgd/commit/837b7327> to our bundled libgd.
2016-10-01 05:25:23 +08:00
. Fixed bug #73213 (Integer overflow in imageline() with antialiasing). (cmb)
Fix #73272: imagescale() affects imagesetinterpolation() We must not permanently change the interpolation method, but rather have to restore the old method after we're done with scaling the image.
2016-10-09 20:59:37 +08:00
. Fixed bug #73272 (imagescale() is not affected by, but affects
imagesetinterpolation()). (cmb)
Fix #73279: Integer overflow in gdImageScaleBilinearPalette() The color components are supposed to be in range 0..255, so we must not cast them to `signed char`, what can be the default for `char`. Port of <https://github.com/libgd/libgd/commit/77c8d359>.
2016-10-10 17:40:16 +08:00
. Fixed bug #73279 (Integer overflow in gdImageScaleBilinearPalette()). (cmb)
Fix #73280: Stack Buffer Overflow in GD dynamicGetbuf We make sure to never pass a negative `rlen` as size to memcpy(). Cf. <https://github.com/libgd/libgd/commit/53110871>.
2016-10-13 17:10:02 +08:00
. Fixed bug #73280 (Stack Buffer Overflow in GD dynamicGetbuf). (cmb)
sync NEWS
2016-11-09 18:19:13 +08:00
. Fixed bug #72482 (Ilegal write/read access caused by gdImageAALine
overflow). (cmb)
. Fixed bug #72696 (imagefilltoborder stackoverflow on truecolor images).
(cmb)
- IMAP:
. Fixed bug #73418 (Integer Overflow in "_php_imap_mail" leads to crash).
(Anatol)
Fix #73213: Integer overflow in imageline() with antialiasing We port the respective fixes <https://github.com/libgd/libgd/commit/eca37d620> and <https://github.com/libgd/libgd/commit/837b7327> to our bundled libgd.
2016-10-01 05:25:23 +08:00
Fixed bug #71148 (Bind reference overwritten on PHP 7)
2016-10-17 09:40:14 +08:00
- OCI8
. Fixed bug #71148 (Bind reference overwritten on PHP 7). (Oracle Corp.)
Add proper escape sequences and reading stdin from file in phpdbg run command
2016-10-02 01:54:44 +08:00
- phpdbg:
. Properly allow for stdin input from a file. (Bob)
Update NEWS Also add missing include.inc test file
2016-10-13 04:54:32 +08:00
. Add -s command line option / stdin command for reading script from stdin.
(Bob)
Ignore non-executable opcodes in line mode of phpdbg_end_oplog()
2016-10-13 20:09:12 +08:00
. Ignore non-executable opcodes in line mode of phpdbg_end_oplog(). (Bob)
Fixed bug #71234 (INI files are loaded even invoked as phpdbg -n --version)
2016-10-16 21:41:37 +08:00
. Fixed bug #70776 (Simple SIGINT does not have any effect with -rr). (Bob)
. Fixed bug #71234 (INI files are loaded even invoked as -n --version). (Bob)
Add proper escape sequences and reading stdin from file in phpdbg run command
2016-10-02 01:54:44 +08:00
Fixed bug #73273 As well as a few other $_SESSION separation issues.
2016-10-10 18:17:40 +08:00
- Session:
. Fixed bug #73273 (session_unset() empties values from all variables in which
is $_session stored). (Nikita)
update NEWS
2016-10-11 02:57:57 +08:00
- SOAP:
. Fixed bug #73037 (SoapServer reports Bad Request when gzipped). (Anatol)
Fixed bug #73237 If the response includes both fields with simple types (which get concatenated into an XML string) and a complex type (which is parsed into an object), then the object will parsed into the same zval as the simple types and will overwrite the string.
2016-06-28 02:23:15 +08:00
. Fixed bug #73237 (Nested object in "any" element overwrites other fields).
(Keith Smiley)
news entry for #pr 2152
2016-10-20 12:21:56 +08:00
. Fixed bug #69137 (Peer verification fails when using a proxy with SoapClient)
(Keith Smiley)
update NEWS
2016-10-11 02:57:57 +08:00
Fix #73333: 2147483647 is fetched as string We return all integers that can be represented as such by PHP as integers, and only those that exceed the possible range as strings. On builds which represent integers with 64 bits, the range check is unnecessary and might cause code checkers to complain, so we skip this special casing via the preprocessor according to <http://git.php.net/?p=php-src.git;a=commit;h=99d087e5>.
2016-10-17 22:58:49 +08:00
- SQLite3:
. Fixed bug #73333 (2147483647 is fetched as string). (cmb)
Fix #73203: passing additional_parameters causes mail to fail We make sure that there's no unsigned underflow, which happened for `y==0`.
2016-09-30 17:05:53 +08:00
- Standard:
. Fixed bug #73203 (passing additional_parameters causes mail to fail). (cmb)
Fix bug #71241: array_replace_recursive mutates ref params `array_replace_recursive` can sometimes mutate its params if references are nested within. This differs from the PHP 5 behavior.
2016-08-27 05:33:22 +08:00
. Fixed bug #71241 (array_replace_recursive sometimes mutates its parameters).
(adsr)
add missing NEWS entry
2016-11-10 04:34:41 +08:00
. Fixed bug #73192 (parse_url return wrong hostname). (Nikita)
Fix #73203: passing additional_parameters causes mail to fail We make sure that there's no unsigned underflow, which happened for `y==0`.
2016-09-30 17:05:53 +08:00
sync NEWS
2016-11-09 18:19:13 +08:00
- Wddx:
. Fixed bug #73331 (NULL Pointer Dereference in WDDX Packet Deserialization
with PDORow). (Stas)
prepare next
2016-09-27 18:49:52 +08:00
13 Oct 2016 PHP 7.0.12
prepare next
2016-08-02 17:13:20 +08:00
Fix #73025: Heap Buffer Overflow in virtual_popen of zend_virtual_cwd.c `command_length` is retrieved via strlen() and later passed to emalloc() and memcpy(), so the appropriate type is `size_t`. We don't add a regression test, because that would need to allocate a string of at least 2 GiB.
2016-09-06 18:05:22 +08:00
- Core:
. Fixed bug #73025 (Heap Buffer Overflow in virtual_popen of
zend_virtual_cwd.c). (cmb)
update NEWS
2016-09-11 19:05:07 +08:00
. Fixed bug #72703 (Out of bounds global memory read in BF_crypt triggered by
password_verify). (Anatol)
update NEWS
2016-09-10 17:04:00 +08:00
. Fixed bug #73058 (crypt broken when salt is 'too' long). (Anatol)
Fix bug #69579
2016-09-22 11:09:45 +08:00
. Fixed bug #69579 (Invalid free in extension trait). (John Boehr)
Fixed bug #73156 (segfault on undefined function)
2016-09-26 19:14:57 +08:00
. Fixed bug #73156 (segfault on undefined function). (Dmitry)
Fixed bug #73163
2016-09-24 19:18:43 +08:00
. Fixed bug #73163 (PHP hangs if error handler throws while accessing undef
const in default value). (Nikita)
update NEWS
2016-09-27 01:54:10 +08:00
. Fixed bug #73172 (parse error: Invalid numeric literal). (Nikita, Anatol)
sync NEWS
2016-10-15 01:52:04 +08:00
. Fixed for #73240 (Write out of bounds at number_format). (Stas)
. Fixed bug #73147 (Use After Free in PHP7 unserialize()). (Stas)
. Fixed bug #73189 (Memcpy negative size parameter php_resolve_path). (Stas)
- BCmath:
. Fix bug #73190 (memcpy negative parameter _bc_new_num_ex). (Stas)
Fix #73025: Heap Buffer Overflow in virtual_popen of zend_virtual_cwd.c `command_length` is retrieved via strlen() and later passed to emalloc() and memcpy(), so the appropriate type is `size_t`. We don't add a regression test, because that would need to allocate a string of at least 2 GiB.
2016-09-06 18:05:22 +08:00
update NEWS
2016-09-22 18:04:37 +08:00
- COM:
. Fixed bug #73126 (Cannot pass parameter 1 by reference). (Anatol)
sync NEWS
2016-10-15 01:52:04 +08:00
- Date:
. Fixed bug #73091 (Unserializing DateInterval object may lead to __toString
invocation). (Stas)
- DOM:
. Fixed bug #73150 (missing NULL check in dom_document_save_html). (Stas)
Updated NEWS
2016-09-05 16:18:39 +08:00
- Filter:
. Fixed bug #72972 (Bad filter for the flags FILTER_FLAG_NO_RES_RANGE and
FILTER_FLAG_NO_PRIV_RANGE). (julien)
Fix #73054: default option ignored when object passed to int filter If an object that can't be converted to string is validated, we must not bail out early, but rather check for a requested default value.
2016-09-09 20:30:24 +08:00
. Fixed bug #73054 (default option ignored when object passed to int filter).
(cmb)
Updated NEWS
2016-09-05 16:18:39 +08:00
Fix #67325: imagetruecolortopalette: white is duplicated in palette gdImageTrueColorToPalette() is sometimes wasteful by putting multiple white color entries into the palette. This is caused by an obvious typo, where to avoid a division by zero when `total` is zero, `count` is checked instead of `total`. We fix this issue to improve the quality of the color quantization. Cf. <https://github.com/libgd/libgd/commit/24b4550f>
2016-09-04 01:46:38 +08:00
- GD:
. Fixed bug #67325 (imagetruecolortopalette: white is duplicated in palette).
(cmb)
Fix #50194: imagettftext broken on transparent background w/o alphablending We must not draw the background pixels of the character glyphs, what has already been fixed in GD 2.0.26.
2016-09-14 20:59:17 +08:00
. Fixed bug #50194 (imagettftext broken on transparent background w/o
alphablending). (cmb)
Fix #73003: Integer Overflow in gdImageWebpCtx of gd_webp.c We add the missing integer overflow check to avoid potential buffer overflows.
2016-09-16 17:31:21 +08:00
. Fixed bug #73003 (Integer Overflow in gdImageWebpCtx of gd_webp.c). (trylab,
cmb)
Update NEWS
2016-09-23 22:23:58 +08:00
. Fixed bug #53504 (imagettfbbox gives incorrect values for bounding box).
(Mark Plomer, cmb)
Fix #73157: imagegd2() ignores 3rd param if 4 are given We must initialize `q` for *more* than three parameters, too.
2016-09-24 05:23:45 +08:00
. Fixed bug #73157 (imagegd2() ignores 3rd param if 4 are given). (cmb)
Fix #73155: imagegd2() writes wrong chunk sizes on boundaries
2016-09-24 06:46:35 +08:00
. Fixed bug #73155 (imagegd2() writes wrong chunk sizes on boundaries). (cmb)
Fix #73159: imagegd2(): unrecognized formats may result in corrupted files We must not apply the format correction twice for truecolor images.
2016-09-24 17:28:20 +08:00
. Fixed bug #73159 (imagegd2(): unrecognized formats may result in corrupted
files). (cmb)
Fix #73161: imagecreatefromgd2() may leak memory
2016-09-24 18:36:54 +08:00
. Fixed bug #73161 (imagecreatefromgd2() may leak memory). (cmb)
Fix #67325: imagetruecolortopalette: white is duplicated in palette gdImageTrueColorToPalette() is sometimes wasteful by putting multiple white color entries into the palette. This is caused by an obvious typo, where to avoid a division by zero when `total` is zero, `count` is checked instead of `total`. We fix this issue to improve the quality of the color quantization. Cf. <https://github.com/libgd/libgd/commit/24b4550f>
2016-09-04 01:46:38 +08:00
sync NEWS
2016-10-15 01:52:04 +08:00
- Intl:
. Fixed bug #73218 (add mitigation for ICU int overflow). (Stas)
Update NEWS
2016-09-08 12:35:35 +08:00
- Mbstring:
Merge branch 'PHP-5.6' into PHP-7.0
2016-08-30 20:54:44 +08:00
. Fixed bug #66797 (mb_substr only takes 32-bit signed integer). (cmb)
Update NEWS
2016-09-06 17:28:45 +08:00
. Fixed bug #66964 (mb_convert_variables() cannot detect recursion) (Yasuo)
Update NEWS
2016-09-08 12:35:35 +08:00
. Fixed bug #72992 (mbstring.internal_encoding doesn't inherit default_charset).
(Yasuo)
Merge branch 'PHP-5.6' into PHP-7.0
2016-08-30 20:54:44 +08:00
Add test for bug #72489
2016-09-18 04:54:25 +08:00
- Mysqlnd:
. Fixed bug #72489 (PHP Crashes When Modifying Array Containing MySQLi Result
Data). (Nikita)
Fixed bug #72982 (Memory leak in zend_accel_blacklist_update_regexp() function)
2016-09-01 12:10:38 +08:00
- Opcache:
. Fixed bug #72982 (Memory leak in zend_accel_blacklist_update_regexp()
function). (Laruence)
Sync NEWS for bug #73072
2016-09-14 19:31:45 +08:00
- OpenSSL:
. Fixed bug #73072 (Invalid path SNI_server_certs causes segfault).
(Jakub Zelenka)
sync NEWS
2016-10-15 01:52:04 +08:00
. Fixed bug #73276 (crash in openssl_random_pseudo_bytes function). (Stas)
. Fixed bug #73275 (crash in openssl_encrypt function). (Stas)
Sync NEWS for bug #73072
2016-09-14 19:31:45 +08:00
update NEWS
2016-09-23 17:24:55 +08:00
- PCRE:
. Fixed bug #73121 (Bundled PCRE doesn't compile because JIT isn't supported
on s390). (Anatol)
sync NEWS
2016-10-15 01:52:04 +08:00
. Fixed bug #73174 (heap overflow in php_pcre_replace_impl). (Stas)
update NEWS
2016-09-23 17:24:55 +08:00
Add pdo_dblib changes
2016-09-14 23:19:31 +08:00
- PDO_DBlib:
Mark change with relevant bug number
2016-09-15 05:44:56 +08:00
. Fixed bug #72414 (Never quote values as raw binary data). (Adam Baratz)
Add pdo_dblib changes
2016-09-14 23:19:31 +08:00
. Allow \PDO::setAttribute() to set query timeouts. (Adam Baratz)
. Handle SQLDECIMAL/SQLNUMERIC types, which are used by later TDS versions.
(Adam Baratz)
. Add common PDO test suite. (Adam Baratz)
. Free error and message strings when cleaning up PDO instances.
(Adam Baratz)
update NEWS
2016-09-22 02:29:42 +08:00
. Fixed bug #67130 (\PDOStatement::nextRowset() should succeed when all rows
in current rowset haven't been fetched). (Peter LeBrun)
update NEWS
2016-09-27 05:09:11 +08:00
. Ignore potentially misleading dberr values. (Chris Kings-Lynne)
Add pdo_dblib changes
2016-09-14 23:19:31 +08:00
Fix bug #72996
2016-09-04 05:30:23 +08:00
- phpdbg:
. Fixed bug #72996 (phpdbg_prompt.c undefined reference to DL_LOAD). (Nikita)
phpdbg next command must stop when leaving function
2016-09-23 09:29:37 +08:00
. Fixed next command not stopping when leaving function. (Bob)
Fix bug #72996
2016-09-04 05:30:23 +08:00
Update NEWS
2016-09-09 10:34:34 +08:00
- Session:
. Fixed bug #68015 (Session does not report invalid uid for files save handler).
(Yasuo)
Fix #73100: session_destroy null dereference in ps_files_path_create
2016-09-17 05:41:10 +08:00
. Fixed bug #73100 (session_destroy null dereference in ps_files_path_create).
(cmb)
Update NEWS
2016-09-09 10:34:34 +08:00
sync NEWS
2016-10-15 01:52:04 +08:00
- SimpleXML:
. Fixed bug #73293 (NULL pointer dereference in SimpleXMLElement::asXML()).
(Stas)
Fixed bug #71996
2016-08-30 23:19:19 +08:00
- SOAP:
Fix bug #71711 Also handle another case of bug #71996.
2016-08-31 00:06:18 +08:00
. Fixed bug #71711 (Soap Server Member variables reference bug). (Nikita)
Fixed bug #71996
2016-08-30 23:19:19 +08:00
. Fixed bug #71996 (Using references in arrays doesn't work like expected).
(Nikita)
sync NEWS
2016-10-15 01:52:04 +08:00
- SPL:
. Fixed bug #73257, #73258 (SplObjectStorage unserialize allows use of
non-object as key). (Stas)
update NEWS
2016-09-13 21:45:18 +08:00
- SQLite3:
. Updated bundled SQLite3 to 3.14.2. (cmb)
Fix #70752: Depacking with wrong password leaves 0 length files We should not open the output stream before we have tried to open the archive entry, as failing the latter could leave an empty file behind.
2016-09-06 06:28:28 +08:00
- Zip:
. Fixed bug #70752 (Depacking with wrong password leaves 0 length files).
(cmb)
prepare for next
2016-08-30 20:10:54 +08:00
15 Sep 2016 PHP 7.0.11
Fix bug #72767 The page size calculation did not account for the size of the stack header (or rather it did account for it, but in the wrong direction...)
2016-08-06 01:51:51 +08:00
- Core:
Fixed bug #72944 (Null pointer deref in zval_delref_p).
2016-08-29 17:02:50 +08:00
. Fixed bug #72944 (Null pointer deref in zval_delref_p). (Dmitry)
Fixed bug #72943 (assign_dim on string doesn't reset hval)
2016-08-26 18:30:08 +08:00
. Fixed bug #72943 (assign_dim on string doesn't reset hval). (Laruence)
Fixed bug #72911 (Memleak in zend_binary_assign_op_obj_helper)
2016-08-21 17:38:03 +08:00
. Fixed bug #72911 (Memleak in zend_binary_assign_op_obj_helper). (Laruence)
Fixed bug #72813 (Segfault with __get returned by ref) This should be safe change, as we don't dereference value and member after calling setter/getter. And compare to adding unref codes, this is much cheaper.
2016-08-12 16:23:40 +08:00
. Fixed bug #72813 (Segfault with __get returned by ref). (Laruence)
Fix bug #72767 The page size calculation did not account for the size of the stack header (or rather it did account for it, but in the wrong direction...)
2016-08-06 01:51:51 +08:00
. Fixed bug #72767 (PHP Segfaults when trying to expand an infinite operator).
(Nikita)
Fix bug #72854
2016-08-17 03:04:31 +08:00
. Fixed bug #72854 (PHP Crashes on duplicate destructor call). (Nikita)
update NEWS
2016-08-17 07:37:40 +08:00
. Fixed bug #72857 (stream_socket_recvfrom read access violation). (Anatol)
Fix bug #72767 The page size calculation did not account for the size of the stack header (or rather it did account for it, but in the wrong direction...)
2016-08-06 01:51:51 +08:00
Fixed bug #72922 COM called from PHP does not return out parameters
2016-08-25 18:12:45 +08:00
- COM:
. Fixed bug #72922 (COM called from PHP does not return out parameters).
(Anatol)
Fix #71514: Bad dba_replace condition because of wrong API usage We're backporting commit 9e309a2d to PHP-5.6, because it is a bugfix.
2016-08-25 22:20:30 +08:00
- Dba:
Fix #70825: Cannot fetch multiple values with group in ini file If we have the position already from the last fetch, we also have to preset the current group, because it won't be read again.
2016-08-26 00:10:38 +08:00
. Fixed bug #70825 (Cannot fetch multiple values with group in ini file).
(cmb)
Fix #71514: Bad dba_replace condition because of wrong API usage We're backporting commit 9e309a2d to PHP-5.6, because it is a bugfix.
2016-08-25 22:20:30 +08:00
Bug 70195 Many FTP-S servers now require FTP clients to re-use the SSL session from the control connection on the data connection, to prove that the same entity controls both connections. This patch updates PHP's FTP-S client code to allow that possibility.
2016-08-10 22:03:12 +08:00
- FTP:
. Fixed bug #70195 (Cannot upload file using ftp_put to FTPES with
require_ssl_reuse). (Benedict Singer)
Merge branch 'PHP-5.6' into PHP-7.0
2016-08-03 00:47:36 +08:00
- GD:
. Fixed bug #72709 (imagesetstyle() causes OOB read for empty $styles). (cmb)
Fix #66005: imagecopy does not support 1bit transparency on truecolor images We must not copy transparent pixels, see <https://github.com/libgd/libgd/commit/daac285c>.
2016-08-21 22:07:34 +08:00
. Fixed bug #66005 (imagecopy does not support 1bit transparency on truecolor
images). (cmb)
Fix #72913: imagecopy() loses single-color transparency on palette images The proper code to handle true-color to palette copies is already contained in gdImageCopy(), so we can simply remove the buggy duplicated code.
2016-08-21 23:39:23 +08:00
. Fixed bug #72913 (imagecopy() loses single-color transparency on palette
images). (cmb)
Fix #68716: possible resource leaks in _php_image_convert() We properly clean up after ourselves wrt. to closing opened file pointers and created images.
2016-08-22 01:39:58 +08:00
. Fixed bug #68716 (possible resource leaks in _php_image_convert()). (cmb)
prepare next
2016-08-02 17:13:20 +08:00
Merge branch 'pull-request/2043' into PHP-7.0
2016-08-30 07:07:20 +08:00
- iconv:
. Fixed bug #72320 (iconv_substr returns false for empty strings). (cmb)
update NEWS
2016-08-20 07:38:01 +08:00
- IMAP:
. Fixed bug #72852 (imap_mail null dereference). (Anatol)
Fix #65732: grapheme_*() is not Unicode compliant on CR LF sequence According to the Unicode specification (at least as of 5.1), CRLF sequences are considered to be a single grapheme. We cater to that special case by letting grapheme_ascii_check() fail. While it would be trivial to fix grapheme_ascii_check() wrt. grapheme_strlen(), grapheme_substr() and grapheme_strrpos() would be much harder to handle, so we accept the slight performance penalty if CRLF is involved.
2016-08-20 01:05:33 +08:00
- Intl:
. Fixed bug #65732 (grapheme_*() is not Unicode compliant on CR LF
sequence). (cmb)
update NEWS
2016-09-13 18:34:03 +08:00
. Fixed bug #73007 (add locale length check). (Stas)
- Mysqlnd:
. Fixed bug #72293 (Heap overflow in mysqlnd related to BIT fields). (Stas)
Fix #65732: grapheme_*() is not Unicode compliant on CR LF sequence According to the Unicode specification (at least as of 5.1), CRLF sequences are considered to be a single grapheme. We cater to that special case by letting grapheme_ascii_check() fail. While it would be trivial to fix grapheme_ascii_check() wrt. grapheme_strlen(), grapheme_substr() and grapheme_strrpos() would be much harder to handle, so we accept the slight performance penalty if CRLF is involved.
2016-08-20 01:05:33 +08:00
Fix bug #72524 (Binding null values triggers ORA-24816 error)
2016-08-04 10:45:32 +08:00
- OCI8
. Fixed invalid handle error with Implicit Result Sets. (Chris Jones)
. Fixed bug #72524 (Binding null values triggers ORA-24816 error). (Chris Jones)
Fix #72949: Typo in opcache error message
2016-08-27 00:50:30 +08:00
- Opcache:
. Fixed bug #72949 (Typo in opcache error message). (cmb)
Fixed bug #72788 (Invalid memory access when using persistent PDO connection)
2016-08-09 11:32:16 +08:00
- PDO:
. Fixed bug #72788 (Invalid memory access when using persistent PDO
connection). (Keyur)
Add NEWS
2016-08-10 01:29:36 +08:00
. Fixed bug #72791 (Memory leak in PDO persistent connection handling). (Keyur)
Fix #60665: call to empty() on NULL result using PDO::FETCH_LAZY returns false The has_property handler only checked whether a respective column name exists, but neither whether the column value is set, nor whether it is empty, respectively. We fix that to match the behavior of POD:FETCH_OBJ in particular and PHP in general.
