mirrors/php-src
0
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2024-11-24 02:15:04 +08:00
Code Issues Packages Projects Releases Wiki Activity
ad750c3bb6
php-src/NEWS

2497 lines
87 KiB
Plaintext
Raw Normal View History

remove BOM from NEWS
2015-07-21 22:36:36 +08:00
PHP NEWS
Please add in any changes/bug fixes you've made - we need to keep a details ChangeLog...
1999-07-23 07:54:54 +08:00
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
7.3.23 is next
2020-08-18 15:55:37 +08:00
?? ??? ????, PHP 7.3.23
Fix #80007: Potential type confusion in unixtojd() parameter parsing Also it fixes test on 32-bit armv7 and x86 - Test unixtojd() function : error conditions [ext/calendar/tests/unixtojd_error1.phpt] Closes GH-6033
2020-08-22 07:44:48 +08:00
- Calendar:
. Fixed bug #80007 (Potential type confusion in unixtojd() parameter parsing).
(Andy Postnikov)
7.3.23 is next
2020-08-18 15:55:37 +08:00
Fix #64130: COM obj parameters passed by reference are not updated `ITypeInfo_GetIDsOfNames()` is supposed to fail with `E_NOTIMPL` for out-of-process servers, thus we should not remove the already available typeinfo of the object in this case. We also properly free the `byref_vals`.
2020-08-26 20:45:13 +08:00
- COM:
. Fixed bug #64130 (COM obj parameters passed by reference are not updated).
(cmb)
Fix #80002: calc free space for new interned string is wrong We need to calculate the free size in bytes. Patch contributed by t-matsuno. Closes GH-6024
2020-08-20 17:20:03 +08:00
- OPcache:
. Fixed bug #80002 (calc free space for new interned string is wrong).
(t-matsuno)
Fix #79986: str_ireplace bug with diacritics characters `tolower()` returns an `int`, so we must not convert to `char` which may be `signed` and as such may be subject to overflow (actually, implementation defined behavior). Closes GH-6007
2020-08-18 19:24:17 +08:00
- Standard:
. Fixed bug #79986 (str_ireplace bug with diacritics characters). (cmb)
7.3.23 is next
2020-08-18 15:55:37 +08:00
03 Sep 2020, PHP 7.3.22
7.3 is now 7.3.22-dev
2020-07-21 15:18:07 +08:00
Fix #79884: PHP_CONFIG_FILE_PATH is meaningless It does not make sense to make assumptions about `PHP_CONFIG_FILE_PATH` during build time, since that value is never used during run time on Windows. Since there is no `--with-config-file-path` on Windows either, we define `PHP_CONFIG_FILE_PATH` as `""`.
2020-07-22 16:48:15 +08:00
- Core:
. Fixed bug #79884 (PHP_CONFIG_FILE_PATH is meaningless). (cmb)
Fix #77932: File extensions are case-sensitive The file extension to mime type mapping *must* not depend on the file extension's case for case-insensitive file systems, and *should* not for case-sensitive file systems.
2020-07-27 16:13:52 +08:00
. Fixed bug #77932 (File extensions are case-sensitive). (cmb)
Fix #79806: realpath() erroneously resolves link to link After resolving reparse points, the path still may be a reparse point; in that case we have to resolve that reparse point as well.
2020-07-28 17:22:57 +08:00
. Fixed bug #79806 (realpath() erroneously resolves link to link). (cmb)
Fix #79895: support = in PHP_CHECK_GCC_ARG m4 macro Closes GH-5890.
2020-07-25 04:46:11 +08:00
. Fixed bug #79895 (PHP_CHECK_GCC_ARG does not allow flags with equal sign).
(Santiago M. Mola)
Fix #79919: Stack use-after-scope in define() Instead of the temporary `rv`, we use the `val_free` which is there for this purpose.
2020-07-31 15:12:22 +08:00
. Fixed bug #79919 (Stack use-after-scope in define()). (cmb)
Fix #79934: CRLF-only line in heredoc causes parsing error Fixes the function `next_newline()` in zend_language_scanner.l. The function now correctly returns a newline_len of 2 for "\r\n". Closes GH-5944.
2020-08-06 02:21:26 +08:00
. Fixed bug #79934 (CRLF-only line in heredoc causes parsing error).
(Pieter van den Ham)
Fix #79884: PHP_CONFIG_FILE_PATH is meaningless It does not make sense to make assumptions about `PHP_CONFIG_FILE_PATH` during build time, since that value is never used during run time on Windows. Since there is no `--with-config-file-path` on Windows either, we define `PHP_CONFIG_FILE_PATH` as `""`.
2020-07-22 16:48:15 +08:00
Fix #48585: com_load_typelib holds reference, fails on second call Whether the type library is cached is actually irrelevant here; what matters is that the symbols are imported, and since these are not cached, we have to import them for every request. And we cannot cache the symbols, because the import depends on the current codepage, but the codepage is a `PHP_INI_ALL` setting.
2020-08-05 00:25:50 +08:00
- COM:
. Fixed bug #48585 (com_load_typelib holds reference, fails on second call).
(cmb)
Fix bug #75785 by attempt switching endianness on Maker's Note Different manufacturer models may come with a different endianness (motorola/intel) format. In order to avoid a big refactor and a gigantic lookup table, this commit simply attempts to switch the endianness and proceed when values are acceptable. Closes GH-5849.
2020-07-13 03:53:52 +08:00
- Exif:
. Fixed bug #75785 (Many errors from exif_read_data).
(Níckolas Daniel da Silva)
Fix bug #70574: Move files to proper locale dir Closes GH-5940.
2020-08-05 19:33:52 +08:00
- Gettext:
. Fixed bug #70574 (Tests fail due to relying on Linux fallback behavior for
gettext()). (Florian Engelhardt)
fix memory leaks in ext/ldap/ldap.c
2020-07-11 03:55:42 +08:00
- LDAP:
. Fixed memory leaks. (ptomulik)
Fix #73060: php failed with error after temp folder cleaned up Instead of storing the mapping base address and the address of `execute_ex()` in a separate file in the temporary folder, we store them right at the beginning of the memory mapping.
2020-07-28 20:40:04 +08:00
- OPcache:
. Fixed bug #73060 (php failed with error after temp folder cleaned up).
(cmb)
Fix #64705 errorInfo property of PDOException is null when PDO::__construct() fails PDO driver constructors are throwing PdoException without setting errorInfo, so create a new reusable function that throws exceptions for PDO and will also set the errorInfo. Use this function in pdo_mysql, pdo_sqlite, and pdo_pgsql.
2019-02-18 05:59:00 +08:00
- PDO:
. Fixed bug #64705 (errorInfo property of PDOException is null when
PDO::__construct() fails). (Ahmed Abdou)
Fix #47021: SoapClient stumbles over WSDL delivered with "Transfer-Encoding: chunked"
2020-08-19 00:10:39 +08:00
- SOAP:
. Fixed bug #47021 (SoapClient stumbles over WSDL delivered with
"Transfer-Encoding: chunked"). (Matteo)
Fixed bug #79930 We're inserting src_zval, so that's what we should addref.
2020-08-05 21:41:42 +08:00
- Standard:
. Fixed bug #79930 (array_merge_recursive() crashes when called with array
with single reference). (Nikita)
Fix bug #79944 Only return true from dns_get_mx if we actually found any MX record.
2020-08-10 22:53:31 +08:00
. Fixed bug #79944 (getmxrr always returns true on Alpine linux). (Nikita)
Fixed bug #79951 One branch did not release tmp_replace_entry_str. Also reduce the scope of some variables.
2020-08-11 16:33:59 +08:00
. Fixed bug #79951 (Memory leak in str_replace of empty string). (Nikita)
Fixed bug #79930 We're inserting src_zval, so that's what we should addref.
2020-08-05 21:41:42 +08:00
Fix #79922: Crash after multiple calls to xml_parser_free() We must not call `zend_list_delete()` in resource closer functions exposed to userland, because decreasing the refcount there leads to use-after-free scenarios. In this case, commit 4a42fbb worked for typical use-cases where `xml_parser_free()` has been called exactly once for the resource, because there is an internal zval (`->index`) referencing the same resource which already increased the refcount by one. However, when `xml_parser_free()` is called multiple times on the same XML parser resource, the resource would be freed prematurely. Instead we forcefully close the resource in `xml_parser_free()`. We also could decrease the refcount of the resource there, but that would require to call `xml_parser_free()` which is somewhat uncommon, and would be particularly bad wrt. PHP 8 where that function is a NOP, and as such doesn't have to be called. So we do no longer increase the refcount of the resource when copying it to the internal zval, and let the usualy refcounting semantics take care of the resource destruction. [1] <http://git.php.net/?p=php-src.git;a=commit;h=4a42fbbbc73aad7427aef5c89974d1833636e082>
2020-08-10 16:40:31 +08:00
- XML:
. Fixed bug #79922 (Crash after multiple calls to xml_parser_free()). (cmb)
[ci skip] Fix 7.3.21 release date
2020-08-04 18:31:08 +08:00
06 Aug 2020, PHP 7.3.21
7.3 is now 7.3.21-dev
2020-06-23 16:29:42 +08:00
Fixed bug #79030 Use usec from apache request time Don't unnecessarily truncate to milliseconds. Closes GH-5760.
2020-06-24 15:44:35 +08:00
- Apache:
. Fixed bug #79030 (Upgrade apache2handler's php_apache_sapi_get_request_time
to return usec). (Herbert256)
Fixed bug #79778 In the interest of avoiding side-effects during dumping, I'm replacing the value with a <constant ast> string instead of performing an update constant operation.
2020-07-07 16:11:34 +08:00
- Core:
[ci skip] Add missing NEWS entries
2020-08-03 17:08:31 +08:00
. Fixed bug #79877 (getimagesize function silently truncates after a null
byte) (cmb)
Fixed bug #79778 In the interest of avoiding side-effects during dumping, I'm replacing the value with a <constant ast> string instead of performing an update constant operation.
2020-07-07 16:11:34 +08:00
. Fixed bug #79778 (Assertion failure if dumping closure with unresolved
static variable). (Nikita)
Fixed bug #79792 We need to remove the iterators even if the array is empty (we will not create one if the first place, but the array may become empty after the fact).
2020-07-07 17:57:01 +08:00
. Fixed bug #79792 (HT iterators not removed if empty array is destroyed).
(Nikita)
Fixed bug #79778 In the interest of avoiding side-effects during dumping, I'm replacing the value with a <constant ast> string instead of performing an update constant operation.
2020-07-07 16:11:34 +08:00
Fix #63208: BSTR to PHP string conversion not binary safe A `BSTR` is similar to a `zend_string`; it stores the length of the string just before the actual string, and thus the string may contain NUL bytes. However, `php_com_olestring_to_string()` is supposed to deal with arbitrary `OLECHAR*`s which may not be `BSTR`s, so we introduce `php_com_bstr_to_string()` and use it for the only case where we actually have to deal with `BSTR`s which may contain NUL bytes. Contrary to `php_com_olestring_to_string()` we return a `zend_string`, so we can save the re-allocation when converting to a `zval`. We also cater to `php_com_string_to_olestring()` not being binary safe, with basically the same fix we did for `php_com_olestring_to_string()`.
2020-06-29 23:38:14 +08:00
- COM:
. Fixed bug #63208 (BSTR to PHP string conversion not binary safe). (cmb)
Fix #63527: DCOM does not work with Username, Password parameter We must not mix multibyte and wide character strings in the `COAUTHIDENTITY` structure. Using wide character strings throughout would have the advantage that the remote connection can be established regardless of the code page of the server, but that would more likely break BC, so we just drop the wide character string conversion of the username.
2020-07-10 21:43:32 +08:00
. Fixed bug #63527 (DCOM does not work with Username, Password parameter).
(cmb)
Fixed bug #79741
2020-06-26 18:26:46 +08:00
- Curl:
. Fixed bug #79741 (curl_setopt CURLOPT_POSTFIELDS asserts on object with
declared properties). (Nikita)
Fix #79756: finfo_file crash (FILEINFO_MIME) If `ctime` or `asctime` return `NULL`, we must not attempt to copy the buffer, but rather return `NULL` as well.
2020-06-29 22:10:33 +08:00
- Fileinfo:
. Fixed bug #79756 (finfo_file crash (FILEINFO_MIME)). (cmb)
Fix #55857: ftp_size on large files `atol()` returns a `long` which is not the same as `zend_long` on LLP64; we use `ZEND_ATOL()` instead. There is no need for a new test case, since filesize_large.phpt already tests for that behavior; unfortunately, the FTP test suite relies on `pcntl_fork()` and therefore cannot be run on Windows.
2020-06-23 21:17:31 +08:00
- FTP:
. Fixed bug #55857 (ftp_size on large files). (cmb)
Fix bug #79787 Closes GH-5807.
2020-07-04 22:12:57 +08:00
- Mbstring:
. Fixed bug #79787 (mb_strimwidth does not trim string). (XXiang)
[ci skip] Add missing NEWS entries
2020-08-03 17:08:31 +08:00
- Phar:
. Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile
function). (CVE-2020-7068) (cmb)
Fix #70362: Can't copy() large 'data://' with open_basedir open_basedir is only relevant for plain files, so there is no need to check it for other URL wrappers.
2020-03-05 19:20:04 +08:00
- Standard:
. Fixed bug #70362 (Can't copy() large 'data://' with open_basedir). (cmb)
Fixed bug #79817 Use *_IND macros in a few places in string.c.
2020-07-10 20:06:41 +08:00
. Fixed bug #79817 (str_replace() does not handle INDIRECT elements). (Nikita)
Fix bug #78008: dns_check_record() always return true on Alpine - free handle before return result - cleaned up remaining usage of MAXPACKET - update dns_get_mx() to use the same approach Closes GH-5854.
2020-07-14 09:14:05 +08:00
. Fixed bug #78008 (dns_check_record() always return true on Alpine).
(Andy Postnikov)
Fix #70362: Can't copy() large 'data://' with open_basedir open_basedir is only relevant for plain files, so there is no need to check it for other URL wrappers.
2020-03-05 19:20:04 +08:00
7.3 is now 7.3.22-dev
2020-07-21 15:18:07 +08:00
09 Jul 2020, PHP 7.3.20
7.3.20 will be next
2020-05-26 16:53:22 +08:00
Fix #79650: php-win.exe 100% cpu lockup As of PHP 7.3.0, `sapi_cli_single_write()` is supposed to return `< 0` on failure, but `fwrite()` returns a `size_t`, and signals error by setting the stream's error indicator. We have to cater to that.
2020-05-31 19:28:09 +08:00
- Core:
. Fixed bug #79650 (php-win.exe 100% cpu lockup). (cmb)
Fix #79668: get_defined_functions(true) may miss functions Instead of some brittle and unefficient string matching, we can just check for the function handler.
2020-06-03 18:05:00 +08:00
. Fixed bug #79668 (get_defined_functions(true) may miss functions). (cmb,
Nikita)
Fix possibly unsupported timercmp() usage The `timercmp()` manpage[1] points out that some systems have a broken implementation which does not support `>=`. This is definitely the case for the Windows SDK, which only supports `<` and `>`. [1] <https://linux.die.net/man/3/timercmp>
2020-06-09 16:12:32 +08:00
. Fixed possibly unsupported timercmp() usage. (cmb)
7.3.20 will be next
2020-05-26 16:53:22 +08:00
Fix #79687: Sony picture - PHP Warning - Make, Model, MakerNotes Even if the length of a maker note does not match our expectations (either because the maker note is corrupted, or because our expectations do not quite match reality), there is no need to let parsing fail; we can still go on parsing the other meta information.
2020-06-13 20:09:28 +08:00
- Exif:
. Fixed bug #79687 (Sony picture - PHP Warning - Make, Model, MakerNotes).
(cmb)
Fix #73527: Invalid memory access in php_filter_strip
2020-06-04 17:49:59 +08:00
- Filter:
. Fixed bug #73527 (Invalid memory access in php_filter_strip). (cmb)
Fix #79676: imagescale adds black border with IMG_BICUBIC We have to loop over all image pixels to avoid the black border. This is also done in external libgd in `_gdScaleOneAxis` and `_gdScalePass`.
2020-06-05 22:36:00 +08:00
- GD:
. Fixed bug #79676 (imagescale adds black border with IMG_BICUBIC). (cmb)
Fix #62890: default_socket_timeout=-1 causes connection to timeout While unencrypted connections ignore negative timeouts, SSL/TLS connections did not special case that, and so always failed due to timeout.
2020-06-09 18:42:02 +08:00
- OpenSSL:
. Fixed bug #62890 (default_socket_timeout=-1 causes connection to timeout).
(cmb)
Fix #79664: PDOStatement::getColumnMeta fails on empty result set As its name suggests, `sqlite3_data_count` returns the number of columns in the current row of the result set; we are interested in the number of columns regardless of the current row, so we have to use `sqlite3_column_count` instead.
2020-06-02 15:36:39 +08:00
- PDO SQLite:
. Fixed bug #79664 (PDOStatement::getColumnMeta fails on empty result set).
(cmb)
Fixed bug #79710 Make sure we don't use zresource after the stream has been destroyed.
2020-06-19 16:46:02 +08:00
- SPL:
. Fixed bug #79710 (Reproducible segfault in error_handler during GC
involved an SplFileObject). (Nikita)
Fix #74267: segfault with streams and invalid data If the current character is a line break character, it cannot be a tab or space character, so we would always fail with an invalid sequence error. Obviously, these `scan_stat == 4` conditions are meant to be exclusive. Furthermore, if `in_pp == NULL || in_left_p == NULL` is true, we hit a segfault if we are not returning right away. Obviously, the additional constraints don't make sense, so we remove them.
2020-06-09 05:19:43 +08:00
- Standard:
. Fixed bug #74267 (segfault with streams and invalid data). (cmb)
Fixed bug #79570 Use the same logic for getgrgid_r, getpwnam_r and getpwuid_r as for getgrnam_r in #75696 Closes GH-5740.
2020-06-19 20:31:28 +08:00
. Fixed bug #79579 (ZTS build of PHP 7.3.17 doesn't handle ERANGE for
posix_getgrgid and others). (Böszörményi Zoltán)
Fix #74267: segfault with streams and invalid data If the current character is a line break character, it cannot be a tab or space character, so we would always fail with an invalid sequence error. Obviously, these `scan_stat == 4` conditions are meant to be exclusive. Furthermore, if `in_pp == NULL || in_left_p == NULL` is true, we hit a segfault if we are not returning right away. Obviously, the additional constraints don't make sense, so we remove them.
2020-06-09 05:19:43 +08:00
[ci skip] Update NEWS
2020-06-09 22:37:17 +08:00
11 Jun 2020, PHP 7.3.19
Bump version
2020-04-28 15:10:50 +08:00
Fix #79566: Private SHM is not private on Windows We map the POSIX semantics of `IPC_PRIVATE` by creating unnamed file mapping objects on Windows. While that is not particularly useful for ext/shmop, which is the only bundled extension which uses `shmget()`, it may be useful for external extensions.
2020-05-05 15:31:17 +08:00
- Core:
. Fixed bug #79566 (Private SHM is not private on Windows). (cmb)
Fix #79489: .user.ini does not inherit On Windows, PATH_TRANSLATED may contain backslashes as well as slashes, so we must not only check for `DEFAULT_SLASH`.
2020-05-05 16:36:16 +08:00
. Fixed bug #79489 (.user.ini does not inherit). (cmb)
Fix #79566: Private SHM is not private on Windows We map the POSIX semantics of `IPC_PRIVATE` by creating unnamed file mapping objects on Windows. While that is not particularly useful for ext/shmop, which is the only bundled extension which uses `shmget()`, it may be useful for external extensions.
2020-05-05 15:31:17 +08:00
Fix #79615: Wrong GIF header written in GD GIFEncode The color resolution is expected in bits 4-6 of the packed fields byte of the logical screen descriptor (byte 10 of the GIF data stream), according to the specification[1], section 18. [1] <https://www.w3.org/Graphics/GIF/spec-gif89a.txt>
2020-05-22 15:11:28 +08:00
- GD:
. Fixed bug #79615 (Wrong GIF header written in GD GIFEncode). (sageptr, cmb)
Fix #79596: MySQL FLOAT truncates to int some locales We must not do locale aware float to string conversion here; instead we using our `snprintf()` implementation with the `F` specifier.
2020-05-15 15:09:41 +08:00
- MySQLnd:
. Fixed bug #79596 (MySQL FLOAT truncates to int some locales). (cmb)
Fixed bug #79535 We did not allocate a cache slot for FETCH_CLASS. This is already fixed on newer PHP versions.
2020-05-04 20:50:31 +08:00
- Opcache:
. Fixed bug #79535 (PHP crashes with specific opcache.optimization_level).
(Nikita)
Fix #79588: Boolean opcache settings ignore on/off values We should display boolean INI settings as boolean.
2020-05-12 22:14:54 +08:00
. Fixed bug #79588 (Boolean opcache settings ignore on/off values). (cmb)
Fixed bug #79535 We did not allocate a cache slot for FETCH_CLASS. This is already fixed on newer PHP versions.
2020-05-04 20:50:31 +08:00
Fix #79561: dns_get_record() fails with DNS_ALL Since Windows has its own definitions of the `PHP_DNS_*` macros, we have to use these when registering the PHP constants.
2020-05-04 22:51:51 +08:00
- Standard:
. Fixed bug #79561 (dns_get_record() fails with DNS_ALL). (cmb)
[ci skip] Update NEWS
2020-05-12 17:16:55 +08:00
14 May 2020, PHP 7.3.18
Next is 7.3.18
2020-03-31 16:22:55 +08:00
Fixed bug #79434
2020-04-02 22:32:57 +08:00
- Core:
[ci skip] Update NEWS
2020-05-12 17:16:55 +08:00
. Fixed bug #78875 (Long filenames cause OOM and temp files are not cleaned).
(CVE-2019-11048) (cmb)
. Fixed bug #78876 (Long variables in multipart/form-data cause OOM and temp
files are not cleaned). (CVE-2019-11048) (cmb)
Fixed bug #79434
2020-04-02 22:32:57 +08:00
. Fixed bug #79434 (PHP 7.3 and PHP-7.4 crash with NULL-pointer dereference
on !CS constant). (Nikita)
Fixed bug #79477 Make sure to deindirect properties when creating array.
2020-04-15 17:20:33 +08:00
. Fixed bug #79477 (casting object into array creates references). (Nikita)
Fix #79470: PHP incompatible with 3rd party file system on demand We add support for Activision HSM (`IO_REPARSE_TAG_ACTIVISION_HSM`) and VFS for Git (`IO_REPARSE_TAG_PROJFS`). The latter fixes bug #78784.
2020-04-24 23:24:25 +08:00
. Fixed bug #79470 (PHP incompatible with 3rd party file system on demand).
(cmb)
. Fixed bug #78784 (Unable to interact with files inside a VFS for Git
repository). (cmb)
Fixed bug #79434
2020-04-02 22:32:57 +08:00
Fix #78221: DOMNode::normalize() doesn't remove empty text nodes If a text node is not followed by another text node, we remove it, if its textContent is empty.
2020-03-11 20:02:09 +08:00
- DOM:
. Fixed bug #78221 (DOMNode::normalize() doesn't remove empty text nodes).
(cmb)
Fix #79491: Search for .user.ini extends up to root dir The `start` parameter of `php_cgi_ini_activate_user_config` is supposed to hold the byte offset of the doc root in the given `path`. However, the current expression which fixes a potential type incompatibility will ever only evaluate to zero or one, because it uses the *logical* and operator (`&&`). Furthermore we notice that subtracting one from `doc_root_len` is not necessary, so there is even no need for the `start` parameter at all.
2020-04-19 20:22:24 +08:00
- FCGI:
. Fixed bug #79491 (Search for .user.ini extends up to root dir). (cmb)
Add NEWS entryc [ci skip]
2020-04-01 15:26:20 +08:00
- MBString:
. Fixed bug #79441 (Segfault in mb_chr() if internal encoding is unsupported).