2016-08-13 06:31:55 +08:00
. Fixed bug #60665 (call to empty() on NULL result using PDO::FETCH_LAZY
returns false). (cmb)
Fixed bug #72788 (Invalid memory access when using persistent PDO connection)
2016-08-09 11:32:16 +08:00
update NEWS
2016-08-26 01:43:39 +08:00
- PDO_DBlib:
. Implemented stringify 'uniqueidentifier' fields.
(Alexander Zhuravlev, Adam Baratz)
update NEWS
2016-08-15 02:52:47 +08:00
- PDO_pgsql:
. Implemented FR #72633 (Postgres PDO lastInsertId() should work without
specifying a sequence). (Pablo Santiago Sánchez, Matteo)
. Fixed bug #72759 (Regression in pgo_pgsql). (Anatol)
update NEWS
2016-09-13 18:34:03 +08:00
- Phar:
. Fixed bug #72928 (Out of bound when verify signature of zip phar in
phar_parse_zipfile). (Stas)
. Fixed bug #73035 (Out of bound when verify signature of tar phar in
phar_parse_tarfile). (Stas)
Fixed bug #72846 (getConstant for a array constant with constant values returns NULL/NFC/UKNOWN)
2016-08-15 23:22:55 +08:00
- Reflection:
. Fixed bug #72846 (getConstant for a array constant with constant values
returns NULL/NFC/UKNOWN). (Laruence)
Fix bug #72724
2016-08-03 06:33:32 +08:00
- Session:
. Fixed bug #72724 (PHP7: session-uploadprogress kills httpd). (Nikita)
Fixed bug #72940 SID always return "name=ID", even if session cookie exist
2016-08-30 14:56:06 +08:00
. Fixed bug #72940 (SID always return "name=ID", even if session
cookie exist). (Yasuo)
Fix bug #72724
2016-08-03 06:33:32 +08:00
Fix bug #72971
2016-08-30 16:54:31 +08:00
- SimpleXML:
. Fixed bug #72971 (SimpleXML isset/unset do not respect namespace). (Nikita)
Fix bug #72957
2016-08-30 19:05:53 +08:00
. Fixed bug #72957 (Null coalescing operator doesn't behave as expected with
SimpleXMLElement). (Nikita)
Fix bug #72971
2016-08-30 16:54:31 +08:00
update NEWS
2016-09-13 18:34:03 +08:00
- SPL:
. Fixed bug #73029 (Missing type check when unserializing SplArray). (Stas)
Fix bug #55451 Make substr_compare ignore the length if it's NULL. This allows to use the last parameter (case_insensitivity) with the default length.
2016-08-03 16:29:12 +08:00
- Standard:
. Fixed bug #55451 (substr_compare NULL length interpreted as 0). (Lauri
Kenttä)
Fix #72278: getimagesize returning FALSE on valid jpg getimagesize() is rather strict about the length of the marker payload data, and fails if there are extraneous bytes before the next marker. Only a very special case reported in bug #13213 is catered to. libjpeg is rather resilient to such corrupted JPEG files, and raises a recoverable error in this case. Other image processors also accept such JPEG files, so we adapt getimagesize() to skip (but warn about) such extraneous bytes.
2016-08-13 22:02:10 +08:00
. Fixed bug #72278 (getimagesize returning FALSE on valid jpg). (cmb)
Fix #65550: get_browser() incorrectly parsers entries with "+" sign + signs in the browscap patterns are meant to be literal characters, so we have to escape them for the regex matching.
2016-08-27 07:02:58 +08:00
. Fixed bug #65550 (get_browser() incorrectly parses entries with "+" sign).
(cmb)
Fix bug #55451 Make substr_compare ignore the length if it's NULL. This allows to use the last parameter (case_insensitivity) with the default length.
2016-08-03 16:29:12 +08:00
Merge branch 'PHP-5.6' into PHP-7.0 Conflicts: ext/standard/ftp_fopen_wrapper.c
2016-08-06 05:09:30 +08:00
- Streams:
Update NEWs
2016-08-17 16:56:58 +08:00
. Fixed bug #72853 (stream_set_blocking doesn't work). (Laruence)
Merge branch 'PHP-5.6' into PHP-7.0 Conflicts: ext/standard/ftp_fopen_wrapper.c
2016-08-06 05:09:30 +08:00
. Fixed bug #72764 (ftps:// opendir wrapper data channel encryption fails
with IIS FTP 7.5, 8.5). (vhuk)
fix bug category
2016-09-11 19:20:25 +08:00
. Fixed bug #71882 (Negative ftruncate() on php://memory exhausts memory).
(cmb)
5.6.26 will be next
2016-08-04 07:39:37 +08:00
update NEWS
2016-09-13 21:55:31 +08:00
- SQLite3:
. Downgraded bundled SQLite to 3.8.10.2. (Anatol);
update NEWS
2016-08-18 23:50:17 +08:00
- Sysvshm:
. Fixed bug #72858 (shm_attach null dereference). (Anatol)
#72085: SEGV on unknown address zif_xml_parse We better make sure that the ZVALs we're accessing as arrays are indeed arrays.
2016-08-17 06:41:31 +08:00
- XML:
. Fixed bug #72085 (SEGV on unknown address zif_xml_parse). (cmb)
Fix #72714: _xml_startElementHandler() segmentation fault The issue is caused by an integer overflow when the `long` passed as XML_OPTION_SKIP_TAGSTART is assigned to `xml_parser::toffset` which is declared as `int`. We can simply work around this issue, by clipping resulting negative values to 0 (and raising a notice in this case), because the reasonable range for this value is certainly catered to by positive `int`s. However, there still remains the issue that `xml_parser::toffset` is later added to `char *`s, which can cause OOB reads, so we make sure that the upper bound never exceeds the strlen(). We eschew optimizing `SKIP_TAGSTART` wrt. to the potentially duplicate strlen() call, because that code path is unexpected anyway.
2016-08-17 02:36:33 +08:00
. Fixed bug #72714 (_xml_startElementHandler() segmentation fault). (cmb)
prepare next
2016-08-02 17:13:20 +08:00
update NEWS
2016-09-13 18:34:03 +08:00
- Wddx:
. Fixed bug #72860 (wddx_deserialize use-after-free). (Stas)
. Fixed bug #73065 (Out-Of-Bounds Read in php_wddx_push_element). (Stas)
Fix #68302: impossible to compile php with zip support We should not let configure succeed, if SIZEOF_OFF_T == 0, just to let the compilation fail later. Instead we bail out early, giving a hint regarding the potential issue, namely misconfigured libraries.
2016-08-17 18:43:29 +08:00
- ZIP:
. Fixed bug #68302 (impossible to compile php with zip support). (cmb)
sync NEWS
2016-08-18 06:15:54 +08:00
18 Aug 2016 PHP 7.0.10
prepare next version
2016-07-05 14:09:20 +08:00
Fix bug #71936 (Segmentation fault destroying HTTP_RAW_POST_DATA)
2016-06-21 00:43:07 +08:00
- Core:
Fixed bug #72629 (Caught exception assignment to variables ignores references).
2016-07-20 16:59:14 +08:00
. Fixed bug #72629 (Caught exception assignment to variables ignores
references). (Laruence)
Fixed bug #72594 (Calling an earlier instance of an included anonymous class fatals)
2016-07-14 13:36:43 +08:00
. Fixed bug #72594 (Calling an earlier instance of an included anonymous
class fatals). (Laruence)
Fixed bug #72581 (previous property undefined in Exception after deserialization)
2016-07-12 11:51:20 +08:00
. Fixed bug #72581 (previous property undefined in Exception after
deserialization). (Laruence)
Merge branch 'PHP-5.6' into PHP-7.0 Conflicts: Zend/zend_compile.c
2016-07-05 20:31:32 +08:00
. Fixed bug #72496 (Cannot declare public method with signature incompatible
Don't enforce LSP if prototype method is private Fixes bug #72496.
2016-06-30 15:00:33 +08:00
with parent private method). (Pedro Magalhães)
Updated NEWS
2016-07-08 21:06:21 +08:00
. Fixed bug #72024 (microtime() leaks memory). (maroszek at gmx dot net)
update NEWS
2016-07-12 19:01:54 +08:00
. Fixed bug #71911 (Unable to set --enable-debug on building extensions by
phpize on Windows). (Yuji Uchiyama)
Fix ClosedGeneratorException possibly thrown into wrong scope
2016-07-23 22:39:21 +08:00
. Fixed bug causing ClosedGeneratorException being thrown into the calling
code instead of the Generator yielding from. (Bob)
update NEWS
2016-07-25 15:51:13 +08:00
. Implemented FR #72614 (Support "nmake test" on building extensions by
phpize). (Yuji Uchiyama)
. Fixed bug #72641 (phpize (on Windows) ignores PHP_PREFIX).
(Yuji Uchiyama)
Fixed a potential segfault in zend_objects_store_free_object_storage() Under the special circumstance where a garbage collected objects bucket slot was not reused until the end of the script, we get access into freed memory... No test added as it usually is valgrind-only, and only sometimes when the memory happens to have changed (i.e. (GC_FLAGS(obj) & IS_OBJ_FREE_CALLED) == 0), it actually *may* segfault
2016-07-28 00:08:43 +08:00
. Fixed potential segfault in object storage freeing in shutdown sequence.
(Bob)
sync NEWS
2016-08-18 06:15:54 +08:00
. Fixed bug #72663 (Create an Unexpected Object and Don't Invoke
__wakeup() in Deserialization). (Stas)
. Fixed bug #72681 (PHP Session Data Injection Vulnerability). (Stas)
Fixed bug #72683 getmxrr broken
2016-07-28 02:48:45 +08:00
. Fixed bug #72683 (getmxrr broken). (Anatol)
sync NEWS
2016-08-18 06:15:54 +08:00
. Fixed bug #72742 (memory allocator fails to realloc small block to large
one). (Stas)
Update NEWS
2016-08-31 20:09:56 +08:00
. Fixed URL rewriter partially. It would not rewrite '//example.com/' URL
unconditionally. Only requested host(HTTP_HOST) is rewritten. (Yasuo)
sync NEWS
2016-08-18 06:15:54 +08:00
- Bz2:
. Fixed bug #72837 (integer overflow in bzdecompress caused heap
corruption). (Stas)
prepare next version
2016-07-05 14:09:20 +08:00
Fix #67976: cal_days_month() fails for final month of the French calendar The French calendar ends on 0014-13-05, so trying to calculate the Julian day of 0015-01-01 fails. We cater to that by returning the hard-coded value.
2016-07-29 01:13:58 +08:00
- Calendar:
. Fixed bug #67976 (cal_days_month() fails for final month of the French
calendar). (cmb)
Fix #71894: AddressSanitizer: global-buffer-overflow in zif_cal_from_jd Julian days < 347998 denote invalid Jewish calendar dates, so cal_from_jd($jd, CAL_JEWISH) and jdmonthname($jd, CAL_MONTH_JEWISH) should actually fail. For BC we don't yet let them though, but we fix the OOB read that happens in this case, and we also adjust cal_from_jd()'s return value to have empty strings for "abbrevdayname" and "dayname" instead of "Sun"/ "Sunday" and NULL for "dow" instead of 0, which doesn't make any sense.
2016-07-29 06:24:46 +08:00
. Fixed bug #71894 (AddressSanitizer: global-buffer-overflow in
zif_cal_from_jd). (cmb)
Fix #67976: cal_days_month() fails for final month of the French calendar The French calendar ends on 0014-13-05, so trying to calculate the Julian day of 0015-01-01 fails. We cater to that by returning the hard-coded value.
2016-07-29 01:13:58 +08:00
update NEWS
2016-07-12 23:01:51 +08:00
- COM:
missed the dot
2016-07-12 23:04:41 +08:00
. Fixed bug #72569 (DOTNET/COM array parameters broke in PHP7). (Anatol)
update NEWS
2016-07-12 23:01:51 +08:00
Merge branch 'PHP-5.6' into PHP-7.0
2016-07-28 06:17:43 +08:00
- CURL:
. Fixed bug #71709 (curl_setopt segfault with empty CURLOPT_HTTPHEADER).
(Pierrick)
Merge branch 'PHP-5.6' into PHP-7.0 Conflicts: ext/curl/interface.c
2016-07-28 11:36:22 +08:00
. Fixed bug #71929 (CURLINFO_CERTINFO data parsing error). (Pierrick)
sync NEWS
2016-08-18 06:15:54 +08:00
. Fixed bug #72674 (Heap overflow in curl_escape). (Stas)
5.6.24 will be next
2016-06-09 16:51:02 +08:00
Fix bug #66502: DOM document dangling reference When we decrement the refcount of a node's document, we state that we won't need it anymore. Therefore we can *always* set the pointer to the document to NULL, what avoids invalid memory accesses for some edge cases as demonstrated with the PHPT. Original patch provided by Sean Heelan.
2016-07-15 06:57:36 +08:00
- DOM:
. Fixed bug #66502 (DOM document dangling reference). (Sean Heelan, cmb)
update NEWS
2016-08-03 23:39:55 +08:00
- EXIF:
. Fixed bug #72735 (Samsung picture thumb not read (zero size)). (Kalle, Remi)
sync NEWS
2016-08-18 06:15:54 +08:00
. Fixed bug #72627 (Memory Leakage In exif_process_IFD_in_TIFF). (Stas)
update NEWS
2016-08-03 23:39:55 +08:00
Fixed bug #70313 PDO statement fails to throw exception
2016-07-10 19:04:49 +08:00
- Filter:
Updated NEWS
2016-07-08 22:32:32 +08:00
. Fixed bug #71745 (FILTER_FLAG_NO_RES_RANGE does not cover whole 127.0.0.0/8
range). (bugs dot php dot net at majkl578 dot cz)
Updated NEWS
2016-07-12 16:38:40 +08:00
- FPM:
. Fixed bug #72575 (using --allow-to-run-as-root should ignore missing user).
(gooh)
Fix bug #72596: imagetypes function won't advertise WEBP support We add the constant IMG_WEBP and make sure that WebP support is properly reported by imagetypes().
2016-07-14 22:43:13 +08:00
- GD:
. Fixed bug #72596 (imagetypes function won't advertise WEBP support). (cmb)
Fix #72604: imagearc() ignores thickness for full arcs We remove the special casing for full arcs, what conforms to external libgd.
2016-07-16 01:42:26 +08:00
. Fixed bug #72604 (imagearc() ignores thickness for full arcs). (cmb)
Merge branch 'pull-request/1991' into PHP-5.6
2016-07-19 06:35:14 +08:00
. Fixed bug #70315 (500 Server Error but page is fully rendered). (cmb)
Update NEWS
2016-07-19 23:58:29 +08:00
. Fixed bug #43828 (broken transparency of imagearc for truecolor in
blendingmode). (cmb)
Fix #66555: Always false condition in ext/gd/libgd/gdkanji.c This issue has already been fixed in libgd[1], so we fix PHP's bundled libgd accordingly. [1] <https://github.com/libgd/libgd/commit/aa1d71c>
2016-07-23 22:48:07 +08:00
. Fixed bug #66555 (Always false condition in ext/gd/libgd/gdkanji.c). (cmb)
Fix #68712: suspicious if-else statements
2016-07-24 01:29:43 +08:00
. Fixed bug #68712 (suspicious if-else statements). (cmb)
sync NEWS
2016-08-18 06:15:54 +08:00
. Fixed bug #72697 (select_colors write out-of-bounds). (Stas)
. Fixed bug #72730 (imagegammacorrect allows arbitrary write access). (Stas)
Fix #72494: imagecropauto out-of-bounds access This issue has actually already been fixed with commit 46f2c690. We're adding a regression test and a NEWS entry, and also port the fix in gdImageCropThreshold() from libgd: * <https://github.com/libgd/libgd/commit/b347e034> * <https://github.com/libgd/libgd/commit/46f2c690>
2016-10-25 20:19:36 +08:00
. Fixed bug #72494 (imagecropauto out-of-bounds access). (Fernando, Pierre,
cmb)
Fix bug #72596: imagetypes function won't advertise WEBP support We add the constant IMG_WEBP and make sure that WebP support is properly reported by imagetypes().
2016-07-14 22:43:13 +08:00
Partially fix #72506: idn_to_ascii for UTS #46 incorrect for long domain names We don't actually fix this issue wrt. the empty $info array, because it is not clear what this array should contain and we're concerned about the potential BC break, but at least we fix the inconsistent handling of resulting domains with 255 bytes (which raise an error), and longer domains (which just return FALSE), what has to be considered a very minor BC break if at all.
2016-07-12 20:42:38 +08:00
- Intl:
Fixed bug #72639 (Segfault when instantiating class that extends IntlCalendar and adds a property)
2016-07-21 14:25:15 +08:00
. Fixed bug #72639 (Segfault when instantiating class that extends
IntlCalendar and adds a property). (Laruence)
Partially fix #72506: idn_to_ascii for UTS #46 incorrect for long domain names We don't actually fix this issue wrt. the empty $info array, because it is not clear what this array should contain and we're concerned about the potential BC break, but at least we fix the inconsistent handling of resulting domains with 255 bytes (which raise an error), and longer domains (which just return FALSE), what has to be considered a very minor BC break if at all.
2016-07-12 20:42:38 +08:00
. Partially fixed #72506 (idn_to_ascii for UTS #46 incorrect for long domain
names). (cmb)
Fix #72691: mb_ereg_search raises a warning if a match zero-width That warning doesn't make sense (PCRE doesn't throw such a warning either), so we remove it.
2016-07-28 19:07:05 +08:00
- mbstring:
. Fixed bug #72691 (mb_ereg_search raises a warning if a match zero-width).
(cmb)
Fix #72694: mb_ereg_search_setpos does not accept a string's last position Setting the search position immediately behind the last character should be allowed, so we fix this off-by-one error.
2016-07-28 21:21:48 +08:00
. Fixed bug #72693 (mb_ereg_search increments search position when a match
Fix #72693: mb_ereg_search increments search position when a match zero-width That's caused by an off-by-one error, which we fix.
2016-07-28 19:56:40 +08:00
zero-width). (cmb)
Fix #72694: mb_ereg_search_setpos does not accept a string's last position Setting the search position immediately behind the last character should be allowed, so we fix this off-by-one error.
2016-07-28 21:21:48 +08:00
. Fixed bug #72694 (mb_ereg_search_setpos does not accept a string's last
position). (cmb)
fixes bad address given to onig_error_code_to_str Closes bug #72710 (cherry picked from commit 0fb7eb6723bcc6fd98053911543e801edb5ab763)
2016-07-30 12:08:25 +08:00
. Fixed bug #72710 (`mb_ereg` causes buffer overflow on regexp compile error).
(ju1ius)
Fix #72691: mb_ereg_search raises a warning if a match zero-width That warning doesn't make sense (PCRE doesn't throw such a warning either), so we remove it.
2016-07-28 19:07:05 +08:00
sync NEWS
2016-08-18 06:15:54 +08:00
- Mcrypt:
. Fixed bug #72782 (Heap Overflow due to integer overflows). (Stas)
Add to NEWS
2016-07-13 11:03:26 +08:00
- Opcache:
. Fixed bug #72590 (Opcache restart with kill_all_lockers does not work).
(Keyur)
Fix #72688: preg_match missing group names in matches We have to multiply with 0x100 to properly scale the high byte.
2016-07-28 00:50:52 +08:00
- PCRE:
. Fixed bug #72688 (preg_match missing group names in matches). (cmb)
Partially fix #72506: idn_to_ascii for UTS #46 incorrect for long domain names We don't actually fix this issue wrt. the empty $info array, because it is not clear what this array should contain and we're concerned about the potential BC break, but at least we fix the inconsistent handling of resulting domains with 255 bytes (which raise an error), and longer domains (which just return FALSE), what has to be considered a very minor BC break if at all.
2016-07-12 20:42:38 +08:00
Fixed bug #70313 PDO statement fails to throw exception
2016-07-10 19:04:49 +08:00
- PDO_pgsql:
. Fixed bug #70313 (PDO statement fails to throw exception). (Matteo)
Merge branch 'PHP-5.6' into PHP-7.0 Conflicts: ext/reflection/php_reflection.c
2016-07-14 03:46:52 +08:00
- Reflection:
. Fixed bug #72222 (ReflectionClass::export doesn't handle array constants).
(Nikita Nefedov)
Fixed bug #72588 (Using global var doesn't work while accessing SimpleXML element)
2016-07-13 10:49:58 +08:00
- SimpleXML:
. Fixed bug #72588 (Using global var doesn't work while accessing SimpleXML
element). (Laruence)
sync NEWS
2016-08-18 06:15:54 +08:00
- SNMP:
. Fixed bug #72708 (php_snmp_parse_oid integer overflow in memory
allocation). (djodjo at gmail dot com)
Update NEWS
2016-07-05 22:49:40 +08:00
- SPL:
. Fixed bug #55701 (GlobIterator throws LogicException). (Valentin VĂLCIU)
Fix #72646: SplFileObject::getCsvControl does not return the escape character This has obviously been missed when adding the $escape parameter to SplFileObject::setCsvControl() in PHP 5.3, so we catch up on this.
2016-07-22 20:55:13 +08:00
. Fixed bug #72646 (SplFileObject::getCsvControl does not return the escape
character). (cmb)
Update NEWS
2016-07-28 05:52:05 +08:00
. Fixed bug #72684 (AppendIterator segfault with closed generator). (Pierrick)
prepare next version
2016-07-05 14:09:20 +08:00
Fixed bug #72571 (SQLite3::bindValue, SQLite3::bindParam crash)
2016-07-11 11:51:19 +08:00
- SQLite3:
Fixed bug #72668 (Spurious warning when exception is thrown in user defined function)
2016-07-25 20:28:39 +08:00
. Fixed bug #72668 (Spurious warning when exception is thrown in user defined
function). (Laruence)
Fixed bug #72571 (SQLite3::bindValue, SQLite3::bindParam crash)
2016-07-11 11:51:19 +08:00
. Fixed bug #72571 (SQLite3::bindValue, SQLite3::bindParam crash). (Laruence)
Merge branch 'PHP-5.6' into PHP-7.0 # Resolved conflicts: # ext/sqlite3/sqlite3.c
2016-07-27 22:47:09 +08:00
. Implemented FR #72653 (SQLite should allow opening with empty filename).
(cmb)
Update to SQLite3 3.13.0
2016-07-28 22:29:02 +08:00
. Updated to SQLite3 3.13.0. (cmb)
Fixed bug #72571 (SQLite3::bindValue, SQLite3::bindParam crash)
2016-07-11 11:51:19 +08:00
Add NEWS entries
2016-07-07 07:31:04 +08:00
- Standard:
Fixed bug #72622 (array_walk + array_replace_recursive create references from nothing)
2016-07-20 16:12:37 +08:00
. Fixed bug #72622 (array_walk + array_replace_recursive create references
from nothing). (Laruence)
Add NEWS entries
2016-07-07 07:31:04 +08:00
. Fixed bug #72152 (base64_decode $strict fails to detect null byte).
(Lauri Kenttä)
. Fixed bug #72263 (base64_decode skips a character after padding in strict
mode). (Lauri Kenttä)
. Fixed bug #72264 (base64_decode $strict fails with whitespace between
padding). (Lauri Kenttä)
Fix #72330: CSV fields incorrectly split if escape char followed by UTF chars We must not forget to properly reset the state for multibyte characters following an escape character.