(Girgias)
Fix #79497: Fix php_openssl_subtract_timeval() I stumbled upon this while debugging a strange issue with stream_socket_client() where it randomly throws out errors when the connection timeout is set to below 1s. The logic to calculate time difference in php_openssl_subtract_timeval() is wrong when a.tv_usec < b.tv_usec, causing connection errors before the timeout is reached.
2020-04-20 07:03:11 +08:00
- OpenSSL:
. Fixed bug #79497 (stream_socket_client() throws an unknown error sometimes
with <1s timeout). (Joe Cai)
Fix #79503: Memory leak on duplicate metadata Duplicate metadata can only happen if someone tampers with the phar, so we can and should treat that as error.
2020-04-22 20:11:13 +08:00
- Phar:
. Fix bug #79503 (Memory leak on duplicate metadata). (cmb)
[ci skip] Update NEWS
2020-05-12 17:16:55 +08:00
- SimpleXML:
. Fixed bug #79528 (Different object of the same xml between 7.4.5 and
7.4.4). (cmb)
Fixed bug #79468 Close the stream filter resources when removing them from the stream.
2020-04-14 07:46:34 +08:00
- Standard:
. Fixed bug #79468 (SIGSEGV when closing stream handle with a stream filter
appended). (dinosaur)
Next is 7.3.18
2020-03-31 16:22:55 +08:00
16 Apr 2020, PHP 7.3.17
Next is 7.3.17
2020-03-03 17:19:31 +08:00
Fix #79364: When copy empty array, next key is unspecified We must not forget to keep the `nNextFreeElement` when duplicating empty arrays.
2020-03-10 23:12:53 +08:00
- Core:
. Fixed bug #79364 (When copy empty array, next key is unspecified). (cmb)
Fix #78210: Invalid pointer address This is actually about three distinct issues: * If an empty string is passed as $address to `stream_socket_sendto()`, the `sa` is not initialized, so we must not pass it as `addr` to `php_stream_xport_sendto()`. * On POSIX, `recvfrom()` truncates messages which are too long to fit into the specified buffer (unless `MSG_PEEK` is given), discards the excessive bytes, and returns the buffer length. On Windows, the same happens, but `recvfrom()` returns `SOCKET_ERROR` with the error code `WSAEMSGSIZE`. We have to catch this for best POSIX compatibility. * In `php_network_parse_network_address_with_port()`, we have to zero `in6` (not only its alias `sa`) to properly support IPv6. Co-Authored-By: Nikita Popov <nikita.ppv@googlemail.com>
2020-03-11 17:16:04 +08:00
. Fixed bug #78210 (Invalid pointer address). (cmb, Nikita)
Fix #79364: When copy empty array, next key is unspecified We must not forget to keep the `nNextFreeElement` when duplicating empty arrays.
2020-03-10 23:12:53 +08:00
Fix #79199: curl_copy_handle() memory leak `curl_copy_handle()` already registers a new resource, so we must not increase the refcount of the original resource.
2020-03-12 01:29:40 +08:00
- CURL:
. Fixed bug #79199 (curl_copy_handle() memory leak). (cmb)
Fix #79396: DateTime hour incorrect during DST jump forward When you attempt to set the time to a non-existent time occuring during a DST jump forward, the hour does not move forward correctly.
2020-03-19 04:04:46 +08:00
- Date:
. Fixed bug #79396 (DateTime hour incorrect during DST jump forward). (Nate
Brunette)
Fix #79200: Some iconv functions cut Windows-1258 To cater to potentially state-dependent encodings, we have to reset the conversion descriptor into its initial shift state to properly finish the conversion. Furthermore, state-dependent encodings may not show progress when comparing `in_left` before and after the conversion; we rather have to see whether `out_left` has decreased. Also we have to cater to the fact that the final potentially state resetting call does not signal failure, but we still have to break respective loops afterwards.
2020-03-16 20:09:16 +08:00
- Iconv:
. Fixed bug #79200 (Some iconv functions cut Windows-1258). (cmb)
Fixed bug #79412 (Opcache chokes and uses 100% CPU on specific script).
2020-03-25 22:31:06 +08:00
- OPcache:
. Fixed bug #79412 (Opcache chokes and uses 100% CPU on specific script).
(Dmitry)
Fix #79413: session_create_id() fails for active sessions The comment on `PS_VALIDATE_SID_FUNC(files)` is very clear that the function is supposed to return `SUCCESS` if the session already exists. So to detect a collision, we have to check for `SUCCESS`, not `FAILURE`. We also fix the wrong condition in session_regenerate_id() as well.
2020-03-27 02:01:33 +08:00
- Session:
. Fixed bug #79413 (session_create_id() fails for active sessions). (cmb)
Fix #79427: Integer Overflow in shmop_open() If `shm.shm_segsz > ZEND_LONG_MAX` the assignment to `shmop->size` a few lines below would overflow, so we catch that early and bail out if necessary.
2020-03-29 22:56:57 +08:00
- Shmop:
. Fixed bug #79427 (Integer Overflow in shmop_open()). (cmb)
Fix #61597: SXE properties may lack attributes and content We must not treat a node as string if it has attributes, unless it is an entity declaration which is always treated as string by simplexml.
2020-03-07 18:20:06 +08:00
- SimpleXML:
. Fixed bug #61597 (SXE properties may lack attributes and content). (cmb)
Fix #75673: SplStack::unserialize() behavior Even though `SplStack::unserialize()` is not supposed to be called on an already constructed instance, it is probably better if the method clears the stack before actually unserializing.
2020-03-05 21:57:27 +08:00
- Spl:
. Fixed bug #75673 (SplStack::unserialize() behavior). (cmb)
Fix #79393: Null coalescing operator failing with SplFixedArray We favor the KISS principle over optimization[1] – SPL is already special enough. [1] <https://github.com/php/php-src/pull/2489/commits/352f3d4476a79bb86136b431719df7394e5a8d4e#r112498098>ff
2020-03-19 00:39:27 +08:00
. Fixed bug #79393 (Null coalescing operator failing with SplFixedArray).
(cmb)
Fix #75673: SplStack::unserialize() behavior Even though `SplStack::unserialize()` is not supposed to be called on an already constructed instance, it is probably better if the method clears the stack before actually unserializing.
2020-03-05 21:57:27 +08:00
Fix bug #79410 (system() swallows last chunk if it is exactly 4095 bytes without newline) Closes GH-5292.
2020-03-24 23:43:17 +08:00
- Standard:
Add NEWS entries [ci skip]
2020-04-14 14:53:35 +08:00
. Fixed bug #79330 (shell_exec() silently truncates after a null byte). (stas)
Add missing CVE
2020-04-15 00:18:18 +08:00
. Fixed bug #79465 (OOB Read in urldecode()). (CVE-2020-7067) (stas)
Fix bug #79410 (system() swallows last chunk if it is exactly 4095 bytes without newline) Closes GH-5292.
2020-03-24 23:43:17 +08:00
. Fixed bug #79410 (system() swallows last chunk if it is exactly 4095 bytes
without newline). (Christian Schneider)
NEWS
2020-03-20 18:16:08 +08:00
- Zip:
. Fixed Bug #79296 (ZipArchive::open fails on empty file). (Remi)
Fix #79424 ext/zip: don't use gl_pathc after call to globfree This breaks on Linux with the musl libc, since it zeroes out gl_pathc during globfree.
2020-03-28 01:57:24 +08:00
. Fixed bug #79424 (php_zip_glob uses gl_pathc after call to globfree).
(Max Rees)
NEWS
2020-03-20 18:16:08 +08:00
Next is 7.3.17
2020-03-03 17:19:31 +08:00
19 Mar 2020, PHP 7.3.16
Next is 7.3.16
2020-02-04 18:38:29 +08:00
Fix #63206: Fully support error/exception_handler stacking, even with null or inside the handler Always push the current user_error/exception_handler to the stack, even when it is empty, so restore_error_handler() always works as expected. The user_error_handler is especially temporarily empty when we are inside the error handler, which caused inconsistent behaviour before.
2020-02-25 04:32:02 +08:00
- Core:
. Fixed bug #63206 (restore_error_handler does not restore previous errors
mask). (Mark Plomer)
Fix #66322: COMPersistHelper::SaveToFile can save to wrong location Saving under the given `filename` may also work, but since `::LoadFromFile` uses the `fullpath` we follow suit.
2020-02-06 21:59:55 +08:00
- COM:
. Fixed bug #66322 (COMPersistHelper::SaveToFile can save to wrong location).
(cmb)
Fix #79242: COM error constants don't match com_exception codes Because a `HRESULT` is a `LONG`[1], no special treatment is required on x86 platforms to get appropriate values. On x64 platforms we prefer positive values, what we could accomplish by casting the `HRESULT` value to `ULONG` and then to `zend_long`, but since the current behavior is correct and the performance improvement is negligible, we defer that to master. [1] <https://docs.microsoft.com/en-us/windows/win32/winprog/windows-data-types#hresult>
2020-02-08 01:04:14 +08:00
. Fixed bug #79242 (COM error constants don't match com_exception codes on
x86). (cmb)
Fix #79248: Traversing empty VT_ARRAY throws com_exception If the `VT_ARRAY` is empty, i.e. its upperbound is less than its lower bound, we must not call `php_com_safearray_get_elem()`, because that function throws in this case.
2020-02-08 23:56:30 +08:00
. Fixed bug #79248 (Traversing empty VT_ARRAY throws com_exception). (cmb)
Fix #79299: com_print_typeinfo prints duplicate variables `lastid` has to retain its value during the traversal, so we move it to an outer scope. Patch contributed by Litiano Moura.
2020-02-24 06:23:12 +08:00
. Fixed bug #79299 (com_print_typeinfo prints duplicate variables). (Litiano
Moura)
Fix #79332: php_istreams are never freed Releasing the `com_dotnet_istream_wrapper` in `istream_destructor()` is pointless, since `istream_destructor()` is only called when the resource is going to be released. This recursion is not a real issue, though, since the resource is never exposed to userland, and has at most refcount 1, so due to well defined unsigned integer underflow, it never is released twice. However, returning early in this case causes a memory leak which needs to be fixed.
2020-03-02 17:45:37 +08:00
. Fixed bug #79332 (php_istreams are never freed). (cmb)
Fix #79333: com_print_typeinfo() leaks memory We have to free the `ansiname`s, regardless of whether they have been put into the hashtable or not. Since bug79299.phpt already shows the leak when run with a leak checker, there is no need for another regression test.
2020-03-02 18:36:30 +08:00
. Fixed bug #79333 (com_print_typeinfo() leaks memory). (cmb)
Fix #66322: COMPersistHelper::SaveToFile can save to wrong location Saving under the given `filename` may also work, but since `::LoadFromFile` uses the `fullpath` we follow suit.
2020-02-06 21:59:55 +08:00
Fix #77569: Write Acess Violation in DomImplementation We must not assume that the zval IS_STRING.
2020-02-13 22:13:26 +08:00
- DOM:
Fix typo in recent bugfix
2020-02-14 16:21:13 +08:00
. Fixed bug #77569: (Write Access Violation in DomImplementation). (Nikita,
Fix #77569: Write Acess Violation in DomImplementation We must not assume that the zval IS_STRING.
2020-02-13 22:13:26 +08:00
cmb)
Fix #79271: DOMDocumentType::$childNodes is NULL Dom level 2 core, DOM level 3 core and the DOM living standard agree that `childNodes` always return a `NodeList`, and never `null`.
2020-02-14 17:55:17 +08:00
. Fixed bug #79271 (DOMDocumentType::$childNodes is NULL). (cmb)
next will be 7.2.28
2020-01-22 16:17:00 +08:00
Fix #79311: enchant_dict_suggest() fails on big endian architecture For obvious reasons, we must not assign a `size_t` value to an `int` variable using memcpy(). However, there is actually no need for the intermediate `n_sugg_st` here, if we use the proper types in the first place. A regression test is not necessary, because dict_suggest.phpt already exhibits the erroneous behavior on big endian architectures.
2020-02-28 20:18:00 +08:00
- Enchant:
. Fixed bug #79311 (enchant_dict_suggest() fails on big endian architecture).
(cmb)
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fix NEWS
2020-03-17 18:08:45 +08:00
- EXIF:
. Fixed bug #79282 (Use-of-uninitialized-value in exif). (CVE-2020-7064)
(Nikita)
- MBstring:
. Fixed bug #79371 (mb_strtolower (UTF-32LE): stack-buffer-overflow at
php_unicode_tolower_full). (CVE-2020-7065) (cmb)
Fix #64032: mysqli reports different client_version While `mysqli_get_client_version()` calls `mysql_get_client_version()` to retrieve the client version, `mysql::$client_version` is initialized to `MYSQL_VERSION_ID`. Both should match though, and since the former is the more useful information, we fix `mysql::$client_version`. We do not add a regression test, because it would usually succeed anyway, and we already have several tests with respective `assert()`s.
2020-02-27 01:33:25 +08:00
- MySQLi:
. Fixed bug #64032 (mysqli reports different client_version). (cmb)
Fixed bug #79188
2020-01-29 17:57:44 +08:00
- PCRE:
. Fixed bug #79188 (Memory corruption in preg_replace/preg_replace_callback
and unicode). (Nikita)
Fix #79038: PDOStatement::nextRowset() leaks column values Firstly, we must not rely on `stmt->column_count` when freeing the driver specific column values, but rather store the column count in the driver data. Since the column count is a `short`, 16 bit are sufficient, so we can store it in reserved bits of `pdo_odbc_stmt`. Furthermore, we must not allocate new column value storage when the statement is not executed, but rather when the column value storage has not been allocated. Finally, we have to introduce a driver specific `cursor_closer` to avoid that `::closeCursor()` calls `odbc_stmt_next_rowset()` which then frees the column value storage, because it may be still needed for bound columns.
2019-12-27 20:20:11 +08:00
- PDO_ODBC:
. Fixed bug #79038 (PDOStatement::nextRowset() leaks column values). (cmb)
Fixed bug #79062 Back up the doc comment when performing heredoc scanahead.
2020-02-29 00:06:05 +08:00
- Reflection:
. Fixed bug #79062 (Property with heredoc default value returns false for
getDocComment). (Nikita)
Fix #79294: ::columnType() may fail after SQLite3Stmt::reset() The fix for feature request #53466 did not properly handle resetting of the corresponding statement; the problem with this is that the statement does not know about its result sets. But even if we could fix this, the `complete` handling still appears to be brittle, since the `sqlite3_column_type()`docs[1] state: | If the SQL statement does not currently point to a valid row, or if | the column index is out of range, the result is undefined. Fortunately, we can use `sqlite3_data_count()` instead, since[2]: | If prepared statement P does not have results ready to return (via | calls to the sqlite3_column() family of interfaces) then | sqlite3_data_count(P) returns 0. Thus, we guard `SQLite3::columnType()` with `sqlite3_data_count()`, and completely drop updating the `php_sqlite3_result_object.complete` field, but keep it for ABI BC purposes. [1] <https://www.sqlite.org/c3ref/column_blob.html> [2] <https://www.sqlite.org/c3ref/data_count.html>
2020-02-21 20:24:37 +08:00
- SQLite3:
. Fixed bug #79294 (::columnType() may fail after SQLite3Stmt::reset()). (cmb)
Fix #79254: getenv() w/o arguments not showing changes To be able to see changes done only with `SetEnvironmentVariable()`, we have to use `GetEnvironmentStrings()` instead of `environ`, because the latter sees only changes done with `putenv()`. For best backward compatibility we're using `GetEnvironmentStringsA()`; switching to the wide string version likely makes sense for master, though.
2020-02-11 16:43:15 +08:00
- Standard:
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fix NEWS
2020-03-17 18:08:45 +08:00
. Fixed bug #79329 (get_headers() silently truncates after a null byte).
(CVE-2020-7066) (cmb)
Fix #79254: getenv() w/o arguments not showing changes To be able to see changes done only with `SetEnvironmentVariable()`, we have to use `GetEnvironmentStrings()` instead of `environ`, because the latter sees only changes done with `putenv()`. For best backward compatibility we're using `GetEnvironmentStringsA()`; switching to the wide string version likely makes sense for master, though.
2020-02-11 16:43:15 +08:00
. Fixed bug #79254 (getenv() w/o arguments not showing changes). (cmb)
Fixes #79265: Improper injection of Host header when using fopen for http requests Check all occurrences of the string "host:" (and other headers), not just the first one.
2020-02-24 13:04:37 +08:00
. Fixed bug #79265 (Improper injection of Host header when using fopen for
http requests). (Miguel Xavier Penha Neto)
Fix #79254: getenv() w/o arguments not showing changes To be able to see changes done only with `SetEnvironmentVariable()`, we have to use `GetEnvironmentStrings()` instead of `environ`, because the latter sees only changes done with `putenv()`. For best backward compatibility we're using `GetEnvironmentStringsA()`; switching to the wide string version likely makes sense for master, though.
2020-02-11 16:43:15 +08:00
Next is 7.3.16
2020-02-04 18:38:29 +08:00
20 Feb 2020, PHP 7.3.15
Bump version
2020-01-07 18:03:19 +08:00
Fixed bug #71876 This is a backport of fcdc0a6db0ae63fbed9e3828137b899b844623ce to the PHP-7.3 branch. We need to make sure that OnUpdateString is also called for a NULL value, otherwise the reset of the encoding at the end of the request will not work. I believe I already tried to land this before once, but it didn't actually end up on the PHP-7.3 branch due to a push conflict that I only noticed just now.
2020-01-03 18:14:45 +08:00
- Core:
. Fixed bug #71876 (Memory corruption htmlspecialchars(): charset `*' not
supported). (Nikita)
Fix NEWS [ci skip] Cosmetics.
2020-02-20 17:55:17 +08:00
. Fixed bug #79146 (cscript can fail to run on some systems). (clarodeus)
Fix bug #78323: Code 0 is returned on invalid options Set CLI exit code to 1 when invalid parameters are passed, and print error to stderr.
2020-01-18 03:26:35 +08:00
. Fixed bug #78323 (Code 0 is returned on invalid options). (Ivan Mikheykin)
Fix bug #76047 Unlink the current stack frame before freeing CVs or extra args. This means it will no longer show up in back traces that are generated during CV destruction. We already did this prior to destructing the object/closure, presumably for the same reason.
2020-01-31 17:21:37 +08:00
. Fixed bug #76047 (Use-after-free when accessing already destructed
backtrace arguments). (Nikita)
Fixed bug #71876 This is a backport of fcdc0a6db0ae63fbed9e3828137b899b844623ce to the PHP-7.3 branch. We need to make sure that OnUpdateString is also called for a NULL value, otherwise the reset of the encoding at the end of the request will not work. I believe I already tried to land this before once, but it didn't actually end up on the PHP-7.3 branch due to a push conflict that I only noticed just now.
2020-01-03 18:14:45 +08:00
Fix #79078: Hypothetical use-after-free in curl_multi_add_handle() To avoid this, we have to verify the handlers already in `curl_multi_add_handle()`, not only in `curl_multi_exec()`.
2020-01-08 18:52:24 +08:00
- CURL:
. Fixed bug #79078 (Hypothetical use-after-free in curl_multi_add_handle()).
(cmb)
Fix NEWS [ci skip] Cosmetics.
2020-02-20 17:55:17 +08:00
- Intl:
Fix #79212: NumberFormatter::format() may detect wrong type We have to convert to number *before* detecting the type, to cater to internal objects implementing `cast_object`. We also get rid of the fallback behavior of using `FORMAT_TYPE_INT32`, because that can no longer happen; after `convert_scalar_to_number_ex` the type is either `IS_LONG` or `IS_DOUBLE`. We cater explicitly to the `IS_ARRAY` case what also avoids triggering a type confusion when `::TYPE_INT64` is passed as `$type`.
2020-02-02 20:38:34 +08:00
. Fixed bug #79212 (NumberFormatter::format() may detect wrong type). (cmb)
Fix #79191: Error in SoapClient ctor disables DOMDocument::save() The culprit is the too restrictive fix for bug #71536, which prevents `php_libxml_streams_IO_write()` from properly executing when unclean shutdown is flagged. A *more* suitable solution is to move the `xmlwriter_free_resource_ptr()` call from the `free_obj` handler to an added `dtor_obj` handler, to avoid to write to a closed stream in case of late object freeing. This makes the `EG(active)` guard superfluous. We also fix bug79029.phpt which has to use different variables for the three parts to actually check the original shutdown issue. Thanks to bwoebi and daverandom for helping to investigate this issue.
2020-02-04 06:10:20 +08:00
- Libxml:
. Fixed bug #79191 (Error in SoapClient ctor disables DOMDocument::save()).
(Nikita, cmb)
Fix #79154: mb_convert_encoding() can modify $from_encoding We must not modify arrays passed by value.
2020-01-22 17:25:37 +08:00
- MBString:
. Fixed bug #79154 (mb_convert_encoding() can modify $from_encoding). (cmb)
Fix #79084: mysqlnd may fetch wrong column indexes with MYSQLI_BOTH Column names can be numeric strings, so we have to make sure to insert the column values with the appropriate numeric keys, instead of adding them.
2020-01-13 18:47:40 +08:00
- MySQLnd:
. Fixed bug #79084 (mysqlnd may fetch wrong column indexes with MYSQLI_BOTH).
(cmb)
Fix #79145: openssl memory leak We must increase the refcount of `return_value` only if `cert` is a resource; this is already done in `php_openssl_evp_from_zval()`, though.
2020-01-21 23:17:25 +08:00
- OpenSSL:
. Fixed bug #79145 (openssl memory leak). (cmb, Nikita)
Fix #76584: PharFileInfo::decompress not working We actually have to decompress, when told to do so.
2020-01-26 20:33:07 +08:00
- Phar:
Fix NEWS [ci skip]
2020-02-18 02:35:42 +08:00
. Fixed bug #79082 (Files added to tar with Phar::buildFromIterator have
all-access permissions). (CVE-2020-7063) (stas)
. Fixed bug #79171 (heap-buffer-overflow in phar_extract_file).
Remove extra tab in NEWS [ci skip]
2020-02-18 18:09:37 +08:00
(CVE-2020-7061) (cmb)
Fix #76584: PharFileInfo::decompress not working We actually have to decompress, when told to do so.
2020-01-26 20:33:07 +08:00
. Fixed bug #76584 (PharFileInfo::decompress not working). (cmb)
Fixed bug #79115
2020-01-17 18:37:35 +08:00
- Reflection:
. Fixed bug #79115 (ReflectionClass::isCloneable call reflected class
__destruct). (Nikita)
Fix NEWS [ci skip]
2020-02-18 02:35:42 +08:00
- Session:
. Fixed bug #79221 (Null Pointer Dereference in PHP Session Upload Progress).
(CVE-2020-7062) (stas)
Fixed bug #79151 Make sure we also NULL out next/prev of the removed element on pop/shift. This only matter is that element is still being referenced by an iterator.
2020-01-23 21:19:20 +08:00
- SPL:
. Fixed bug #79151 (heap use after free caused by
spl_dllist_it_helper_move_forward). (Nikita)
Fixed bug #78902
2019-12-16 09:10:28 +08:00
- Standard:
. Fixed bug #78902 (Memory leak when using stream_filter_append). (liudaixiao)
Fix #78090: bug45161.phpt takes forever to finish Not all systems support the discard protocol (TCP port 9), and since there is no particular reason to use it, we switch to using actual server testing.
2020-02-03 18:47:01 +08:00
- Testing:
. Fixed bug #78090 (bug45161.phpt takes forever to finish). (cmb)
Fix #70078: XSL callbacks with nodes as parameter leak memory The fix for bug #49634 solved a double-free by copying the node with `xmlDocCopyNodeList()`, but the copied node is later freed by calling `xmlFreeNode()` instead of `xmlFreeNodeList()`, thus leaking memory. However, there is no need to treat the node as node list, i.e. to copy also the node's siblings; just creating a recursive copy of the node with `xmlDocCopyNode()` is sufficient, while that also avoids the leak.
2020-01-30 01:23:51 +08:00
- XSL:
. Fixed bug #70078 (XSL callbacks with nodes as parameter leak memory). (cmb)
Bump version
2020-01-07 18:03:19 +08:00
23 Jan 2020, PHP 7.3.14
Next is 7.3.14
2019-12-03 19:04:17 +08:00
Fixed bug #78999 (Cycle leak when using function result as temporary)
2019-12-20 04:11:08 +08:00
- Core
. Fixed bug #78999 (Cycle leak when using function result as temporary).
(Dmitry)
Extend CURLFile to support streams Due to former restrictions of the libcurl API, curl multipart/formdata file uploads supported only proper files. However, as of curl 7.56.0 the new `curl_mime_*()` API is available (and already supported by PHP[1]), which allows us to support arbitrary *seekable* streams, which is generally desirable, and particularly resolves issues with the transparent Unicode and long part support on Windows (see bug #77711). Note that older curl versions are still supported, but CURLFile is still restricted to proper files in this case. [1] <http://git.php.net/?p=php-src.git;a=commit;h=a83b68ba56714bfa06737a61af795460caa4a105> (cherry picked from commit c68dc6b5e37e74d89e0a387079139c054c8faa81)
2019-04-29 16:21:07 +08:00
- CURL:
Fix #79033: Curl timeout error with specific url and post We must not set an empty mime structure as `CURLOPT_MIMEPOST`; instead we set it to `NULL` if `CURLOPT_POSTFIELDS` has been set to an empty array.
2019-12-28 17:47:03 +08:00
. Fixed bug #79033 (Curl timeout error with specific url and post). (cmb)
Extend CURLFile to support streams Due to former restrictions of the libcurl API, curl multipart/formdata file uploads supported only proper files. However, as of curl 7.56.0 the new `curl_mime_*()` API is available (and already supported by PHP[1]), which allows us to support arbitrary *seekable* streams, which is generally desirable, and particularly resolves issues with the transparent Unicode and long part support on Windows (see bug #77711). Note that older curl versions are still supported, but CURLFile is still restricted to proper files in this case. [1] <http://git.php.net/?p=php-src.git;a=commit;h=a83b68ba56714bfa06737a61af795460caa4a105> (cherry picked from commit c68dc6b5e37e74d89e0a387079139c054c8faa81)
2019-04-29 16:21:07 +08:00
Fix #79015: undefined-behavior in php_date.c We check that the given microsecond fraction is in the valid range [0, 1000000[, and otherwise mark it as invalid. We also drop the useless do loop; a plain block is sufficient here.
2019-12-23 21:42:54 +08:00
- Date:
. Fixed bug #79015 (undefined-behavior in php_date.c). (cmb)
Fix #78808: [LMDB] MDB_MAP_FULL: Environment mapsize limit reached We implement support for a fifth parameter, which allows to specify the mapsize. The parameter defaults to zero, in which case the compiled in default mapsize (usually 1048576) will be used. The mapsize should be a multiple of the page size of the OS.
2019-11-14 18:21:41 +08:00
- DBA:
. Fixed bug #78808 ([LMDB] MDB_MAP_FULL: Environment mapsize limit reached).
(cmb)
Fix #74170: locale information change after mime_content_type Some functions in libmagic (distributed with fileinfo extension) perform this sequence of calls: func() { setlocale(LC_TYPE, "C") .. do some work .. setlocale(LC_TYPE, "") } It effectively resets LC_TYPE if it that was set before the function call. To avoid manipulations with current locale at all, the problematic functions were modified to use locale-independent functions.
2019-08-29 15:29:19 +08:00
- Fileinfo:
. Fixed bug #74170 (locale information change after mime_content_type).
(Sergei Turchanov)
Fix #78923: Artifacts when convoluting image with transparency We have to properly initialize `pxl` before using it. Fix ported from <https://github.com/libgd/libgd/pull/559>.
2019-12-07 10:56:37 +08:00
- GD:
. Fixed bug #78923 (Artifacts when convoluting image with transparency).
(wilson chen)
Fix #79067: gdTransformAffineCopy() may use unitialized values We port <https://github.com/libgd/libgd/commit/7a06c1669c563917bc48c464521e3de962ddb4e8>.
2020-01-06 16:35:13 +08:00
. Fixed bug #79067 (gdTransformAffineCopy() may use unitialized values). (cmb)
Fix #79068: gdTransformAffineCopy() changes interpolation method We port <https://github.com/libgd/libgd/commit/9088591eae437358ee5b929adf82865e37e3001e>.
2020-01-06 17:33:47 +08:00
. Fixed bug #79068 (gdTransformAffineCopy() changes interpolation method).
(cmb)
Fix #78923: Artifacts when convoluting image with transparency We have to properly initialize `pxl` before using it. Fix ported from <https://github.com/libgd/libgd/pull/559>.
2019-12-07 10:56:37 +08:00
Fixed bug #79029 (Use After Free's in XMLReader / XMLWriter). We backport the fix PHP 7.3, since this branch is affected as well. (cherry picked from commit b5e004379647bd1ebb75eb2eac8826fb6abdd3d8) (cherry picked from commit e36daa6927c05d2e687bb77495ef206cde118b33) (cherry picked from commit 2704ee6844c03348de9d15e74646d09007ef0f7c)
2019-12-25 19:05:44 +08:00
- Libxml:
. Fixed bug #79029 (Use After Free's in XMLReader / XMLWriter). (Laruence)
Update NEWS wrt. sec fixes
2020-01-21 18:31:14 +08:00
- Mbstring:
. Fixed bug #79037 (global buffer-overflow in `mbfl_filt_conv_big5_wchar`).
(CVE-2020-7060) (Nikita)
Fix #79040: Warning Opcode handlers are unusable due to ASLR We must not use the same shared memory OPcache instance for different SAPIs, since their memory layout is different. To avoid this, we add the SAPI name (truncated to at most 20 characters) to the names of the memory base file, the mutex and the file mapping.
2019-12-30 19:20:31 +08:00
- OPcache:
. Fixed bug #79040 (Warning Opcode handlers are unusable due to ASLR). (cmb)
Fix #78402: pcntl_signal() misleading error message An error message can be misleading when a handler passed to pcntl_signal() is not callable.
2019-12-18 03:03:42 +08:00
- Pcntl:
. Fixed bug #78402 (Converting null to string in error message is bad DX).
(SATŌ Kentarō)
Fix #78983: pdo_pgsql config.w32 cannot find libpq-fe.h When configured with a path specified.
2019-12-18 01:47:08 +08:00
- PDO_PgSQL:
. Fixed bug #78983 (pdo_pgsql config.w32 cannot find libpq-fe.h). (SATŌ
Kentarō)
Fix #78980: pgsqlGetNotify() overlooks dead connection pgsqlGetNotify() didn't check result of PQconsumeInput().
2019-12-18 01:16:55 +08:00
. Fixed bug #78980 (pgsqlGetNotify() overlooks dead connection). (SATŌ
Kentarō)
Fix #78982: pdo_pgsql returns dead persistent connection Call PQconsumeInput() before PQstatus() to update the status.
2019-12-18 01:36:03 +08:00
. Fixed bug #78982 (pdo_pgsql returns dead persistent connection). (SATŌ
Kentarō)
Fix #78983: pdo_pgsql config.w32 cannot find libpq-fe.h When configured with a path specified.
2019-12-18 01:47:08 +08:00
Update NEWS wrt. sec fixes
2020-01-21 18:31:14 +08:00
- Session:
. Fixed bug #79091 (heap use-after-free in session_create_id()). (cmb, Nikita)
Fix #78538: shmop memory leak If the descriptor's refcount drops to zero, we have to unmap the respective file view, to avoid leaking memory.
2019-11-25 21:05:15 +08:00
- Shmop:
. Fixed bug #78538 (shmop memory leak). (cmb)
Fix #54298: Using empty additional_headers adding extraneous CRLF If the header string is empty, we pass `NULL` to `php_mail()` to avoid further checks on the string length.
2020-01-05 22:15:09 +08:00
- Standard:
Update NEWS wrt. sec fixes
2020-01-21 18:31:14 +08:00
. Fixed bug #79099 (OOB read in php_strip_tags_ex). (CVE-2020-7059). (cmb)
Fix #54298: Using empty additional_headers adding extraneous CRLF If the header string is empty, we pass `NULL` to `php_mail()` to avoid further checks on the string length.
2020-01-05 22:15:09 +08:00
. Fixed bug #54298 (Using empty additional_headers adding extraneous CRLF).
(cmb)
fix release date
2019-12-18 21:17:31 +08:00
18 Dec 2019, PHP 7.3.13
7.3.13 is next
2019-11-06 01:17:04 +08:00
Update/fix NEWS [ci skip]
2019-12-17 16:51:30 +08:00
- Bcmath:
. Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046).
(cmb)
Fixed bug #78787 Not the first time inheritance of shadow properties causes an issue, thankfully this whole concept is gone in PHP 7.4.
2019-11-06 19:51:25 +08:00
- Core:
Update/fix NEWS [ci skip]
2019-12-17 16:51:30 +08:00
. Fixed bug #78862 (link() silently truncates after a null byte on Windows).
(CVE-2019-11044). (cmb)
. Fixed bug #78863 (DirectoryIterator class silently truncates after a null
byte). (CVE-2019-11045). (cmb)
. Fixed bug #78943 (mail() may release string with refcount==1 twice).
(CVE-2019-11049). (cmb)
Fixed bug #78787 Not the first time inheritance of shadow properties causes an issue, thankfully this whole concept is gone in PHP 7.4.
2019-11-06 19:51:25 +08:00
. Fixed bug #78787 (Segfault with trait overriding inherited private shadow
property). (Nikita)
Fixed bug #78868 (Calling __autoload() with incorrect EG(fake_scope) value)
2019-11-25 19:05:43 +08:00
. Fixed bug #78868 (Calling __autoload() with incorrect EG(fake_scope) value).
(Antony Dovgal, Dmitry)
Fix #78296: is_file fails to detect file If we're constructing extended-length paths (i.e. paths prefixed with `\\?\`), we have to replace all forward slashes with backward slashes, because the former are not supported by Windows for extended-length paths. The more efficient and likely cleaner alternative solution would be to cater to this in `php_win32_ioutil_normalize_path_w()` by always replacing forward slashes, but that might break existing code. It might be sensible to change that for `master`, though.
2019-11-25 19:16:54 +08:00
. Fixed bug #78296 (is_file fails to detect file). (cmb)
Fixed bug #78787 Not the first time inheritance of shadow properties causes an issue, thankfully this whole concept is gone in PHP 7.4.
2019-11-06 19:51:25 +08:00
Update/fix NEWS [ci skip]
2019-12-17 16:51:30 +08:00
- EXIF:
. Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer).
(CVE-2019-11050). (Nikita)
. Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047).
(Nikita)
Fix #78849: GD build broken with -D SIGNED_COMPARE_SLOW Apparently, this has not been tested for a long time, and might be a refactoring relict. Anyhow, we have to pass the context to `GIFNextPixel` as well.
2019-11-21 16:49:29 +08:00
- GD:
. Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW). (cmb)
Upgrade to Oniguruma 6.9.4 Oniguruma 6.9.4 fixes several CVEs.
2019-11-30 16:38:46 +08:00
- MBString:
. Upgraded bundled Oniguruma to 6.9.4. (cmb)
Fix ASLR related invalid opline handler issues Opcache stores `opline->handler`s in shared memory. These pointers are invalid, if the main PHP DLL is loaded at another base address due to ASLR. We therefore store the address of `execute_ex` in the mmap base file, and check on startup whether it matches its current address. If not, we fall back on the file cache if enabled, and bail out otherwise. This still does not address cases where the opline handler is located inside of another DLL (e.g. for some profilers, debuggers), but there seems to be no general solution for now. (cherry picked from commit 8ba10b8fbc020dc225d3b19d8f088f1351a3e304)
2019-11-12 23:12:59 +08:00
- OPcache:
. Fixed potential ASLR related invalid opline handler issues. (cmb)
Update NEWS
2019-11-18 19:36:01 +08:00
. Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).
(Tyson Andre)
Fix ASLR related invalid opline handler issues Opcache stores `opline->handler`s in shared memory. These pointers are invalid, if the main PHP DLL is loaded at another base address due to ASLR. We therefore store the address of `execute_ex` in the mmap base file, and check on startup whether it matches its current address. If not, we fall back on the file cache if enabled, and bail out otherwise. This still does not address cases where the opline handler is located inside of another DLL (e.g. for some profilers, debuggers), but there seems to be no general solution for now. (cherry picked from commit 8ba10b8fbc020dc225d3b19d8f088f1351a3e304)
2019-11-12 23:12:59 +08:00
Fix #78853: preg_match() may return integer > 1 Commit 54ebebd[1] optimized the match loop, but for this case it has been overlooked, that we must only loop if we're doing global matching. [1] <http://git.php.net/?p=php-src.git;a=commit;h=54ebebd686255c5f124af718c966edb392782d4a>
2019-11-23 02:21:43 +08:00
- PCRE:
. Fixed bug #78853 (preg_match() may return integer > 1). (cmb)
Fixed bug #78759 Handle INDIRECT values in array.
2019-11-07 18:15:29 +08:00
- Standard:
. Fixed bug #78759 (array_search in $GLOBALS). (Nikita)
Fix #77638: var_export'ing certain class instances segfaults If objects return immutable property hash tables (typically, `zend_empty_array`), we must not try to apply recursion protection on those.
2019-11-25 22:44:15 +08:00
. Fixed bug #77638 (var_export'ing certain class instances segfaults). (cmb)
Fix #78840: imploding $GLOBALS crashes We add support for IS_INDIRECT zvals to implode().
2019-11-26 17:19:27 +08:00
. Fixed bug #78840 (imploding $GLOBALS crashes). (cmb)
Fix #78833: Integer overflow in pack causes out-of-bound access We check for potential signed integer overflow, and bail out gracefully, in that case.
2019-11-19 21:22:26 +08:00
. Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
(cmb)
Fix #78814: strip_tags allows / in tag name => whitelist bypass When normalizing tags to check whether they are contained in the set of allowable tags, we must not strip slashes, unless they come immediately after the opening `<`, or immediately before the closing `>`.
2019-11-17 21:14:59 +08:00
. Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).
(cmb)
Bump for 7.2.26-dev
2019-11-05 23:56:19 +08:00
7.3.13 is next
2019-11-06 01:17:04 +08:00
21 Nov 2019, PHP 7.3.12
7.3.12 is next
2019-10-08 18:04:25 +08:00
Fixed bug #78658
2019-10-09 22:59:38 +08:00
- Core:
. Fixed bug #78658 (Memory corruption using Closure::bindTo). (Nikita)
Fix #78656: Parse errors classified as highest log-level
2019-10-09 20:08:22 +08:00
. Fixed bug #78656 (Parse errors classified as highest log-level). (Erik
Lundin)
Fix bug #78752 NULL out the execute_data before destroying it, otherwise GC may trigger while the execute_data is partially destroyed, resulting in double-frees. The handling of call stack unfreezing is a bit awkward because it's a ZEND_API function, so we can't change the signature.
2019-10-28 17:23:20 +08:00
. Fixed bug #78752 (Segfault if GC triggered while generator stack frame is
being destroyed). (Nikita)
Fixed bug #78689
2019-10-29 22:05:59 +08:00
. Fixed bug #78689 (Closure::fromCallable() doesn't handle
[Closure, '__invoke']). (Nikita)
Fixed bug #78658
2019-10-09 22:59:38 +08:00
Fix #78694: Appending to a variant array causes segfault `write_dimension` object handlers have to be able to handle `NULL` `offset`s; for now we simply throw an exception instead of following the `NULL` pointer.
2019-10-19 17:41:28 +08:00
- COM:
. Fixed bug #78694 (Appending to a variant array causes segfault). (cmb)
Fix #70153 \DateInterval incorrectly unserialized Added a separate macro for reading 'days' property, so that bool(false) is correctly converted to the proper internal representation.
2019-09-17 00:50:55 +08:00
- Date:
. Fixed bug #70153 (\DateInterval incorrectly unserialized). (Maksim Iakunin)
Fix #78751: Serialising DatePeriod converts DateTimeImmutable When getting the properties of a DatePeriod instance we have to retain the proper classes, and when restoring a DatePeriod instance we have to cater to DateTimeImmutable instances as well.
2019-10-25 21:43:38 +08:00
. Fixed bug #78751 (Serialising DatePeriod converts DateTimeImmutable). (cmb)
Fix #70153 \DateInterval incorrectly unserialized Added a separate macro for reading 'days' property, so that bool(false) is correctly converted to the proper internal representation.
2019-09-17 00:50:55 +08:00
Fix #78642: Wrong libiconv version displayed The high byte of `_libiconv_version` specifies the major version; the low byte the minor version.
2019-10-08 18:09:11 +08:00
- Iconv:
. Fixed bug #78642 (Wrong libiconv version displayed). (gedas at martynas,
cmb).
next is 7.2.25
2019-10-08 17:36:10 +08:00
Fix checksum calculation for opcache
2019-10-09 16:38:11 +08:00
- OpCache:
. Fixed bug #78654 (Incorrectly computed opcache checksum on files with
non-ascii characters). (mhagstrand)
Fixed bug #78747
2019-10-25 18:47:18 +08:00
. Fixed bug #78747 (OpCache corrupts custom extension result). (Nikita)
Fix checksum calculation for opcache
2019-10-09 16:38:11 +08:00
Fixed bug #78775 Clear the OpenSSL error queue before performing SSL stream operations. As we don't control all code that could possibly be using OpenSSL, we can't rely on the error queue being empty.
2019-11-05 19:13:46 +08:00
- OpenSSL:
. Fixed bug #78775 (TLS issues from HTTP request affecting other encrypted
connections). (Nikita)
Fix bug #78697: inaccurate error message
2019-10-20 03:27:37 +08:00
- Reflection:
. Fixed bug #78697 (ReflectionClass::ImplementsInterface - inaccurate error
message with traits). (villfa)
Fix #78665: Multicasting may leak memory
2019-10-12 19:49:39 +08:00
- Sockets:
. Fixed bug #78665 (Multicasting may leak memory). (cmb)
7.3.12 is next
2019-10-08 18:04:25 +08:00
24 Oct 2019, PHP 7.3.11
PHP 7.3.10RC1 has been tagged
2019-09-10 21:11:54 +08:00
Fix #78535: auto_detect_line_endings value not parsed as bool
2019-09-13 02:44:08 +08:00
- Core:
. Fixed bug #78535 (auto_detect_line_endings value not parsed as bool).
(bugreportuser)
Fix #78620: Out of memory error The integer addition in `ZEND_MM_ALIGNED_SIZE_EX` can overflow, what we have to catch early.
2019-10-04 01:23:05 +08:00
. Fixed bug #78620 (Out of memory error). (cmb, Nikita)
Fix #78535: auto_detect_line_endings value not parsed as bool
2019-09-13 02:44:08 +08:00
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: NEWS
2019-09-12 11:52:24 +08:00
- Exif :
Fix bug #78525 When calling free_result_buffers(), also free field metadata and restore the mempool state to what it was before any allocations have been made. Remove the mempool save/restore logic for the inner result set as this is now handled on a higher level.
2019-09-12 19:17:27 +08:00
. Fixed bug #78442 ('Illegal component' on exif_read_data since PHP7)
NEWS
2019-09-12 11:50:53 +08:00
(Kalle)
Bump for 7.2.24
2019-09-11 01:03:27 +08:00
Fix #78413: php-fpm request_terminate_timeout does not take effect after fastcgi_finish_request To retain legacy behavior I decided to add an option to control request termination logic. If request_terminate_timeout_track_finished is set, then request will be tracked for time limits even after fastcgi_finish_request was called. This patch depends on the fix provided in BUG 78469 (otherwise php-fpm workers listening on named pipes on Windows will be erroneously terminated) (PR #4636)
2019-08-28 12:37:52 +08:00
- FPM:
Update NEWS
2019-10-22 15:50:11 +08:00
. Fixed bug #78599 (env_path_info underflow in fpm_main.c can lead to RCE).
(CVE-2019-11043) (Jakub Zelenka)
Fix #78413: php-fpm request_terminate_timeout does not take effect after fastcgi_finish_request To retain legacy behavior I decided to add an option to control request termination logic. If request_terminate_timeout_track_finished is set, then request will be tracked for time limits even after fastcgi_finish_request was called. This patch depends on the fix provided in BUG 78469 (otherwise php-fpm workers listening on named pipes on Windows will be erroneously terminated) (PR #4636)
2019-08-28 12:37:52 +08:00
. Fixed bug #78413 (request_terminate_timeout does not take effect after
fastcgi_finish_request). (Sergei Turchanov)
Fix #78579: mb_decode_numericentity: args number inconsistency mb_decode_numericentity() accepts a fourth optional parameter, which is unused, however. Since this parameter doesn't do any harm, and to avoid the small BC break, we're keeping this parameter for PHP 7, but adjust the arginfo. For PHP 8, we will remove this parameter.
2019-09-21 21:56:06 +08:00
- MBString:
Update NEWS
2019-10-22 15:50:11 +08:00
. Fixed bug #78633 (Heap buffer overflow (read) in mb_eregi). (cmb)
Fix #78579: mb_decode_numericentity: args number inconsistency mb_decode_numericentity() accepts a fourth optional parameter, which is unused, however. Since this parameter doesn't do any harm, and to avoid the small BC break, we're keeping this parameter for PHP 7, but adjust the arginfo. For PHP 8, we will remove this parameter.
2019-09-21 21:56:06 +08:00
. Fixed bug #78579 (mb_decode_numericentity: args number inconsistency).
(cmb)
Fix #78609: mb_check_encoding() no longer supports stringable objects We apply type juggling for other types than array.
2019-09-30 17:07:03 +08:00
. Fixed bug #78609 (mb_check_encoding() no longer supports stringable
objects). (cmb)
Fix #78579: mb_decode_numericentity: args number inconsistency mb_decode_numericentity() accepts a fourth optional parameter, which is unused, however. Since this parameter doesn't do any harm, and to avoid the small BC break, we're keeping this parameter for PHP 7, but adjust the arginfo. For PHP 8, we will remove this parameter.
2019-09-21 21:56:06 +08:00
Fix bug #76809 (SSL settings aren't respected when persistent connection is reused)
2018-09-04 00:18:37 +08:00
- MySQLi:
. Fixed bug #76809 (SSL settings aren't respected when persistent connections
are used). (fabiomsouto)
Fix bug #78525 When calling free_result_buffers(), also free field metadata and restore the mempool state to what it was before any allocations have been made. Remove the mempool save/restore logic for the inner result set as this is now handled on a higher level.
2019-09-12 19:17:27 +08:00
- Mysqlnd:
. Fixed bug #78525 (Memory leak in pdo when reusing native prepared
statements). (Nikita)
Fixed bug #78272 Use MAP_JIT only when running under hardened runtime, because MAP_JIT is incompatible with fork(). The check is based on https://github.com/mono/mono/commit/f879e35e3ed7496d819bd766deb8be6992d068ed.
2019-09-18 15:44:00 +08:00
- PCRE:
. Fixed bug #78272 (calling preg_match() before pcntl_fork() will freeze
child process). (Nikita)
Fix #78623: Regression caused by "SP call yields additional empty result set" This reverts commit 41a4379cb45419a376043ca5f8c5a2bca82cea7c.
2019-10-07 14:58:11 +08:00
- PDO_MySQL:
. Fixed bug #78623 (Regression caused by "SP call yields additional empty
result set"). (cmb)
fix #78624: session_gc return value for user defined session handlers
2019-10-03 07:44:58 +08:00
- Session:
. Fixed bug #78624 (session_gc return value for user defined session
handlers). (bshaffer)
Fix #76342: file_get_contents waits twice specified timeout
2019-07-30 06:33:13 +08:00
- Standard:
. Fixed bug #76342 (file_get_contents waits twice specified timeout).