2016-07-22 00:36:12 +08:00
. Fixed bug #72330 (CSV fields incorrectly split if escape char followed by
UTF chars). (cmb)
Add NEWS entries
2016-07-07 07:31:04 +08:00
Fix for bug #54431
2016-07-21 17:20:06 +08:00
- Streams:
. Fixed bug #41021 (Problems with the ftps wrapper). (vhuk)
. Fixed bug #54431 (opendir() does not work with ftps:// wrapper). (vhuk)
Fix bug #72667 Open data stream after receiving PASV reply, before sending the main request. Included test cases for opendir() with ftp:// and ftps:// wrappers. Test cases re-use ext/ftp/tests/server.inc Conflicts: ext/standard/ftp_fopen_wrapper.c
2016-07-26 02:50:38 +08:00
. Fixed bug #72667 (opendir() with ftp:// attempts to open data stream for
non-existent directories). (vhuk)
sync NEWS
2016-08-18 06:15:54 +08:00
. Fixed bug #72771 (ftps:// wrapper is vulnerable to protocol downgrade
attack). (Stas)
Fix for bug #54431
2016-07-21 17:20:06 +08:00
Fixed bug #72647 (xmlrpc_encode() unexpected output after referencing array elements)
2016-07-22 23:13:42 +08:00
- XMLRPC:
. Fixed bug #72647 (xmlrpc_encode() unexpected output after referencing
array elements). (Laruence)
NEWS
2016-07-08 16:47:40 +08:00
- Wddx:
. Fixed bug #72564 (boolean always deserialized as "true") (Remi)
Fix incorrect merge Forgot to amend the merge fixes...
2016-07-30 22:07:54 +08:00
. Fixed bug #72142 (WDDX Packet Injection Vulnerability in
wddx_serialize_value()). (Taoguang Chen)
sync NEWS
2016-08-18 06:15:54 +08:00
. Fixed bug #72749 (wddx_deserialize allows illegal memory access) (Stas)
. Fixed bug #72750 (wddx_deserialize null dereference). (Stas)
. Fixed bug #72790 (wddx_deserialize null dereference with invalid xml).
(Stas)
. Fixed bug #72799 (wddx_deserialize null dereference in
php_wddx_pop_element). (Stas)
NEWS
2016-07-08 16:47:40 +08:00
Fixed bug #72660 (NULL Pointer dereference in zend_virtual_cwd)
2016-07-24 23:58:22 +08:00
- Zip:
. Fixed bug #72660 (NULL Pointer dereference in zend_virtual_cwd).
(Laruence)
fix typo
2016-07-05 18:36:55 +08:00
21 Jul 2016 PHP 7.0.9
7.0.9 next
2016-06-07 16:04:25 +08:00
Fixed bug #72508 (strange references after recursive function call and "switch" statement)
2016-06-28 15:36:50 +08:00
- Core:
. Fixed bug #72508 (strange references after recursive function call and
"switch" statement). (Laruence)
sync NEWS
2016-07-20 02:27:30 +08:00
. Fixed bug #72513 (Stack-based buffer overflow vulnerability in
virtual_file_ex). (Stas)
. Fixed bug #72573 (HTTP_PROXY is improperly trusted by some PHP libraries
and applications). (Stas)
- bz2:
. Fixed bug #72613 (Inadequate error handling in bzread()). (Stas)
Fixed bug #72508 (strange references after recursive function call and "switch" statement)
2016-06-28 15:36:50 +08:00
Fixed bug #72484 (SCRIPT_FILENAME shows wrong path if the user specify router.php)
2016-06-25 09:08:16 +08:00
- CLI:
. Fixed bug #72484 (SCRIPT_FILENAME shows wrong path if the user specify
router.php). (Laruence)
update NEWS
2016-07-02 00:44:20 +08:00
- COM:
. Fixed bug #72498 (variant_date_from_timestamp null dereference). (Anatol)
sync NEWS
2016-07-20 02:27:30 +08:00
- Curl:
. Fixed bug #72541 (size_t overflow lead to heap corruption). (Stas)
Bug #6836 has already been fixed in PHP 5.6.24 and 7.0.9
2016-07-28 18:26:41 +08:00
- Date:
. Fixed bug #66836 (DateTime::createFromFormat 'U' with pre 1970 dates fails
parsing). (derick)
sync NEWS
2016-07-20 02:27:30 +08:00
- Exif:
. Fixed bug #72603 (Out of bound read in exif_process_IFD_in_MAKERNOTE).
(Stas)
. Fixed bug #72618 (NULL Pointer Dereference in exif_process_user_comment).
(Stas)
Update NEWS
2016-06-16 20:33:41 +08:00
- GD:
. Fixed bug #43475 (Thick styled lines have scrambled patterns). (cmb)
Update NEWS
2016-06-18 00:00:24 +08:00
. Fixed bug #53640 (XBM images require width to be multiple of 8). (cmb)
Update NEWS
2016-06-20 21:28:41 +08:00
. Fixed bug #64641 (imagefilledpolygon doesn't draw horizontal line). (cmb)
sync NEWS
2016-07-20 02:27:30 +08:00
. Fixed bug #72512 (gdImageTrueColorToPaletteBody allows arbitrary write/read
access). (Pierre)
. Fixed bug #72519 (imagegif/output out-of-bounds access). (Pierre)
. Fixed bug #72558 (Integer overflow error within _gdContributionsAlloc()).
(Pierre)
. Fixed bug #72482 (Ilegal write/read access caused by gdImageAALine
overflow). (Pierre)
. Fixed bug #72494 (imagecropauto out-of-bounds access). (Pierre)
- Intl:
. Fixed bug #72533 (locale_accept_from_http out-of-bounds access). (Stas)
Update NEWS
2016-06-16 20:33:41 +08:00
Fixed bug #72399 (Use-After-Free in MBString (search_re))
2016-06-14 09:20:26 +08:00
- Mbstring:
Fixed(attempt to) bug #72405 (mb_ereg_replace - mbc_to_code (oniguruma) - oob read access) according to ext/mbstring/oniguruma/enc/utf8.c, max bytes are 6
2016-06-15 14:54:57 +08:00
. Fixed bug #72405 (mb_ereg_replace - mbc_to_code (oniguruma) -
oob read access). (Laruence)
Fixed bug #72399 (Use-After-Free in MBString (search_re))
2016-06-14 09:20:26 +08:00
. Fixed bug #72399 (Use-After-Free in MBString (search_re)). (Laruence)
7.0.9 next
2016-06-07 16:04:25 +08:00
sync NEWS
2016-07-20 02:27:30 +08:00
- mcrypt:
. Fixed bug #72551, bug #72552 (In correct casting from size_t to int lead to
heap overflow in mdecrypt_generic). (Stas)
update NEWS
2016-07-14 19:20:13 +08:00
- PDO_pgsql:
. Fixed bug #72570 (Segmentation fault when binding parameters on a query
without placeholders). (Matteo)
update NEWS
2016-06-23 02:19:09 +08:00
- PCRE:
Fixed bug #72476 (Memleak in jit_stack)
2016-06-23 14:06:48 +08:00
. Fixed bug #72476 (Memleak in jit_stack). (Laruence)
update NEWS
2016-06-23 02:19:09 +08:00
. Fixed bug #72463 (mail fails with invalid argument). (Anatol)
Fixed bug #72538 (readline_redisplay crashes php)
2016-07-03 23:56:27 +08:00
- Readline:
. Fixed bug #72538 (readline_redisplay crashes php). (Laruence)
Fixed bug #72306 (Heap overflow through proc_open and $env parameter)
2016-06-13 21:08:04 +08:00
- Standard:
Fixed bug #72505 (readfile() mangles files larger than 2G)
2016-06-28 11:11:25 +08:00
. Fixed bug #72505 (readfile() mangles files larger than 2G). (Cschneid)
Fixed bug #72306 (Heap overflow through proc_open and $env parameter)
2016-06-13 21:08:04 +08:00
. Fixed bug #72306 (Heap overflow through proc_open and $env parameter).
(Laruence)
7.0.9 next
2016-06-07 16:04:25 +08:00
Fixed bug #72531 (ps_files_cleanup_dir Buffer overflow)
2016-07-03 09:30:33 +08:00
- Session:
. Fixed bug #72531 (ps_files_cleanup_dir Buffer overflow). (Laruence)
sync NEWS
2016-07-20 02:27:30 +08:00
. Fixed bug #72562 (Use After Free in unserialize() with Unexpected Session
Deserialization). (Stas)
- SNMP:
. Fixed bug #72479 (Use After Free Vulnerability in SNMP with GC and
unserialize()). (Stas)
Fixed bug #72531 (ps_files_cleanup_dir Buffer overflow)
2016-07-03 09:30:33 +08:00
Update NEWS
2016-06-19 12:34:12 +08:00
- Streams:
. Fixed bug #72439 (Stream socket with remote address leads to a segmentation
fault). (Laruence)
sync NEWS
2016-07-20 02:27:30 +08:00
- XMLRPC:
. Fixed bug #72606 (heap-buffer-overflow (write) simplestring_addn
simplestring.c). (Stas)
- Zip:
. Fixed bug #72520 (Stack-based buffer overflow vulnerability in
php_stream_zip_opener). (Stas)
7.0.9 next
2016-06-07 16:04:25 +08:00
23 Jun 2016 PHP 7.0.8
prepare next 7.0.8
2016-05-10 19:06:55 +08:00
Fixed bug #72218 (If host name cannot be resolved then PHP 7 crashes)
2016-05-16 11:19:45 +08:00
- Core:
. Fixed bug #72218 (If host name cannot be resolved then PHP 7 crashes).
Correct name, it was typed in habitually
2016-05-16 14:48:13 +08:00
(Esminis at esminis dot lt)
Align NEWS files with 7.0.8 and Changelog
2016-06-26 02:25:57 +08:00
. Fixed bug #72221 (segfault, past-the-end access). (Lauri Kenttä)
. Fixed bug #72268 (Integer Overflow in nl2br()). (Stas)
. Fixed bug #72275 (Integer Overflow in json_encode()/json_decode()/
json_utf8_to_utf16()). (Stas)
. Fixed bug #72400 (Integer Overflow in addcslashes/addslashes). (Stas)
. Fixed bug #72403 (Integer Overflow in Length of String-typed ZVAL). (Stas)
Fixed bug #72218 (If host name cannot be resolved then PHP 7 crashes)
2016-05-16 11:19:45 +08:00
add missing NEWS entry
2016-07-04 17:05:49 +08:00
- Date:
. Fixed bug #63740 (strtotime seems to use both sunday and monday as start of
week). (Derick)
Fixed bug #72308 (fastcgi_finish_request and logging environment variables)
2016-06-02 14:16:32 +08:00
- FPM:
. Fixed bug #72308 (fastcgi_finish_request and logging environment
variables). (Laruence)
fix NEWS
2016-06-08 00:44:40 +08:00
- GD:
Align NEWS files with 7.0.8 and Changelog
2016-06-26 02:25:57 +08:00
. Fixed bug #66387 (Stack overflow with imagefilltoborder). (CVE-2015-8874)
(cmb)
. Fixed bug #72298 (pass2_no_dither out-of-bounds access). (Stas)
. Fixed bug #72337 (invalid dimensions can lead to crash). (Pierre)
. Fixed bug #72339 (Integer Overflow in _gd2GetHeader() resulting in heap
overflow). (CVE-2016-5766) (Pierre)
. Fixed bug #72407 (NULL Pointer Dereference at _gdScaleVert). (Stas)
. Fixed bug #72446 (Integer Overflow in gdImagePaletteToTrueColor() resulting
in heap overflow). (CVE-2016-5767) (Pierre)
fix NEWS
2016-06-08 00:44:40 +08:00
Fixed bug #72218 (If host name cannot be resolved then PHP 7 crashes)
2016-05-16 11:19:45 +08:00
- Intl:
Align NEWS files with 7.0.8 and Changelog
2016-06-26 02:25:57 +08:00
. Fixed bug #70484 (selectordinal doesn't work with named parameters).
(Anatol)
- mbstring:
. Fixed bug #72402 (_php_mb_regex_ereg_replace_exec - double free).
(CVE-2016-5768) (Stas)
- mcrypt:
. Fixed bug #72455 (Heap Overflow due to integer overflows). (CVE-2016-5769)
(Stas)
- OpenSSL:
. Fixed bug #72140 (segfault after calling ERR_free_strings()).
(Jakub Zelenka)
Fixed bug #72195 (pg_pconnect/pg_connect cause use-after-free)
2016-05-12 13:15:33 +08:00
Revert "Revert the ABI break commit" This reverts commit 07220f615b432837e158820fa08206fcc78c93e2.
2016-05-16 21:23:55 +08:00
- PCRE:
. Fixed bug #72143 (preg_replace uses int instead of size_t). (Joe)
Fixed bug #71573 (Segfault (core dumped) if paramno beyond bound)
2016-05-11 11:12:27 +08:00
- PDO_pgsql:
. Fixed bug #71573 (Segfault (core dumped) if paramno beyond bound).
(Laruence)
update NEWS
2016-06-01 20:08:32 +08:00
. Fixed bug #72294 (Segmentation fault/invalid pointer in connection
with pgsql_stmt_dtor). (Anatol)
Fixed bug #71573 (Segfault (core dumped) if paramno beyond bound)
2016-05-11 11:12:27 +08:00
Align NEWS files with 7.0.8 and Changelog
2016-06-26 02:25:57 +08:00
- Phar:
. Fixed bug #72321 (invalid free in phar_extract_file()).
(hji at dyntopia dot com)
Fixed bug #72284 (phpdbg fatal errors with coverage) Cherry-pick of original commits d3371b and 0f20e11 only present in master
2016-05-03 19:36:21 +08:00
- Phpdbg:
. Fixed bug #72284 (phpdbg fatal errors with coverage). (Bob)
Added NEWS entry missed while doing merge
2016-05-12 13:48:24 +08:00
- Postgres:
. Fixed bug #72195 (pg_pconnect/pg_connect cause use-after-free). (Laruence)
update NEWS
2016-05-12 19:39:15 +08:00
. Fixed bug #72197 (pg_lo_create arbitrary read). (Anatol)
Added NEWS entry missed while doing merge
2016-05-12 13:48:24 +08:00
Fixed Bug #72193 (dns_get_record returns array containing elements of type 'unknown')
2016-05-11 17:31:46 +08:00
- Standard:
Fixed bug #72369 (array_merge() produces references in PHP7)
2016-06-09 20:07:44 +08:00
. Fixed bug #72369 (array_merge() produces references in PHP7). (Dmitry)
Fixed bug #72300 (ignore_user_abort(false) has no effect)
2016-05-31 22:24:02 +08:00
. Fixed bug #72300 (ignore_user_abort(false) has no effect). (Laruence)
Fixed bug #72229 (Wrong reference when serialize/unserialize an object)
2016-05-17 17:40:26 +08:00
. Fixed bug #72229 (Wrong reference when serialize/unserialize an object).
(Laruence)
Fixed Bug #72193 (dns_get_record returns array containing elements of type 'unknown')
2016-05-11 17:31:46 +08:00
. Fixed bug #72193 (dns_get_record returns array containing elements of
type 'unknown'). (Laruence)
update NEWS
2016-05-17 01:30:38 +08:00
. Fixed bug #72017 (range() with float step produces unexpected result).
(Thomas Punt)
Fixed Bug #72193 (dns_get_record returns array containing elements of type 'unknown')
2016-05-11 17:31:46 +08:00
Align NEWS files with 7.0.8 and Changelog
2016-06-26 02:25:57 +08:00
- WDDX:
. Fixed bug #72340 (Double Free Courruption in wddx_deserialize).
(CVE-2016-5772) (Stas)
fix #72206 (xml_parser_create/xml_parser_free leaks mem)
2016-05-14 15:10:16 +08:00
- XML:
Re-Fixed bug #72155 (use-after-free caused by get_zval_xmlrpc_type)
2016-05-31 11:44:20 +08:00
. Fixed bug #72206 (xml_parser_create/xml_parser_free leaks mem). (Joe)
prepare next 7.0.8
2016-05-10 19:06:55 +08:00
fix #72155 (use-after-free caused by get_zval_xmlrpc_type)
2016-05-30 15:56:50 +08:00
- XMLRPC:
Re-Fixed bug #72155 (use-after-free caused by get_zval_xmlrpc_type)
2016-05-31 11:44:20 +08:00
. Fixed bug #72155 (use-after-free caused by get_zval_xmlrpc_type).
(Joe, Laruence)
fix #72155 (use-after-free caused by get_zval_xmlrpc_type)
2016-05-30 15:56:50 +08:00
update NEWS
2016-05-30 20:10:27 +08:00
- Zip:
. Fixed ug #72258 (ZipArchive converts filenames to unrecoverable form).
(Anatol)
Align NEWS files with 7.0.8 and Changelog
2016-06-26 02:25:57 +08:00
. Fixed bug #72434 (ZipArchive class Use After Free Vulnerability in PHP's GC
algorithm and unserialize). (CVE-2016-5773) (Dmitry)
update NEWS
2016-05-30 20:10:27 +08:00
prepare next 7.0.8
2016-05-10 19:06:55 +08:00
26 May 2016 PHP 7.0.7
prepare next
2016-04-12 12:49:30 +08:00
Fixed bug #72038 (Function calls with values to a by-ref parameter don't always throw a notice)
2016-04-17 02:27:53 +08:00
- Core:
Fixed bug #72162 (use-after-free - error_reporting)
2016-05-05 11:02:21 +08:00
. Fixed bug #72162 (use-after-free - error_reporting). (Laruence)
add compiler option to disable builtins (special case function calls)
2016-05-04 17:53:59 +08:00
. Add compiler option to disable special case function calls. (Joe)
Fixed bug #72101 (crash on complex code)
2016-04-25 19:11:46 +08:00
. Fixed bug #72101 (crash on complex code). (Dmitry)
Fixed bug #72100 (implode() inserts garbage into resulting string when joins very big integer). (Mikhail Galanin)
2016-04-26 18:04:06 +08:00
. Fixed bug #72100 (implode() inserts garbage into resulting string when
joins very big integer). (Mikhail Galanin)
Update NEWS
2016-04-20 23:42:06 +08:00
. Fixed bug #72057 (PHP Hangs when using custom error handler and typehint).
(Nikita Nefedov)
Fix non-/Zend tests too
2016-04-17 02:57:28 +08:00
. Fixed bug #72038 (Function calls with values to a by-ref parameter don't
Fixed bug #72038 (Function calls with values to a by-ref parameter don't always throw a notice)
2016-04-17 02:27:53 +08:00
always throw a notice). (Bob)
Fix bug #71737 Also improve the error message for $this used in parameters.
2016-04-21 00:37:23 +08:00
. Fixed bug #71737 (Memory leak in closure with parameter named $this).
(Nikita)
Fixed bug #72059 - Reference the bug id directly in NEWS
2016-04-21 08:48:52 +08:00
. Fixed bug #72059 (?? is not allowed on constant expressions). (Bob, Marcio)
Fix bug #72159
2016-05-05 00:42:16 +08:00
. Fixed bug #72159 (Imported Class Overrides Local Class Name). (Nikita)
Fixed bug #72038 (Function calls with values to a by-ref parameter don't always throw a notice)
2016-04-17 02:27:53 +08:00
Fixed bug #68658 (Define CURLE_SSL_CACERT_BADFILE)
2016-04-24 10:55:00 +08:00
- Curl:
. Fixed bug #68658 (Define CURLE_SSL_CACERT_BADFILE). (Pierrick)
Fixed bug #72157 (use-after-free caused by dba_open)
2016-05-05 11:12:17 +08:00
- DBA:
. Fixed bug #72157 (use-after-free caused by dba_open). (Shm, Laruence)
update NEWS
2016-05-25 17:30:00 +08:00
- GD:
. Fixed bug #72227 (imagescale out-of-bounds read). (Stas)
fix NEWS
2016-06-08 00:44:40 +08:00
update NEWS
2016-05-25 17:30:00 +08:00
- Intl:
Align NEWS files with 7.0.8 and Changelog
2016-06-26 02:25:57 +08:00
. Fixed bug #64524 (Add intl.use_exceptions to php.ini-*). (Anatol)
. Fixed bug #72241 (get_icu_value_internal out-of-bounds read). (Stas)
update NEWS
2016-05-25 17:30:00 +08:00
Fixed bug #72069 (Behavior \JsonSerializable different from json_encode)
2016-04-23 12:41:44 +08:00
- JSON:
. Fixed bug #72069 (Behavior \JsonSerializable different from json_encode).
(Laruence)
Fixed bug #72164 (Null Pointer Dereference - mb_ereg_replace)
2016-05-05 17:27:34 +08:00
- Mbstring:
. Fixed bug #72164 (Null Pointer Dereference - mb_ereg_replace). (Laruence)
Align NEWS entry format
2016-04-16 03:17:37 +08:00
- OCI8:
. Fixed bug #71600 (oci_fetch_all segfaults when selecting more than eight
columns). (Tian Yang)
Fixed bug #71600 (oci_fetch_all segfaults when selecting more than 8 columns) (Tian Yang)
2016-04-14 12:09:16 +08:00
Fixed bug #72014 (Including a file with anonymous classes multiple times leads to fatal error)
2016-04-14 20:21:19 +08:00
- Opcache:
. Fixed bug #72014 (Including a file with anonymous classes multiple times
leads to fatal error). (Laruence)
update NEWS
2016-05-06 15:41:21 +08:00
- OpenSSL:
. Fixed bug #72165 (Null pointer dereference - openssl_csr_new). (Anatol)
reorder entry alphabetically
2016-05-06 15:39:02 +08:00
- PCNTL:
. Fixed bug #72154 (pcntl_wait/pcntl_waitpid array internal structure
overwrite). (Laruence)
Fixed bug #72133 (php_posix_group_to_array crashes if gr_passwd is NULL)
2016-05-01 11:00:41 +08:00
- POSIX:
. Fixed bug #72133 (php_posix_group_to_array crashes if gr_passwd is NULL).
(esminis at esminis dot lt)
update NEWS
2016-04-15 19:41:09 +08:00
- Postgres:
Fixed bug #72028 (pg_query_params(): NULL converts to empty string) I don't have a pgsql server by hand, so no test script, but the fix must be right.
2016-04-16 12:29:27 +08:00
. Fixed bug #72028 (pg_query_params(): NULL converts to empty string).
(Laruence)
update NEWS
2016-04-15 19:41:09 +08:00
. Fixed bug #71062 (pg_convert() doesn't accept ISO 8601 for datatype
timestamp). (denver at timothy dot io)
update NEWS
2016-05-10 00:51:54 +08:00
. Fixed bug #72151 (mysqli_fetch_object changed behaviour). (Anatol)
update NEWS
2016-04-15 19:41:09 +08:00
Fixed bug #72174 Also fixes a memory leak if ::getValue() is used with __get().
2016-05-10 18:13:10 +08:00
- Reflection:
. Fixed bug #72174 (ReflectionProperty#getValue() causes __isset call).
(Nikita)
Fixed bug #71972 (Cyclic references causing session_start(): Failed to decode session object)
2016-04-16 12:08:51 +08:00
- Session:
. Fixed bug #71972 (Cyclic references causing session_start(): Failed to
decode session object). (Laruence)
Added NEWS entry for socket_export_stream() Closes pull request https://github.com/php/php-src/pull/762
2016-05-02 23:11:26 +08:00
- Sockets:
. Added socket_export_stream() function for getting a stream compatible
resource from a socket resource. (Chris Wright, Bob)
Fixed bug #72051 (The reference in CallbackFilterIterator doesn't work as expected)
2016-04-19 10:59:10 +08:00
- SPL:
. Fixed bug #72051 (The reference in CallbackFilterIterator doesn't work as
expected). (Laruence)
update NEWS
2016-04-13 01:37:36 +08:00
- SQLite3:
Align NEWS entry format
2016-04-16 03:17:37 +08:00
. Fixed bug #68849 (bindValue is not using the right data type). (Anatol)
prepare next
2016-04-12 12:49:30 +08:00
Fixed bug #72031
2016-04-15 22:28:48 +08:00
- Standard:
Fixed bug #72075 (Referencing socket resources breaks stream_select)
2016-04-23 12:20:53 +08:00
. Fixed bug #72075 (Referencing socket resources breaks stream_select).
(Laruence)
Fixed bug #72031
2016-04-15 22:28:48 +08:00
. Fixed bug #72031 (array_column() against an array of objects discards all
values matching null). (Nikita)
prepare next
2016-04-12 12:49:30 +08:00
28 Apr 2016 PHP 7.0.6
prepare next
2016-03-15 15:24:41 +08:00
Disable huge pages in the Zend allocator by default As per the discussion on internals, this is an expert feature that needs special system-level configuration and care.
2016-03-22 23:04:53 +08:00
- Core:
Fixed bug #71930 (_zval_dtor_func: Assertion `(arr)->gc.refcount <= 1' failed)
2016-04-01 22:27:29 +08:00
. Fixed bug #71930 (_zval_dtor_func: Assertion `(arr)->gc.refcount <= 1'
failed). (Laruence)
Fixed order
2016-04-06 10:21:05 +08:00
. Fixed bug #71922 (Crash on assert(new class{})). (Nikita)
Fixed bug #71914 (Reference is lost in "switch")
2016-03-29 17:14:36 +08:00
. Fixed bug #71914 (Reference is lost in "switch"). (Laruence)
Fixed order
2016-04-06 10:21:05 +08:00
. Fixed bug #71871 (Interfaces allow final and abstract functions). (Nikita)
Fixed Bug #71859 (zend_objects_store_call_destructors operates on realloced memory, crashing)
2016-03-20 19:52:57 +08:00
. Fixed Bug #71859 (zend_objects_store_call_destructors operates on realloced
memory, crashing). (Laruence)
Update NEWS
2016-03-17 15:23:21 +08:00
. Fixed bug #71841 (EG(error_zval) is not handled well). (Laruence)
Fix bug #71750: use zend_string_safe_alloc for calculated allocations
2016-03-21 13:39:17 +08:00
. Fixed bug #71750 (Multiple Heap Overflows in php_raw_url_encode/
php_url_encode). (Stas)
Fixed bug #71731 The read_dimension() handler in BP_VAR_IS mode will now call offsetExists() before caling offsetGet(). This has always been a problem, however recently the issue has been exacerbated, because the null-coalesce operator ?? makes it visible for non-nested array accesses. Also fixes #69659.
2016-03-20 20:33:00 +08:00
. Fixed bug #71731 (Null coalescing operator and ArrayAccess). (Nikita)
Fixed order
2016-04-06 10:21:05 +08:00
. Fixed bug #71609 (Segmentation fault on ZTS with gethostbyname). (krakjoe)
. Fixed bug #71414 (Inheritance, traits and interfaces). (krakjoe)
. Fixed bug #71359 (Null coalescing operator and magic). (krakjoe)
. Fixed bug #71334 (Cannot access array keys while uksort()). (Nikita)
Fixed bug #71731 The read_dimension() handler in BP_VAR_IS mode will now call offsetExists() before caling offsetGet(). This has always been a problem, however recently the issue has been exacerbated, because the null-coalesce operator ?? makes it visible for non-nested array accesses. Also fixes #69659.
2016-03-20 20:33:00 +08:00
. Fixed bug #69659 (ArrayAccess, isset() and the offsetExists method).
(Nikita)
Fixed order
2016-04-06 10:21:05 +08:00
. Fixed bug #69537 (__debugInfo with empty string for key gives error).
(krakjoe)
Fixed bug #62059
2016-03-21 01:17:44 +08:00
. Fixed bug #62059 (ArrayObject and isset are not friends). (Nikita)
Fixed bug #71980
2016-04-07 18:25:42 +08:00
. Fixed bug #71980 (Decorated/Nested Generator is Uncloseable in Finally).
(Nikita)
prepare next
2016-03-15 15:24:41 +08:00
update NEWS
2016-04-27 20:56:08 +08:00
- BCmath:
. Fixed bug #72093 (bcpowmod accepts negative scale and corrupts
_one_ definition). (Stas)
Update NEWS
2016-03-21 16:44:30 +08:00
- Curl:
. Fixed bug #71831 (CURLOPT_NOPROXY applied as long instead of string).
Disable huge pages in the Zend allocator by default As per the discussion on internals, this is an expert feature that needs special system-level configuration and care.
2016-03-22 23:04:53 +08:00
(Michael Sierks)
Update NEWS
2016-03-21 16:44:30 +08:00
update NEWS
2016-04-05 17:55:36 +08:00
- Date:
Align NEWS entry format
2016-04-16 03:17:37 +08:00
. Fixed bug #71889 (DateInterval::format Segmentation fault). (Thomas Punt)
update NEWS
2016-04-05 17:55:36 +08:00
update NEWS
2016-04-27 20:56:08 +08:00
- EXIF:
. Fixed bug #72094 (Out of bounds heap read access in exif header processing). (Stas)
- GD:
Add CVE to bug #71912 (PHP 7.0.6)
2016-04-29 18:36:24 +08:00
. Fixed bug #71912 (libgd: signedness vulnerability). (CVE-2016-3074) (Stas)
update NEWS
2016-04-27 20:56:08 +08:00
update NEWS
2016-04-08 15:28:41 +08:00
- Intl:
Align NEWS entry format
2016-04-16 03:17:37 +08:00
. Fixed bug #71516 (IntlDateFormatter looses locale if pattern is set via
constructor). (Anatol)
. Fixed bug #70455 (Missing constant: IntlChar::NO_NUMERIC_VALUE). (Anatol)
. Fixed bug #70451, #70452 (Inconsistencies in return values of IntlChar
methods). (Daniel Persson)
update NEWS
2016-04-08 19:51:29 +08:00
. Fixed bug #68893 (Stackoverflow in datefmt_create). (Anatol)
update NEWS
2016-04-11 01:10:45 +08:00
. Fixed bug #66289 (Locale::lookup incorrectly returns en or en_US if locale
is empty). (Anatol)
update NEWS
2016-04-11 21:37:45 +08:00
. Fixed bug #70484 (selectordinal doesn't work with named parameters).
(Anatol)
update NEWS
2016-04-27 20:56:08 +08:00
. Fixed bug #72061 (Out-of-bounds reads in zif_grapheme_stripos with negative
offset). (Stas)
update NEWS
2016-04-08 15:28:41 +08:00
fix and update NEWS
2016-03-18 02:04:56 +08:00
- ODBC:
. Fixed bug #63171 (Script hangs after max_execution_time). (Remi)
Fixed for PHP7
2016-03-17 20:20:01 +08:00
- Opcache:
. Fixed bug #71843 (null ptr deref ZEND_RETURN_SPEC_CONST_HANDLER).
(Laruence)
Updated NEWS
2016-03-21 22:40:01 +08:00
- PDO:
. Fixed bug #52098 (Own PDOStatement implementation ignore __call()).
(Daniel kalaspuffar, Julien)
Align NEWS entry format
2016-04-16 03:17:37 +08:00
. Fixed bug #71447 (Quotes inside comments not properly handled). (Matteo)
Updated NEWS
2016-03-21 22:40:01 +08:00
update NEWS
2016-04-04 23:42:06 +08:00
- PDO_DBlib:
. Fixed bug #71943 (dblib_handle_quoter needs to allocate an extra byte).
(Adam Baratz)
Align NEWS entry format
2016-04-16 03:17:37 +08:00
. Add DBLIB-specific attributes for controlling timeouts. (Adam Baratz)
update NEWS
2016-04-04 23:42:06 +08:00
update NEWS
2016-04-05 21:12:12 +08:00
- PDO_pgsql:
. Fixed bug #62498 (pdo_pgsql inefficient when getColumnMeta() is used).
(Joseph Bylund)
fix and update NEWS
2016-03-18 02:04:56 +08:00
- Postgres:
Align NEWS entry format
2016-03-31 06:01:11 +08:00
. Fixed bug #71820 (pg_fetch_object binds parameters before call
constructor). (Anatol)
update NEWS
2016-04-11 01:10:45 +08:00
. Fixed bug #71998 (Function pg_insert does not insert when column
type = inet). (Anatol)
fix and update NEWS
2016-03-18 02:04:56 +08:00
Fixed bug #71986 (Nested foreach assign-by-reference creates broken variables)
2016-04-08 17:57:51 +08:00
- SOAP:
. Fixed bug #71986 (Nested foreach assign-by-reference creates broken
variables). (Laruence)
Fix bug #71838
2016-03-19 02:58:52 +08:00
- SPL:
. Fixed bug #71838 (Deserializing serialized SPLObjectStorage-Object can't
access properties in PHP). (Nikita)
Fixed order
2016-04-06 10:21:05 +08:00
. Fixed bug #71735 (Double-free in SplDoublyLinkedList::offsetSet). (Stas)
Fixed bug #67582
2016-03-21 00:46:12 +08:00
. Fixed bug #67582 (Cloned SplObjectStorage with overwritten getHash fails
offsetExists()). (Nikita)
Fixed order
2016-04-06 10:21:05 +08:00
. Fixed bug #52339 (SPL autoloader breaks class_exists()). (Nikita)
Fix bug #71838
2016-03-19 02:58:52 +08:00
Update NEWS
2016-03-17 15:23:21 +08:00
- Standard:
Fixed bug #71995 (Returning the same var twice from __sleep() produces broken serialized data)
2016-04-10 01:01:04 +08:00
. Fixed bug #71995 (Returning the same var twice from __sleep() produces
broken serialized data). (Laruence)
Fixed bug #71940 (Unserialize crushes on restore object reference)
2016-04-07 13:56:55 +08:00
. Fixed bug #71940 (Unserialize crushes on restore object reference).
(Laruence)
Fixed bug #71969 (str_replace returns an incorrect resulting array after a foreach by reference)
2016-04-06 10:19:24 +08:00
. Fixed bug #71969 (str_replace returns an incorrect resulting array after
a foreach by reference). (Laruence)
Fixed bug #71891 (header_register_callback() and register_shutdown_function()) Actually, this fixed the memleak not the behavior(it is expected behavior that "shutdown" is not outputed)
2016-03-25 12:34:22 +08:00
. Fixed bug #71891 (header_register_callback() and
register_shutdown_function()). (Laruence)
Fixed Bug #71884 (Null pointer deref (segfault) in stream_context_get_default)
2016-03-23 16:16:26 +08:00
. Fixed bug #71884 (Null pointer deref (segfault) in
stream_context_get_default). (Laruence)
Update NEWS
2016-03-17 15:23:21 +08:00
. Fixed bug #71840 (Unserialize accepts wrongly data). (Ryat, Laruence)
Fixed order
2016-04-06 10:21:05 +08:00
. Fixed bug #71837 (Wrong arrays behaviour). (Laruence)
. Fixed bug #71827 (substr_replace bug, string length). (krakjoe)
Fixed bug #67512
2016-03-26 03:18:46 +08:00
. Fixed bug #67512 (php_crypt() crashes if crypt_r() does not exist or
_REENTRANT is not defined). (Nikita)
update NEWS
2016-04-29 01:46:15 +08:00
. Fixed bug #72116 (array_fill optimization breaks implementation). (Bob)
prepare next
2016-03-15 15:24:41 +08:00
update NEWS
2016-04-27 20:56:08 +08:00
- XML:
. Fixed bug #72099 (xml_parse_into_struct segmentation fault). (Stas)
- Zip:
update NEWS
2016-04-28 00:58:28 +08:00
. Fixed bug #71923 (integer overflow in ZipArchive::getFrom*).
(CVE-2016-3078) (Stas)
update NEWS
2016-04-27 20:56:08 +08:00
prepare next
2016-03-15 15:24:41 +08:00
31 Mar 2016 PHP 7.0.5
prepare next
2016-02-16 16:14:05 +08:00
Fixed bug #71622 (Strings used in pass-as-reference cannot be used to invoke C::$callable())
2016-02-18 20:53:15 +08:00
- Core:
update NEWS
2016-03-23 19:32:16 +08:00
. Huge pages disabled by default. (Rasmus)
. Added ability to enable huge pages in Zend Memory Manager through
the environment variable USE_ZEND_ALLOC_HUGE_PAGES=1. (Dmitry)
Bug #71756 (Call-by-reference widens scope to uninvolved functions when used in switch)
2016-03-10 14:58:10 +08:00
. Fixed bug #71756 (Call-by-reference widens scope to uninvolved functions
when used in switch). (Laruence)
Fixed bug #71729 (Possible crash in zend_bin_strtod, zend_oct_strtod, zend_hex_strtod)
2016-03-09 12:16:24 +08:00
. Fixed bug #71729 (Possible crash in zend_bin_strtod, zend_oct_strtod,
zend_hex_strtod). (Laruence)
Fixed bug #71695 (Global variables are reserved before execution). Instead of slow down hash_merge, we may also check the array(whether it contains INDIRECT) outside of the loop, however, consisdering hash_merge is not widly used, I prefer fix this in the current way to keep the codes simple
2016-03-01 19:19:07 +08:00
. Fixed bug #71695 (Global variables are reserved before execution).
(Laruence)
Fix bug #71629: sync php_url_decode definition
2016-02-22 09:02:55 +08:00
. Fixed bug #71629 (Out-of-bounds access in php_url_decode in context
php_stream_url_wrap_rfc2397). (mt at debian dot org)
Fixed bug #71622 (Strings used in pass-as-reference cannot be used to invoke C::$callable())
2016-02-18 20:53:15 +08:00
. Fixed bug #71622 (Strings used in pass-as-reference cannot be used to
invoke C::$callable()). (Bob)
update NEWS
2016-02-19 02:17:54 +08:00
. Fixed bug #71596 (Segmentation fault on ZTS with date function
(setlocale)). (Anatol)
Fixed bug #71535 (Integer overflow in zend_mm_alloc_heap())
2016-02-24 16:04:48 +08:00
. Fixed bug #71535 (Integer overflow in zend_mm_alloc_heap()). (Dmitry)
Fixed bug #71470 Don't report hashtable iterator leaks on unclean shutdown, those are expected.
2016-02-24 21:07:06 +08:00
. Fixed bug #71470 (Leaked 1 hashtable iterators). (Nikita)
Fix bug #71575 removing extra semicolons outside macros
2016-02-17 06:47:37 +08:00
. Fixed bug #71575 (ISO C does not allow extra ‘;’ outside of a function).
(asgrim)
Fixed bug #71724
2016-03-07 04:38:21 +08:00
. Fixed bug #71724 (yield from does not count EOLs). (Nikita)
Fix bug #71767
2016-03-12 00:28:45 +08:00
. Fixed bug #71767 (ReflectionMethod::getDocComment returns the wrong
comment). (Grigorii Sokolik)
Fixed bug #71806
2016-03-12 05:45:38 +08:00
. Fixed bug #71806 (php_strip_whitespace() fails on some numerical values).
(Nikita)
update NEWS
2016-03-15 14:11:21 +08:00
. Fixed bug #71624 (`php -R` (PHP_MODE_PROCESS_STDIN) is broken).
(Sean DuBois)
Fixed bug #71622 (Strings used in pass-as-reference cannot be used to invoke C::$callable())
2016-02-18 20:53:15 +08:00
update NEWS
2016-03-29 18:05:36 +08:00
- CLI Server:
. Fixed bug #69953 (Support MKCALENDAR request method). (Christoph)
Fix bug #71694 Exports contants CURLM_ADDED_ALREADY.
2016-03-01 14:30:04 +08:00
- Curl:
. Fixed bug #71694 (Support constant CURLM_ADDED_ALREADY). (mpyw)
update NEWS
2016-03-11 21:23:34 +08:00
- Date:
. Fixed bug #71635 (DatePeriod::getEndDate segfault). (Thomas Punt)
update NEWS
2016-03-29 18:05:36 +08:00
- Fileinfo:
. Fixed bug #71527 (Buffer over-write in finfo_open with malformed magic
Add CVE IDs PHP 7.0.5
2016-04-29 18:38:25 +08:00
file). (CVE-2015-8865) (Anatol)
update NEWS
2016-03-29 18:05:36 +08:00
update NEWS
2016-02-28 18:06:55 +08:00
- libxml:
. Fixed bug #71536 (Access Violation crashes php-cgi.exe). (Anatol)
update NEWS
2016-03-29 18:05:36 +08:00
- mbstring:
. Fixed bug #71906 (AddressSanitizer: negative-size-param (-1) in
Add CVE IDs PHP 7.0.5
2016-04-29 18:38:25 +08:00
mbfl_strcut). (CVE-2016-4073) (Stas)
update NEWS
2016-03-29 18:05:36 +08:00
update NEWS
2016-02-24 19:06:35 +08:00
- ODBC:
. Fixed bug #47803, #69526 (Executing prepared statements is succesfull only
for the first two statements). (einavitamar at gmail dot com, Anatol)
Fix bug #71659
2016-03-10 05:58:57 +08:00
- PCRE:
. Fixed bug #71659 (segmentation fault in pcre running twig tests).
(nish dot aravamudan at canonical dot com)
update NEWS
2016-03-01 01:26:48 +08:00
- PDO_DBlib:
Align NEWS entry format
2016-04-16 03:17:37 +08:00
. Fixed bug #54648 (PDO::MSSQL forces format of datetime fields).
update NEWS
2016-03-01 01:26:48 +08:00
(steven dot lambeth at gmx dot de, Anatol)
update NEWS
2016-02-19 02:43:27 +08:00
- Phar:
Align NEWS entry format
2016-03-31 06:01:11 +08:00
. Fixed bug #71625 (Crash in php7.dll with bad phar filename). (Anatol)
Merge branch 'PHP-5.6' into PHP-7.0 Conflicts: ext/phar/tar.c
2016-03-01 05:44:06 +08:00
. Fixed bug #71317 (PharData fails to open specific file). (Jos Elstgeest)
update NEWS
2016-03-29 18:05:36 +08:00
. Fixed bug #71860 (Invalid memory write in phar on filename with \0 in
Add CVE IDs PHP 7.0.5
2016-04-29 18:38:25 +08:00
name). (CVE-2016-4072) (Stas)
update NEWS
2016-02-19 02:43:27 +08:00
Fix crash when advancing inside an internal function This just happened in the "double ctrl+c" mode, when we halted inside an internal function; there was some code assuming a proper op_array
2016-02-18 03:26:47 +08:00
- phpdbg:
. Fixed crash when advancing (except step) inside an internal function. (Bob)
prepare next
2016-02-16 16:14:05 +08:00
Fixed bug #71754 (Regression in PHP7.0: trivial script segfaults php-cgi)
2016-03-10 15:02:10 +08:00
- Session:
Align NEWS entry format
2016-03-31 06:01:11 +08:00
. Fixed bug #71683 (Null pointer dereference in zend_hash_str_find_bucket).
Update NEWS Fixed Bug #71754 Regression in PHP7.0: trivial script segfaults php-cgi Fixed Bug #71683 Null pointer dereference in zend_hash_str_find_bucket Fixed Bug #71599 trans sid handling rework broke interaction with cookies All of these bugs are caused by git global change in PHP-7.0.
2016-03-12 07:52:16 +08:00
(Yasuo)
Fixed bug #71754 (Regression in PHP7.0: trivial script segfaults php-cgi)
2016-03-10 15:02:10 +08:00
update NEWS
2016-03-29 18:05:36 +08:00
- SNMP:
. Fixed bug #71704 (php_snmp_error() Format String Vulnerability).
Add CVE IDs PHP 7.0.5
2016-04-29 18:38:25 +08:00
(CVE-2016-4071) (andrew at jmpesp dot org)
update NEWS
2016-03-29 18:05:36 +08:00
Fixed bug #71617
2016-02-21 19:59:57 +08:00
- SPL:
. Fixed bug #71617 (private properties lost when unserializing ArrayObject).
(Nikita)
Fixed bug #71660 (array_column behaves incorrectly after foreach by reference)
2016-02-25 16:07:22 +08:00
- Standard:
. Fixed bug #71660 (array_column behaves incorrectly after foreach by
reference). (Laruence)
Add CVE IDs PHP 7.0.5
2016-04-29 18:38:25 +08:00
. Fixed bug #71798 (Integer Overflow in php_raw_url_encode). (CVE-2016-4070)
update NEWS
2016-03-29 18:05:36 +08:00
(taoguangchen at icloud dot com, Stas)
Fixed bug #71660 (array_column behaves incorrectly after foreach by reference)
2016-02-25 16:07:22 +08:00
fix NEWS
2016-02-24 19:26:25 +08:00
- Zip:
. Update bundled libzip to 1.1.2. (Remi, Anatol)
Update NEWS
2016-03-02 15:09:47 +08:00
03 Mar 2016 PHP 7.0.4
add 7.0.4 block to NEWS
2016-01-19 15:03:44 +08:00
Fixed bug #71441 (Typehinted Generator with return in try/finally crashes)
2016-01-25 02:55:16 +08:00
- Core:
Fixed bug (Low probability segfault in zend_arena)
2016-02-09 12:20:11 +08:00
. Fixed bug (Low probability segfault in zend_arena). (Laruence)
Fixed bug #71441 (Typehinted Generator with return in try/finally crashes)
2016-01-25 02:55:16 +08:00
. Fixed bug #71441 (Typehinted Generator with return in try/finally crashes).
(Bob)
Update NEWS
2016-03-02 15:09:47 +08:00
. Fixed bug #71442 (forward_static_call crash). (Laruence)
. Fixed bug #71443 (Segfault using built-in webserver with intl using
symfony). (Laruence)
. Fixed bug #71449 (An integer overflow bug in php_implode()). (Stas)
. Fixed bug #71450 (An integer overflow bug in php_str_to_str_ex()). (Stas)
. Fixed bug #71474 (Crash because of VM stack corruption on Magento2).
(Dmitry)
. Fixed bug #71485 (Return typehint on internal func causes Fatal error
when it throws exception). (Laruence)
Fix bug #71529
2016-02-06 23:38:59 +08:00
. Fixed bug #71529 (Variable references on array elements don't work when
using count). (Nikita)
Fixed bug #71601 (finally block not executed after yield from)
2016-02-16 05:37:21 +08:00
. Fixed bug #71601 (finally block not executed after yield from). (Bob)
Update NEWS
2016-03-02 15:09:47 +08:00
. Fixed bug #71637 (Multiple Heap Overflow due to integer overflows in
Add CVE IDs PHP 7.0.4
2016-04-29 18:39:03 +08:00
xml/filter_url/addcslashes). (CVE-2016-4344, CVE-2016-4345, CVE-2016-4346)
(Stas)
add 7.0.4 block to NEWS
2016-01-19 15:03:44 +08:00
updated NEWS
2016-02-15 03:54:13 +08:00
- CLI server:
fixed news entry
2016-02-15 15:27:41 +08:00
. Fixed bug #71559 (Built-in HTTP server, we can download file in web by bug).
updated NEWS
2016-02-15 03:54:13 +08:00
(Johannes, Anatol)
Sort 7.0.4 extensions by name, merge FPM entries
2016-02-18 17:24:03 +08:00
- CURL:
. Fixed bug #71523 (Copied handle with new option CURLOPT_HTTPHEADER crashes
while curl_multi_exec). (Laruence)
. Fixed memory leak in curl_getinfo(). (Leigh)
update NEWS
2016-02-15 15:21:46 +08:00
- Date:
. Fixed bug #71525 (Calls to date_modify will mutate timelib_rel_time,
causing date_date_set issues). (Sean DuBois)
Sort 7.0.4 extensions by name, merge FPM entries
2016-02-18 17:24:03 +08:00
- Fileinfo:
. Fixed bug #71434 (finfo throws notice for specific python file). (Laruence)
Update NEWS
2016-02-15 13:24:39 +08:00
- FPM:
Sort 7.0.4 extensions by name, merge FPM entries
2016-02-18 17:24:03 +08:00
. Fixed bug #62172 (FPM not working with Apache httpd 2.4 balancer/fcgi
setup). (Matt Haught, Remi)
Fixed bug #71601 (finally block not executed after yield from)
2016-02-16 05:37:21 +08:00
. Fixed bug #71269 (php-fpm dumped core). (Mickaël)
Update NEWS
2016-02-15 13:24:39 +08:00
Update NEWS
2016-02-15 10:37:37 +08:00
- Opcache:
Fixed bug #71601 (finally block not executed after yield from)
2016-02-16 05:37:21 +08:00
. Fixed bug #71584 (Possible use-after-free of ZCG(cwd) in Zend Opcache).