(Thomas Calvet)
Fixed bug #78612
2019-09-30 21:05:35 +08:00
. Fixed bug #78612 (strtr leaks memory when integer keys are used and the
subject string shorter). (Nikita)
Fix #76859 stream_get_line skips data if used with data-generating filter stream_get-line repeatedly calls php_stream_fill_read_buffer until enough data is accumulated in buffer. However, when stream contains filters attached to it, then each call to fill buffer essentially resets buffer read/write pointers and new data is written over old. This causes stream_get_line to skip parts of data from stream This patch fixes such behavior, so fill buffer call will append.
2018-09-18 12:44:01 +08:00
. Fixed bug #76859 (stream_get_line skips data if used with data-generating
filter). (kkopachev)
Fix #76342: file_get_contents waits twice specified timeout
2019-07-30 06:33:13 +08:00
Fix #78641: addGlob can modify given remove_path value `remove_path` points to the given string, so we must not modify it. Instead we use a duplicate, if we need the modification. We may want to switch to `zend_string`s in master.
2019-10-08 15:25:56 +08:00
- Zip:
. Fixed bug #78641 (addGlob can modify given remove_path value). (cmb)
Update NEWS
2019-09-24 17:13:55 +08:00
26 Sep 2019, PHP 7.3.10
Next will be 7.3.10
2019-08-14 05:57:48 +08:00
Fixed bug #77922 In PHP 7.3 shadow properties are no longer duplicated. Make sure we only release them if the property was defined on the parent class, which means that it changed from private->shadow, which is where duplication does happen.
2019-08-17 16:57:26 +08:00
- Core:
Fix #78220: Can't access OneDrive folder As of Windows 1903, when the OneDrive on-demand feature is enabled, the OneDrive folder is reported as reparse point by `FindFirstFile()`, but trying to get information about the reparse point using `DeviceIoControl()` fails with `ERROR_NOT_A_REPARSE_POINT`. We work around this problem by falling back to `GetFileInformationByHandle()` if that happens, but only if the reparse point is reported as cloud reparse point, and only if PHP is running on Windows 1903 or later. The patch has been developed in collaboration with ab@php.net. We should keep an eye on the somewhat quirky OneDrive behavior, since it might change again in a future Windows release.
2019-08-20 01:44:37 +08:00
. Fixed bug #78220 (Can't access OneDrive folder). (cmb, ab)
Fixed bug #77922 In PHP 7.3 shadow properties are no longer duplicated. Make sure we only release them if the property was defined on the parent class, which means that it changed from private->shadow, which is where duplication does happen.
2019-08-17 16:57:26 +08:00
. Fixed bug #77922 (Double release of doc comment on inherited shadow
property). (Nikita)
Fix #78441: Parse error due to heredoc identifier followed by digit Since digits are allowed for identifiers, we have to cater to them as well.
2019-08-22 04:51:51 +08:00
. Fixed bug #78441 (Parse error due to heredoc identifier followed by digit).
(cmb)
Fix #77812: Interactive mode does not support PHP 7.3-style heredoc As of PHP 7.3.0, the rules regarding the heredoc and nowdoc closing identifier have been relaxed. While formerly, the closing identifier was required to be placed at the beginning of a line and to be immediately followed by (a semicolon and) a line break, it may now be preceeded by whitespace, and may be followed by any non-word character. We adjust the recognition logic respectively.
2019-08-23 19:59:10 +08:00
. Fixed bug #77812 (Interactive mode does not support PHP 7.3-style heredoc).
(cmb, Nikita)
Fixed bug #77922 In PHP 7.3 shadow properties are no longer duplicated. Make sure we only release them if the property was defined on the parent class, which means that it changed from private->shadow, which is where duplication does happen.
2019-08-17 16:57:26 +08:00
Fixed bug #78469 fcgi_accept_request function is supposed to call a FastCGI implementation's on_accept hook when entering an "accepting" stage (that is right before calling "accept"). This hook implementation (fpm_request_accepting) updates a worker state to an "accepting" state which is effectively an "Idle" state, and updates counters on the scoreboard of the corresponding pool (idle++, active--). But this is not done when listening for client connections on a named pipe on Windows platform. In that case a combination of ConnectNamedPipe/WaitForSingleObject is used (to be able to catch in_shutdown as far as I understand), but it is nonetheless functionally equivalent to "accept" call. Also by not calling on_hook neither a worker's state is updated to "accepting" state nor scoreboard counters are updated.
2019-08-28 11:05:14 +08:00
- FastCGI:
. Fixed bug #78469 (FastCGI on_accept hook is not called when using named
pipes on Windows). (Sergei Turchanov)
Fix bug #78334 (fpm log prefix message includes wrong stdout/stderr notation)
2019-07-25 22:22:45 +08:00
- FPM:
. Fixed bug #78334 (fpm log prefix message includes wrong stdout/stderr
notation). (Tsuyoshi Sadakata)
Revert "Move to non deprecated API on suitable ICU versions" This reverts commit 13a2f2d041999dca0066542f2a552798fab9a13d. The APIs used by this commit aren't entirely equivalent to the original ones.
2019-08-16 23:25:33 +08:00
- Intl:
. Ensure IDNA2003 rules are used with idn_to_ascii() and idn_to_utf8()
when requested. (Sara)
Update NEWS
2019-09-24 17:13:55 +08:00
- MBString:
. Fixed bug #78559 (Heap buffer overflow in mb_eregi). (cmb)
fix the problem for connect_attr, set db condition, and add a new attribute _server_host
2019-08-12 10:00:31 +08:00
- MySQLnd:
. Fixed connect_attr issues and added the _server_host connection attribute.
(Qianqian Bu)
Fix #78473: odbc_close() closes arbitrary resources We have to bail out, if an invalid resource is given. For consistency with the other `zend_fetch_resource(2)` calls, we return `FALSE`.
2019-08-28 23:51:57 +08:00
- ODBC:
. Fixed bug #78473 (odbc_close() closes arbitrary resources). (cmb)
Fix #41997: SP call yields additional empty result set When stored procedures are called, the "final result set is a status result that includes no result set". Calling `::nextRowset()` on the actual last result set should return FALSE, since there is actually no further result set to be processed.
2019-08-06 20:30:41 +08:00
- PDO_MySQL:
. Fixed bug #41997 (SP call yields additional empty result set). (cmb)
Fix #78510: Partially uninitialized buffer returned by sodium_crypto_generichash_init() Backport jedisct1/libsodium.php@28d13bf437cb969a0583031fc7ac54c5a8dc8116.
2019-09-09 21:30:28 +08:00
- sodium:
. Fixed bug #78510 (Partially uninitialized buffer returned by
sodium_crypto_generichash_init()). (Frank Denis, cmb)
Next will be 7.3.10
2019-08-14 05:57:48 +08:00
29 Aug 2019, PHP 7.3.9
next is 7.2.22
2019-07-16 16:38:20 +08:00
Add test for bug #78363
2019-08-02 16:37:44 +08:00
- Core:
. Fixed bug #78363 (Buffer overflow in zendparse). (Nikita)
Fixed bug #78379 (Cast to object confuses GC, causes crash)
2019-08-08 15:00:39 +08:00
. Fixed bug #78379 (Cast to object confuses GC, causes crash). (Dmitry)
Update NEWS This fix has been cherry-picked into PHP-7.3.9.
2019-08-15 21:28:52 +08:00
. Fixed bug #78412 (Generator incorrectly reports non-releasable $this as GC
child). (Nikita)
Add test for bug #78363
2019-08-02 16:37:44 +08:00
Fixed bug #77946 Save multi_info_read() result into easy handle.
2019-07-18 02:46:40 +08:00
- Curl:
. Fixed bug #77946 (Bad cURL resources returned by curl_multi_info_read()).
(Abyr Valg)
Fixed bug #78333 Don't dereference float/double values at unknown address, instead memcpy it into an aligned stack slot and dereference that.
2019-07-29 17:23:26 +08:00
- Exif:
. Fixed bug #78333 (Exif crash (bus error) due to wrong alignment and
invalid cast). (Nikita)
Prevent use after free in fpm_event_epoll_wait epoll event backend does not guarantee that child input/output events are reported before SIGCHILD due to finished worker. While a bunch of events received by epoll is being processed, child-related structures may be removed before dispatching of an I/O event for the same child. The result may be attempt to access to memory region allocated for another purpose, segfault of the master process, and unavailable web sites. Postpone processing of SIGCHILD events till other events in the same bunch are processed. Fix Bug #62418 php-fpm master process crashes Fix Bug #65398 Race condition between SIGCHLD and child stdout/stderr event leads to segfault Fix Bug #75112 php-fpm crashing, hard to reproduce Fix Bug #77114 php-fpm master segfaults in fpm_event_epoll_wait/fpm_event_fire Fix Bug #77185 Use-after-free in FPM master event handling
2019-01-23 13:19:29 +08:00
- FPM:
. Fixed bug #77185 (Use-after-free in FPM master event handling).
(Maksim Nikulin)
Fix #78342: Bus error in configure test for iconv //IGNORE We have to check the return value of iconv_open() for error, to avoid that and potentially other undesired behavior of iconv().
2019-07-29 14:48:13 +08:00
- Iconv:
. Fixed bug #78342 (Bus error in configure test for iconv //IGNORE). (Rainer
Jung)
Update NEWS
2019-07-23 08:13:36 +08:00
- LiteSpeed:
. Updated to LiteSpeed SAPI V7.5 (Fixed clean shutdown). (George Wang)
Update NEWS
2019-09-02 21:21:20 +08:00
- MBString:
. Fixed bug #78380 (Oniguruma 6.9.3 fixes CVEs). (CVE-2019-13224) (Stas)
Fix 78213: Empty row pocket We have to ensure that we don't create an arena which is smaller than its header, regardless of the configured alignment.
2019-08-01 00:05:40 +08:00
- MySQLnd:
Fix #78179: MariaDB server version incorrectly detected As of MariaDB 10.0.2, the server reports a fake version number as work- around for replication issues[1]. We apply the same "fix" as in the MariaDB client to cater to this. [1] <https://github.com/MariaDB/server/commit/c50ee6c23dbeb090963580754bec2f0a96ac0557#diff-5b45fa673c88c06a9651c7906364f592>
2019-08-02 22:42:49 +08:00
. Fixed bug #78179 (MariaDB server version incorrectly detected). (cmb)
Fix 78213: Empty row pocket We have to ensure that we don't create an arena which is smaller than its header, regardless of the configured alignment.
2019-08-01 00:05:40 +08:00
. Fixed bug #78213 (Empty row pocket). (cmb)
Fixed bug #77191
2019-08-13 17:19:58 +08:00
- Opcache:
. Fixed bug #77191 (Assertion failure in dce_live_ranges() when silencing is
used). (Nikita)
Fixed bug #69100
2019-07-17 21:58:29 +08:00
- Standard:
. Fixed bug #69100 (Bus error from stream_copy_to_stream (file -> SSL stream)
with invalid length). (Nikita)
Fix #78282: atime and mtime mismatch The fix for bug #78241 assumed that `time_t` would always be 64bit, but actually is 32bit for x86. We therefore enforce 64bit arithmetic to avoid wrapping. (cherry picked from commit bf242d58e77d50d4d8fdaaaca7ede686ec4467c0)
2019-07-13 15:40:50 +08:00
. Fixed bug #78282 (atime and mtime mismatch). (cmb)
Fix bug #78326 Similar to what fread() does, truncate the stream_get_contents() result if the original buffer was way too large.
2019-07-23 20:03:06 +08:00
. Fixed bug #78326 (improper memory deallocation on stream_get_contents()
with fixed length buffer). (Albert Casademont)
Fix #78346: strip_tags no longer handling nested php tags When the strip tags state machine has been flattened, an if statement has mistakenly been treated as else if. We fix this, and also simplify a bit right away.
2019-08-02 23:03:20 +08:00
. Fixed bug #78346 (strip_tags no longer handling nested php tags). (cmb)
Fixed bug #69100
2019-07-17 21:58:29 +08:00
Update NEWS [ci skip]
2019-07-16 19:44:13 +08:00
01 Aug 2019, PHP 7.3.8
Next is 7.3.8
2019-06-11 19:31:30 +08:00
Add syslog.filter=raw This passes through syslog message unchanged, without splitting messages at newlines.
2019-06-15 15:31:16 +08:00
- Core:
. Added syslog.filter=raw option. (Erik Lundin)
Fix #78212: Segfault in built-in webserver Since syslog's ident and facility parameters have been added to config[1], vsyslog() segfaults on Windows, if openlog() has not been called before. We bring back the removed lines to fix this. [1] <http://git.php.net/?p=php-src.git;a=commit;h=2475337bd8a0fad0dac03db3f5e7e9d331d53653>
2019-06-27 17:34:51 +08:00
. Fixed bug #78212 (Segfault in built-in webserver). (cmb)
Add syslog.filter=raw This passes through syslog message unchanged, without splitting messages at newlines.
2019-06-15 15:31:16 +08:00
Resolve discrepencies between second value yielded by gettimeofday and time, fixes #69044
2019-06-18 17:06:00 +08:00
- Date:
Fix bug #78291 Missing opcache directives New opcache directives have been added recently which are returned if using `ini_get_all('zend opcache')` but are not listed in the directives if using `opcache_get_configuration()`. This fix adds those missing directives as well as if `opcache.mmap_base` is used instead of `opcache.lockfile_path`. Also adds a test to ensure the directives match with both methods of fetching.
2019-07-14 21:49:38 +08:00
. Fixed bug #69044 (discrepency between time and microtime). (krakjoe)
Update NEWS [ci skip]
2019-07-01 08:54:42 +08:00
. Updated timelib to 2018.02. (Derick)
Resolve discrepencies between second value yielded by gettimeofday and time, fixes #69044
2019-06-18 17:06:00 +08:00
Add security related NEWS entries [ci skip]
2019-07-30 15:49:39 +08:00
- EXIF:
. Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment).
(CVE-2019-11042) (Stas)
. Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail).
(CVE-2019-11041) (Stas)
Merge branch 'PHP-7.2' into PHP-7.3
2019-07-15 21:19:43 +08:00
- FTP:
. Fixed bug #78039 (FTP with SSL memory leak). (Nikita)
Resolve discrepencies between second value yielded by gettimeofday and time, fixes #69044
2019-06-18 17:06:00 +08:00
Fixed bug #78279 Even if we don't initialize the callback on every request, we should still reset our globals to default values...
2019-07-12 22:29:18 +08:00
- Libxml:
. Fixed bug #78279 (libxml_disable_entity_loader settings is shared between
requests (cgi-fcgi)). (Nikita)
Update NEWS [ci skip]
2019-07-09 00:48:50 +08:00
- LiteSpeed:
. Updated to LiteSpeed SAPI V7.4.3 (increased response header count limit from
100 to 1000, added crash handler to cleanly shutdown PHP request, added
CloudLinux mod_lsapi mode). (George Wang)
. Fixed bug #76058 (After "POST data can't be buffered", using php://input
makes huge tmp files). (George Wang)
Fixed bug #78231
2019-07-03 18:27:13 +08:00
- Openssl:
. Fixed bug #78231 (Segmentation fault upon stream_socket_accept of exported
socket-to-stream). (Nikita)
Fixed bug #78230
2019-07-03 16:19:31 +08:00
- Opcache:
. Fixed bug #78189 (file cache strips last character of uname hash). (cmb)
. Fixed bug #78202 (Opcache stats for cache hits are capped at 32bit NUM).
(cmb)
Fix bug #78271 When cleaning nops in the dfa pass, we were always keeping the smart branch inhibiting nop that occurs directly before the jump instruction. However, as we skip unreachable blocks entirely, it may happen that we need to keep a nop that occurs further back, prior to the unreachable blocks. Account for that case now. We should really do something about the smart branch situation, this is very fragile...
2019-07-10 23:25:04 +08:00
. Fixed bug #78271 (Invalid result of if-else). (Nikita)
Fix bug #78291 Missing opcache directives New opcache directives have been added recently which are returned if using `ini_get_all('zend opcache')` but are not listed in the directives if using `opcache_get_configuration()`. This fix adds those missing directives as well as if `opcache.mmap_base` is used instead of `opcache.lockfile_path`. Also adds a test to ensure the directives match with both methods of fetching.
2019-07-14 21:49:38 +08:00
. Fixed bug #78291 (opcache_get_configuration doesn't list all directives).
(Andrew Collington)
Update NEWS [ci skip] The fix has been cherry-picked into PHP-7.3.8, so the bug will be fixed already there.
2019-07-29 20:48:23 +08:00
. Fixed bug #78341 (Failure to detect smart branch in DFA pass). (Nikita)
Fix #78189: file cache strips last character of uname hash We must not forget to increase `len` by one to cater to the directory separator.
2019-06-20 23:53:10 +08:00
Update NEWS [ci skip]
2019-07-01 08:54:42 +08:00
- PCRE:
. Fixed bug #78197 (PCRE2 version check in configure fails for "##.##-xxx"
version strings). (pgnet, Peter Kokot)
Add security related NEWS entries [ci skip]
2019-07-30 15:49:39 +08:00
. Fixed bug #78338 (Array cross-border reading in PCRE). (cmb)
Update NEWS [ci skip]
2019-07-01 08:54:42 +08:00
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fix bug #78192 PDO SQLite SegFault when reuse statement after schema has changed
2019-06-28 18:36:33 +08:00
- PDO_Sqlite:
Merge branch 'PHP-7.2' into PHP-7.3
2019-07-15 16:23:27 +08:00
. Fixed bug #78192 (SegFault when reuse statement after schema has changed).
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fix bug #78192 PDO SQLite SegFault when reuse statement after schema has changed
2019-06-28 18:36:33 +08:00
(Vincent Quatrevieux)
Add security related NEWS entries [ci skip]
2019-07-30 15:49:39 +08:00
- Phar:
. Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN). (cmb)
Update NEWS [ci skip]
2019-07-16 19:44:13 +08:00
- Phpdbg:
. Fixed bug #78297 (Include unexistent file memory leak). (Nikita)
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Upgrade to SQLite 3.28.0
2019-07-09 16:04:20 +08:00
- SQLite:
. Upgraded to SQLite 3.28.0. (cmb)
Fix #78189: file cache strips last character of uname hash We must not forget to increase `len` by one to cater to the directory separator.
2019-06-20 23:53:10 +08:00
Fix #78241: touch() does not handle dates after 2038 in PHP 64-bit `time_t` defaults to `_time64` (which is 64bit signed) even on x86, but `Int32x32To64()` truncates it to signed 32bit. We replace the macro with the "manual" calculation.
2019-07-03 15:59:17 +08:00
- Standard:
typo [ci skip]
2019-07-15 20:17:13 +08:00
. Fixed bug #78241 (touch() does not handle dates after 2038 in PHP 64-bit). (cmb)
Fix #78269 password_hash uses weak options for argon2
2019-07-15 20:11:30 +08:00
. Fixed bug #78269 (password_hash uses weak options for argon2). (Remi)
Fix #78241: touch() does not handle dates after 2038 in PHP 64-bit `time_t` defaults to `_time64` (which is 64bit signed) even on x86, but `Int32x32To64()` truncates it to signed 32bit. We replace the macro with the "manual" calculation.
2019-07-03 15:59:17 +08:00
Update NEWS
2019-06-20 22:59:39 +08:00
04 Jul 2019, PHP 7.3.7
Prepare 7.3.7-dev
2019-05-14 17:44:58 +08:00
Fixed bug #76980 If we perform a class fetch that is not marked as exception safe, convert exceptions thrown by autoloaders into a fatal error. Ideally fetching the interfaces would be exception safe, but as it isn't right now, we must abort at this point.
2019-05-15 18:46:23 +08:00
- Core:
. Fixed bug #76980 (Interface gets skipped if autoloader throws an exception).
(Nikita)
Bump for 7.2.20
2019-05-15 08:22:00 +08:00
Fix #78025: segfault when accessing properties of DOMDocumentType Instead of following the NULL pointer, we return an empty string.
2019-05-17 19:31:18 +08:00
- DOM:
. Fixed bug #78025 (segfault when accessing properties of DOMDocumentType).
(cmb)
Fix #77956 - When mysqli.allow_local_infile = Off, return a client error
2019-05-18 23:14:21 +08:00
- MySQLi:
. Fixed bug #77956 (When mysqli.allow_local_infile = Off, use a meaningful
error message). (Sjon Hortensius)
Restored NEWS entry
2019-06-07 17:37:49 +08:00
. Fixed bug #38546 (bindParam incorrect processing of bool types).
(camporter)
Fix #77956 - When mysqli.allow_local_infile = Off, return a client error
2019-05-18 23:14:21 +08:00
Fix bug #77955 Free metadata before freeing the arena. I don't have a repro script, but the added assertion fails for many existing tests prior to this change.
2019-05-23 18:29:08 +08:00
- MySQLnd:
. Fixed bug #77955 (Random segmentation fault in mysqlnd from php-fpm).
(Nikita)
Fixed bug #78015 Don't try to evaluate various operations with partial array operands. We could evaluate some of these, but let's be conservative for now...
2019-05-15 20:35:31 +08:00
- Opcache:
. Fixed bug #78015 (Incorrect evaluation of expressions involving partials
arrays in SCCP). (Nikita)
Update NEWS
2019-06-18 15:33:35 +08:00
. Fixed bug #78106 (Path resolution fails if opcache disabled during request).
(Nikita)
Fixed bug #78015 Don't try to evaluate various operations with partial array operands. We could evaluate some of these, but let's be conservative for now...
2019-05-15 20:35:31 +08:00
Fix bug #78079 (openssl_encrypt_ccm.phpt fails with OpenSSL 1.1.1c) It also fixes invalid setting of tag length
2019-06-03 02:10:56 +08:00
- OpenSSL:
. Fixed bug #78079 (openssl_encrypt_ccm.phpt fails with OpenSSL 1.1.1c).
(Jakub Zelenka)
Merge branch 'PHP-7.2' into PHP-7.3
2019-06-04 22:27:45 +08:00
- phpdbg:
. Fixed bug #78050 (SegFault phpdbg + opcache on include file twice).
(Nikita)
Fixed bug #78038 socket_select with references
2019-05-23 17:11:54 +08:00
- Sockets:
. Fixed bug #78038 (Socket_select fails when resource array contains
references). (Nikita)
Fix #78114: segfault when calling sodium_* functions from eval We must not follow the NULL pointer.
2019-06-06 15:29:44 +08:00
- Sodium:
. Fixed bug #78114 (segfault when calling sodium_* functions from eval). (cmb)
Fixed bug #77135 (Extract with EXTR_SKIP should skip $this)
2019-06-07 16:36:39 +08:00
- Standard:
. Fixed bug #77135 (Extract with EXTR_SKIP should skip $this).
(Craig Duncan, Dmitry)
Fix typo in NEWS [skip ci]
2019-07-04 20:09:22 +08:00
. Fixed bug #77937 (preg_match failed). (cmb, Anatol)
Fixed bug #77135 (Extract with EXTR_SKIP should skip $this)
2019-06-07 16:36:39 +08:00
Fixed bug #76345
2019-05-27 23:42:20 +08:00
- Zip:
. Fixed bug #76345 (zip.h not found). (Michael Maroszek)
Update NEWS for 7.3.6
2019-05-29 15:27:23 +08:00
30 May 2019, PHP 7.3.6
Prepare main branch for PHP 7.3.6
2019-04-16 17:56:03 +08:00
Update `NEWS` with changes made at #4093
2019-05-03 09:32:37 +08:00
- cURL:
. Implemented FR #72189 (Add missing CURL_VERSION_* constants). (Javier
Spagnoletti)
Fix NEWS entry Cf. <https://bugs.php.net/78590>.
2019-09-24 04:59:55 +08:00
- Date:
. Fixed bug #77909 (DatePeriod::__construct() with invalid recurrence count
value). (Ignace Nyamagana Butera)
Update NEWS for 7.3.6
2019-05-29 15:27:23 +08:00
- EXIF:
. Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16).