Update NEWS
2016-02-15 10:37:37 +08:00
(Yussuf Khalil)
Fixed bug #71537 (PCRE segfault from Opcache)
2016-02-07 23:19:24 +08:00
- PCRE:
. Fixed bug #71537 (PCRE segfault from Opcache). (Laruence)
Fixed inherited functions from unspecified files being included in phpdbg_get_executable() See also https://github.com/krakjoe/phpdbg/issues/152
2016-02-11 13:42:51 +08:00
- phpdbg:
. Fixed inherited functions from unspecified files being included in
phpdbg_get_executable(). (Bob)
Update NEWS
2016-03-02 15:09:47 +08:00
- SOAP:
. Fixed bug #71610 (Type Confusion Vulnerability - SOAP /
Add CVE IDs PHP 7.0.4
2016-04-29 18:39:03 +08:00
make_http_soap_request()). (CVE-2016-3185) (Stas)
Update NEWS
2016-03-02 15:09:47 +08:00
update NEWS Fix for #70720 is postphoned to 7.0.4
2016-01-29 19:44:42 +08:00
- Standard:
Fixed bug #71603 (compact() maintains references in php7)
2016-02-16 11:02:57 +08:00
. Fixed bug #71603 (compact() maintains references in php7). (Laruence)
update NEWS Fix for #70720 is postphoned to 7.0.4
2016-01-29 19:44:42 +08:00
. Fixed bug #70720 (strip_tags improper php code parsing). (Julien)
Fix bug #71501
2016-02-03 14:20:30 +08:00
- XMLRPC:
. Fixed bug #71501 (xmlrpc_encode_request ignores encoding option). (Hieu Le)
fix NEWS
2016-02-24 19:29:23 +08:00
- Zip:
. Fixed bug #71561 (NULL pointer dereference in Zip::ExtractTo). (Laruence)
add 7.0.4 block to NEWS
2016-01-19 15:03:44 +08:00
04 Feb 2016 PHP 7.0.3
7.0.3 next
2015-12-22 17:48:32 +08:00
Updated NEWS
2015-12-23 18:37:59 +08:00
- Core:
update NEWS
2016-02-02 15:32:28 +08:00
. Added support for new HTTP 451 code. (Julien)
Align NEWS entry format
2016-02-05 07:08:01 +08:00
. Fixed bug #71039 (exec functions ignore length but look for NULL
termination). (Anatol)
update NEWS
2016-02-02 15:32:28 +08:00
. Fixed bug #71089 (No check to duplicate zend_extension). (Remi)
. Fixed bug #71201 (round() segfault on 64-bit builds). (Anatol)
Fixed bug #71221 (Null pointer deref (segfault) in get_defined_vars via ob_start)
2015-12-26 12:31:37 +08:00
. Fixed bug #71221 (Null pointer deref (segfault) in get_defined_vars via
ob_start). (hugh at allthethings dot co dot nz)
update NEWS
2016-02-02 15:32:28 +08:00
. Fixed bug #71248 (Wrong interface is enforced). (Dmitry)
fix NEWS and add some 7.0.2 entries
2016-01-06 14:44:26 +08:00
. Fixed bug #71273 (A wrong ext directory setup in php.ini leads to crash).
(Anatol)
update NEWS
2016-02-02 15:32:28 +08:00
. Fixed Bug #71275 (Bad method called on cloning an object having a trait).
(Bob)
Fixed bug #71297 (Memory leak with yield from)
2016-01-07 18:56:10 +08:00
. Fixed bug #71297 (Memory leak with consecutive yield from). (Bob)
update NEWS
2016-02-02 15:32:28 +08:00
. Fixed bug #71300 (Segfault in zend_fetch_string_offset). (Laruence)
Fix bug #71314
2016-01-09 01:20:52 +08:00
. Fixed bug #71314 (var_export(INF) prints INF.0). (Andrea)
update NEWS
2016-02-02 15:32:28 +08:00
. Fixed bug #71323 (Output of stream_get_meta_data can be falsified by its
input). (Leo Gaspard)
. Fixed bug #71336 (Wrong is_ref on properties as exposed via
get_object_vars()). (Laruence)
. Fixed bug #71459 (Integer overflow in iptcembed()). (Stas)
Updated NEWS
2015-12-23 18:37:59 +08:00
Fixed bug #71336 (Wrong is_ref on properties as exposed via get_object_vars())
2016-01-13 17:38:18 +08:00
- Apache2handler:
. Fix >2G Content-Length headers in apache2handler. (Adam Harvey)
Fixed bug #71225 (curl_setopt() fails to set CURLOPT_POSTFIELDS with reference to CURLFile)
2015-12-27 14:54:39 +08:00
- CURL:
update NEWS
2016-01-08 01:56:53 +08:00
. Fixed bug #71227 (Can't compile php_curl statically). (Anatol)
Fixed bug #71225 (curl_setopt() fails to set CURLOPT_POSTFIELDS with reference to CURLFile)
2015-12-27 14:54:39 +08:00
. Fixed bug #71225 (curl_setopt() fails to set CURLOPT_POSTFIELDS with
reference to CURLFile). (Laruence)
Fixed bug #71249 (ldap_mod_replace/ldap_mod_add store value as string "Array")
2016-01-01 23:06:58 +08:00
Add entry for re-fix of #70976 in commit 14e4d393
2016-02-09 02:31:08 +08:00
- GD:
. Improved fix for bug #70976. (Remi)
update NEWS
2016-01-14 16:02:54 +08:00
- Interbase:
. Fixed Bug #71305 (Crash when optional resource is omitted).
(Laruence, Anatol)
Fixed bug #71249 (ldap_mod_replace/ldap_mod_add store value as string "Array")
2016-01-01 23:06:58 +08:00
- LDAP:
. Fixed bug #71249 (ldap_mod_replace/ldap_mod_add store value as string
"Array"). (Laruence)
update NEWS
2016-01-15 01:42:13 +08:00
update NEWS
2016-02-02 15:32:28 +08:00
- mbstring:
Update NEWS
2016-01-18 08:47:34 +08:00
. Fixed bug #71397 (mb_send_mail segmentation fault). (Andrea, Yasuo)
Fixed bug #71397 (mb_send_mail segmentation fault)
2016-01-18 08:22:04 +08:00
update NEWS
2016-02-02 15:32:28 +08:00
- OpenSSL:
. Fixed bug #71475 (openssl_seal() uninitialized memory usage). (Stas)
add missin NEWS entry
2016-02-05 01:09:35 +08:00
- PCRE:
Add CVE IDs PHP 7.0.3
2016-04-29 18:40:07 +08:00
. Upgraded pcrelib to 8.38. (CVE-2015-8383, CVE-2015-8386, CVE-2015-8387,
CVE-2015-8389, CVE-2015-8390, CVE-2015-8391, CVE-2015-8393, CVE-2015-8394)
add missin NEWS entry
2016-02-05 01:09:35 +08:00
update NEWS
2016-02-02 15:32:28 +08:00
- Phar:
Add CVE IDs PHP 7.0.3
2016-04-29 18:40:07 +08:00
. Fixed bug #71354 (Heap corruption in tar/zip/phar parser). (CVE-2016-4342)
(Stas)
Add NEWS entry for bug #71331 (fixed in 7.0.3)
2016-04-29 02:12:27 +08:00
. Fixed bug #71331 (Uninitialized pointer in phar_make_dirstream()).
(CVE-2016-4343) (Stas)
update NEWS
2016-02-02 15:32:28 +08:00
. Fixed bug #71391 (NULL Pointer Dereference in phar_tar_setupmetadata()).
(Stas)
Add CVE IDs PHP 7.0.3
2016-04-29 18:40:07 +08:00
. Fixed bug #71488 (Stack overflow when decompressing tar archives).
(CVE-2016-2554) (Stas)
update NEWS
2016-02-02 15:32:28 +08:00
update NEWS
2016-01-15 01:42:13 +08:00
- SOAP:
. Fixed bug #70979 (crash with bad soap request). (Anatol)
Fixed bug #71225 (curl_setopt() fails to set CURLOPT_POSTFIELDS with reference to CURLFile)
2015-12-27 14:54:39 +08:00
Fixed bug #71202 (Autoload function registered by another not activated immediately)
2015-12-23 23:48:00 +08:00
- SPL:
Update NEWS & Fixed test
2015-12-24 00:13:13 +08:00
. Fixed bug #71204 (segfault if clean spl_autoload_funcs while autoloading).
(Laruence)
Fixed bug #71202 (Autoload function registered by another not activated immediately)
2015-12-23 23:48:00 +08:00
. Fixed bug #71202 (Autoload function registered by another not activated
immediately). (Laruence)
update NEWS
2016-02-02 15:32:28 +08:00
. Fixed bug #71311 (Use-after-free vulnerability in SPL(ArrayObject,
unserialize)). (Sean Heelan)
. Fixed bug #71313 (Use-after-free vulnerability in SPL(SplObjectStorage,
unserialize)). (Sean Heelan)
Fixed bug #71202 (Autoload function registered by another not activated immediately)
2015-12-23 23:48:00 +08:00
update NEWS
2015-12-22 20:18:21 +08:00
- Standard:
Fixed bug #71287 (Error message contains hexadecimal instead of decimal number)
2016-01-06 00:01:44 +08:00
. Fixed bug #71287 (Error message contains hexadecimal instead of decimal
number). (Laruence)
Fixed bug #71264 (file_put_contents() returns unexpected value when filesystem runs full)
2016-01-03 14:21:23 +08:00
. Fixed bug #71264 (file_put_contents() returns unexpected value when
filesystem runs full). (Laruence)
Fixed bug #71245 (file_get_contents() ignores "header" context option if it's a reference)
2015-12-30 21:04:21 +08:00
. Fixed bug #71245 (file_get_contents() ignores "header" context option if
it's a reference). (Laruence)
Fixed bug #71220 (Null pointer deref (segfault) in compact via ob_start)
2015-12-26 13:25:53 +08:00
. Fixed bug #71220 (Null pointer deref (segfault) in compact via ob_start).
(hugh at allthethings dot co dot nz)
update NEWS
2015-12-22 20:18:21 +08:00
. Fixed bug #71190 (substr_replace converts integers in original $search
array to strings). (Laruence)
. Fixed bug #71188 (str_replace converts integers in original $search array
to strings). (Laruence)
update NEWS for fixed bug #71132, fixed bug #71197
2016-01-12 15:34:35 +08:00
. Fixed bug #71132, #71197 (range() segfaults). (Thomas Punt)
7.0.3 next
2015-12-22 17:48:32 +08:00
update NEWS
2016-02-02 15:32:28 +08:00
- WDDX:
. Fixed bug #71335 (Type Confusion in WDDX Packet Deserialization). (Stas)
set release date
2016-01-06 14:45:03 +08:00
07 Jan 2016 PHP 7.0.2
prepare 7.0.1RC1
2015-12-08 22:54:44 +08:00
Fixed bug #71067 (Local object in class method stays in memory for each call)
2015-12-09 21:07:59 +08:00
- Core:
Fixed bug #71165 (-DGC_BENCH=1 doesn't work on PHP7)
2015-12-19 13:52:05 +08:00
. Fixed bug #71165 (-DGC_BENCH=1 doesn't work on PHP7).
Align #71165 entry format
2015-12-21 05:48:25 +08:00
(y dot uchiyama dot 1015 at gmail dot com)
Fixed bug #71163 (Segmentation Fault: cleanup_unfinished_calls)
2015-12-19 13:40:20 +08:00
. Fixed bug #71163 (Segmentation Fault: cleanup_unfinished_calls). (Laruence)
Fixed bug #71109 (ZEND_MOD_CONFLICTS("xdebug") doesn't work)
2015-12-13 21:06:08 +08:00
. Fixed bug #71109 (ZEND_MOD_CONFLICTS("xdebug") doesn't work). (Laruence)
Fixed bug #71092 (Segmentation fault with return type hinting)
2015-12-12 01:11:28 +08:00
. Fixed bug #71092 (Segmentation fault with return type hinting). (Laruence)
Fixed bug memleak in header_register_callback
2015-12-11 17:26:31 +08:00
. Fixed bug memleak in header_register_callback. (Laruence)
Fixed bug #71067 (Local object in class method stays in memory for each call)
2015-12-09 21:07:59 +08:00
. Fixed bug #71067 (Local object in class method stays in memory for each
call). (Laruence)
fixed NEWS
2015-12-09 21:48:44 +08:00
. Fixed bug #66909 (configure fails utf8_to_mutf7 test). (Michael Orlitzky)
. Fixed bug #70781 (Extension tests fail on dynamic ext dependency).
(Francois Laupretre)
NEWS
2015-12-11 20:23:21 +08:00
. Fixed bug #71089 (No check to duplicate zend_extension). (Remi)
Fix bug #71086
2015-12-11 23:04:32 +08:00
. Fixed bug #71086 (Invalid numeric literal parse error within
highlight_string() function). (Nikita)
Fixed NEWS
2015-12-19 13:54:57 +08:00
. Fixed bug #71154 (Incorrect HT iterator invalidation causes iterator reuse).
(Nikita)
. Fixed bug #52355 (Negating zero does not produce negative zero). (Andrea)
. Fixed bug #66179 (var_export() exports float as integer). (Andrea)
. Fixed bug #70804 (Unary add on negative zero produces positive zero).
(Andrea)
Typo
2015-12-19 21:44:29 +08:00
- CURL:
Fixed NEWS
2015-12-19 13:54:57 +08:00
. Fixed bug #71144 (Sementation fault when using cURL with ZTS).
(Michael Maroszek, Laruence)
Fixed bug #71067 (Local object in class method stays in memory for each call)
2015-12-09 21:07:59 +08:00
iFixed key leak with invalid resource
2015-12-10 15:02:01 +08:00
- DBA:
. Fixed key leak with invalid resource. (Laruence)
Fixed bug #71077 (ReflectionMethod for ArrayObject constructor returns wrong number of parameters)
2015-12-10 08:56:18 +08:00
- Filter:
. Fixed bug #71063 (filter_input(INPUT_ENV, ..) does not work). (Reeze Xia)
fix NEWS and add some 7.0.2 entries
2016-01-06 14:44:26 +08:00
- FPM:
. Fixed bug #70755 (fpm_log.c memory leak and buffer overflow). (Stas)
NEWS entry for #55651
2015-12-15 17:52:33 +08:00
- FTP:
Fixed NEWS
2015-12-19 13:54:57 +08:00
. Implemented FR #55651 (Option to ignore the returned FTP PASV address).
NEWS entry for #55651
2015-12-15 17:52:33 +08:00
(abrender at elitehosts dot com)
Align NEWS entry format
2016-02-05 07:08:01 +08:00
- GD:
. Fixed bug #70976 (Memory Read via gdImageRotateInterpolated Array Index
Add CVE IDs PHP 7.0.2
2016-04-29 18:40:44 +08:00
Out of Bounds). (CVE-2016-1903) (emmanuel dot law at gmail dot com)
Align NEWS entry format
2016-02-05 07:08:01 +08:00
Fixed bug #71066 (mb_send_mail: Program terminated with signal SIGSEGV, Segmentation fault)
2015-12-09 09:47:16 +08:00
- Mbstring:
. Fixed bug #71066 (mb_send_mail: Program terminated with signal SIGSEGV,
Segmentation fault). (Laruence)
Fixed NEWS
2015-12-19 13:54:57 +08:00
- Opcache:
. Fixed bug #71127 (Define in auto_prepend_file is overwrite). (Laruence)
Fixed bug #71178 (preg_replace with arrays creates [0] in replace array if not already set)
2015-12-21 18:09:59 +08:00
- PCRE:
. Fixed bug #71178 (preg_replace with arrays creates [0] in replace array
if not already set). (Laruence)
Fixed bug #71094 I didn't see any non-dummy readline tests to work off, so this change is tested manually only. While at it also fix other zval_dtors and use ZVAL_COPY.
2015-12-11 23:32:10 +08:00
- Readline:
. Fixed bug #71094 (readline_completion_function corrupts static array on
second TAB). (Nikita)
Update NEWS
2015-12-15 09:41:39 +08:00
- Session:
. Fixed bug #71122 (Session GC may not remove obsolete session data). (Yasuo)
Fixed bug #71077 (ReflectionMethod for ArrayObject constructor returns wrong number of parameters)
2015-12-10 08:56:18 +08:00
- SPL:
. Fixed bug #71077 (ReflectionMethod for ArrayObject constructor returns
wrong number of parameters). (Laruence)
Fixed NEWS
2015-12-19 13:54:57 +08:00
. Fixed bug #71153 (Performance Degradation in ArrayIterator with large
arrays). (Nikita)
prepare 7.0.1RC1
2015-12-08 22:54:44 +08:00
updated NEWS
2016-01-06 14:53:31 +08:00
- Standard:
. Fixed bug #71270 (Heap BufferOver Flow in escapeshell functions).
Add CVE IDs PHP 7.0.2
2016-04-29 18:40:44 +08:00
(CVE-2016-1904) (emmanuel dot law at gmail dot com)
updated NEWS
2016-01-06 14:53:31 +08:00
fix NEWS and add some 7.0.2 entries
2016-01-06 14:44:26 +08:00
- WDDX:
Align NEWS entry format
2016-02-05 07:08:01 +08:00
. Fixed bug #70661 (Use After Free Vulnerability in WDDX Packet
Deserialization). (taoguangchen at icloud dot com)
fix NEWS and add some 7.0.2 entries
2016-01-06 14:44:26 +08:00
. Fixed bug #70741 (Session WDDX Packet Deserialization Type Confusion
Vulnerability). (taoguangchen at icloud dot com)
Align NEWS entry format
2016-02-05 07:08:01 +08:00
- XMLRPC:
fix NEWS and add some 7.0.2 entries
2016-01-06 14:44:26 +08:00
. Fixed bug #70728 (Type Confusion Vulnerability in PHP_to_XMLRPC_worker).
(Julien)
set release date
2015-12-10 15:09:39 +08:00
17 Dec 2015, PHP 7.0.1
sync NEWS
2015-10-28 03:10:06 +08:00
update NEWS
2015-11-12 08:41:59 +08:00
- Core:
Bug #71105 was fixed in 7.0.1 (commit 9374ba35)
2015-12-19 19:19:43 +08:00
. Fixed bug #71105 (Format String Vulnerability in Class Name Error Message).
Add CVE for #71105 (PHP 7.0.1)
2015-12-27 02:17:19 +08:00
(CVE-2015-8617) (andrew at jmpesp dot org)
Fixed NEWS
2015-12-19 13:54:57 +08:00
. Fixed bug #70831 (Compile fails on system with 160 CPUs). (Daniel Axtens)
Fixed bug #71006 (symbol referencing errors on Sparc/Solaris)
2015-12-03 18:28:41 +08:00
. Fixed bug #71006 (symbol referencing errors on Sparc/Solaris). (Dmitry)
Fixed bug #70997 (When using parentClass:: instead of parent::, static context changed)
2015-11-30 21:52:57 +08:00
. Fixed bug #70997 (When using parentClass:: instead of parent::, static
context changed). (Dmitry)
Fixed bug #70970 (Segfault when combining error handler with output buffering) of course we can try to refactor the current flow to make this error can be catched safly. but as 7.0.0 is releasing, I don't think a refactor is safe now. and actually I don't see any gain to make this catchable. so let's keep this be consistent with 5.6 and safe for now
2015-11-25 23:57:01 +08:00
. Fixed bug #70970 (Segfault when combining error handler with output
Align NEWS entries format
2015-12-03 23:53:48 +08:00
buffering). (Laruence)
Order the NEWS
2015-11-29 15:48:12 +08:00
. Fixed bug #70967 (Weird error handling for __toString when Error is
thrown). (Laruence)
Port fix to 7.0
2015-11-23 18:31:56 +08:00
. Fixed bug #70958 (Invalid opcode while using ::class as trait method
paramater default value). (Laruence)
Update NEWS
2015-11-20 16:38:24 +08:00
. Fixed bug #70944 (try{ } finally{} can create infinite chains of
exceptions). (Laruence)
Fixed bug #70931 (Two errors messages are in conflict)
2015-11-29 15:43:41 +08:00
. Fixed bug #70931 (Two errors messages are in conflict). (dams, Laruence)
Fixed NEWS
2015-12-19 13:54:57 +08:00
. Fixed bug #70904 (yield from incorrectly marks valid generator as
finished). (Bob)
Fixed bug #70899 (buildconf failure in extensions)
2015-11-18 04:06:39 +08:00
. Fixed bug #70899 (buildconf failure in extensions). (Bob, Reeze)
Fixed NEWs again (not sure why this is messd up twice today)
2015-11-26 00:04:36 +08:00
. Fixed bug #61751 (SAPI build problem on AIX: Undefined symbol:
php_register_internal_extensions). (Lior Kaplan)
. Fixed \int (or generally every scalar type name with leading backslash)
to not be accepted as type name. (Bob)
Fixed bug causing exception not being thrown immediately into a generator yielding from an array
2015-11-26 06:09:44 +08:00
. Fixed exception not being thrown immediately into a generator yielding
from an array. (Bob)
NEWS for 8907da99b83204958cb2308ec12aa9e490372150
2015-12-03 20:16:15 +08:00
. Fixed bug #70987 (static::class within Closure::call() causes segfault).
(Andrea)
Fixed bug #71013 (Incorrect exception handler with yield from)
2015-12-06 09:45:19 +08:00
. Fixed bug #71013 (Incorrect exception handler with yield from). (Bob)
Fix double free in formatted_print.c
2015-12-06 09:54:28 +08:00
. Fixed double free in error condition of format printer. (Bob)
update NEWS
2015-11-12 08:41:59 +08:00
Fix bug #71005 (Segfault in php_cli_server_dispatch_router()). We didn't initialise the retval variable in php_cli_server_dispatch_router(); let's now initialise it to be IS_UNDEF, as the following if condition expects.
2015-12-01 11:09:36 +08:00
- CLI server:
. Fixed bug #71005 (Segfault in php_cli_server_dispatch_router()). (Adam)
Fixed bug #71020 (Use after free in Collator::sortWithSortKeys)
2015-12-07 10:58:26 +08:00
- Intl:
. Fixed bug #71020 (Use after free in Collator::sortWithSortKeys).
Add CVE for #71020 (PHP 7.0.1)
2015-12-23 01:17:15 +08:00
(CVE-2015-8616) (emmanuel dot law at gmail dot com, Laruence)
Fixed bug #71020 (Use after free in Collator::sortWithSortKeys)
2015-12-07 10:58:26 +08:00
Fixed bug #68077 (LOAD DATA LOCAL INFILE / open_basedir restriction) Actually, this only be fixed if php uses mysqlnd
2015-11-16 16:58:19 +08:00
- Mysqlnd:
. Fixed bug #68077 (LOAD DATA LOCAL INFILE / open_basedir restriction).
(Laruence)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #68344 (MySQLi does not provide way to disable peer certificate
validation) by introducing MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT
connection flag. (Andrey)
Fixed bug #68077 (LOAD DATA LOCAL INFILE / open_basedir restriction) Actually, this only be fixed if php uses mysqlnd
2015-11-16 16:58:19 +08:00
Fixed LOB mem leak reported on gcov. Also fixed unsigend comparison compile warning; and remove direct field access
2015-11-16 05:15:22 +08:00
- OCI8:
Fixed NEWS
2015-12-19 13:54:57 +08:00
. Fixed LOB implementation size_t/zend_long mismatch reported by gcov.
(Senthil)
Fixed NEWs again (not sure why this is messd up twice today)
2015-11-26 00:04:36 +08:00
Fixed bug #70977, #70973 (Segmentation fault with opcache.huge_code_pages=1)
2015-11-27 23:30:37 +08:00
- Opcache:
Align NEWS entry format for bug #71024
2015-12-10 21:31:06 +08:00
. Fixed bug #71024 (Unable to use PHP 7.0 x64 side-by-side with PHP 5.6 x32
on the same server). (Anatol)
Fixed bug #70991 (zend_file_cache.c:710: error: array type has incomplete element type)
2015-12-01 10:35:32 +08:00
. Fixed bug #70991 (zend_file_cache.c:710: error: array type has incomplete
element type). (Laruence)
Fixed bug #70977, #70973 (Segmentation fault with opcache.huge_code_pages=1)
2015-11-27 23:30:37 +08:00
. Fixed bug #70977 (Segmentation fault with opcache.huge_code_pages=1).
(Laruence)
Sort 7.0.1 extensions' entries
2015-12-24 01:25:02 +08:00
- PDO_Firebird:
. Fixed bug #60052 (Integer returned as a 64bit integer on X64_86). (Mariuz)
Fixed NEWs again (not sure why this is messd up twice today)
2015-11-26 00:04:36 +08:00
- Phpdbg:
. Fixed stderr being written to stdout. (Bob)
Fixed bug #70982 (setStaticPropertyValue behaviors inconsistently with 5.6)
2015-11-27 11:32:38 +08:00
- Reflection:
Fixed bug #71018 (ReflectionProperty::setValue() behavior changed)
2015-12-04 11:10:07 +08:00
. Fixed bug #71018 (ReflectionProperty::setValue() behavior changed).
(Laruence)
Fixed bug #70982 (setStaticPropertyValue behaviors inconsistently with 5.6)
2015-11-27 11:32:38 +08:00
. Fixed bug #70982 (setStaticPropertyValue behaviors inconsistently with
5.6). (Laruence)
Sort 7.0.1 extensions' entries
2015-12-24 01:25:02 +08:00
- Soap:
. Fixed bug #70993 (Array key references break argument processing).
(Laruence)
Fixed bug #71028 (Undefined index with ArrayIterator)
2015-12-04 22:45:26 +08:00
- SPL:
. Fixed bug #71028 (Undefined index with ArrayIterator). (Laruence)
Fixed Bug #71049 (SQLite3Stmt::execute() releases bound parameter instead of internal buffer)
2015-12-07 23:43:09 +08:00
- SQLite3:
. Fixed bug #71049 (SQLite3Stmt::execute() releases bound parameter instead
of internal buffer). (Laruence)
Fixed NEWs again (not sure why this is messd up twice today)
2015-11-26 00:04:36 +08:00
- Standard:
Fixed bug #70991 (zend_file_cache.c:710: error: array type has incomplete element type)
2015-12-01 10:35:32 +08:00
. Fixed bug #70999 (php_random_bytes: called object is not a function).
(Scott)
Fixed NEWs again (not sure why this is messd up twice today)
2015-11-26 00:04:36 +08:00
. Fixed bug #70960 (ReflectionFunction for array_unique returns wrong number
of parameters). (Laruence)
Align NEWS entries format
2015-12-03 23:53:48 +08:00
- Streams/Socket:
Fixed NEWs again (not sure why this is messd up twice today)
2015-11-26 00:04:36 +08:00
. Add IPV6_V6ONLY constant / make it usable in stream contexts. (Bob)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
03 Dec 2015, PHP 7.0.0
Fixed NEWs again (not sure why this is messd up twice today)
2015-11-26 00:04:36 +08:00
- Core:
. Fixed bug #70947 (INI parser segfault with INI_SCANNER_TYPED). (Laruence)
. Fixed bug #70914 (zend_throw_or_error() format string vulnerability).
(Taoguang Chen)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70912 (Null ptr dereference instantiating class with invalid
Fixed NEWs again (not sure why this is messd up twice today)
2015-11-26 00:04:36 +08:00
array property). (Laruence)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70895, #70898 (null ptr deref and segfault with crafted calable).
Fixed NEWs again (not sure why this is messd up twice today)
2015-11-26 00:04:36 +08:00
(Anatol, Laruence)
update NEWS, patch for #70249 pulled into RC7
2015-11-11 19:20:18 +08:00
. Fixed bug #70249 (Segmentation fault while running PHPUnit tests on
phpBB 3.2-dev). (Laruence)
Fixed bug #70805 (Segmentation faults whilst running Drupal 8 test suite)
2015-11-04 09:53:56 +08:00
. Fixed bug #70805 (Segmentation faults whilst running Drupal 8 test suite).
(Dmitry, Laruence)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70842 (Persistent Stream Segmentation Fault). (Caleb Champlin)
update NEWS
2015-11-06 05:51:25 +08:00
. Fixed bug #70862 (Several functions do not check return code of
php_stream_copy_to_mem()). (Anatol)
update NEWS
2015-11-07 06:08:18 +08:00
. Fixed bug #70863 (Incorect logic to increment_function for proxy objects).
(Anatol)
Fixed bug #70323 (Regression in zend_fetch_debug_backtrace() can cause segfaults)
2015-11-09 17:14:15 +08:00
. Fixed bug #70323 (Regression in zend_fetch_debug_backtrace() can cause
segfaults). (Aharvey, Laruence)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70873 (Regression on private static properties access).
Fixed bug #70656 (require() statement broken after opcache_reset() or a few hours of use)
2015-10-27 08:28:19 +08:00
(Laruence)
Update NEWS
2015-10-20 13:26:40 +08:00
. Fixed bug #70748 (Segfault in ini_lex () at Zend/zend_ini_scanner.l).
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
(Laruence)
Fixed bug #70689 (Exception handler does not work as expected)
2015-10-13 17:40:58 +08:00
. Fixed bug #70689 (Exception handler does not work as expected). (Laruence)
Fixed bug #70430
2015-10-13 04:05:19 +08:00
. Fixed bug #70430 (Stack buffer overflow in zend_language_parser()). (Nikita)
Fix bug #70782
2015-10-25 05:18:28 +08:00
. Fixed bug #70782 (null ptr deref and segfault (zend_get_class_fetch_type)).
(Nikita)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70785 (Infinite loop due to exception during identical
comparison). (Laruence)
Fixed bug #70630 (Closure::call/bind() crash with ReflectionFunction->getClosure())
2015-10-09 16:48:13 +08:00
. Fixed bug #70630 (Closure::call/bind() crash with ReflectionFunction->
getClosure()). (Dmitry, Bob)
Fix bug #70662 This replaces add_new with update for the RW case. This should not be problematic for performance, as this branch throws a notice. Alternatively add_new could also be replaced with add. I went with update, because it makes $a[0] += 1 behavior the same as $a[0] = $a[0] + 1.
2015-10-08 04:47:09 +08:00
. Fixed bug #70662 (Duplicate array key via undefined index error handler).
(Nikita)
Fixed bug #70681
2015-10-10 05:01:23 +08:00
. Fixed bug #70681 (Segfault when binding $this of internal instance method
to null). (Nikita)
Fixed bug #70685 Doing a less intrusive variant of the PHP 7.0 fix for 5.6.
2015-10-10 20:54:14 +08:00
. Fixed bug #70685 (Segfault for getClosure() internal method rebind with
invalid $this). (Nikita)
Added information about Zend Extension API chabges
2015-09-29 19:08:03 +08:00
. Added zend_internal_function.reserved[] fields. (Dmitry)
Fixed NEWS
2015-09-23 22:05:47 +08:00
. Fixed bug #70557 (Memleak on return type verifying failed). (Laruence)
. Fixed bug #70555 (fun_get_arg() on unsetted vars return UNKNOW). (Laruence)
. Fixed bug #70548 (Redundant information printed in case of uncaught engine
exception). (Laruence)
. Fixed bug #70547 (unsetting function variables corrupts backtrace).
(Laruence)
Fixed bug #70528 (assert() with instanceof adds apostrophes around class name)
2015-09-20 10:49:36 +08:00
. Fixed bug #70528 (assert() with instanceof adds apostrophes around class
name). (Laruence)
Fixed bug #70481 (Memory leak in auto_global_copy_ctor() in ZTS build)
2015-09-18 17:27:39 +08:00
. Fixed bug #70481 (Memory leak in auto_global_copy_ctor() in ZTS build).
(Laruence)
Change this as sixd suggested
2015-09-11 15:05:56 +08:00
. Fixed bug #70431 (Memory leak in php_ini.c). (Senthil, Laruence)
Fixed bug #70478 (**= does no longer work) Reordered ZEND_(ASSIGN_)POW opcodes in zend_vm_def.h so that it won't be missed in future
2015-09-12 06:54:48 +08:00
. Fixed bug #70478 (**= does no longer work). (Bob)
Align NEWS entries format
2015-09-03 22:53:53 +08:00
. Fixed bug #70398 (SIGSEGV, Segmentation fault zend_ast_destroy_ex).
Fixed bug #70398 (SIGSEGV, Segmentation fault zend_ast_destroy_ex)
2015-09-03 13:07:29 +08:00
(Dmitry, Bob, Laruence)
Fixed Bug #70332 (Wrong behavior while returning reference on object) This fix is actually made for array acessing bug fix (#70262) which is discarded since we have another better fix, anyway now seems this is still useful
2015-08-23 20:17:26 +08:00
. Fixed bug #70332 (Wrong behavior while returning reference on object).
(Laruence, Dmitry)
Update NEWs
2015-08-19 16:34:26 +08:00
. Fixed bug #70300 (Syntactical inconsistency with new group use syntax).
(marcio dot web2 at gmail dot com)
Re-Fixed bug #70321 (Magic getter breaks reference to array property)
2015-08-23 11:40:49 +08:00
. Fixed bug #70321 (Magic getter breaks reference to array property).
(Laruence)
Align NEWS entries format
2015-09-04 00:49:07 +08:00
. Fixed bug #70187 (Notice: unserialize(): Unexpected end of serialized
data). (Dmitry)
Re-Fixed bug #70321 (Magic getter breaks reference to array property)
2015-08-23 11:40:49 +08:00
. Fixed bug #70145 (From field incorrectly parsed from headers). (Anatol)
Don't detect FreeBSD 10 as FreeBSD 1 in libtool.m4. Fixes bug #70370 (Bundled libtool.m4 doesn't handle FreeBSD 10 when building extensions).
2015-08-28 06:59:59 +08:00
. Fixed bug #70370 (Bundled libtool.m4 doesn't handle FreeBSD 10 when
building extensions). (Adam)
NEWS for next
2015-08-19 02:31:37 +08:00
. Fixed bug causing exception traces with anon classes to be truncated. (Bob)
Fixed bug #70397 (Segmentation fault when using Closure::call and yield)
2015-09-02 00:04:00 +08:00
. Fixed bug #70397 (Segmentation fault when using Closure::call and yield).
(Bob)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70299 (Memleak while assigning object offsetGet result).
This bug is already fixed, but it's better to have a bug entry for the record
2015-08-19 10:47:08 +08:00
(Laruence)
Fixed bug #70288 (Apache crash related to ZEND_SEND_REF)
2015-08-18 21:45:19 +08:00
. Fixed bug #70288 (Apache crash related to ZEND_SEND_REF). (Laruence)
Fixed bug #70262 (Accessing array crashes PHP 7.0beta3)
2015-08-17 17:58:14 +08:00
. Fixed bug #70262 (Accessing array crashes PHP 7.0beta3).
(Laruence, Dmitry)
Fixed bug #70258 and #70253
2015-08-13 12:08:57 +08:00
. Fixed bug #70258 (Segfault if do_resize fails to allocated memory).
(Laruence)
. Fixed bug #70253 (segfault at _efree () in zend_alloc.c:1389). (Laruence)
Fixed bug #70240 (Segfault when doing unset($var());)
2015-08-11 21:42:11 +08:00
. Fixed bug #70240 (Segfault when doing unset($var());). (Laruence)
Fixed bug #70223 (Incrementing value returned by magic getter)
2015-08-10 17:12:33 +08:00
. Fixed bug #70223 (Incrementing value returned by magic getter). (Laruence)
Fixed bug #70215 (segfault when __invoke is static)
2015-08-08 22:19:12 +08:00
. Fixed bug #70215 (Segfault when __invoke is static). (Bob)
Fixed bug #70207 (Finally is broken with opcache)
2015-08-10 21:38:43 +08:00
. Fixed bug #70207 (Finally is broken with opcache). (Laruence, Dmitry)
Fixed Bug #70173 (ZVAL_COPY_VALUE_EX broken for 32bit Solaris Sparc)
2015-08-10 22:58:58 +08:00
. Fixed bug #70173 (ZVAL_COPY_VALUE_EX broken for 32bit Solaris Sparc).
(Laruence, cmb)
updated NEWS wrt. bug #69487
2015-08-11 07:43:40 +08:00
. Fixed bug #69487 (SAPI may truncate POST data). (cmb)
update NEWS
2015-08-11 23:09:31 +08:00
. Fixed bug #70198 (Checking liveness does not work as expected).
(Shafreeck Sea, Anatol Belski)
Align NEWS entries format
2015-12-03 23:53:48 +08:00
. Fixed bug #70241,#70293 (Skipped assertions affect Generator returns). (Bob)
update NEWS
2015-08-15 23:29:58 +08:00
. Fixed bug #70239 (Creating a huge array doesn't result in exhausted,
but segfault). (Laruence, Anatol)
Added NEWS entry
2015-08-04 14:55:54 +08:00
. Fixed "finally" issues. (Nikita, Dmitry)
Fixed bug #70098 (Real memory usage doesn't decrease)
2015-08-04 23:21:05 +08:00
. Fixed bug #70098 (Real memory usage doesn't decrease). (Dmitry)
Fix for #70159 - Better magic constants substitution
2015-07-28 21:27:58 +08:00
. Fixed bug #70159 (__CLASS__ is lost in closures). (Julien)
Fixed bug #70156 (Segfault in zend_find_alias_name)
2015-07-28 16:39:58 +08:00
. Fixed bug #70156 (Segfault in zend_find_alias_name). (Laruence)
Fixed bug #70124 (null ptr deref / seg fault in ZEND_HANDLE_EXCEPTION)
2015-07-24 15:49:01 +08:00
. Fixed bug #70124 (null ptr deref / seg fault in ZEND_HANDLE_EXCEPTION).
(Laruence)
Fixed bug #70117 (Unexpected return type error)
2015-07-23 11:16:10 +08:00
. Fixed bug #70117 (Unexpected return type error). (Laruence)
Fix bug #70106 (Inheritance by anonymous class)
2015-07-22 02:34:06 +08:00
. Fixed bug #70106 (Inheritance by anonymous class). (Bob)
Fixed bug #69674 (SIGSEGV array.c:953)
2015-07-29 10:46:12 +08:00
. Fixed bug #69674 (SIGSEGV array.c:953). (cmb)
Add NEWS entry
2015-07-30 03:00:43 +08:00
. Fixed bug #70164 (__COMPILER_HALT_OFFSET__ under namespace is not defined).
Fix bug #70179 ($this refcount issue)
2015-08-02 02:35:56 +08:00
(Bob)
. Fixed bug #70108 (sometimes empty $_SERVER['QUERY_STRING']). (Anatol)
. Fixed bug #70179 ($this refcount issue). (Bob)
updated NEWS
2015-08-02 15:30:00 +08:00
. Fixed bug #69896 ('asm' operand has impossible constraints). (Anatol)
updated NEWS
2015-08-02 22:53:11 +08:00
. Fixed bug #70183 (null pointer deref (segfault) in zend_eval_const_expr).
(Hugh Davenport)
Give better credit in NEWS Patch is actually exactly what he proposed, so...
2015-08-03 01:49:52 +08:00
. Fixed bug #70182 (Segfault in ZEND_ASSIGN_DIV_SPEC_CV_UNUSED_HANDLER).
(Hugh Davenport)
sync NEWS entries
2015-08-05 17:28:36 +08:00
. Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive
method calls). (Stas)
. Fixed bug #69892 (Different arrays compare indentical due to integer key
truncation). (Nikita)
. Fixed bug #70121 (unserialize() could lead to unexpected methods execution
/ NULL pointer deref). (Stas)
Fixed bug #70089 (segfault at ZEND_FETCH_DIM_W_SPEC_VAR_CONST_HANDLER ())
2015-07-17 15:55:34 +08:00
. Fixed bug #70089 (segfault at ZEND_FETCH_DIM_W_SPEC_VAR_CONST_HANDLER ()).
(Laruence)
Format alignment (needed for news2html)
2015-07-14 17:00:26 +08:00
. Fixed bug #70057 (Build failure on 32-bit Mac OS X 10.6.8: recursive
inlining). (Laruence)
Fixed bug #70012 (Exception lost with nested finally block)
2015-07-08 17:15:09 +08:00
. Fixed bug #70012 (Exception lost with nested finally block). (Laruence)
Fixed Bug #69996 (Changing the property of a cloned object affects the original)
2015-07-10 16:33:13 +08:00
. Fixed bug #69996 (Changing the property of a cloned object affects the
original). (Dmitry, Laruence)
Fixed bug #70083 (Use after free with assign by ref on overloaded objects)
2015-07-16 04:36:42 +08:00
. Fixed bug #70083 (Use after free with assign by ref to overloaded objects).
(Bob)
Fixed bug #70006 (cli - function with default arg = STDOUT crash output).
2015-07-07 19:21:02 +08:00
. Fixed bug #70006 (cli - function with default arg = STDOUT crash output).
(Laruence)
Fixed bug #69521 (Segfault in gc_collect_cycles()).
2015-07-02 18:43:06 +08:00
. Fixed bug #69521 (Segfault in gc_collect_cycles()).
(arjen at react dot com, Laruence)
Align NEWS entries format
2015-12-03 23:53:48 +08:00
. Improved zend_string API. (Francois Laupretre)
Fixed bug #69955 (Segfault when trying to combine [] and assign-op on ArrayAccess object). (Laruence)
2015-06-29 16:17:56 +08:00
. Fixed bug #69955 (Segfault when trying to combine [] and assign-op on
ArrayAccess object). (Laruence)
Update NEWS for bug #69957
2015-07-03 03:19:26 +08:00
. Fixed bug #69957 (Different ways of handling div/mod/intdiv). (Bob)
update NEWS about #69900 backport for 5.6 to go
2015-07-06 20:27:17 +08:00
. Fixed bug #69900 (Too long timeout on pipes). (Anatol)
Merge branch 'master' of git.php.net:php-src
2015-06-18 22:30:01 +08:00
. Fixed bug #69872 (uninitialised value in strtr with array). (Laruence)
Update NEWS
2015-06-18 19:59:15 +08:00
. Fixed bug #69868 (Invalid read of size 1 in zend_compile_short_circuiting).
(Laruence)
Add missing NEWS entries
2015-06-20 21:24:51 +08:00
. Fixed bug #69849 (Broken output of apache_request_headers). (Kalle)
. Fixed bug #69840 (iconv_substr() doesn't work with UTF-16BE). (Kalle)
Fixed Bug #69823 (PHP 7.0.0alpha1 segmentation fault when exactly 33 extensions are loaded)
2015-06-14 12:28:40 +08:00
. Fixed bug #69823 (PHP 7.0.0alpha1 segmentation fault when exactly 33
extensions are loaded). (Laruence)
Fixed bug #69805 (null ptr deref and seg fault in zend_resolve_class_name)
2015-06-12 21:07:23 +08:00
. Fixed bug #69805 (null ptr deref and seg fault in zend_resolve_class_name).
(Laruence)
Fixed bug #69802 (Reflection on Closure::__invoke borks type hint class name)
2015-06-15 20:44:44 +08:00
. Fixed bug #69802 (Reflection on Closure::__invoke borks type hint class
name). (Dmitry)
Fixed Bug #69761 (Serialization of anonymous classes should be prevented) And also cleanup anonymous class compiling, it make no sense prefix a namespace to anonymous class name. and it is always lowcased and interned string.
2015-06-13 10:49:07 +08:00
. Fixed bug #69761 (Serialization of anonymous classes should be prevented).
(Laruence)
updated NEWS
2015-06-10 16:47:06 +08:00
. Fixed bug #69551 (parse_ini_file() and parse_ini_string() segmentation
fault). (Christoph M. Becker)
updated NEWS
2015-06-10 17:27:24 +08:00
. Fixed bug #69781 (phpinfo() reports Professional Editions of Windows
7/8/8.1/10 as "Business"). (Christian Wenz)
Fixed bug #69892
2015-06-20 22:39:23 +08:00
. Fixed bug #69835 (phpinfo() does not report many Windows SKUs).
update NEWS
2015-06-19 04:04:55 +08:00
(Christian Wenz)
Fixed bug #69889 There is one case that requires further discussion: $foo = "test"; var_dump($foo[0.0] ?? "default"); var_dump(isset($foo[0.0]) ? $foo[0.0] : "default"); Here the former will currently return "t", while the latter also returns "t" and additionally throws a notice. I think we need to revisit the behavior of invalid types for string offset access in PHP 7, as currently there is some mismatch between what isset() does and what the access itself supports.
2015-06-20 21:09:58 +08:00
. Fixed bug #69889 (Null coalesce operator doesn't work for string offsets).
(Nikita)
Fix bug #69891
2015-06-20 23:23:58 +08:00
. Fixed bug #69891 (Unexpected array comparison result). (Nikita)
Fixed bug #69892
2015-06-20 22:39:23 +08:00
. Fixed bug #69892 (Different arrays compare indentical due to integer key
truncation). (Nikita)
Fixed bug #69893
2015-06-20 23:14:48 +08:00
. Fixed bug #69893 (Strict comparison between integer and empty string keys
crashes). (Nikita)
Fixed bug #69767 (Default parameter value with wrong type segfaults)
2015-06-08 11:47:22 +08:00
. Fixed bug #69767 (Default parameter value with wrong type segfaults).
(cmb, Laruence)
Improve the fix for bug #69756
2015-06-05 18:42:21 +08:00
. Fixed bug #69756 (Fatal error: Nesting level too deep - recursive dependency
? with ===). (Dmitry, Laruence)
Fixed bug #69758 (Item added to array not being removed by array_pop/shift)
2015-06-05 11:54:22 +08:00
. Fixed bug #69758 (Item added to array not being removed by array_pop/shift
). (Laruence)
Updated NEWS
2015-05-12 19:36:13 +08:00
. Fixed bug #68475 (Add support for $callable() sytnax with 'Class::method').
(Julien, Aaron Piotrowski)
Fixed bug #69485 (Double free on zend_list_dtor).