(CVE-2019-11040) (Stas)
Update changelog
2019-04-21 01:13:06 +08:00
- FPM:
Fix bug #77934 (php-fpm kill -USR2 not working)
2019-05-12 03:07:39 +08:00
. Fixed bug #77934 (php-fpm kill -USR2 not working). (Jakub Zelenka)
Update changelog
2019-04-21 01:13:06 +08:00
. Fixed bug #77921 (static.php.net doesn't work anymore). (Peter Kokot)
Fix #77943: imageantialias($image, false); does not work Firstly, we must not call `gdImageSetAntiAliased()` (which sets the color to anti-alias), but rather modify the `gdImage.AA` flag. Furthermore, we have to actually use the supplied boolean value. We also make sure that we don't attempt to enable anti-aliasing for palette images.
2019-04-29 22:14:26 +08:00
- GD:
. Fixed bug #77943 (imageantialias($image, false); does not work). (cmb)
Update NEWS for 7.3.6
2019-05-29 15:27:23 +08:00
. Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm).
(CVE-2019-11038) (cmb)
- Iconv:
. Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode()
due to integer overflow). (CVE-2019-11039). (maris dot adam)
Fix #77943: imageantialias($image, false); does not work Firstly, we must not call `gdImageSetAntiAliased()` (which sets the color to anti-alias), but rather modify the `gdImage.AA` flag. Furthermore, we have to actually use the supplied boolean value. We also make sure that we don't attempt to enable anti-aliasing for palette images.
2019-04-29 22:14:26 +08:00
Fixed bug #77843
2019-04-23 18:43:07 +08:00
- JSON:
. Fixed bug #77843 (Use after free with json serializer). (Nikita)
Update NEWS regarding re-tagging 7.3.6RC1
2019-05-15 17:31:53 +08:00
- Opcache:
. Fixed possible crashes, because of inconsistent PCRE cache and opcache
SHM reset. (Alexey Kalinin, Dmitry)
Fix #77944: Wrong meta pdo_type for bigint on LLP64 When actually fetching the data, bigint (unsigned) column values are returned as integers on LLP64 architectures, so their pdo_type has to be PDO::PARAM_INT accordingly.
2019-04-28 00:46:27 +08:00
- PDO_MySQL:
. Fixed bug #77944 (Wrong meta pdo_type for bigint on LLP64). (cmb)
Fixed bug #75186
2019-05-09 18:29:33 +08:00
- Reflection:
. Fixed bug #75186 (Inconsistent reflection of Closure:::__invoke()). (Nikita)
Fix #77911: Wrong warning for session.sid_bits_per_character
2019-04-17 23:23:23 +08:00
- Session:
. Fixed bug #77911 (Wrong warning for session.sid_bits_per_character). (cmb)
next is 7.2.19
2019-04-16 19:11:23 +08:00
Merge branch 'PHP-7.2' into PHP-7.3
2019-04-29 19:53:21 +08:00
- SOAP:
. Fixed bug #77945 (Segmentation fault when constructing SoapClient with
WSDL_CACHE_BOTH). (Nikita)
Update NEWS
2019-04-28 06:51:18 +08:00
- SPL:
. Fixed bug #77024 (SplFileObject::__toString() may return array). (Craig
Duncan)
Update NEWS for 7.3.6
2019-05-29 15:27:23 +08:00
- SQLite:
. Fixed bug #77967 (Bypassing open_basedir restrictions via file uris). (Stas)
Fixed bug #77931
2019-04-23 17:40:13 +08:00
- Standard:
. Fixed bug #77931 (Warning for array_map mentions wrong type). (Nikita)
Fix #78003: strip_tags output change since PHP 7.3 A refactoring of the strip tags state machine[1] missed the special treatment of `depth > 0` when a `>` is encountered in state 2 or 3. We re-add it for BC reasons. [1] <http://git.php.net/?p=php-src.git;a=commit;h=5cf64742773ddbf9af69d962a4d12b567fcf0084>
2019-05-13 19:10:24 +08:00
. Fixed bug #78003 (strip_tags output change since PHP 7.3). (cmb)
Fixed bug #77931
2019-04-23 17:40:13 +08:00
Prepare main branch for PHP 7.3.6
2019-04-16 17:56:03 +08:00
02 May 2019, PHP 7.3.5
Prepare main branch for PHP 7.3.5
2019-03-19 23:20:55 +08:00
Fix second part of bug #77903 When a HT iterator is one past the end and we rehash, we need to make sure that it is move to the new one past the end position, to make sure that newly inserted elements are picked up.
2019-04-16 16:38:20 +08:00
- Core:
. Fixed bug #77903 (ArrayIterator stops iterating after offsetSet call).
(Nikita)
[ci skip] Update NEWS
2019-03-26 04:57:20 +08:00
- CLI:
. Fixed bug #77794 (Incorrect Date header format in built-in server).
(kelunik)
Update NEWS wrt. sec fixes
2019-04-30 15:34:53 +08:00
- EXIF
Update `NEWS` with changes made at #4093
2019-05-03 09:32:37 +08:00
. Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG).
Update NEWS wrt. sec fixes
2019-04-30 15:34:53 +08:00
(CVE-2019-11036) (Stas)
Fixed bug #77793 By making sure that we always first increment the refcount of the new value before we destroy the old one.
2019-03-26 00:33:17 +08:00
- Interbase:
Fixed bug #72175 Make sure we don't close the connection we're trying to reuse...
2019-03-25 23:41:21 +08:00
. Fixed bug #72175 (Impossibility of creating multiple connections to
Interbase with php 7.x). (Nikita)
Fixed bug #77895
2019-04-15 21:26:58 +08:00
- Intl:
. Fixed bug #77895 (IntlDateFormatter::create fails in strict mode if $locale
= null). (Nikita)
Updated NEWS
2019-04-15 16:19:19 +08:00
- LDAP:
. Fixed bug #77869 (Core dump when using server controls) (mcmic)
Update NEWS wrt. sec fixes
2019-04-30 15:34:53 +08:00
- Mail
. Fixed bug #77821 (Potential heap corruption in TSendMail()). (cmb)
Update NEWS & UPGRADING
2019-04-01 15:03:49 +08:00
- mbstring:
Updated NEWS
2019-04-15 16:19:19 +08:00
. Implemented FR #72777 (Implement regex stack limits for mbregex functions).
Update NEWS & UPGRADING
2019-04-01 15:03:49 +08:00
(Yasuo Ohgaki, Stas)
Fixed bug #77773
2019-03-22 20:07:00 +08:00
- MySQLi:
. Fixed bug #77773 (Unbuffered queries leak memory - MySQLi / mysqlnd).
(Nikita)
Fix #77827: preg_match does not ignore \r in regex flags
2019-03-31 19:31:54 +08:00
- PCRE:
. Fixed bug #77827 (preg_match does not ignore \r in regex flags). (requinix,
cmb)
Updated NEWS
2019-04-15 16:19:19 +08:00
Fix bug #77849 Disable cloning of PDO handle/connection objects to avoid segfault
2019-04-06 02:42:04 +08:00
- PDO:
. Fixed bug #77849 (Disable cloning of PDO handle/connection objects).
(camporter)
Fix #77827: preg_match does not ignore \r in regex flags
2019-03-31 19:31:54 +08:00
fix bug #76801: phpdbg too many open files error
2019-03-20 00:34:34 +08:00
- phpdbg:
. Fixed bug #76801 (too many open files). (alekitto)
Fix #77800 phpdbg segfaults on conditional breakpoints
2019-03-27 06:05:06 +08:00
. Fixed bug #77800 (phpdbg segfaults on listing some conditional breakpoints).
(krakjoe)
Fix #77805 phpdbg build fails when readline is shared
2019-03-27 16:58:40 +08:00
. Fixed bug #77805 (phpdbg build fails when readline is shared). (krakjoe)
fix bug #76801: phpdbg too many open files error
2019-03-20 00:34:34 +08:00
Fixed bug #77772
2019-03-22 19:39:27 +08:00
- Reflection:
. Fixed bug #77772 (ReflectionClass::getMethods(null) doesn't work). (Nikita)
Fixed bug #77882
2019-04-15 16:22:40 +08:00
. Fixed bug #77882 (Different behavior: always calls destructor). (Nikita)
Fixed bug #77772
2019-03-22 19:39:27 +08:00
Fixed bug #77793 By making sure that we always first increment the refcount of the new value before we destroy the old one.
2019-03-26 00:33:17 +08:00
- Standard:
. Fixed bug #77793 (Segmentation fault in extract() when overwriting
reference with itself). (Nikita)
Fixed bug #77844 We should probably return an integer result from the operation in typed mode, right now the result is always a string.
2019-04-08 17:11:58 +08:00
. Fixed bug #77844 (Crash due to null pointer in parse_ini_string with
INI_SCANNER_TYPED). (Nikita)
Fixed bug #77853
2019-04-08 17:40:50 +08:00
. Fixed bug #77853 (Inconsistent substr_compare behaviour with empty
haystack). (Nikita)
Fixed bug #77793 By making sure that we always first increment the refcount of the new value before we destroy the old one.
2019-03-26 00:33:17 +08:00
Fix typos
2019-04-04 20:22:36 +08:00
04 Apr 2019, PHP 7.3.4
Prepare main branch for PHP 7.3.4
2019-02-19 20:06:40 +08:00
Fixed bug #77652
2019-02-22 17:11:54 +08:00
- Core:
updated NEWS
2019-03-14 16:47:16 +08:00
. Fixed bug #77738 (Nullptr deref in zend_compile_expr). (Laruence)
Update NEWS
2019-02-25 15:00:37 +08:00
. Fixed bug #77660 (Segmentation fault on break 2147483648). (Laruence)
Fixed bug #77652
2019-02-22 17:11:54 +08:00
. Fixed bug #77652 (Anonymous classes can lose their interface information).
(Nikita)
Fixed bug #77345 (Stack Overflow caused by circular reference in garbage collection)
2019-03-07 18:33:19 +08:00
. Fixed bug #77345 (Stack Overflow caused by circular reference in garbage
collection). (Alexandru Patranescu, Nikita, Dmitry)
Fix #76956: Wrong value for 'syslog.filter' documented in php.ini
2019-03-18 17:04:18 +08:00
. Fixed bug #76956 (Wrong value for 'syslog.filter' documented in php.ini).
(cmb)
ws
2019-03-07 18:59:18 +08:00
Fix order
2019-03-19 03:07:38 +08:00
- Apache2Handler:
. Fixed bug #77648 (BOM in sapi/apache2handler/php_functions.c). (cmb)
Fixed bug #77742 By avoiding integer overflow in the implementation entirely. The multiplication was already explicitly checked for overflow, so also add a check for the addition and remove the overflow checks after the calculation.
2019-03-15 00:24:50 +08:00
- Bcmath:
. Fixed bug #77742 (bcpow() implementation related to gcc compiler
optimization). (Nikita)
Fixed bug #77722
2019-03-12 16:57:51 +08:00
- CLI Server:
. Fixed bug #77722 (Incorrect IP set to $_SERVER['REMOTE_ADDR'] on the
localhost). (Nikita)
Fix #77578: Crash when php unload Since we're putting `ITypeLib *`s into the hash, we're getting `ITypeLib *`s back, not `ITypeLib **`s.
2019-03-19 01:47:34 +08:00
- COM:
. Fixed bug #77578 (Crash when php unload). (cmb)
Update NEWS
2019-04-02 22:54:15 +08:00
- EXIF:
Update NEWS wrt. sec fixes
2019-04-30 15:34:53 +08:00
. Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). (CVE-2019-11034)
(Stas)
Update `NEWS` with changes made at #4093
2019-05-03 09:32:37 +08:00
. Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value).
Update NEWS wrt. sec fixes
2019-04-30 15:34:53 +08:00
(CVE-2019-11035) (Stas)
Update NEWS
2019-04-02 22:54:15 +08:00
Fix bug #77677: WCOREDUMP not available on all systems Add #ifdef WCOREDUMP around all uses. Also Change core dump message to yes/no/unknown in lsapilib.
2019-02-19 00:32:38 +08:00
- FPM:
. Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).
(Kevin Adler)
Fix #77700: Writing truecolor images as GIF ignores interlace flag We revert the interlace flag related part of commit ff2822a[1], since contrary to the transparent color, the interlace flag is not retained by `gdImageCreatePaletteFromTrueColor()`. This also matches upstream libgd. [1] <http://git.php.net/?p=php-src.git;a=commit;h=ff2822a82b740edb8ccf307f080bae188c200fb9>
2019-03-06 07:27:16 +08:00
- GD:
. Fixed bug #77700 (Writing truecolor images as GIF ignores interlace flag).
(cmb)
Fixed bug #77597 The same variable was reused in two nested loops... The test doesn't fail on 7.2, but I'm fixing this here anyway as the code is clearly wrong, and probably erroneous in other situations.
2019-02-21 20:42:47 +08:00
- MySQLi:
. Fixed bug #77597 (mysqli_fetch_field hangs scripts). (Nikita)
Fixed bug #77691 We cannot replace an op1_def opcode with an ASSIGN, if it also has a used res_def. Usually this doesn't happen because the res_def use can be eliminated first. The example is a case where operand replacement on the res_def use fails.
2019-03-04 20:11:12 +08:00
- Opcache:
Fixed bug #77743
2019-03-18 17:49:53 +08:00
. Fixed bug #77743 (Incorrect pi node insertion for jmpznz with identical
successors). (Nikita)
Fixed bug #77691 We cannot replace an op1_def opcode with an ASSIGN, if it also has a used res_def. Usually this doesn't happen because the res_def use can be eliminated first. The example is a case where operand replacement on the res_def use fails.
2019-03-04 20:11:12 +08:00
Fixed bug #76127 Per documentation, and consistent with other preg functions, we should return false if an error occurred.
2019-03-19 20:57:39 +08:00
- PCRE:
. Fixed bug #76127 (preg_split does not raise an error on invalid UTF-8).
(Nikita)
Fixed bug #77697 (Crash on Big_Endian platform)
2019-03-15 16:58:08 +08:00
- Phar:
Fix typos
2019-04-04 20:22:36 +08:00
. Fixed bug #77697 (Crash on Big_Endian platform). (Laruence)
Fixed bug #77697 (Crash on Big_Endian platform)
2019-03-15 16:58:08 +08:00
Fix #77767: phpdbg break command help message shows incorrect aliases Previously the aliases for at and del were listed as A and d in the help message for break. This patch corrects the aliases to be @ and ~ respectively.
2019-03-19 00:47:18 +08:00
- phpdbg:
. Fixed bug #77767 (phpdbg break cmd aliases listed in help do not match
actual aliases). (Miriam Lauter)
Fix bug #77646
2019-02-21 23:10:27 +08:00
- sodium:
Fix bug #77646
2019-02-21 23:10:27 +08:00
. Fixed bug #77646 (sign_detached() strings not terminated). (Frank)
Fix bug #77646
2019-02-21 23:10:27 +08:00
SQLite3: add DEFENSIVE config for SQLite >= 3.26.0 as a mitigation strategy against potential security flaws
2018-12-17 05:52:37 +08:00
- SQLite3:
. Added sqlite3.defensive INI directive. (BohwaZ)
Update NEWS
2019-02-25 14:42:18 +08:00
- Standard:
. Fixed bug #77664 (Segmentation fault when using undefined constant in
custom wrapper). (Laruence)
Merge branch 'PHP-7.2' into PHP-7.3
2019-02-28 16:58:30 +08:00
. Fixed bug #77669 (Crash in extract() when overwriting extracted array).
(Nikita)
Fixed bug #76717 Print INT_MIN as -INT_MAX-1 to avoid it getting parsed as a float literal due to integer overflow.
2019-03-11 22:35:02 +08:00
. Fixed bug #76717 (var_export() does not create a parsable value for
PHP_INT_MIN). (Nikita)
Fixed bug #77765 Set mode 40755 for directories, via FTP stream stat. Because we already manage to CWD into the current directory, we should set 40755 as mode, instead of 40644.
2019-03-19 00:35:24 +08:00
. Fixed bug #77765 (FTP stream wrapper should set the directory as
executable). (Vlad Temian)
Update NEWS
2019-02-25 14:42:18 +08:00
Update NEWS
2019-03-04 20:47:14 +08:00
07 Mar 2019, PHP 7.3.3
Fixed bug #77514
2019-01-24 22:13:49 +08:00
- Core:
Fixed bug #77589 (Core dump using parse_ini_string with numeric sections) Section name should not be typed(NULL, FALSE, TRUE etc)
2019-02-11 15:27:29 +08:00
. Fixed bug #77589 (Core dump using parse_ini_string with numeric sections).
(Laruence)
Fixed bug #77329 (Buffer Overflow via overly long Error Messages)
2019-02-01 16:11:15 +08:00
. Fixed bug #77329 (Buffer Overflow via overly long Error Messages).
(Dmitry)
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fixed bug #77494 (Disabling class causes segfault on member access)
2019-01-24 18:07:31 +08:00
. Fixed bug #77494 (Disabling class causes segfault on member access).
(Dmitry)
Fixed bug #77498 I've renamed the function to the same name as the exported symbol in master.
2019-01-25 18:00:35 +08:00
. Fixed bug #77498 (Custom extension Segmentation fault when declare static
property). (Nikita)
Fixed bug #77530: PHP crashes when parsing "(2)::class"
2019-01-28 14:46:29 +08:00
. Fixed bug #77530 (PHP crashes when parsing `(2)::class`). (Ekin)
Fix #77546 iptcembed broken function
2019-01-30 18:38:17 +08:00
. Fixed bug #77546 (iptcembed broken function). (gdegoulet)
Update NEWS
2019-03-05 02:50:41 +08:00
. Fixed bug #77630 (rename() across the device may allow unwanted access
during processing). (Stas)
Prepare main branch for PHP 7.3.3
2019-01-22 21:04:03 +08:00
Fix #77621: Already defined constants are not properly reported We must not check uninitialized values (i.e. `c.value`), and we have to use proper types for printf-style formats (i.e. `char *` instead of `zend_string *`).
2019-02-15 07:35:21 +08:00
- COM:
. Fixed bug #77621 (Already defined constants are not properly reported).
(cmb)
Fix #77626: Persistence confusion in php_com_import_typelib() We apply only the most minimal fix here, and will cater to the unnecessary re-allocation for PHP-7.4. We don't need to add a regression test, since bug39606.phpt and bug77621.phpt already show the misbehavior.
2019-02-16 01:50:13 +08:00
. Fixed bug #77626 (Persistence confusion in php_com_import_typelib()). (cmb)
Fix #77621: Already defined constants are not properly reported We must not check uninitialized values (i.e. `c.value`), and we have to use proper types for printf-style formats (i.e. `char *` instead of `zend_string *`).
2019-02-15 07:35:21 +08:00
Update NEWS
2019-03-04 20:47:14 +08:00
- EXIF:
. Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF). (Stas)
. Fixed bug #77540 (Invalid Read on exif_process_SOFn). (Stas)
. Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE). (Stas)
. Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE). (Stas)
Fixed bug #77514
2019-01-24 22:13:49 +08:00
- Mbstring:
. Fixed bug #77514 (mb_ereg_replace() with trailing backslash adds null byte).
(Nikita)
Update NEWS
2019-03-04 20:47:14 +08:00
- MySQL
. Disabled LOCAL INFILE by default, can be enabled using php.ini directive
mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE
attribute for pdo_mysql. (Darek Slusarczyk)
Merge branch 'PHP-7.2' into PHP-7.3
2019-01-25 22:16:08 +08:00
- OpenSSL:
. Fixed bug #77390 (feof might hang on TLS streams in case of fragmented TLS
records). (Abyl Valg, Jakub Zelenka)
Merge PDO_OCI PR
2019-02-11 13:38:23 +08:00
- PDO_OCI:
. Support Oracle Database tracing attributes ACTION, MODULE,
CLIENT_INFO, and CLIENT_IDENTIFIER. (Cameron Porter)
Update NEWS
2019-03-04 20:47:14 +08:00
- PHAR:
. Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename).
(bishop)
. Fixed bug #77586 (phar_tar_writeheaders_int() buffer overflow). (bishop)
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fix bug 76596: phpdbg supports display_errors=stderr
2019-01-31 01:28:09 +08:00
- phpdbg:
. Fixed bug #76596 (phpdbg support for display_errors=stderr). (kabel)
Fix bug #51068 (glob:// do not support current path relative) Fix DirectoryIterator glob://* current path relative queries
2019-01-29 15:59:45 +08:00
- SPL:
. Fixed bug #51068 (DirectoryIterator glob:// don't support current path
relative queries). (Ahmed Abdou)
Update NEWS
2019-03-04 20:47:14 +08:00
. Fixed bug #77431 (openFile() silently truncates after a null byte). (cmb)
Fix bug #51068 (glob:// do not support current path relative) Fix DirectoryIterator glob://* current path relative queries
2019-01-29 15:59:45 +08:00
Fix #77552: Uninitialized buffer in stat functions
2019-02-02 03:45:20 +08:00
- Standard:
. Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions).
(John Stevenson)
Fixed bug #77612 Port php_setcookie() to use the smart_str API to ensure that there can be no string truncation issues.
2019-02-14 17:42:59 +08:00
. Fixed bug #77612 (setcookie() sets incorrect SameSite header if all of its
options filled). (Nikita)
Fix #77552: Uninitialized buffer in stat functions
2019-02-02 03:45:20 +08:00
Prepare main branch for PHP 7.3.3
2019-01-22 21:04:03 +08:00
07 Feb 2019, PHP 7.3.2
Prepare main branch for 7.3.2
2018-12-18 19:15:25 +08:00
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fixed bug #77339 (__callStatic may get incorrect arguments)
2018-12-24 18:23:47 +08:00
- Core:
Add NEWS
2019-01-07 05:11:55 +08:00
. Fixed bug #77369 (memcpy with negative length via crafted DNS response). (Stas)
Fixed bug #77387 (Recursion detection broken when printing GLOBALS)
2019-01-02 16:42:05 +08:00
. Fixed bug #77387 (Recursion detection broken when printing GLOBALS).
(Laruence)
Fixed bug #77376 ("undefined function" message no longer includes namespace)
2019-01-02 15:32:17 +08:00
. Fixed bug #77376 ("undefined function" message no longer includes
namespace). (Laruence)
Add NEWS entry for bug #77357 The fix has been confirmed. [ci skip]
2019-01-04 16:07:32 +08:00
. Fixed bug #77357 (base64_encode / base64_decode doest not work on nested
VM). (Nikita)
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fixed bug #77339 (__callStatic may get incorrect arguments)
2018-12-24 18:23:47 +08:00
. Fixed bug #77339 (__callStatic may get incorrect arguments). (Dmitry)
Update NEWS [ci skip]
2018-12-27 03:45:19 +08:00
. Fixed bug #77317 (__DIR__, __FILE__, realpath() reveal physical path for
subst virtual drive). (Anatol)
Fixed bug #77263 (Segfault when using 2 RecursiveFilterIterator)
2019-01-14 18:18:28 +08:00
. Fixed bug #77263 (Segfault when using 2 RecursiveFilterIterator). (Dmitry)
Fixed bug #77447 By disabling asan for CPU support helpers used in ifunc resolvers.
2019-01-14 18:43:02 +08:00
. Fixed bug #77447 (PHP 7.3 built with ASAN crashes in
zend_cpu_supports_avx2). (Nikita)
Update NEWS [ci skip]
2019-01-20 23:00:25 +08:00
. Fixed bug #77484 (Zend engine crashes when calling realpath in invalid
working dir). (Anatol)
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fixed bug #77339 (__callStatic may get incorrect arguments)
2018-12-24 18:23:47 +08:00
Fixed bug #76675 Leave a reference to the resource in the php_curl.