2015-04-20 11:48:21 +08:00
. Fixed bug #69485 (Double free on zend_list_dtor). (Laruence)
Fixed bug #69427 (Segfault on magic method __call of private method in superclass)
2015-04-11 23:57:42 +08:00
. Fixed bug #69427 (Segfault on magic method __call of private method in
superclass). (Laruence)
Squashed commit of the following: commit 2399fc84c541da9c2176c5b7f6dd039a3c84dc64 Author: Dmitry Stogov <dmitry@zend.com> Date: Fri Apr 10 12:38:08 2015 +0300 Removed useless assignment commit 796b6338174348eee0d74a67706d77b7ce1a60c3 Author: Dmitry Stogov <dmitry@zend.com> Date: Fri Apr 10 12:35:31 2015 +0300 Fixed execution with overriden zend_execute_ex() commit 4a9fb125aa999059f8bc42ebb6ee573c7866b35b Author: Dmitry Stogov <dmitry@zend.com> Date: Fri Apr 10 02:02:58 2015 +0300 Fixed executor without global registers commit d456c30e00589ccda35a4b57ae903ef2d3c07d95 Author: Dmitry Stogov <dmitry@zend.com> Date: Fri Apr 10 01:30:35 2015 +0300 Restored original behavior for tests/classes/__call_004.phpt commit 479646d37fef050536f1afb12b082618f1f1a3d0 Author: Dmitry Stogov <dmitry@zend.com> Date: Fri Apr 10 00:32:17 2015 +0300 Fixed test. We don't keep stack frame for fake function anymore. commit 9ae61e33e24b2c811d4ab1ca4ab22847c64a780e Author: Dmitry Stogov <dmitry@zend.com> Date: Fri Apr 10 00:30:09 2015 +0300 Use ZEND_ACC_CALL_VIA_TRAMPOLINE instead of ZEND_ACC_CALL_VIA_HANDLER. Keep ZEND_ACC_CALL_VIA_HANDLER for compatibility. commit 0a8403a2a0c27aa3db271774f8559739a6b8400e Author: Dmitry Stogov <dmitry@zend.com> Date: Fri Apr 10 00:05:43 2015 +0300 Rename PROXY_CALL into CALL_TRAMPLINE. Generalize API to allow reuse EG(trampline) for other purposes. commit 4ea0525c10554e36185a0b8b6303106813b6a1c2 Author: Dmitry Stogov <dmitry@zend.com> Date: Thu Apr 9 23:22:25 2015 +0300 Reuse EG(proxy_call_op) for all proxy. Move proxy related functions from zend_objects_API to zend_object_handlers. commit 529bf737ca388ad56fb4ae20ccb81e6276f25ec0 Author: Dmitry Stogov <dmitry@zend.com> Date: Thu Apr 9 21:42:23 2015 +0300 Accurate use of proxy_call commit 5d62837d5ba3855743fe1981786ebd65d9da0b63 Merge: 83e749f 690843f Author: Dmitry Stogov <dmitry@zend.com> Date: Thu Apr 9 19:40:00 2015 +0300 Merge branch 'master' into opcodefy-call * master: Fixed GOTO executor Fixed typo Changed ArrayIterator implementation using zend_hash_iterator_... API. Allowed modification of itterated ArrayObject using the same behavior as proposed in `Fix "foreach" behavior`. Removed "Array was modified outside object and internal position is no longer valid" hack. commit 83e749ff3b6623e39b236a72e9b907d5b788ae5e Author: Dmitry Stogov <dmitry@zend.com> Date: Thu Apr 9 19:39:10 2015 +0300 Improved ZEND_PROXY_CALL commit 0c829afc534e6d5ff27a0dea3a4815da303bd1ef Author: Dmitry Stogov <dmitry@zend.com> Date: Thu Apr 9 15:14:49 2015 +0300 Reverted white-space changes commit df65144488afa3e9020d75e1ada5529b138afc5a Merge: 5fd2f97 97756d9 Author: Dmitry Stogov <dmitry@zend.com> Date: Thu Apr 9 14:37:07 2015 +0300 Merge branch 'opcodefy-call' of github.com:laruence/php-src into opcodefy-call * 'opcodefy-call' of github.com:laruence/php-src: Ready for PR Fixed static call Improve performance by using prealloated op_arrray Respect called_scope Support internal magical __call/__callStatic opcode-fy magical __callStatic Opcode-fy magical __call commit 97756d9190e07a072a7b48135304dc25a964845f Author: Xinchen Hui <laruence@gmail.com> Date: Thu Apr 9 19:07:59 2015 +0800 Ready for PR commit 74f993084627061e783645a866390b68e2981698 Author: Xinchen Hui <laruence@gmail.com> Date: Thu Apr 9 19:03:00 2015 +0800 Fixed static call commit ec1d9eb592db0c3b7b0e3d21e7f445ed8bccfd4d Author: Xinchen Hui <laruence@gmail.com> Date: Thu Apr 9 18:23:17 2015 +0800 Improve performance by using prealloated op_arrray commit df7fbbf949c99f2c5ae3da2a1199235651c7cc82 Author: Xinchen Hui <laruence@gmail.com> Date: Thu Apr 9 15:10:02 2015 +0800 Respect called_scope commit 769d1d59fb48b6f7f93d7412eefbf26135fa3e59 Author: Xinchen Hui <laruence@gmail.com> Date: Thu Apr 9 12:19:23 2015 +0800 Support internal magical __call/__callStatic commit a980fedd5b0e0683713dd4f6eaad62adf4b4732f Author: Xinchen Hui <laruence@gmail.com> Date: Wed Apr 8 18:35:41 2015 +0800 opcode-fy magical __callStatic commit 73855f7d53baa2efc2b8a88314f51c784c81b59d Author: Xinchen Hui <laruence@gmail.com> Date: Wed Apr 8 14:21:55 2015 +0800 Opcode-fy magical __call
2015-04-11 04:01:00 +08:00
. Improved __call() and __callStatic() magic method handling. Now they are
called in a stackless way using ZEND_CALL_TRAMPOLINE opcode, without
additional stack frame. (Laruence, Dmitry)
Add some missed entry
2015-04-11 09:48:09 +08:00
. Optimized strings concatenation. (Dmitry, Laruence)
Fixed weird operators behavior. Division by zero now emits warning and returns +/-INF, modulo by zero and intdid() throws an exception, shifts by negative offset throw exceptions. Compile-time evaluation of division by zero is disabled.
2015-04-06 19:30:05 +08:00
. Fixed weird operators behavior. Division by zero now emits warning and
returns +/-INF, modulo by zero and intdid() throws an exception, shifts
by negative offset throw exceptions. Compile-time evaluation of division
by zero is disabled. (Dmitry, Andrea, Nikita)
Fixed bug #69371 (Hash table collision leads to inaccessible array keys)
2015-04-05 18:45:14 +08:00
. Fixed bug #69371 (Hash table collision leads to inaccessible array keys).
(Laruence)
Align format to Fixed bug #... , later used to create the website changelog
2015-02-12 04:39:31 +08:00
. Fixed bug #68933 (Invalid read of size 8 in zend_std_read_property).
UPDATE NEWS
2015-01-31 19:12:30 +08:00
(Laruence, arjen at react dot com)
Fixed bug #68252 (segfault in Zend/zend_hash.c in function _zend_hash_del_el) Don't leave a UNDEF gap in function_table
2014-10-28 17:36:03 +08:00
. Fixed bug #68252 (segfault in Zend/zend_hash.c in function
_zend_hash_del_el). (Laruence)
Add some NEWS entries
2015-05-07 21:37:46 +08:00
. Fixed bug #65598 (Closure executed via static autoload incorrectly marked as
static). (Nikita)
. Fixed bug #66811 (Cannot access static::class in lambda, writen outside of a
class). (Nikita)
. Fixed bug #69568 (call a private function in closure failed). (Nikita)
NEWS and UPGRADING
2014-08-01 23:28:20 +08:00
. Added PHP_INT_MIN constant. (Andrea)
Fixed Closure::call() NEWS/UPGRADING
2014-10-26 00:05:52 +08:00
. Added Closure::call() method. (Andrea)
Align format to Fixed bug #... , later used to create the website changelog
2015-02-12 04:39:31 +08:00
. Fixed bug #67959 (Segfault when calling phpversion('spl')). (Florian)
Updated NEWS and UPGRADING PHP RFC: Catchable "call to a member function of a non-object"
2014-10-06 05:54:32 +08:00
. Implemented the RFC `Catchable "Call to a member function bar() on a
Add NEWS & UPGRADING
2014-11-23 14:23:55 +08:00
non-object"`. (Timm)
. Added options parameter for unserialize allowing to specify acceptable
classes (https://wiki.php.net/rfc/secure_unserialize). (Stas)
Addef test for bug #63734 (Garbage collector can free zvals that are still referenced)
2015-04-09 03:18:10 +08:00
. Fixed bug #63734 (Garbage collector can free zvals that are still
referenced). (Dmitry)
Merged PR #911.
2014-12-05 12:15:23 +08:00
. Removed ZEND_ACC_FINAL_CLASS, promoting ZEND_ACC_FINAL as final class
modifier. (Guilherme Blanco)
NEWS
2014-12-15 05:32:42 +08:00
. is_long() & is_integer() is now an alias of is_int(). (Kalle)
NEWS
2014-12-15 05:49:00 +08:00
. Implemented FR #55467 (phpinfo: PHP Variables with $ and single quotes). (Kalle)
More UPGRADING, NEWS
2014-12-19 09:06:46 +08:00
. Added ?? operator. (Andrea)
add NEWS for <=>
2015-02-20 06:02:04 +08:00
. Added <=> operator. (Andrea)
More UPGRADING, NEWS
2014-12-19 09:06:46 +08:00
. Added \u{xxxxx} Unicode Codepoint Escape Syntax. (Andrea)
Adding notes regarding implementation of FR #69089
2015-03-09 07:51:00 +08:00
. Fixed oversight where define() did not support arrays yet const syntax did.
(Andrea, Dmitry)
. Use "integer" and "float" instead of "long" and "double" in ZPP, type hint
and conversion error messages. (Andrea)
. Implemented FR #55428 (E_RECOVERABLE_ERROR when output buffering in output
buffering handler). (Kalle)
Remove static calls from incompatible $this context
2014-09-10 22:08:20 +08:00
. Removed scoped calls of non-static methods from an incompatible $this
context. (Nikita)
Remove for #-style comments in ini files
2015-01-18 01:03:42 +08:00
. Removed support for #-style comments in ini files. (Nikita)
Remove assignment of new by reference
2014-09-10 21:55:26 +08:00
. Removed support for assigning the result of new by reference. (Nikita)
Adding notes regarding implementation of FR #69089
2015-03-09 07:51:00 +08:00
. Invalid octal literals in source code now produce compile errors, fixes
PHPSadness #31. (Andrea)
Remove dl() on fpm-fcgi
2014-09-11 19:03:58 +08:00
. Removed dl() function on fpm-fcgi. (Nikita)
Remove support for hex number from is_numeric_string
2012-04-17 21:45:53 +08:00
. Removed support for hexadecimal numeric strings. (Nikita)
updated NEWS
2015-02-10 15:59:10 +08:00
. Removed obsolete extensions and SAPIs. See the full list in UPGRADING. (Anatol)
Added NULL byte protection to exec, system and passthru.
2015-02-14 04:37:56 +08:00
. Added NULL byte protection to exec, system and passthru. (Yasuo)
Merge branch 'pull-request/1135' * pull-request/1135: Return void like other functions Use zend_parse_parameters_none() Implemented FR #45235 A way to clear or reset the results for error_get_last()
2015-03-09 08:24:11 +08:00
. Added error_clear_last() function. (Reeze Xia)
updated NEWS
2015-03-18 02:48:55 +08:00
. Fixed bug #68797 (Number 2.2250738585072012e-308 converted incorrectly).
(Anatol)
Improve words
2015-04-11 17:48:05 +08:00
. Improved zend_qsort(using hybrid sorting algo) for better performance,
and also renamed zend_qsort to zend_sort. (Laruence)
Add some missed entry
2015-04-11 09:48:09 +08:00
. Added stable sorting algo zend_insert_sort. (Laruence)
Add entry for zend_memnstr change
2015-08-13 13:39:31 +08:00
. Improved zend_memnchr(using sunday algo) for better performance. (Laruence)
update NEWS with group use declarations implementation
2015-03-23 15:35:11 +08:00
. Implemented the RFC `Scalar Type Decalarations v0.5`. (Anthony)
. Implemented the RFC `Group Use Declarations`. (Marcio)
RFC:continue_ob accepted
2015-03-25 22:22:37 +08:00
. Implemented the RFC `Continue Output Buffering`. (Mike)
Merge branch 'InternalClassClean' * InternalClassClean: Fixed test Patch improvement: Fixed indentation. Fixed comment style. Fixed commented out code. Reverted change to function name and added note of why it is different from the class it is actually changing. Made UConverter throw an exception if the constructor fails. Fixed PDO constructor to not return null. Fixed fileinfo behaviour. Made Phar throw exception on bad constructor. Converted intl extension to use IntlException in constructors. Fixed SplFixedArray and tests. Fixed ReflectionExtension and ReflectionProperty. Fixed ReflectionFunction, ReflectionMethod and ReflectionParameter. Fixed PDORow behaviour and message.
2015-04-01 17:11:13 +08:00
. Implemented the RFC `Constructor behaviour of internal classes`. (Dan, Dmitry)
Changed ArrayIterator implementation using zend_hash_iterator_... API. Allowed modification of itterated ArrayObject using the same behavior as proposed in `Fix "foreach" behavior`. Removed "Array was modified outside object and internal position is no longer valid" hack.
2015-04-09 20:40:17 +08:00
. Implemented the RFC `Fix "foreach" behavior`. (Dmitry)
Add NEWS/UPGRADING and some implementation notes
2015-04-15 00:35:47 +08:00
. Implemented the RFC `Generator Delegation`. (Bob)
Rebuild scanner, add NEWS/UPGRADING
2015-05-26 01:00:08 +08:00
. Implemented the RFC `Anonymous Class Support`. (Joe, Nikita, Dmitry)
Add class to semi_reserved tests
2015-05-26 05:07:37 +08:00
. Implemented the RFC `Context Sensitive Lexer`. (Marcio Almada)
Fixed bug #69511 Off-by-one bufferoverflow in php_sys_readlink
2015-05-19 21:44:55 +08:00
. Fixed bug #69511 (Off-by-one buffer overflow in php_sys_readlink).
(Jan Starke, Anatol)
Change to ext/reflection should be in its own category
2014-08-18 13:07:34 +08:00
prepare for 7.0.0alpha1
2015-06-09 20:20:55 +08:00
- CLI server:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #68291 (404 on urls with '+'). (cmb)
. Fixed bug #66606 (Sets HTTP_CONTENT_TYPE but not CONTENT_TYPE).
(wusuopu, cmb)
. Fixed bug #70264 (CLI server directory traversal). (cmb)
. Fixed bug #69655 (php -S changes MKCALENDAR request method to MKCOL). (cmb)
. Fixed bug #64878 (304 responses return Content-Type header). (cmb)
. Refactor MIME type handling to use a hash table instead of linear search.
(Adam)
. Update the MIME type list from the one shipped by Apache HTTPD. (Adam)
. Added support for SEARCH WebDav method. (Mats Lindh)
- COM:
. Fixed bug #69939 (Casting object to bool returns false). (Kalle)
Update NEWs
2015-01-30 13:14:44 +08:00
- Curl:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70330 (Segmentation Fault with multiple "curl_copy_handle").
(Laruence)
. Fixed bug #70163 (curl_setopt_array() type confusion). (Laruence)
. Fixed bug #70065 (curl_getinfo() returns corrupted values). (Anatol)
. Fixed bug #69831 (Segmentation fault in curl_getinfo). (im dot denisenko at
yahoo dot com)
Update NEWs
2015-01-30 13:14:44 +08:00
. Fixed bug #68937 (Segfault in curl_multi_exec). (Laruence)
Remove unsafe curl file uploads The option CURLOPT_SAFE_UPLOAD still exists, but cannot be disabled.
2015-03-09 18:00:04 +08:00
. Removed support for unsafe file uploads. (Nikita)
Change to ext/reflection should be in its own category
2014-08-18 13:07:34 +08:00
Updated NEWS
2014-12-10 18:24:43 +08:00
- Date:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70245 (strtotime does not emit warning when 2nd parameter is
object or string). (cmb)
. Fixed bug #70266 (DateInterval::__construct.interval_spec is not supposed to
be optional). (cmb)
. Fixed bug #70277 (new DateTimeZone($foo) is ignoring text after null byte).
(cmb)
Updated NEWS
2014-12-10 18:24:43 +08:00
. Fixed day_of_week function as it could sometimes return negative values
internally. (Derick)
Remove mktime() and gmmktime() $is_dst parameter
2014-09-11 00:18:02 +08:00
. Removed $is_dst parameter from mktime() and gmmktime(). (Nikita)
Adding notes regarding implementation of FR #69089
2015-03-09 07:51:00 +08:00
. Removed date.timezone warning
(https://wiki.php.net/rfc/date.timezone_warning_removal). (Bob)
. Added "v" DateTime format modifier to get the 3-digit version of fraction
of seconds. (Mariano Iglesias)
Align NEWS entries format
2015-12-03 23:53:48 +08:00
. Implemented FR #69089 (Added DateTime::RFC3339_EXTENDED to output in
RFC3339 Extended format which includes fraction of seconds). (Mariano
Adding notes regarding implementation of FR #69089
2015-03-09 07:51:00 +08:00
Iglesias)
Reworked NEWS for PHP 7
2015-05-12 19:29:23 +08:00
BFN
2013-12-05 18:30:52 +08:00
- DBA:
. Fixed bug #62490 (dba_delete returns true on missing item (inifile)). (Mike)
Updated NEWS
2015-01-20 22:11:19 +08:00
. Fixed bug #68711 (useless comparisons). (bugreports at internot dot info)
fix NEWS file for master
2013-12-24 07:23:03 +08:00
Update NEWs
2014-11-11 16:33:36 +08:00
- DOM:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70558 ("Couldn't fetch" error in
DOMDocument::registerNodeClass()). (Laruence)
. Fixed bug #70001 (Assigning to DOMNode::textContent does additional entity
encoding). (cmb)
. Fixed bug #69846 (Segmenation fault (access violation) when iterating over
DOMNodeList). (Anatol Belski)
Update NEWs
2014-11-11 16:33:36 +08:00
. Made DOMNode::textContent writeable. (Tjerk)
Fix Bug #64776 The XSLT extension is not thread safe.
2013-12-02 22:01:24 +08:00
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
- EXIF:
. Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte
value of 32 bytes). (Stas)
NEWS + UPGRADING
2013-11-04 20:32:45 +08:00
Update NEWs
2014-11-11 16:33:36 +08:00
- Fileinfo:
. Fixed bug #66242 (libmagic: don't assume char is signed). (ArdB)
Update NEWS
2014-11-27 18:40:48 +08:00
- Filter:
. New FILTER_VALIDATE_DOMAIN and better RFC conformance for FILTER_VALIDATE_URL. (Kevin Dunglas)
Merge branch 'PHP-5.6' into PHP-7.0
2016-09-09 18:47:23 +08:00
. Fixed bug #67167 (Wrong return value from FILTER_VALIDATE_BOOLEAN,
FILTER_NULL_ON_FAILURE). (levim)
Update NEWS
2014-11-27 18:40:48 +08:00
Update NEWs
2014-11-11 16:33:36 +08:00
- FPM:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70538 ("php-fpm -i" crashes). (rainer dot jung at
kippdata dot de)
. Fixed bug #70279 (HTTP Authorization Header is sometimes passed to newer
reqeusts). (Laruence)
Align entries format
2015-03-01 17:44:30 +08:00
. Fixed bug #68945 (Unknown admin values segfault pools). (Laruence)
Update NEWs
2014-11-11 16:33:36 +08:00
. Fixed bug #65933 (Cannot specify config lines longer than 1024 bytes). (Chris Wright)
Align NEWS entries format
2015-12-03 23:53:48 +08:00
. Implemented FR #67106 (Split main fpm config). (Elan Ruusamäe, Remi)
Update NEWs
2014-11-11 16:33:36 +08:00
updated NEWS and fixed a typo
2015-04-28 23:08:03 +08:00
- FTP:
Windows support for getrusage() * See getrusage.c/h for implementation details and limitations * Tests passes and have had their SKIPIF updated * psapi.lib is now linked to by default
2015-05-20 21:45:37 +08:00
. Fixed bug #69082 (FTPS support on Windows). (Anatol)
updated NEWS and fixed a typo
2015-04-28 23:08:03 +08:00
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
- GD:
. Fixed bug #53156 (imagerectangle problem with point ordering). (cmb)
Add CVE to #66387
2016-06-08 02:46:59 +08:00
. Fixed bug #66387 (Stack overflow with imagefilltoborder). (CVE-2015-8874)
(cmb)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70102 (imagecreatefromwebm() shifts colors). (cmb)
. Fixed bug #66590 (imagewebp() doesn't pad to even length). (cmb)
. Fixed bug #66882 (imagerotate by -90 degrees truncates image by 1px). (cmb)
. Fixed bug #70064 (imagescale(..., IMG_BICUBIC) leaks memory). (cmb)
. Fixed bug #69024 (imagescale segfault with palette based image). (cmb)
. Fixed bug #53154 (Zero-height rectangle has whiskers). (cmb)
. Fixed bug #67447 (imagecrop() add a black line when cropping). (cmb)
. Fixed bug #68714 (copy 'n paste error). (cmb)
. Fixed bug #66339 (PHP segfaults in imagexbm). (cmb)
. Fixed bug #70047 (gd_info() doesn't report WebP support). (cmb)
. Replace libvpx with libwebp for bundled libgd. (cmb, Anatol)
. Fixed bug #61221 (imagegammacorrect function loses alpha channel). (cmb)
. Made fontFetch's path parser thread-safe. (Sara)
. Removed T1Lib support. (Kalle)
- GMP:
. Fixed bug #70284 (Use after free vulnerability in unserialize() with GMP).
(stas)
- hash:
. Fixed bug #70312 (HAVAL gives wrong hashes in specific cases). (letsgolee
at naver dot com)
- IMAP:
. Fixed bug #70158 (Building with static imap fails). (cmb)
. Fixed bug #69998 (curl multi leaking memory). (Pierrick)
Remove datefmt_set_timezone_id and OO variant
2015-04-01 18:31:21 +08:00
- Intl:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70453 (IntlChar::foldCase() incorrect arguments and missing
constants). (cmb)
. Fixed bug #70454 (IntlChar::forDigit second parameter should be optional).
(cmb, colinodell)
Remove datefmt_set_timezone_id and OO variant
2015-04-01 18:31:21 +08:00
. Removed deprecated aliases datefmt_set_timezone_id() and
IntlDateFormatter::setTimeZoneID(). (Nikita)
Format alignment (needed for news2html)
2015-07-14 16:28:39 +08:00
- JSON:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #62010 (json_decode produces invalid byte-sequences).
(Jakub Zelenka)
. Fixed bug #68546 (json_decode() Fatal error: Cannot access property
started with '\0'). (Jakub Zelenka)
Add jsond info to news
2015-02-03 03:48:19 +08:00
. Replace non-free JSON parser with a parser from Jsond extension, fixes #63520
(JSON extension includes a problematic license statement). (Jakub Zelenka)
Add missing NEWS and UPGRADING for bug #68938
2015-02-09 00:13:22 +08:00
. Fixed bug #68938 (json_decode() decodes empty string without error).
(jeremy at bat-country dot us)
Add jsond info to news
2015-02-03 03:48:19 +08:00
Format alignment (needed for news2html)
2015-07-14 16:28:39 +08:00
- LDAP:
Reworked NEWS for PHP 7
2015-05-12 19:29:23 +08:00
. Fixed bug #47222 (Implement LDAP_OPT_DIAGNOSTIC_MESSAGE). (Andreas Heigl)
Merge branch 'pull-request/752' * pull-request/752: Updated NEWS regarding LiteSpeed SAPI
2014-11-24 09:48:49 +08:00
- LiteSpeed:
. Updated LiteSpeed SAPI code from V5.5 to V6.6. (George Wang)
updated UPGRADING and NEWS
2015-06-08 16:15:03 +08:00
- libxml:
. Fixed handling of big lines in error messages with libxml >= 2.9.0.