2019-01-16 08:33:03 +08:00
- Curl:
. Fixed bug #76675 (Segfault with H2 server push). (Pedro Magalhães)
[ci skip] Update NEWS
2018-12-28 23:40:06 +08:00
- Fileinfo:
. Fixed bug #77346 (webm files incorrectly detected as
application/octet-stream). (Anatol)
Fix bug #77430 (php-fpm crashes with Main process exited)
2019-01-18 02:33:53 +08:00
- FPM:
. Fixed bug #77430 (php-fpm crashes with Main process exited, code=dumped,
status=11/SEGV). (Jakub Zelenka)
Fix #77391: 1bpp BMPs may fail to be loaded We port the upstream fix[1]. [1] <https://github.com/libgd/libgd/commit/d0859134fcbd8817f87895bd1cb158096568a7a2>
2019-01-01 03:45:47 +08:00
- GD:
Fix #73281: imagescale(…, IMG_BILINEAR_FIXED) can cause black border We port the upstream fixes for libgd/libgd#329 and libgd/libgd#224.
2019-01-10 23:11:23 +08:00
. Fixed bug #73281 (imagescale(…, IMG_BILINEAR_FIXED) can cause black border).
(cmb)
Fix #73614: gdImageFilledArc() doesn't properly draw pies The fix for PHP bug 43828[1] changed the algorithm from drawing filled pies from drawing multiple triangles to drawing a single polygon. Due to quirks of the filled polygon drawing algorithm, we had to filter out extraneous vertices. This lead, however, to a bug regarding displaced starting and ending points near 90° and 270° degrees, which we fix by reinserting these vertices if they had been removed. This fix is a port of libgd/libgd@1406b1a. [1] <https://bugs.php.net/bug.php?id=43828>
2019-01-17 03:10:04 +08:00
. Fixed bug #73614 (gdImageFilledArc() doesn't properly draw pies). (cmb)
Fix #77272: imagescale() may return image resource on failure `_gdScaleHoriz()` and `_gdScaleVert()` may fail, but don't signal failure since they are void functions. We change that according to upstream libgd. We also remove the unused `Scale()` function, which doesn't exist in upstream libgd either, right away.
2019-01-10 21:03:07 +08:00
. Fixed bug #77272 (imagescale() may return image resource on failure). (cmb)
Fix #77391: 1bpp BMPs may fail to be loaded We port the upstream fix[1]. [1] <https://github.com/libgd/libgd/commit/d0859134fcbd8817f87895bd1cb158096568a7a2>
2019-01-01 03:45:47 +08:00
. Fixed bug #77391 (1bpp BMPs may fail to be loaded). (Romain Déoux, cmb)
Fix #77479: imagewbmp() segfaults with very large images We must not proceed working with the Wbmp structure, if it hasn't been allocated.
2019-01-19 17:03:11 +08:00
. Fixed bug #77479 (imagewbmp() segfaults with very large images). (cmb)
Fix #77391: 1bpp BMPs may fail to be loaded We port the upstream fix[1]. [1] <https://github.com/libgd/libgd/commit/d0859134fcbd8817f87895bd1cb158096568a7a2>
2019-01-01 03:45:47 +08:00
Update NEWS [ci skip]
2019-01-20 23:00:25 +08:00
- ldap:
. Fixed bug #77440 (ldap_bind using ldaps or ldap_start_tls()=exception in
libcrypto-1_1-x64.dll). (Anatol)
Add NEWS
2019-01-07 05:11:55 +08:00
- Mbstring:
Fixed bug #77428 mb_ereg_replace historically has not supported escaping backslashes with backslashes. Go back to that behavior for BC reasons.
2019-01-08 17:21:01 +08:00
. Fixed bug #77428 (mb_ereg_replace() doesn't replace a substitution
variable). (Nikita)
Fixed bug #77454
2019-01-14 17:21:41 +08:00
. Fixed bug #77454 (mb_scrub() silently truncates after a null byte).
(64796c6e69 at gmail dot com)
Add NEWS
2019-01-07 05:11:55 +08:00
Update NEWS
2019-01-02 18:02:29 +08:00
- MySQLnd:
Fixed bug #77308 (Unbuffered queries memory leak)
2019-01-14 18:59:30 +08:00
. Fixed bug #77308 (Unbuffered queries memory leak). (Dmitry)
Update NEWS
2019-01-02 18:02:29 +08:00
. Fixed bug #75684 (In mysqlnd_ext_plugin.h the plugin methods family has
no external visibility). (Anatol)
Entry get lost while merging
2019-01-02 16:46:41 +08:00
- Opcache:
Fixed bug #77266 (Assertion failed in dce_live_ranges)
2019-01-08 19:17:46 +08:00
. Fixed bug #77266 (Assertion failed in dce_live_ranges). (Laruence)
Entry get lost while merging
2019-01-02 16:46:41 +08:00
. Fixed bug #77257 (value of variable assigned in a switch() construct gets
lost). (Nikita)
Fixed bug #77434 Mark arrays containing partial arrays as partial. This was already done for the ADD_ARRAY_ELEMENT case, but not for ASSIGN_DIM.
2019-01-10 17:25:55 +08:00
. Fixed bug #77434 (php-fpm workers are segfaulting in zend_gc_addre).
(Nikita)
Fix bug #77361 (configure fails on 64-bit AIX when opcache enabled) In f9048300123, support for GNU Hurd was added to the opcache and the configure check to ensure the opcache knows the flock struct layout prior to building was changed check for two cases: BSD layout and Linux layout. All the existing hard-coded cases in ZendAccelerator.h follow these two cases, except for 64-bit AIX. This means that even though building on 64-bit AIX would work, the configure script refuses to continue. Add a new configure check for the 64-bit AIX case and a new compiler definition HAVE_FLOCK_AIX64. Now that all the cases are covered, simplify the ifdef logic around these three HAVE_FLOCK_* macros: - The macOS and the various BSD flavors fall under HAVE_FLOCK_BSD - Linux, HP-UX, GNU Hurd, 32-bit AIX, and SVR4 environments fall under HAVE_FLOCK_LINUX - 64-bit AIX falls under HAVE_FLOCK_AIX64 The only difference between the existing HAVE_FLOCK_LINUX and the hard-coded Linux/HP-UX/Hurd case is that the latter initialized the 5th member to 0, but since the C standard already says that un-initialized members will be initialized to 0, it's effectively the same.
2018-12-28 03:54:08 +08:00
. Fixed bug #77361 (configure fails on 64-bit AIX when opcache enabled).
(Kevin Adler)
Fix NEWS Bug #77287 is already fixed in PHP 7.3.2.
2019-02-06 06:04:31 +08:00
. Fixed bug #77287 (Opcache literal compaction is incompatible with EXT
opcodes). (Nikita)
Entry get lost while merging
2019-01-02 16:46:41 +08:00
Fixed bug #77338 Set preg_options to 0 in php_pcre_get_compiled_regex(_ex). These options are intended to be passed to pcre2_match. However, we do not have any flags that actually need to be set during matching (all relevant flags are set during compilation), and the preg_flags value is used for PHP-specific flags instead. This parameter should be removed entirely in master to avoid confusion.
2018-12-27 00:11:27 +08:00
- PCRE:
. Fixed bug #77338 (get_browser with empty string). (Nikita)
Fixed bug #77273
2019-01-03 16:40:07 +08:00
- PDO:
. Fixed bug #77273 (array_walk_recursive corrupts value types leading to PDO
failure). (Nikita)
Fixed bug #77289 Use mysqlnd_restart_psession and mysqlnd_end_psession in PDO MySQL. This makes sure we free last_message while ZMM is still live.
2019-01-09 16:50:26 +08:00
- PDO MySQL:
. Fixed bug #77289 (PDO MySQL segfaults with persistent connection).
(Lauri Kenttä)
Fix bug #77410
2019-01-04 19:40:28 +08:00
- SOAP:
. Fixed bug #77410 (Segmentation Fault when executing method with an empty
parameter). (Nikita)
Update NEWS [ci skip]
2018-12-27 03:07:31 +08:00
- Sockets:
. Fixed bug #76839 (socket_recvfrom may return an invalid 'from' address
on MacOS). (Michael Meyer)
Fix #77298: segfault occurs when add property to unserialized empty ArrayObject
2018-12-19 23:53:48 +08:00
- SPL:
. Fixed bug #77298 (segfault occurs when add property to unserialized empty
ArrayObject). (jhdxr)
Update NEWS
2019-01-02 12:10:23 +08:00
- Standard:
. Fixed bug #77395 (segfault about array_multisort). (Laruence)
Fixed bug #77439
2019-01-10 17:55:19 +08:00
. Fixed bug #77439 (parse_str segfaults when inserting item into existing
array). (Nikita)
Update NEWS
2019-01-02 12:10:23 +08:00
Fix NEWS The fixes for bug #77359 and #77360 have been ported to PHP-7.3.1, and the release has been postponed by one week.
2019-01-07 20:11:04 +08:00
10 Jan 2019, PHP 7.3.1
[ci skip] Update NEWS wrt. php-7.3.0RC6 tagging
2018-11-20 20:36:10 +08:00
Fix bug #71041 dynamic embed SAPI load error If the library is built with ZEND_SIGNALS defined, it's unusable with an external SAPI module because the zend_signal_startup() call is mandatory in this case. This bug is similar to #74149, but related to dynamic loading of PHP library.
2018-11-20 23:48:06 +08:00
- Core:
Update NEWS
2018-12-11 15:25:19 +08:00
. Fixed bug #76654 (Build failure on Mac OS X on 32-bit Intel). (Ryandesign)
Fix bug #71041 dynamic embed SAPI load error If the library is built with ZEND_SIGNALS defined, it's unusable with an external SAPI module because the zend_signal_startup() call is mandatory in this case. This bug is similar to #74149, but related to dynamic loading of PHP library.
2018-11-20 23:48:06 +08:00
. Fixed bug #71041 (zend_signal_startup() needs ZEND_API).
(Valentin V. Bartenev)
Fixed bug #76046 Place FE_FREE on start line of foreach, instead of whatever random line number might be in CG(zend_lineno) at the time.
2018-11-27 23:37:55 +08:00
. Fixed bug #76046 (PHP generates "FE_FREE" opcode on the wrong line).
(Nikita)
Fix #77291: magic methods inherited from a trait may be ignored When adding methods from a trait, we must not assume that a method name with the same length as the name of the using class is either a PHP 4 style constructor, or not a magic method at all – it may well be another magic method. We mostly preserve the spirit of the optimization which caused this regression, and avoid string comparisons for all method names which can never be magic methods.
2018-12-16 20:30:11 +08:00
. Fixed bug #77291 (magic methods inherited from a trait may be ignored).
(cmb)
Fix bug #71041 dynamic embed SAPI load error If the library is built with ZEND_SIGNALS defined, it's unusable with an external SAPI module because the zend_signal_startup() call is mandatory in this case. This bug is similar to #74149, but related to dynamic loading of PHP library.
2018-11-20 23:48:06 +08:00
Fix 77264: curl_getinfo returning microseconds, not seconds Since curl 7.55.0, libcurl introduced new constants to return more sensible variable types with curl_getinfo. When curl_getinfo with no option was called, and curl >= 7.55.0, some of the result were returned as int when they where returned as float in previous versions. This commit remove this BC Break. If someone still want to use more sensible variable types, it's always possible to call curl_getinfo with newer constants. CURLINFO_CONTENT_LENGTH_DOWNLOAD => CURLINFO_CONTENT_LENGTH_DOWNLOAD_T CURLINFO_CONTENT_LENGTH_UPLOAD => CURLINFO_CONTENT_LENGTH_UPLOAD_T CURLINFO_SIZE_DOWNLOAD => CURLINFO_SIZE_DOWNLOAD_T CURLINFO_SIZE_UPLOAD => CURLINFO_SIZE_UPLOAD_T CURLINFO_SPEED_DOWNLOAD => CURLINFO_SPEED_DOWNLOAD_T CURLINFO_SPEED_UPLOAD => CURLINFO_SPEED_UPLOAD_T CURLINFO_APPCONNECT_TIME => CURLINFO_APPCONNECT_TIME_T CURLINFO_CONNECT_TIME => CURLINFO_CONNECT_TIME_T CURLINFO_NAMELOOKUP_TIME => CURLINFO_NAMELOOKUP_TIME_T CURLINFO_PRETRANSFER_TIME => CURLINFO_PRETRANSFER_TIME_T CURLINFO_REDIRECT_TIME => CURLINFO_REDIRECT_TIME_T CURLINFO_STARTTRANSFER_TIME => CURLINFO_STARTTRANSFER_TIME_T CURLINFO_TOTAL_TIME => CURLINFO_TOTAL_TIME_T
2018-12-09 04:09:43 +08:00
- CURL:
. Fixed bug #77264 (curl_getinfo returning microseconds, not seconds).
(Pierrick)
Fix #77177: Serializing or unserializing COM objects crashes Firstly, we avoid returning NULL from the get_property handler, but instead return an empty HashTable, which already prevents the crashes. Secondly, since (de-)serialization obviously makes no sense for COM, DOTNET and VARIANT objects (at least with the current implementation), we prohibit it right away.
2018-11-23 23:32:33 +08:00
- COM:
. Fixed bug #77177 (Serializing or unserializing COM objects crashes). (cmb)
Fixed bug #77184 The U in URATIONAL is for unsigned, so the values should be printed as unsigned.
2018-11-22 05:40:43 +08:00
- Exif:
. Fixed bug #77184 (Unsigned rational numbers are written out as signed
rationals). (Colin Basnett)
Fix #77195: Incorrect error handling of imagecreatefromjpeg() The broken JPEG image triggers a notice, two warnings and outputs a message to stderr directly. The additional notice is pretty useless, and the direct output to stderr is bad. Therefore, we port the relevant differences from upstream to our bundled libgd. This leaves us with two warnings; the first one is triggered by libjpeg and shows the actual problem, the second one is triggered by our libgd wrapper whenever an image can't be read, what may not have necessarily triggered a warning before.
2018-11-24 19:52:08 +08:00
- GD:
. Fixed bug #77195 (Incorrect error handling of imagecreatefromjpeg()). (cmb)
Fix #77198: auto cropping has insufficient precision We apply the upstream patch[1], and also fix the erroneous bailout at the end of `gdImageAutoCrop()`, since `crop.x` and `crop.y` may very well be zero. [1] <https://github.com/libgd/libgd/commit/bda85aaeeb1d7467d92c892ba4c30eaa53d7a6d4>
2018-11-25 22:41:27 +08:00
. Fixed bug #77198 (auto cropping has insufficient precision). (cmb)
Fix #77200: imagecropauto(…, GD_CROP_SIDES) crops left but not right We apply the upstream patch[1]. [1] <https://github.com/libgd/libgd/commit/6613094e5d218dc4d4372757aef5e58c6462a9f7>
2018-11-26 02:00:50 +08:00
. Fixed bug #77200 (imagecropauto(…, GD_CROP_SIDES) crops left but not right).
(cmb)
Sync NEWS with 7.3.1 All these bugs are fixed in PHP-7.3.1 already.
2019-01-09 18:46:48 +08:00
. Fixed bug #77269 (efree() on uninitialized Heap data in imagescale leads to
use-after-free). (cmb)
. Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap). (cmb)
- MBString:
. Fixed bug #77367 (Negative size parameter in mb_split). (Stas)
. Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token).
(Stas)
. Fixed bug #77371 (heap buffer overflow in mb regex functions
- compile_string_node). (Stas)
. Fixed bug #77381 (heap buffer overflow in multibyte match_at). (Stas)
. Fixed bug #77382 (heap buffer overflow due to incorrect length in
expand_case_fold_string). (Stas)
. Fixed bug #77385 (buffer overflow in fetch_token). (Stas)
. Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode).
(Stas)
. Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code). (Stas)
Fix #77195: Incorrect error handling of imagecreatefromjpeg() The broken JPEG image triggers a notice, two warnings and outputs a message to stderr directly. The additional notice is pretty useless, and the direct output to stderr is bad. Therefore, we port the relevant differences from upstream to our bundled libgd. This leaves us with two warnings; the first one is triggered by libjpeg and shows the actual problem, the second one is triggered by our libgd wrapper whenever an image can't be read, what may not have necessarily triggered a warning before.
2018-11-24 19:52:08 +08:00
Update NEWS
2018-12-08 16:14:16 +08:00
- OCI8:
. Fixed bug #76804 (oci_pconnect with OCI_CRED_EXT not working). (KoenigsKind)
Add OCI8 changes
2018-12-09 17:56:25 +08:00
. Added oci_set_call_timeout() for call timeouts.
. Added oci_set_db_operation() for the DBOP end-to-end-tracing attribute.
Update NEWS
2018-12-08 16:14:16 +08:00
Fixed bug #77215 Remove invalid assertion: A block can have multiple switch frees, so if we don't do live range block splitting, it is not necessarily true that the free is located at the start of a block.
2018-11-29 03:08:39 +08:00
- Opcache:
. Fixed bug #77215 (CFG assertion failure on multiple finalizing switch
frees in one block). (Nikita)
Fixed bug #77275 Instead of juggling with this problem during literal compaction, make sure that we always initialize Z_EXTRA for literals, which seems like the more robust solution.
2018-12-10 20:33:48 +08:00
. Fixed bug #77275 (OPcache optimization problem for ArrayAccess->offsetGet).
(Nikita)
Fixed bug #77215 Remove invalid assertion: A block can have multiple switch frees, so if we don't do live range block splitting, it is not necessarily true that the free is located at the start of a block.
2018-11-29 03:08:39 +08:00
Update NEWS [ci skip]
2018-12-02 00:10:43 +08:00
- PCRE:
. Fixed bug #77193 (Infinite loop in preg_replace_callback). (Anatol)
update NEWS
2018-11-26 23:39:24 +08:00
- PDO:
. Handle invalid index passed to PDOStatement::fetchColumn() as error. (Sergei
Morozov)
Sync NEWS with 7.3.1 All these bugs are fixed in PHP-7.3.1 already.
2019-01-09 18:46:48 +08:00
- Phar:
. Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext). (Stas)
Fixed bug #77088 (Segfault when using SoapClient with null options) SoapClient constructor has its own error handler
2018-11-21 11:23:47 +08:00
- Soap:
. Fixed bug #77088 (Segfault when using SoapClient with null options).
(Laruence)
Define __APPLE_USE_RFC_3542 for new ipv6 constants
2018-11-11 02:17:11 +08:00
- Sockets:
. Fixed bug #77136 (Unsupported IPV6_RECVPKTINFO constants on macOS).
(Mizunashi Mana)
Bump for 7.2.14
2018-11-21 03:40:21 +08:00
Fix #77297: SodiumException segfaults on PHP 7.3 Instead of trying to clean the argument arrays from the backtrace, we overwrite them with empty arrays.
2018-12-15 05:35:49 +08:00
- Sodium:
. Fixed bug #77297 (SodiumException segfaults on PHP 7.3). (Nikita, Scott)
Fix NEWS The fixes for bug #77359 and #77360 have been ported to PHP-7.3.1, and the release has been postponed by one week.
2019-01-07 20:11:04 +08:00
- SPL:
. Fixed bug #77359 (spl_autoload causes segfault). (Lauri Kenttä)
. Fixed bug #77360 (class_uses causes segfault). (Lauri Kenttä)
Fix #77051: Issue with re-binding on SQLite3 We have to call `sqlite3_reset()` before re-binding the parameters.
2018-11-22 23:57:55 +08:00
- SQLite3:
. Fixed bug #77051 (Issue with re-binding on SQLite3). (BohwaZ)
Sync NEWS with 7.3.1 All these bugs are fixed in PHP-7.3.1 already.
2019-01-09 18:46:48 +08:00
- Xmlrpc:
. Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()). (cmb)
. Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code). (Stas)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
06 Dec 2018, PHP 7.3.0
- Core:
. Improved PHP GC. (Dmitry, Nikita)
. Redesigned the old ext_skel program written in PHP, run:
'php ext_skel.php' for all options. This means there are no dependencies,
thus making it work on Windows out of the box. (Kalle)
. Removed support for BeOS. (Kalle)
. Add PHP_VERSION to phpinfo() <title/>. (github/MattJeevas)
. Add net_get_interfaces(). (Sara, Joe, Anatol)
[ci skip] Add missing notes regarding gc_status()
2019-02-04 01:28:43 +08:00
. Added gc_status(). (Benjamin Eberlei)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Implemented flexible heredoc and nowdoc syntax, per
RFC https://wiki.php.net/rfc/flexible_heredoc_nowdoc_syntaxes.
(Thomas Punt)
. Added support for references in list() and array destructuring, per
RFC https://wiki.php.net/rfc/list_reference_assignment.
(David Walker)
. Improved effectiveness of ZEND_SECURE_ZERO for NetBSD and systems
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
without native similar feature. (devnexen)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Added syslog.facility and syslog.ident INI entries for customizing syslog
logging. (Philip Prindeville)
. Fixed bug #75683 (Memory leak in zend_register_functions() in ZTS mode).
(Dmitry)
. Fixed bug #75031 (support append mode in temp/memory streams). (adsr)
. Fixed bug #74860 (Uncaught exceptions not being formatted properly when
error_log set to "syslog"). (Philip Prindeville)
. Fixed bug #75220 (Segfault when calling is_callable on parent).
(andrewnester)
. Fixed bug #69954 (broken links and unused config items in distributed ini
files). (petk)
. Fixed bug #74922 (Composed class has fatal error with duplicate, equal const
properties). (pmmaga)
. Fixed bug #63911 (identical trait methods raise errors during composition).
(pmmaga)
. Fixed bug #75677 (Clang ignores fastcall calling convention on variadic
function). (Li-Wen Hsu)
. Fixed bug #54043 (Remove inconsitency of internal exceptions and user
defined exceptions). (Nikita)
. Fixed bug #53033 (Mathematical operations convert objects to integers).
(Nikita)
. Fixed bug #73108 (Internal class cast handler uses integer instead of
float). (Nikita)
. Fixed bug #75765 (Fatal error instead of Error exception when base class is
not found). (Timur Ibragimov)
. Fixed bug #76198 (Wording: "iterable" is not a scalar type). (Levi Morrison)
. Fixed bug #76137 (config.guess/config.sub do not recognize RISC-V). (cmb)
. Fixed bug #76427 (Segfault in zend_objects_store_put). (Laruence)
. Fixed bug #76422 (ftruncate fails on files > 2GB). (Anatol)
. Fixed bug #76509 (Inherited static properties can be desynchronized from
their parent by ref). (Nikita)
. Fixed bug #76439 (Changed behaviour in unclosed HereDoc). (Nikita, tpunt)
. Fixed bug #63217 (Constant numeric strings become integers when used as
ArrayAccess offset). (Rudi Theunissen, Dmitry)
. Fixed bug #33502 (Some nullary functions don't check the number of
arguments). (cmb)
. Fixed bug #76392 (Error relocating sapi/cli/php: unsupported relocation
type 37). (Peter Kokot)
. The declaration and use of case-insensitive constants has been deprecated.
(Nikita)
. Added syslog.filter INI entry for syslog filtering. (Philip Prindeville)
. Fixed bug #76667 (Segfault with divide-assign op and __get + __set).
(Laruence)
. Fixed bug #76030 (RE2C_FLAGS rarely honoured) (Cristian Rodríguez)
. Fixed broken zend_read_static_property (Laruence)
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Fixed bug #76773 (Traits used on the parent are ignored for child classes).
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
(daverandom)
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Fixed bug #76767 (‘asm’ operand has impossible constraints in zend_operators.h).
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
(ondrej)
. Fixed bug #76752 (Crash in ZEND_COALESCE_SPEC_TMP_HANDLER - assertion in
_get_zval_ptr_tmp failed). (Laruence)
. Fixed bug #76820 (Z_COPYABLE invalid definition). (mvdwerve, cmb)
. Fixed bug #76510 (file_exists() stopped working for phar://). (cmb)
. Fixed bug #76869 (Incorrect bypassing protected method accessibilty check).
(Dmitry)
. Fixed bug #72635 (Undefined class used by class constant in constexpr
generates fatal error). (Nikita)
. Fixed bug #76947 (file_put_contents() blocks the directory of the file
(__DIR__)). (Anatol)
. Fixed bug #76979 (define() error message does not mention resources as
valid values). (Michael Moravec)
. Fixed bug #76825 (Undefined symbols ___cpuid_count). (Laruence, cmb)
. Fixed bug #77110 (undefined symbol zend_string_equal_val in C++ build).
(Remi)
- BCMath:
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Implemented FR #67855 (No way to get current scale in use). (Chris Wright,
cmb)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #66364 (BCMath bcmul ignores scale parameter). (cmb)
. Fixed bug #75164 (split_bc_num() is pointless). (cmb)
. Fixed bug #75169 (BCMath errors/warnings bypass PHP's error handling). (cmb)
[ci skip] Update NEWS wrt. php-7.3.0RC5 tagging
2018-11-06 18:45:18 +08:00
[ci skip] Update NEWS
2018-11-18 06:01:17 +08:00
- CLI:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #44217 (Output after stdout/stderr closed cause immediate exit
with status 0). (Robert Lu)
[ci skip] Update NEWS
2018-11-18 06:01:17 +08:00
. Fixed bug #77111 (php-win.exe corrupts unicode symbols from cli
parameters). (Anatol)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- cURL:
. Expose curl constants from curl 7.50 to 7.61. (Pierrick)
. Fixed bug #74125 (Fixed finding CURL on systems with multiarch support).
(cebe)
- Date:
. Implemented FR #74668: Add DateTime::createFromImmutable() method.
(majkl578, Rican7)
. Fixed bug #75222 (DateInterval microseconds property always 0). (jhdxr)
. Fixed bug #68406 (calling var_dump on a DateTimeZone object modifies it).
(jhdxr)
. Fixed bug #76131 (mismatch arginfo for date_create). (carusogabriel)
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Updated timelib to 2018.01RC1 to address several bugs:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #75577 (DateTime::createFromFormat does not accept 'v' format
specifier). (Derick)
. Fixed bug #75642 (Wrap around behaviour for microseconds is not working).
(Derick)
- DBA:
. Fixed bug #75264 (compiler warnings emitted). (petk)
- DOM:
. Fixed bug #76285 (DOMDocument::formatOutput attribute sometimes ignored).
(Andrew Nester, Laruence, Anatol)
- Fileinfo:
. Fixed bug #77095 (slowness regression in 7.2/7.3 (compared to 7.1)).
(Anatol)
- Filter:
. Added the 'add_slashes' sanitization mode (FILTER_SANITIZE_ADD_SLASHES).
(Kalle)
- FPM:
. Added fpm_get_status function. (Till Backhaus)
. Fixed bug #62596 (getallheaders() missing with PHP-FPM). (Remi)
. Fixed bug #69031 (Long messages into stdout/stderr are truncated
incorrectly) - added new log related FPM configuration options:
log_limit, log_buffering and decorate_workers_output. (Jakub Zelenka)
NEWS
2018-11-20 18:20:40 +08:00
- ftp:
. Fixed bug #77151 (ftp_close(): SSL_read on shutdown). (Remi)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- GD:
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Added support for WebP in imagecreatefromstring(). (Andreas Treichel, cmb)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- GMP:
. Export internal structures and accessor helpers for GMP object. (Sara)
. Added gmp_binomial(n, k). (Nikita)
. Added gmp_lcm(a, b). (Nikita)
. Added gmp_perfect_power(a). (Nikita)
. Added gmp_kronecker(a, b). (Nikita)
Fix #77147: Fix for 60494 ignores ICONV_MIME_DECODE_CONTINUE_ON_ERROR If the `ICONV_MIME_DECODE_CONTINUE_ON_ERROR` flag is set, parsing should not fail, if there are illegal characters in the headers; instead we silently ignore these like before.
2018-11-14 21:55:38 +08:00
- iconv:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #53891 (iconv_mime_encode() fails to Q-encode UTF-8 string). (cmb)
Fix #77147: Fix for 60494 ignores ICONV_MIME_DECODE_CONTINUE_ON_ERROR If the `ICONV_MIME_DECODE_CONTINUE_ON_ERROR` flag is set, parsing should not fail, if there are illegal characters in the headers; instead we silently ignore these like before.
2018-11-14 21:55:38 +08:00
. Fixed bug #77147 (Fixing 60494 ignored ICONV_MIME_DECODE_CONTINUE_ON_ERROR).
(cmb)
Disable rsh/ssh functionality in imap by default (bug #77153)
2018-11-19 09:10:43 +08:00
- IMAP:
[ci skip] Add missing entry for bug 77020
2018-12-19 06:21:51 +08:00
. Fixed bug #77020 (null pointer dereference in imap_mail). (cmb)
Disable rsh/ssh functionality in imap by default (bug #77153)
2018-11-19 09:10:43 +08:00
. Fixed bug #77153 (imap_open allows to run arbitrary shell commands via
mailbox parameter). (Stas)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Interbase:
. Fixed bug #75453 (Incorrect reflection for ibase_[p]connect). (villfa)
. Fixed bug #76443 (php+php_interbase.dll crash on module_shutdown). (Kalle)
Fixed bug #77165 Also add some helper macros for PROTECT/UNPROTECT that check for IMMUTABLE. These checks are needed for nearly any use of PROTECT/UNPROTECT.
2018-11-16 00:13:12 +08:00
[ci skip] Update NEWS
2018-11-18 21:40:00 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- intl:
. Fixed bug #75317 (UConverter::setDestinationEncoding changes source instead
of destination). (andrewnester)
. Fixed bug #76829 (Incorrect validation of domain on idn_to_utf8()
function). (Anatol)
[ci skip] Update NEWS wrt. php-7.3.0RC5 tagging
2018-11-06 18:45:18 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- JSON:
. Added JSON_THROW_ON_ERROR flag. (Andrea)
[ci skip] Update NEWS wrt. php-7.3.0RC4 tagging
2018-10-23 18:10:09 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- LDAP:
. Added ldap_exop_refresh helper for EXOP REFRESH operation with dds overlay.
(Come)
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Added full support for sending and parsing ldap controls. (Come)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #49876 (Fix LDAP path lookup on 64-bit distros). (dzuelke)
NEWS
2018-11-06 00:06:40 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- libxml2:
. Fixed bug #75871 (use pkg-config where available). (pmmaga)
- litespeed:
. Fixed bug #75248 (Binary directory doesn't get created when building
only litespeed SAPI). (petk)
. Fixed bug #75251 (Missing program prefix and suffix). (petk)
- MBstring:
. Updated to Oniguruma 6.9.0. (cmb)
. Fixed bug #65544 (mb title case conversion-first word in quotation isn't
capitalized). (Nikita)
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Fixed bug #71298 (MB_CASE_TITLE misbehaves with curled apostrophe/quote).
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
(Nikita)
. Fixed bug #73528 (Crash in zif_mb_send_mail). (Nikita)
. Fixed bug #74929 (mbstring functions version 7.1.1 are slow compared to 5.3
on Windows). (Nikita)
. Fixed bug #76319 (mb_strtolower with invalid UTF-8 causes segmentation
fault). (Nikita)
. Fixed bug #76574 (use of undeclared identifiers INT_MAX and LONG_MAX). (cmb)
. Fixed bug #76594 (Bus Error due to unaligned access in zend_ini.c
OnUpdateLong). (cmb, Nikita)
. Fixed bug #76706 (mbstring.http_output_conv_mimetypes is ignored). (cmb)
. Fixed bug #76958 (Broken UTF7-IMAP conversion). (Nikita)
. Fixed bug #77025 (mb_strpos throws Unknown encoding or conversion error).
(Nikita)
. Fixed bug #77165 (mb_check_encoding crashes when argument given an empty
array). (Nikita)
- Mysqlnd:
. Fixed bug #76386 (Prepared Statement formatter truncates fractional seconds
from date/time column). (Victor Csiky)
Update NEWS [ci skip]
2018-11-06 05:53:45 +08:00
[ci skip] Update NEWS
2018-10-30 07:24:07 +08:00
- ODBC:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Removed support for ODBCRouter. (Kalle)
. Removed support for Birdstep. (Kalle)
[ci skip] Update NEWS
2018-10-30 07:24:07 +08:00
. Fixed bug #77079 (odbc_fetch_object has incorrect type signature).
(Jon Allen)
Fixed bug #77058 Account for the fact that undef must be interpreted as null for the purposes of INC/DEC inference.
2018-10-25 22:25:54 +08:00
- Opcache:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #76466 (Loop variable confusion). (Dmitry, Laruence, Nikita)
. Fixed bug #76463 (var has array key type but not value type). (Laruence)
. Fixed bug #76446 (zend_variables.c:73: zend_string_destroy: Assertion
`!(zval_gc_flags((str)->gc)). (Nikita, Laruence)
. Fixed bug #76711 (OPcache enabled triggers false-positive "Illegal string
offset"). (Dmitry)
Fixed bug #77058 Account for the fact that undef must be interpreted as null for the purposes of INC/DEC inference.
2018-10-25 22:25:54 +08:00
. Fixed bug #77058 (Type inference in opcache causes side effects). (Nikita)
Fixed bug #77092 Weird that this worked for so long, probably because nearly all ext/standard functions use fast ZPP rather than ordinary ZPP.
2018-11-02 21:26:24 +08:00
. Fixed bug #77092 (array_diff_key() - segmentation fault). (Nikita)
bump versions
2018-10-24 14:43:27 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- OpenSSL:
. Added openssl_pkey_derive function. (Jim Zubov)
. Add min_proto_version and max_proto_version ssl stream options as well as
related constants for possible TLS protocol values. (Jakub Zelenka)
- PCRE:
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Implemented https://wiki.php.net/rfc/pcre2-migration. (Anatol, Dmitry)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Upgrade PCRE2 to 10.32. (Anatol)
. Fixed bug #75355 (preg_quote() does not quote # control character).
(Michael Moravec)
. Fixed bug #76512 (\w no longer includes unicode characters). (cmb)
. Fixed bug #76514 (Regression in preg_match makes it fail with
PREG_JIT_STACKLIMIT_ERROR). (Anatol)
. Fixed bug #76909 (preg_match difference between 7.3 and < 7.3). (Anatol)
- PDO_DBlib:
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Implemented FR #69592 (allow 0-column rowsets to be skipped automatically).
(fandrieu)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Expose TDS version as \PDO::DBLIB_ATTR_TDS_VERSION attribute on \PDO
instance. (fandrieu)
. Treat DATETIME2 columns like DATETIME. (fandrieu)
. Fixed bug #74243 (allow locales.conf to drive datetime format). (fandrieu)
- PDO_Firebird:
. Fixed bug #74462 (PDO_Firebird returns only NULLs for results with boolean
for FIREBIRD >= 3.0). (Dorin Marcoci)
- PDO_OCI:
. Fixed bug #74631 (PDO_PCO with PHP-FPM: OCI environment initialized
before PHP-FPM sets it up). (Ingmar Runge)
- PDO SQLite
. Add support for additional open flags
- pgsql:
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Added new error constants for pg_result_error(): PGSQL_DIAG_SCHEMA_NAME,
PGSQL_DIAG_TABLE_NAME, PGSQL_DIAG_COLUMN_NAME, PGSQL_DIAG_DATATYPE_NAME,
Updated NEWS
2019-04-15 16:19:19 +08:00
PGSQL_DIAG_CONSTRAINT_NAME and PGSQL_DIAG_SEVERITY_NONLOCALIZED. (Kalle)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #77047 (pg_convert has a broken regex for the 'TIME WITHOUT
TIMEZONE' data type). (Andy Gajetzki)
- phar:
. Fixed bug #74991 (include_path has a 4096 char limit in some cases).
(bwbroersma)
. Fixed bug #65414 (deal with leading slash when adding files correctly).
(bishopb)
- readline:
. Added completion_append_character and completion_suppress_append options
to readline_info() if linked against libreadline. (krageon)
- Session:
. Fixed bug #74941 (session fails to start after having headers sent).
(morozov)
- SimpleXML:
. Fixed bug #54973 (SimpleXML casts integers wrong). (Nikita)
. Fixed bug #76712 (Assignment of empty string creates extraneous text node).
(cmb)
- Sockets:
. Fixed bug #67619 (Validate length on socket_write). (thiagooak)
Fixed bug #50675 SOAP: Stop overwriting the node name when creating an XML node for an object reference.
2018-10-06 14:09:22 +08:00
- SOAP:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #75464 (Wrong reflection on SoapClient::__setSoapHeaders).
(villfa)
. Fixed bug #70469 (SoapClient generates E_ERROR even if exceptions=1 is
used). (Anton Artamonov)
Fixed bug #50675 SOAP: Stop overwriting the node name when creating an XML node for an object reference.
2018-10-06 14:09:22 +08:00
. Fixed bug #50675 (SoapClient can't handle object references correctly).
(Cameron Porter)
Fix #76348: WSDL_CACHE_MEMORY causes Segmentation fault “Thou shalt not follow the NULL pointer, for chaos and madness await thee at its end.”
2018-11-04 23:40:27 +08:00
. Fixed bug #76348 (WSDL_CACHE_MEMORY causes Segmentation fault). (cmb)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #77141 (Signedness issue in SOAP when precision=-1). (cmb)
[ci skip] Update NEWS wrt. php-7.3.0RC4 tagging
2018-10-23 18:10:09 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- SPL:
. Fixed bug #74977 (Appending AppendIterator leads to segfault).
(Andrew Nester)
. Fixed bug #75173 (incorrect behavior of AppendIterator::append in foreach
loop). (jhdxr)
. Fixed bug #74372 (autoloading file with syntax error uses next autoloader,
may hide parse error). (Nikita)
. Fixed bug #75878 (RecursiveTreeIterator::setPostfix has wrong signature).
(cmb)
. Fixed bug #74519 (strange behavior of AppendIterator). (jhdxr)
. Fixed bug #76131 (mismatch arginfo for splarray constructor).
(carusogabriel)
- SQLite3:
. Updated bundled libsqlite to 3.24.0. (cmb)
bump versions
2018-10-24 14:43:27 +08:00
Fixed bug #77081 ftruncate() changes seek pointer in c mode
2018-10-31 03:42:00 +08:00
- Standard:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Added is_countable() function. (Gabriel Caruso)
. Added support for the SameSite cookie directive, including an alternative
signature for setcookie(), setrawcookie() and session_set_cookie_params().
(Frederik Bosch, pmmaga)
. Remove superfluous warnings from inet_ntop()/inet_pton(). (daverandom)
. Fixed bug #75916 (DNS_CAA record results contain garbage). (Mike,
Philip Sharp)
. Fixed unserialize(), to disable creation of unsupported data structures
through manually crafted strings. (Dmitry)
. Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator
that getrandom() is missing). (sarciszewski)
. Fixed bug #74719 (fopen() should accept NULL as context). (Alexander Holman)
. Fixed bug #69948 (path/domain are not sanitized in setcookie). (cmb)
. Fixed bug #75996 (incorrect url in header for mt_rand). (tatarbj)
. Added hrtime() function, to get high resolution time. (welting)
. Fixed bug #48016 (stdClass::__setState is not defined although var_export()
uses it). (Andrea)
. Fixed bug #76136 (stream_socket_get_name should enclose IPv6 in brackets).
(seliver)
. Fixed bug #76688 (Disallow excessive parameters after options array).
(pmmaga)
. Fixed bug #76713 (Segmentation fault caused by property corruption).
(Laruence)
. Fixed bug #76755 (setcookie does not accept "double" type for expire time).
(Laruence)
. Fixed bug #76674 (improve array_* failure messages exposing what was passed
instead of an array). (carusogabriel)
. Fixed bug #76803 (ftruncate changes file pointer). (Anatol)
. Fixed bug #76818 (Memory corruption and segfault). (Remi)
Fixed bug #77081 ftruncate() changes seek pointer in c mode
2018-10-31 03:42:00 +08:00
. Fixed bug #77081 (ftruncate() changes seek pointer in c mode). (cmb, Anatol)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Testing:
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Implemented FR #62055 (Make run-tests.php support --CGI-- sections). (cmb)
Fixed bug #77025 Implements 8bit conversions equivalently to iso-8859-1 conversions. This seems quite dubious to me, but seems to match the previous behavior. It might make more sense to map the characters into a private area instead, so that the 8bit encoding is treated as binary data with no case conversions (including no case conversions in the ascii range).
2018-10-17 18:37:52 +08:00
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fix #77027: tidy::getOptDoc() not available on Windows
2018-10-17 22:36:25 +08:00
- Tidy:
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Support using tidyp instead of tidy. (devnexen)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #74707 (Tidy has incorrect ReflectionFunction param counts for
functions taking tidy). (Gabriel Caruso)
. Fixed arginfo for tidy::__construct(). (Tyson Andre)
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fix #77027: tidy::getOptDoc() not available on Windows
2018-10-17 22:36:25 +08:00
Fixed bug #76991 Back up exceptions while the scan-ahead loop, to avoid an early bail out.
2018-10-10 20:57:46 +08:00
- Tokenizer:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #76437 (token_get_all with TOKEN_PARSE flag fails to recognise
close tag). (Laruence)
. Fixed bug #75218 (Change remaining uncatchable fatal errors for parsing
into ParseError). (Nikita)
. Fixed bug #76538 (token_get_all with TOKEN_PARSE flag fails to recognise
close tag with newline). (Nikita)
Fixed bug #76991 Back up exceptions while the scan-ahead loop, to avoid an early bail out.
2018-10-10 20:57:46 +08:00
. Fixed bug #76991 (Incorrect tokenization of multiple invalid flexible
heredoc strings). (Nikita)
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fix #30875: xml_parse_into_struct() does not resolve entities
2018-10-09 22:08:28 +08:00
- XML:
[ci skip] Fix NEWS wrt. ChangeLog conversion We have to be rather picky in this regard; otherwise we need to manually post process the ChangeLog.
2018-12-07 00:15:43 +08:00
. Fixed bug #71592 (External entity processing never fails). (cmb)
Merge branch 'PHP-7.2' into PHP-7.3 * PHP-7.2: Fix #75282: xmlrpc_encode_request() crashes
2018-10-21 18:10:54 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Zlib:
. Added zlib/level context option for compress.zlib wrapper. (Sara)
Update NEWS wrt. php-7.3.0RC2 tagging
2018-09-25 17:29:01 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
08 Nov 2018, PHP 7.2.12
Update NEWS [ci skip]
2018-10-04 09:18:47 +08:00
Fixed bug #76800 (foreach inconsistent if array modified during loop)
2018-09-14 15:28:31 +08:00
- Core:
Fixed bug #76846
2018-09-28 18:56:47 +08:00
. Fixed bug #76846 (Segfault in shutdown function after memory limit error).
(Nikita)
Fixed bug #76946
2018-09-29 01:14:47 +08:00
. Fixed bug #76946 (Cyclic reference in generator not detected). (Nikita)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #77035 (The phpize and ./configure create redundant .deps file).
(Peter Kokot)
. Fixed bug #77041 (buildconf should output error messages to stderr)
(Mizunashi Mana)
Update NEWS wrt. php-7.3.0RC2 tagging
2018-09-25 17:29:01 +08:00
Fix #75851: Year component overflow with date formats "c", "o", "r" and "y"
2018-07-11 11:55:13 +08:00
- Date:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Upgraded timelib to 2017.08. (Derick)
Fix #75851: Year component overflow with date formats "c", "o", "r" and "y"
2018-07-11 11:55:13 +08:00
. Fixed bug #75851 (Year component overflow with date formats "c", "o", "r"
and "y"). (Adam Saponara)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #77007 (fractions in `diff()` are not correctly normalized).
(Derick)
Fix #75851: Year component overflow with date formats "c", "o", "r" and "y"
2018-07-11 11:55:13 +08:00
Update NEWS [ci skip]
2018-10-04 00:51:48 +08:00
- FCGI:
. Fixed #76948 (Failed shutdown/reboot or end session in Windows). (Anatol)
Fix #76954: apache_response_headers removes last character from header name
2018-10-02 14:36:29 +08:00
. Fixed bug #76954 (apache_response_headers removes last character from header
name). (stodorovic)
Update NEWS [ci skip]
2018-10-04 00:51:48 +08:00
Fix #76972: FTP data truncation due to forceful ssl socket shutdown Do a correct bidirectional shutdown instead
2018-10-05 00:40:26 +08:00
- FTP:
. Fixed bug #76972 (Data truncation due to forceful ssl socket shutdown).
(Manuel Mausz)
Update NEWS [ci skip]
2018-10-04 00:48:40 +08:00
[ci skip] Update NEWS
2018-10-06 05:01:03 +08:00
- intl:
. Fixed bug #76942 (U_ARGUMENT_TYPE_MISMATCH). (anthrax at unixuser dot org)
Fixed bug #76936
2018-10-02 23:47:07 +08:00
- Reflection:
. Fixed bug #76936 (Objects cannot access their private attributes while
handling reflection errors). (Nikita)
Fixed bug #66430
2018-10-03 00:19:53 +08:00
. Fixed bug #66430 (ReflectionFunction::invoke does not invoke closure with
object scope). (Nikita)
Fixed bug #76936
2018-10-02 23:47:07 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Sodium:
. Some base64 outputs were truncated; this is not the case any more.
(jedisct1)
. block sizes >= 256 bytes are now supposed by sodium_pad() even
when an old version of libsodium has been installed. (jedisct1)
. Fixed bug #77008 (sodium_pad() could read (but not return nor write)
uninitialized memory when trying to pad an empty input). (jedisct1)
Merge branch 'PHP-7.2' into PHP-7.3
2018-09-18 08:31:07 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Standard:
. Fixed bug #76965 (INI_SCANNER_RAW doesn't strip trailing whitespace).
Merge branch 'PHP-7.2' into PHP-7.3
2018-09-18 08:31:07 +08:00
(Pierrick)
bump to 7.2.11-dev
2018-08-28 16:17:33 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Tidy:
. Fixed bug #77027 (tidy::getOptDoc() not available on Windows). (cmb)
- XML:
. Fixed bug #30875 (xml_parse_into_struct() does not resolve entities). (cmb)
. Add support for getting SKIP_TAGSTART and SKIP_WHITE options. (cmb)
- XMLRPC:
. Fixed bug #75282 (xmlrpc_encode_request() crashes). (cmb)
11 Oct 2018, PHP 7.2.11
Fixed bug #76869 (Incorrect bypassing protected method accessibilty check).
2018-09-12 17:16:50 +08:00
- Core:
Fixed bug #76800 (foreach inconsistent if array modified during loop)
2018-09-14 15:28:31 +08:00
. Fixed bug #76800 (foreach inconsistent if array modified during loop).
(Dmitry)
Fixed bug #76901 get_method() may modify the object pointer passed to it if method forwarding is used. In this case we do not want to modify the passed zval, so make sure that we copy the object into a temporary first.
2018-09-19 15:37:04 +08:00
. Fixed bug #76901 (method_exists on SPL iterator passthrough method corrupts
memory). (Nikita)
[ci skip] Update NEWS wrt. php-7.3.RC1 tagging
2018-09-11 22:28:36 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- CURL:
. Fixed bug #76480 (Use curl_multi_wait() so that timeouts are respected).
(Pierrick)
Fix #66828: iconv_mime_encode Q-encoding longer than it should be Before the fix for bug 48289 has been applied, the algorithm to construct a Q-encoded-word has been optimistic, i.e. try to encode as many bytes that *may* fit in the remaining space, calculate the actual length of the Q-encoded word, and if it's too long, try again with a reduced size. However, the fix for the mentioned bug replaced this by a pessimistic algorithm, which always terminates[1] the for loop[2] during the first iteration (which renders the following 3 lines as dead code), and as such easily produces unnecessarily short encoded-words. Instead the proper fix for the bug would have been to make sure that `out_size` is always decremented, if the space isn't sufficient for the encoded-word. [1] <https://github.com/php/php-src/blob/php-7.3.0beta3/ext/iconv/iconv.c#L1421> [2] <https://github.com/php/php-src/blob/php-7.3.0beta3/ext/iconv/iconv.c#L1360>
2018-09-22 21:20:20 +08:00
- iconv:
. Fixed bug #66828 (iconv_mime_encode Q-encoding longer than it should be).