(Christoph M. Becker)
Updated NEWS
2014-12-10 18:24:43 +08:00
- Mcrypt:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70625 (mcrypt_encrypt() won't return data when no IV was
specified under RC4). (Nikita)
. Fixed bug #69833 (mcrypt fd caching not working). (Anatol)
Updated NEWS
2014-12-10 18:24:43 +08:00
. Fixed possible read after end of buffer and use after free. (Dmitry)
Remove deprecated mcrypt_generic_end() alias
2015-03-09 18:10:52 +08:00
. Removed mcrypt_generic_end() alias. (Nikita)
Removed deprecated mcrypt_ecb() etc
2015-03-09 18:14:35 +08:00
. Removed mcrypt_ecb(), mcrypt_cbc(), mcrypt_cfb(), mcrypt_ofb(). (Nikita)
Updated NEWS
2014-12-10 18:24:43 +08:00
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
- Mysqli:
. Fixed bug #32490 (constructor of mysqli has wrong name). (cmb)
- Mysqlnd:
. Fixed bug #70949 (SQL Result Sets With NULL Can Cause Fatal Memory Errors).
(Laruence)
. Fixed bug #70384 (mysqli_real_query():Unknown type 245 sent by the server).
(Andrey)
. Fixed bug #70456 (mysqlnd doesn't activate TCP keep-alive when connecting to
a server). (Sergei Turchanov)
. Fixed bug #70572 segfault in mysqlnd_connect. (Andrey, Remi)
. Fixed Bug #69796 (mysqli_stmt::fetch doesn't assign null values to
bound variables). (Laruence)
- OCI8:
. Fixed memory leak with LOBs. (Senthil)
. Fixed bug #68298 (OCI int overflow) (Senthil).
. Corrected oci8 hash destructors to prevent segfaults, and a few other fixes.
(Cameron Porter)
- ODBC:
. Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined
Merge branch 'PHP-5.6' into PHP-7.0
2016-07-29 00:24:13 +08:00
columns). (CVE-2015-8879) (cmb)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
Update NEWs
2014-12-24 18:30:36 +08:00
- Opcache:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70656 (require() statement broken after opcache_reset() or a
few hours of use). (Laruence)
. Fixed bug #70843 (Segmentation fault on MacOSX with
opcache.file_cache_only=1). (Laruence)
. Fixed bug #70724 (Undefined Symbols from opcache.so on Mac OS X 10.10).
(Laruence)
. Fixed compatibility with Windows 10 (see also bug #70652). (Anatol)
. Attmpt to fix "Unable to reattach to base address" problem. (Matt Ficken)
. Fixed bug #70423 (Warning Internal error: wrong size calculation). (Anatol)
. Fixed bug #70237 (Empty while and do-while segmentation fault with opcode
on CLI enabled). (Dmitry, Laruence)
. Fixed bug #70111 (Segfault when a function uses both an explicit return
type and an explicit cast). (Laruence)
. Fixed bug #70058 (Build fails when building for i386). (Laruence)
. Fixed bug #70022 (Crash with opcache using opcache.file_cache_only=1).
(Anatol)
. Removed opcache.load_comments configuration directive. Now doc comments
loading costs nothing and always enabled. (Dmitry)
. Fixed bug #69838 (Wrong size calculation for function table). (Anatol)
Fixed bug #69688 (segfault with eval and opcache fast shutdown)
2015-05-22 11:48:13 +08:00
. Fixed bug #69688 (segfault with eval and opcache fast shutdown).
(Laruence)
Added experimental (disabled by default) file based opcode cache.
2015-05-07 04:46:49 +08:00
. Added experimental (disabled by default) file based opcode cache.
(Dmitry, Laruence, Anatol)
Update NEWS
2015-01-13 23:39:33 +08:00
. Fixed bug with try blocks being removed when extended_info opcode
generation is turned on. (Laruence)
Update NEWs
2014-12-24 18:30:36 +08:00
. Fixed bug #68644 (strlen incorrect : mbstring + func_overload=2 +UTF-8
+ Opcache). (Laruence)
NEWS
2015-01-23 14:05:28 +08:00
- OpenSSL:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Require at least OpenSSL version 0.9.8. (Jakub Zelenka)
. Fixed bug #68312 (Lookup for openssl.cnf causes a message box). (Anatol)
. Fixed bug #55259 (openssl extension does not get the DH parameters from
DH key resource). (Jakub Zelenka)
. Fixed bug #70395 (Missing ARG_INFO for openssl_seal()). (cmb)
. Fixed bug #60632 (openssl_seal fails with AES). (Jakub Zelenka)
. Implemented FR #70438 (Add IV parameter for openssl_seal and openssl_open)
(Jakub Zelenka)
. Fixed bug #70014 (openssl_random_pseudo_bytes() is not cryptographically
Add CVE IDs PHP 7.0.0
2016-04-29 18:41:29 +08:00
secure). (CVE-2015-8867) (Stas)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #69882 (OpenSSL error "key values mismatch" after
openssl_pkcs12_read with extra cert). (Tomasz Sawicki)
Update NEWS/UPGRADING
2015-03-10 13:15:04 +08:00
. Added "alpn_protocols" SSL context option allowing encrypted client/server
streams to negotiate alternative protocols using the ALPN TLS extension when
built against OpenSSL 1.0.2 or newer. Negotiated protocol information is
accessible through stream_get_meta_data() output.
Dropped CN_match and SNI_server_name context options
2015-04-25 00:18:18 +08:00
. Removed "CN_match" and "SNI_server_name" SSL context options. Use automatic
detection or the "peer_name" option instead. (Nikita)
NEWS
2015-01-23 14:05:28 +08:00
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
- Pcntl:
. Fixed bug #70386 (Can't compile on NetBSD because of missing WCONTINUED
and WIFCONTINUED). (Matteo)
Updated NEWS
2014-11-29 21:51:18 +08:00
. Fixed bug #60509 (pcntl_signal doesn't decrease ref-count of old handler
when setting SIG_DFL). (Julien)
Align NEWS entries format
2015-12-03 23:53:48 +08:00
. Implemented FR #68505 (Added wifcontinued and wcontinued). (xilon-jul)
Updated NEWS
2015-05-13 21:43:03 +08:00
. Added rusage support to pcntl_wait() and pcntl_waitpid(). (Anton Stepanenko,
Tony)
Updated NEWS
2014-11-29 21:51:18 +08:00
Remove preg_replace /e modifier
2014-09-10 23:19:02 +08:00
- PCRE:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70232 (Incorrect bump-along behavior with \K and empty string
match). (cmb)
. Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).
(Anatol Belski)
. Fixed bug #70232 (Incorrect bump-along behavior with \K and empty string
match). (cmb)
. Fixed bug #53823 (preg_replace: * qualifier on unicode replace garbles the
string). (cmb)
. Fixed bug #69864 (Segfault in preg_replace_callback). (cmb, ab)
Remove preg_replace /e modifier
2014-09-10 23:19:02 +08:00
Update NEWS
2015-02-06 22:47:16 +08:00
- PDO:
Align NEWS entries format
2015-12-03 23:53:48 +08:00
. Fixed bug #70861 (Segmentation fault in pdo_parse_params() during Drupal 8
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
test suite). (Anatol)
. Fixed bug #70389 (PDO constructor changes unrelated variables). (Laruence)
. Fixed bug #70272 (Segfault in pdo_mysql). (Laruence)
. Fixed bug #70221 (persistent sqlite connection + custom function
segfaults). (Laruence)
. Removed support for the /e (PREG_REPLACE_EVAL) modifier. (Nikita)
Update NEWS
2015-02-06 22:47:16 +08:00
. Fixed bug #59450 (./configure fails with "Cannot find php_pdo_driver.h").
(maxime dot besson at smile dot fr)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
- PDO_DBlib:
. Fixed bug #69757 (Segmentation fault on nextRowset).
(miracle at rpz dot name)
Updated NEWS
2014-12-06 00:07:13 +08:00
- PDO_mysql:
. Fixed bug #68424 (Add new PDO mysql connection attr to control multi
statements option). (peter dot wolanin at acquia dot com)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
- PDO_OCI:
. Fixed bug #70308 (PDO::ATTR_PREFETCH is ignored). (Chris Jones)
Remove PGSQL_ATTR_DISABLE_NATIVE_PREPARED_STATEMENT Use the generic ATTR_EMULATE_PREPARES instead.
2015-04-25 00:08:18 +08:00
- PDO_pgsql:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #69752 (PDOStatement::execute() leaks memory with DML
Statements when closeCuror() is u). (Philip Hofstetter)
Remove PGSQL_ATTR_DISABLE_NATIVE_PREPARED_STATEMENT Use the generic ATTR_EMULATE_PREPARES instead.
2015-04-25 00:08:18 +08:00
. Removed PGSQL_ATTR_DISABLE_NATIVE_PREPARED_STATEMENT attribute in favor of
ATTR_EMULATE_PREPARES). (Nikita)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
- Phar:
. Fixed bug #69720 (Null pointer dereference in phar_get_fp_offset()). (Stas)
. FIxed bug #70433 (Uninitialized pointer in phar_make_dirstream when zip
entry filename is "/"). (Stas)
. Improved fix for bug #69441. (Anatol Belski)
. Fixed bug #70019 (Files extracted from archive may be placed outside of
destination directory). (Anatol Belski)
- Phpdbg:
. Fixed bug #70614 (incorrect exit code in -rr mode with Exceptions). (Bob)
. Fixed bug #70532 (phpdbg must respect set_exception_handler). (Bob)
. Fixed bug #70531 (Run and quit mode (-qrr) should not fallback to
interactive mode). (Bob)
. Fixed bug #70533 (Help overview (-h) does not rpint anything under Windows).
(Anatol)
. Fixed bug #70449 (PHP won't compile on 10.4 and 10.5 because of missing
constants). (Bob)
. Fixed bug #70214 (FASYNC not defined, needs sys/file.h include). (Bob)
. Fixed bug #70138 (Segfault when displaying memory leaks). (Bob)
Format alignment (needed for news2html)
2015-07-14 16:28:39 +08:00
- Reflection:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70650 (Wrong docblock assignment). (Marcio)
. Fixed bug #70674 (ReflectionFunction::getClosure() leaks memory when used
for internal functions). (Dmitry, Bob)
. Fixed bug causing bogus traces for ReflectionGenerator::getTrace(). (Bob)
UPGRADING and NEWS cleanups
2014-12-21 11:08:29 +08:00
. Fixed inheritance chain of Reflector interface. (Tjerk)
Add NEWS/UPGRADING for ReflectionGenerator class
2015-05-15 04:30:01 +08:00
. Added ReflectionGenerator class. (Bob)
Reflection support for type hints and return types
2015-06-08 14:32:18 +08:00
. Added reflection support for return types and type declarations. (Sara,
Matteo)
Update NEWs
2014-11-11 16:33:36 +08:00
Sort the NEWS file alphabetically. Insert OCD otter meme here.
2013-09-12 05:37:07 +08:00
- Session:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70876 (Segmentation fault when regenerating session id with
strict mode). (Laruence)
. Fixed bug #70529 (Session read causes "String is not zero-terminated" error).
(Yasuo)
. Fixed bug #70013 (Reference to $_SESSION is lost after a call to
session_regenerate_id()). (Yasuo)
. Fixed bug #69952 (Data integrity issues accessing superglobals by
reference). (Bob)
Merge branch 'PHP-5.6' * PHP-5.6: Fixed #67694: Regression in session_regenerate_id() Conflicts: ext/session/session.c
2014-08-23 09:21:36 +08:00
. Fixed bug #67694 (Regression in session_regenerate_id()). (Tjerk)
Align entries format
2015-03-01 17:44:30 +08:00
. Fixed bug #68941 (mod_files.sh is a bash-script). (bugzilla at ii.nl, Yasuo)
NEWS + UPGRADING
2013-11-04 20:32:45 +08:00
Update NEWs
2014-11-11 16:33:36 +08:00
- SOAP:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70940 (Segfault in soap / type_to_string). (Remi)
. Fixed bug #70900 (SoapClient systematic out of memory error). (Dmitry)
. Fixed bug #70875 (Segmentation fault if wsdl has no targetNamespace
attribute). (Matteo)
. Fixed bug #70715 (Segmentation fault inside soap client). (Laruence)
. Fixed bug #70709 (SOAP Client generates Segfault). (Laruence)
. Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE).
(Stas)
. Fixed bug #70081 (SoapClient info leak / null pointer dereference via
multiple type confusions). (Stas)
. Fixed bug #70079 (Segmentation fault after more than 100 SoapClient
calls). (Laruence)
. Fixed bug #70032 (make_http_soap_request calls
zend_hash_get_current_key_ex(,,,NULL). (Laruence)
Align entries format
2015-03-01 17:44:30 +08:00
. Fixed bug #68361 (Segmentation fault on SoapClient::__getTypes). (Laruence)
Update NEWs
2014-11-11 16:33:36 +08:00
implement #67886
2014-08-26 00:32:40 +08:00
- SPL:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70959 (ArrayObject unserialize does not restore protected
fields). (Laruence)
. Fixed bug #70853 (SplFixedArray throws exception when using ref variable
as index). (Laruence)
. Fixed bug #70868 (PCRE JIT and pattern reuse segfault). (Laruence)
. Fixed bug #70730 (Incorrect ArrayObject serialization if unset is called
in serialize()). (Laruence)
. Fixed bug #70573 (Cloning SplPriorityQueue leads to memory leaks). (Dmitry)
. Fixed bug #70303 (Incorrect constructor reflection for ArrayObject). (cmb)
. Fixed bug #70068 (Dangling pointer in the unserialization of ArrayObject
items). (sean.heelan)
. Fixed bug #70166 (Use After Free Vulnerability in unserialize() with
SPLArrayObject). (taoguangchen at icloud dot com)
. Fixed bug #70168 (Use After Free Vulnerability in unserialize() with
SplObjectStorage). (taoguangchen at icloud dot com)
. Fixed bug #70169 (Use After Free Vulnerability in unserialize() with
SplDoublyLinkedList). (taoguangchen at icloud dot com)
. Fixed bug #70053 (MutlitpleIterator array-keys incompatible change in
PHP 7). (Tjerk)
. Fixed bug #69970 (Use-after-free vulnerability in
spl_recursive_it_move_forward_ex()). (Laruence)
. Fixed bug #69845 (ArrayObject with ARRAY_AS_PROPS broken). (Dmitry)
Changed ArrayIterator implementation using zend_hash_iterator_... API. Allowed modification of itterated ArrayObject using the same behavior as proposed in `Fix "foreach" behavior`. Removed "Array was modified outside object and internal position is no longer valid" hack.
2015-04-09 20:40:17 +08:00
. Changed ArrayIterator implementation using zend_hash_iterator_... API.
Fixed typo
2015-04-09 20:47:34 +08:00
Allowed modification of iterated ArrayObject using the same behavior
Changed ArrayIterator implementation using zend_hash_iterator_... API. Allowed modification of itterated ArrayObject using the same behavior as proposed in `Fix "foreach" behavior`. Removed "Array was modified outside object and internal position is no longer valid" hack.
2015-04-09 20:40:17 +08:00
as proposed in `Fix "foreach" behavior`. Removed "Array was modified
outside object and internal position is no longer valid" hack. (Dmitry)
Align NEWS entries format
2015-12-03 23:53:48 +08:00
. Implemented FR #67886 (SplPriorityQueue/SplHeap doesn't expose extractFlags
implement #67886
2014-08-26 00:32:40 +08:00
nor curruption state). (Julien)
Updated NEWS
2014-11-29 19:15:17 +08:00
. Fixed bug #66405 (RecursiveDirectoryIterator::CURRENT_AS_PATHNAME
breaks the RecursiveIterator). (Paul Garvin)
implement #67886
2014-08-26 00:32:40 +08:00
Format alignment (needed for news2html)
2015-07-14 17:00:26 +08:00
- SQLite3:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70571 (Memory leak in sqlite3_do_callback). (Adam)
. Fixed bug #69972 (Use-after-free vulnerability in
sqlite3SafetyCheckSickOrOk()). (Laruence)
. Fixed bug #69897 (segfault when manually constructing SQLite3Result).
(Kalle)
Align format to Fixed bug #... , later used to create the website changelog
2015-02-12 04:39:31 +08:00
. Fixed bug #68260 (SQLite3Result::fetchArray declares wrong
Updated NEWS
2015-01-09 23:26:10 +08:00
required_num_args). (Julien)
Update NEWs
2014-11-11 16:33:36 +08:00
- Standard:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed count on symbol tables. (Laruence)
. Fixed bug #70963 (Unserialize shows UNKNOWN in result). (Laruence)
. Fixed bug #70910 (extract() breaks variable references). (Laruence)
. Fixed bug #70808 (array_merge_recursive corrupts memory of unset items).
Fixed bug #69299 (Regression in array_filter's $flag argument in PHP 7)
2015-03-25 23:42:58 +08:00
(Laruence)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70667 (strtr() causes invalid writes and a crashes). (Dmitry)
. Fixed bug #70668 (array_keys() doesn't respect references when $strict is
true). (Bob, Dmitry)
. Implemented the RFC `Random Functions Throwing Exceptions in PHP 7`.
(Sammy Kaye Powers, Anthony)
. Fixed bug #70487 (pack('x') produces an error). (Nikita)
. Fixed bug #70342 (changing configuration with ignore_user_abort(true) isn't
working). (Laruence)
. Fixed bug #70295 (Segmentation fault with setrawcookie). (Bob)
. Fixed bug #67131 (setcookie() conditional for empty values not met). (cmb)
. Fixed bug #70365 (Use-after-free vulnerability in unserialize() with
SplObjectStorage). (taoguangchen at icloud dot com)
. Fixed bug #70366 (Use-after-free vulnerability in unserialize() with
SplDoublyLinkedList). (taoguangchen at icloud dot com)
. Fixed bug #70250 (extract() turns array elements to references).
(Laruence)
. Fixed bug #70211 (php 7 ZEND_HASH_IF_FULL_DO_RESIZE use after free).
(Laruence)
. Fixed bug #70208 (Assert breaking access on objects). (Bob)
. Fixed bug #70140 (str_ireplace/php_string_tolower - Arbitrary Code
Execution). (CVE-2015-6527) (Laruence)
. Implemented FR #70112 (Allow "dirname" to go up various times). (Remi)
. Fixed bug #36365 (scandir duplicates file name at every 65535th file). (cmb)
. Fixed bug #70096 (Repeated iptcembed() adds superfluous FF bytes). (cmb)
. Fixed bug #70018 (exec does not strip all whitespace). (Laruence)
. Fixed bug #69983 (get_browser fails with user agent of null).
(Kalle, cmb, Laruence)
. Fixed bug #69976 (Unable to parse "all" urls with colon char). (cmb)
. Fixed bug #69768 (escapeshell*() doesn't cater to !). (cmb)
. Fixed bug #62922 (Truncating entire string should result in string).
(Nikita)
. Fixed bug #69723 (Passing parameters by reference and array_column).
(Laruence)
. Fixed bug #69523 (Cookie name cannot be empty). (Christoph M. Becker)
. Fixed bug #69325 (php_copy_file_ex does not pass the argument).
(imbolk at gmail dot com)
. Fixed bug #69299 (Regression in array_filter's $flag argument in PHP 7).
(Laruence)
. Removed call_user_method() and call_user_method_array() functions. (Kalle)
. Fixed user session handlers (See rfc:session.user.return-value). (Sara)
. Added intdiv() function. (Andrea)
. Improved precision of log() function for base 2 and 10. (Marc Bennewitz)
. Remove string category support in setlocale(). (Nikita)
. Remove set_magic_quotes_runtime() and its alias magic_quotes_runtime().
Remove set_magic_quotes_runtime And the alias magic_quotes_runtime
2014-09-10 23:30:25 +08:00
(Nikita)
Merge branch 'PHP-5.6' Conflicts: ext/standard/file.c
2015-02-02 23:58:39 +08:00
. Fixed bug #65272 (flock() out parameter not set correctly in windows).
reworked NEWS for 5.6.0GA
2014-08-27 16:47:44 +08:00
(Daniel Lowrey)
Also add preg_replace_callback_array in NEWS
2015-03-23 16:51:06 +08:00
. Added preg_replace_callback_array function. (Wei Dai)
Fixed bug #69686 password_verify reports back error on PHP7 will null string. The deprecation of DES salts created a warning when trying to verify them with password_hash. This bug fix adds a quiet mode to php_crypt() which is used by password_verify.
2015-05-22 05:12:51 +08:00
. Deprecated salt option to password_hash. (Anthony)
. Fixed bug #69686 (password_verify reports back error on PHP7 will null
string). (Anthony)
Windows support for getrusage() * See getrusage.c/h for implementation details and limitations * Tests passes and have had their SKIPIF updated * psapi.lib is now linked to by default
2015-05-20 21:45:37 +08:00
. Added Windows support for getrusage(). (Kalle)
NEWS and UPGRADING entries for PR #1309
2015-05-29 23:16:07 +08:00
. Removed hardcoded limit on number of pipes in proc_open(). (Tony)
Update NEWs
2014-11-11 16:33:36 +08:00
Updated NEWS
2014-12-13 00:02:20 +08:00
- Streams:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70361 (HTTP stream wrapper doesn't close keep-alive connections).
(Niklas Keller)
Updated NEWS
2014-12-13 00:02:20 +08:00
. Fixed bug #68532 (convert.base64-encode omits padding bytes).
(blaesius at krumedia dot de)
Remove set_socket_blocking
2014-09-10 23:31:37 +08:00
. Removed set_socket_blocking() in favor of its alias stream_set_blocking().
(Nikita)
Updated NEWS
2014-12-13 00:02:20 +08:00
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
- Tokenizer:
. Fixed bug #69430 (token_get_all has new irrecoverable errors). (Nikita)
- XMLReader:
. Fixed bug #70309 (XmlReader read generates extra output). (Anatol)
- XMLRPC
. Fixed bug #70526 (xmlrpc_set_type returns false on success). (Laruence)
Update NEWs
2014-11-11 16:33:36 +08:00
- XSL:
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70678 (PHP7 returns true when false is expected). (Felipe)
. Fixed bug #70535 (XSLT: free(): invalid pointer). (Laruence)
. Fixed bug #69782 (NULL pointer dereference). (Stas)
Update NEWs
2014-11-11 16:33:36 +08:00
. Fixed bug #64776 (The XSLT extension is not thread safe). (Mike)
Remove xsl.security_prefs ini option Conflicts: ext/xsl/php_xsl.c ext/xsl/xsltprocessor.c
2014-09-11 00:06:21 +08:00
. Removed xsl.security_prefs ini option. (Nikita)
Updated NEWS
2014-09-02 06:47:49 +08:00
Update NEWS/UPGRADING
2015-04-24 23:19:58 +08:00
- Zlib:
. Added deflate_init(), deflate_add(), inflate_init(), inflate_add()
functions allowing incremental/streaming compression/decompression.
(Daniel Lowrey & Bob Weinand)
NEWS
2015-05-06 21:24:41 +08:00
- Zip:
Add CVE IDs PHP 7.0.0
2016-04-29 18:41:29 +08:00
. Fixed bug #70322 (ZipArchive::close() doesn't indicate errors).
(CVE-2014-9767) (cmb)
arrange NEWS for final and fix one NEWS mistake
2015-12-01 08:58:01 +08:00
. Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when
creating directories). (neal at fb dot com)
NEWS
2015-05-06 21:24:41 +08:00
. Added ZipArchive::setCompressionName and ZipArchive::setCompressionIndex
Format alignment
2015-07-14 07:43:11 +08:00
methods. (Remi, Cedric Delmas)
. Update bundled libzip to 1.0.1. (Remi, Anatol)
. Fixed bug #67161 (ZipArchive::getStream() returns NULL for certain file).
Updated NEWS
2015-05-12 20:34:14 +08:00
(Christoph M. Becker)
Reference in New Issue Copy Permalink