(cmb)
Restore NEWS entry [skip ci]
2018-09-04 19:03:17 +08:00
- Opcache:
. Fixed bug #76832 (ZendOPcache.MemoryBase periodically deleted by the OS).
(Anatol)
Fixed bug #76796
2018-09-07 20:02:03 +08:00
. Fixed bug #76796 (Compile-time evaluation of disabled function in opcache
causes segfault). (Nikita)
Restore NEWS entry [skip ci]
2018-09-04 19:03:17 +08:00
Fix #75696: posix_getgrnam fails to print details of group According to the POSIX specification of `getgrnam_r()` the result of `sysconf(_SC_GETGR_R_SIZE_MAX)` is an initial value suggested for the size of the buffer, and `ERANGE` signals that insufficient storage was supplied. So if we get `ERANGE`, we try again with a buffer twice as big, and so on, instead of failing.
2018-08-24 23:59:44 +08:00
- POSIX:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #75696 (posix_getgrnam fails to print details of group). (cmb)
bump to 7.2.11-dev
2018-08-28 16:17:33 +08:00
Fix #74454: Wrong exception being thrown when using ReflectionMethod If zend_throw_exception_ex() already threw an exception, we should not throw again.
2018-09-05 21:05:19 +08:00
- Reflection:
. Fixed bug #74454 (Wrong exception being thrown when using ReflectionMethod).
(cmb)
Update NEWS
2018-08-29 22:12:18 +08:00
- Standard:
Fixed bug #73457 Correctly report errors when opening FTP data connection.
2018-08-25 04:49:53 +08:00
. Fixed bug #73457 (Wrong error message when fopen FTP wrapped fails to open
data connection). (Ville Hukkamäki)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #74764 (Bindto IPv6 works with file_get_contents but fails with
stream_socket_client). (Ville Hukkamäki)
. Fixed bug #75533 (array_reduce is slow when $carry is large array).
(Manabu Matsui)
- XMLRPC:
. Fixed bug #76886 (Can't build xmlrpc with expat). (Thomas Petazzoni, cmb)
Update NEWS
2018-08-29 22:12:18 +08:00
Fix #75273: php_zlib_inflate_filter() may not update bytes_consumed Whenever we return with `PSFS_PASS_ON`, we need to update `bytes_consumed` to not mislead the caller. Instead of fixing the respective `if` clauses, we eschew the early bail-outs to simplify the code a bit.
2018-09-09 00:27:57 +08:00
- Zlib:
. Fixed bug #75273 (php_zlib_inflate_filter() may not update bytes_consumed).
(Martin Burke, cmb)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
13 Sep 2018, PHP 7.2.10
[ci skip] Update NEWS wrt. php-7.3.0beta2 tagging
2018-08-14 19:36:15 +08:00
Fixed bug #76752 (Crash in ZEND_COALESCE_SPEC_TMP_HANDLER - assertion in _get_zval_ptr_tmp failed).
2018-08-17 12:19:31 +08:00
- Core:
Update NEWS
2018-08-17 13:36:12 +08:00
. Fixed bug #76754 (parent private constant in extends class memory leak).
(Laruence)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #72443 (Generate enabled extension). (petk)
. Fixed bug #75797 (Memory leak when using class_alias() in non-debug mode).
(Massimiliano Braglia)
Fixed bug #76755 (setcookie does not accept "double" type for expire time)
2018-08-17 13:45:43 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Apache2:
. Fixed bug #76582 (Apache bucket brigade sometimes becomes invalid). (stas)
[ci skip] Update NEWS
2018-08-12 17:29:02 +08:00
Fix arginfo for bzcompress bzcompress() has 1 required parameter, not 2. See http://php.net/manual/en/function.bzcompress.php or invoke bzcompress with 1 parameter.
2018-08-13 05:51:13 +08:00
- Bz2:
. Fixed arginfo for bzcompress. (Tyson Andre)
[ci skip] Update NEWS
2018-08-06 02:37:51 +08:00
- gettext:
. Fixed bug #76517 (incorrect restoring of LDFLAGS). (sji)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- iconv:
. Fixed bug #68180 (iconv_mime_decode can return extra characters in a
header). (cmb)
. Fixed bug #63839 (iconv_mime_decode_headers function is skipping headers).
(cmb)
. Fixed bug #60494 (iconv_mime_decode does ignore special characters). (cmb)
. Fixed bug #55146 (iconv_mime_decode_headers() skips some headers). (cmb)
Update NEWS [ci skip]
2018-08-13 15:14:26 +08:00
- intl:
. Fixed bug #74484 (MessageFormatter::formatMessage memory corruption with
11+ named placeholders). (Anatol)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- libxml:
. Fixed bug #76777 ("public id" parameter of libxml_set_external_entity_loader
callback undefined). (Ville Hukkamäki)
Fix #76704: mb_detect_order return value varies based on argument type php_mb_parse_encoding_list() and php_mb_parse_encoding_array() are supposed to return SUCCESS and FAILURE, not 1 and 0, respectively.
2018-08-04 18:51:57 +08:00
- mbstring:
. Fixed bug #76704 (mb_detect_order return value varies based on argument
type). (cmb)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Opcache:
. Fixed bug #76747 (Opcache treats path containing "test.pharma.tld" as a phar
file). (Laruence)
Roll NEWS for 7.2.10
2018-08-02 23:21:40 +08:00
Fix bug #76705 (unusable ssl => peer_fingerprint in stream_context_create())
2018-08-20 03:14:26 +08:00
- OpenSSL:
Merge branch 'PHP-7.1' into PHP-7.2
2018-08-20 03:19:01 +08:00
. Fixed bug #76705 (unusable ssl => peer_fingerprint in
Fix bug #76705 (unusable ssl => peer_fingerprint in stream_context_create())
2018-08-20 03:14:26 +08:00
stream_context_create()). (Jakub Zelenka)
[ci skip] Fix NEWS beta1 has already been released, but does not contain the fix for bug 76595.
2018-08-04 19:44:59 +08:00
- phpdbg:
. Fixed bug #76595 (phpdbg man page contains outdated information).
(Kevin Abel)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- SPL:
. Fixed bug #68825 (Exception in DirectoryIterator::getLinkTarget()). (cmb)
. Fixed bug #68175 (RegexIterator pregFlags are NULL instead of 0). (Tim
Siebels)
Fixed bug #76713 (Segmentation fault caused by property corruption)
2018-08-07 12:36:36 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Standard:
. Fixed bug #76778 (array_reduce leaks memory if callback throws exception).
(cmb)
Fix arginfo for tidy::__construct() This was split out of PR #3439 Previously, the arginfo was wrong for these methods. getNumberOfRequiredParameters() was 4 for that method. Compare with http://php.net/manual/en/tidy.construct.php) This fixes the arginfo added to PHP 7.3 in 97353cda99
2018-08-13 20:44:33 +08:00
[ci skip] Update NEWS
2018-08-06 12:20:08 +08:00
- zlib:
. Fixed bug #65988 (Zlib version check fails when an include/zlib/ style dir
is passed to the --with-zlib configure option). (Jay Bonci)
[ci skip] Update NEWS
2018-08-06 15:43:03 +08:00
. Fixed bug #76709 (Minimal required zlib library is 1.2.0.4). (petk)
[ci skip] Update NEWS
2018-08-06 12:20:08 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
16 Aug 2018, PHP 7.2.9
Update NEWS for 7.3.0beta1
2018-07-17 22:02:50 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Calendar:
. Fixed bug #52974 (jewish.c: compile error under Windows with GBK charset).
(cmb)
- Filter:
. Fixed bug #76366 (References in sub-array for filtering breaks the filter).
(ZiHang Gao)
- PDO_Firebird:
. Fixed bug #76488 (Memory leak when fetching a BLOB field). (Simonov Denis)
Fixed bug #76667 (Segfault with divide-assign op and __get + __set)
2018-07-27 13:00:14 +08:00
Update NEWS [ci skip]
2018-07-31 01:44:59 +08:00
- PDO_PgSQL:
. Fixed bug #75402 (Possible Memory Leak using PDO::CURSOR_SCROLL option).
(Anatol)
Merge branch 'PHP-7.2' * PHP-7.2: Fix #76665: SQLite3Stmt::bindValue() with SQLITE3_FLOAT doesn't juggle
2018-07-26 20:09:30 +08:00
- SQLite3:
. Fixed #76665 (SQLite3Stmt::bindValue() with SQLITE3_FLOAT doesn't juggle).
(cmb)
Update NEWs
2018-07-24 11:37:30 +08:00
- Standard:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #73817 (Incorrect entries in get_html_translation_table). (cmb)
Update NEWs
2018-07-24 11:37:30 +08:00
. Fixed bug #68553 (array_column: null values in $index_key become incrementing
keys in result). (Laruence)
Merge branch 'PHP-7.2' * PHP-7.2: Fix #76643: Segmentation fault when using `output_add_rewrite_var`
2018-07-24 18:33:08 +08:00
. Fixed bug #76643 (Segmentation fault when using `output_add_rewrite_var`).
(cmb)
Fixed bug #76136 (stream_socket_get_name enclosed IPv6 in brackets) The IPv6 IP of a socket is provided by inet_ntop() as a string, but this function doesn't enclose the IP in brackets. This patch adds them in the php_network_populate_name_from_sockaddr() function.
2018-03-31 11:05:12 +08:00
[skip ci] Update NEWS
2018-07-10 17:53:04 +08:00
- Zip:
. Fixed bug #76524 (ZipArchive memory leak (OVERWRITE flag and empty archive)).
(Timur Ibragimov)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
19 Jul 2018, PHP 7.2.8
Update NEWS for 7.3.0alpha3
2018-06-19 21:36:31 +08:00
Fixed bug #76520
2018-06-22 22:22:04 +08:00
- Core:
Update NEWS
2018-06-27 13:09:54 +08:00
. Fixed bug #76534 (PHP hangs on 'illegal string offset on string references
with an error handler). (Laruence)
Fixed bug #76520
2018-06-22 22:22:04 +08:00
. Fixed bug #76520 (Object creation leaks memory when executed over HTTP).
(Nikita)
Fixed bug #76502
2018-06-25 04:26:45 +08:00
. Fixed bug #76502 (Chain of mixed exceptions and errors does not serialize
properly). (Nikita)
Fixed bug #76520
2018-06-22 22:22:04 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Date:
. Fixed bug #76462 (Undefined property: DateInterval::$f). (Anatol)
- EXIF:
. Fixed bug #76409 (heap use after free in _php_stream_free). (cmb)
. Fixed bug #76423 (Int Overflow lead to Heap OverFlow in
exif_thumbnail_extract of exif.c). (Stas)
. Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while reading exif
data). (Stas)
[ci skip] Update NEWS
2018-06-28 17:41:49 +08:00
Fixed bug #73342 Directly listen on socket, instead of duping it to STDIN and listening on that.
2018-06-13 02:34:01 +08:00
- FPM:
. Fixed bug #73342 (Vulnerability in php-fpm by changing stdin to
non-blocking). (Nikita)
Fixed bug #74670 Validate that "C" serialization payload is followed by "}" prior to calling the unserialize() handler. This mitigates issues caused by unserialize() not correctly handling strings that are not NUL terminated. Making sure that there is a "}" at the end avoids the problem.
2018-07-02 23:24:35 +08:00
- GMP:
Fix test after serialization change And move it to a more appropriate location.
2018-07-02 23:58:26 +08:00
. Fixed bug #74670 (Integer Underflow when unserializing GMP and possible
Fixed bug #74670 Validate that "C" serialization payload is followed by "}" prior to calling the unserialize() handler. This mitigates issues caused by unserialize() not correctly handling strings that are not NUL terminated. Making sure that there is a "}" at the end avoids the problem.
2018-07-02 23:24:35 +08:00
other classes). (Nikita)
Fix #76556: get_debug_info handler for BreakIterator shows wrong type We use the retrieved type for the "type" element instead of the text. This has been confused during the PHP 7 upgrade[1]. [1] http://git.php.net/?p=php-src.git;a=commit;h=1d793348067e5769144c0f7efd86428a4137baec
2018-07-01 01:41:55 +08:00
- intl:
. Fixed bug #76556 (get_debug_info handler for BreakIterator shows wrong
type). (cmb)
Fixed bug #76532 (excessive memory usage in mb_strimwidth)
2018-06-28 20:10:41 +08:00
- mbstring:
. Fixed bug #76532 (Integer overflow and excessive memory usage
in mb_strimwidth). (MarcusSchwarz)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Opcache:
. Fixed bug #76477 (Opcache causes empty return value).
(Nikita, Laruence)
- PGSQL:
. Fixed bug #76548 (pg_fetch_result did not fetch the next row). (Anatol)
- phpdbg:
. Fix arginfo wrt. optional/required parameters. (cmb)
- Reflection:
. Fixed bug #76536 (PHP crashes with core dump when throwing exception in
error handler). (Laruence)
. Fixed bug #75231 (ReflectionProperty#getValue() incorrectly works with
inherited classes). (Nikita)
- Standard:
. Fixed bug #76505 (array_merge_recursive() is duplicating sub-array keys).
(Laruence)
. Fixed bug #71848 (getimagesize with $imageinfo returns false). (cmb)
- Win32:
. Fixed bug #76459 (windows linkinfo lacks openbasedir check). (Anatol)
- ZIP:
. Fixed bug #76461 (OPSYS_Z_CPM defined instead of OPSYS_CPM).
(Dennis Birkholz, Remi)
07 Jun 2018, PHP 7.2.7
- Core:
. Fixed bug #76337 (segfault when opcache enabled + extension use
zend_register_class_alias). (xKhorasan)
- CLI Server:
. Fixed bug #76333 (PHP built-in server does not find files if root path
contains special characters). (Anatol)
Add ssl/tls streams options for min and max proto version
2018-06-18 21:05:12 +08:00
- OpenSSL:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #76296 (openssl_pkey_get_public does not respect open_basedir).
(Erik Lax, Jakub Zelenka)
. Fixed bug #76174 (openssl extension fails to build with LibreSSL 2.7).
(Jakub Zelenka)
Add ssl/tls streams options for min and max proto version
2018-06-18 21:05:12 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- SPL:
. Fixed bug #76367 (NoRewindIterator segfault 11). (Laruence)
- Standard:
. Fixed bug #76410 (SIGV in zend_mm_alloc_small). (Laruence)
. Fixed bug #76335 ("link(): Bad file descriptor" with non-ASCII path).
(Anatol)
24 May 2018, PHP 7.2.6
- EXIF:
. Fixed bug #76164 (exif_read_data zend_mm_heap corrupted). (cmb)
- FPM:
. Fixed bug #76075 --with-fpm-acl wrongly tries to find libacl on FreeBSD.
(mgorny)
- intl:
. Fixed bug #74385 (Locale::parseLocale() broken with some arguments).
(Anatol)
- Opcache:
. Fixed bug #76205 (PHP-FPM sporadic crash when running Infinitewp). (Dmitry)
. Fixed bug #76275 (Assertion failure in file cache when unserializing empty
try_catch_array). (Nikita)
. Fixed bug #76281 (Opcache causes incorrect "undefined variable" errors).
(Nikita)
- Reflection:
. Fixed arginfo of array_replace(_recursive) and array_merge(_recursive).
(carusogabriel)
- Session:
. Fixed bug #74892 (Url Rewriting (trans_sid) not working on urls that start
with "#"). (Andrew Nester)
26 Apr 2018, PHP 7.2.5
- Core:
. Fixed bug #75722 (Convert valgrind detection to configure option).
(Michael Heimpold)
- Date:
. Fixed bug #76131 (mismatch arginfo for date_create). (carusogabriel)
- Exif:
. Fixed bug #76130 (Heap Buffer Overflow (READ: 1786) in exif_iif_add_value).
(Stas)
- FPM:
. Fixed bug #68440 (ERROR: failed to reload: execvp() failed: Argument list
too long). (Jacob Hipps)
. Fixed incorrect write to getenv result in FPM reload. (Jakub Zelenka)
- GD:
. Fixed bug #52070 (imagedashedline() - dashed line sometimes is not visible).
(cmb)
- iconv:
. Fixed bug #76249 (stream filter convert.iconv leads to infinite loop on
invalid sequence). (Stas)
- intl:
. Fixed bug #76153 (Intl compilation fails with icu4c 61.1). (Anatol)
- ldap:
. Fixed bug #76248 (Malicious LDAP-Server Response causes Crash). (Stas)
- mbstring:
. Fixed bug #75944 (Wrong cp1251 detection). (dmk001)
. Fixed bug #76113 (mbstring does not build with Oniguruma 6.8.1).
(chrullrich, cmb)
- ODBC:
. Fixed bug #76088 (ODBC functions are not available by default on Windows).
(cmb)
- Opcache:
. Fixed bug #76094 (Access violation when using opcache). (Laruence)
- Phar:
. Fixed bug #76129 (fix for CVE-2018-5712 may not be complete). (Stas)
- phpdbg:
. Fixed bug #76143 (Memory corruption: arbitrary NUL overwrite). (Laruence)
- SPL:
. Fixed bug #76131 (mismatch arginfo for splarray constructor).
(carusogabriel)
- standard:
. Fixed bug #74139 (mail.add_x_header default inconsistent with docs). (cmb)
. Fixed bug #75996 (incorrect url in header for mt_rand). (tatarbj)
29 Mar 2018, PHP 7.2.4
- Core:
. Fixed bug #76025 (Segfault while throwing exception in error_handler).
(Dmitry, Laruence)
. Fixed bug #76044 ('date: illegal option -- -' in ./configure on FreeBSD).
(Anatol)
- FPM:
. Fixed bug #75605 (Dumpable FPM child processes allow bypassing opcache
access controls). (Jakub Zelenka)
- FTP:
. Fixed ftp_pasv arginfo. (carusogabriel)
-GD:
. Fixed bug #73957 (signed integer conversion in imagescale()). (cmb)
. Fixed bug #76041 (null pointer access crashed php). (cmb)
. Fixed imagesetinterpolation arginfo. (Gabriel Caruso)
- iconv:
. Fixed bug #75867 (Freeing uninitialized pointer). (Philip Prindeville)
- Mbstring:
. Fixed bug #62545 (wrong unicode mapping in some charsets). (cmb)
- Opcache:
. Fixed bug #75969 (Assertion failure in live range DCE due to block pass
misoptimization). (Nikita)
- OpenSSL:
. Fixed openssl_* arginfos. (carusogabriel)
- PCNTL:
. Fixed bug #75873 (pcntl_wexitstatus returns incorrect on Big_Endian platform
(s390x)). (Sam Ding)
- Phar:
. Fixed bug #76085 (Segmentation fault in buildFromIterator when directory
name contains a \n). (Laruence)
- Standard:
. Fixed bug #75961 (Strange references behavior). (Laruence)
. Fixed some arginfos. (carusogabriel)
. Fixed bug #76068 (parse_ini_string fails to parse "[foo]\nbar=1|>baz" with
segfault). (Anatol)
01 Mar 2018, PHP 7.2.3
- Core:
. Fixed bug #75864 ("stream_isatty" returns wrong value on s390x). (Sam Ding)
- Apache2Handler:
. Fixed bug #75882 (a simple way for segfaults in threadsafe php just with
configuration). (Anatol)
- Date:
. Fixed bug #75857 (Timezone gets truncated when formatted). (carusogabriel)
. Fixed bug #75928 (Argument 2 for `DateTimeZone::listIdentifiers()` should
accept `null`). (Pedro Lacerda)
. Fixed bug #68406 (calling var_dump on a DateTimeZone object modifies it).
(jhdxr)
- LDAP:
. Fixed bug #49876 (Fix LDAP path lookup on 64-bit distros). (dzuelke)
- libxml2:
. Fixed bug #75871 (use pkg-config where available). (pmmaga)
- PGSQL:
. Fixed bug #75838 (Memory leak in pg_escape_bytea()). (ard_1 at mail dot ru)
- Phar:
. Fixed bug #54289 (Phar::extractTo() does not accept specific directories to
be extracted). (bishop)
. Fixed bug #65414 (deal with leading slash while adding files correctly).
(bishopb)
. Fixed bug #65414 (deal with leading slash when adding files correctly).
(bishopb)
- ODBC:
. Fixed bug #73725 (Unable to retrieve value of varchar(max) type). (Anatol)
- Opcache:
. Fixed bug #75729 (opcache segfault when installing Bitrix). (Nikita)
. Fixed bug #75893 (file_get_contents $http_response_header variable bugged
with opcache). (Nikita)
. Fixed bug #75938 (Modulus value not stored in variable). (Nikita)
- SPL:
. Fixed bug #74519 (strange behavior of AppendIterator). (jhdxr)
- Standard:
. Fixed bug #75916 (DNS_CAA record results contain garbage). (Mike,
Philip Sharp)
. Fixed bug #75981 (Prevent reading beyond buffer start in http wrapper).
(Stas)
01 Feb 2018, PHP 7.2.2
- Core:
. Fixed bug #75742 (potential memleak in internal classes's static members).
(Laruence)
. Fixed bug #75679 (Path 260 character problem). (Anatol)
. Fixed bug #75614 (Some non-portable == in shell scripts). (jdolecek)
. Fixed bug #75786 (segfault when using spread operator on generator passed
by reference). (Nikita)
. Fixed bug #75799 (arg of get_defined_functions is optional). (carusogabriel)
. Fixed bug #75396 (Exit inside generator finally results in fatal error).
(Nikita)
- FCGI:
. Fixed bug #75794 (getenv() crashes on Windows 7.2.1 when second parameter is
false). (Anatol)
- IMAP:
. Fixed bug #75774 (imap_append HeapCorruction). (Anatol)
- Opcache:
. Fixed bug #75720 (File cache not populated after SHM runs full). (Dmitry)
. Fixed bug #75687 (var 8 (TMP) has array key type but not value type).
(Nikita, Laruence)
. Fixed bug #75698 (Using @ crashes php7.2-fpm). (Nikita)
. Fixed bug #75579 (Interned strings buffer overflow may cause crash).
(Dmitry)
- PDO:
. Fixed bug #75616 (PDO extension doesn't allow to be built shared on Darwin).
(jdolecek)
- PDO MySQL:
. Fixed bug #75615 (PDO Mysql module can't be built as module). (jdolecek)
Fix #76512: \w no longer includes unicode characters The migration from PCRE to PCRE2 missed to rename once occurrence of `PCRE_UCP` to `PCRE2_UCP`. We fix that. We also revert the changes to bug52971.phpt which had been incorrectly made in commit a5bc5ae[1]. [1] <http://git.php.net/?p=php-src.git;a=commit;h=a5bc5aed71f7a15f14f33bb31b8e17bf5f327e2d>
2018-06-22 01:18:15 +08:00
[ci skip] Update NEWS
2018-06-30 02:12:45 +08:00
- PGSQL:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #75671 (pg_version() crashes when called on a connection to
cockroach). (magicaltux at gmail dot com)
[ci skip] Update NEWS
2018-06-30 02:12:45 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Readline:
. Fixed bug #75775 (readline_read_history segfaults with empty file).
(Anatol)
Fix arginfo wrt. optional/required parameters All parameters of phpdbg_color(), phpdbg_exec() and phpdbg_prompt() are required. We mark them as such.
2018-06-22 21:45:31 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- SAPI:
. Fixed bug #75735 ([embed SAPI] Segmentation fault in
sapi_register_post_entry). (Laruence)
- SOAP:
. Fixed bug #70469 (SoapClient generates E_ERROR even if exceptions=1 is
used). (Anton Artamonov)
. Fixed bug #75502 (Segmentation fault in zend_string_release). (Nikita)
- SPL:
. Fixed bug #75717 (RecursiveArrayIterator does not traverse arrays by
reference). (Nikita)
. Fixed bug #75242 (RecursiveArrayIterator doesn't have constants from parent
class). (Nikita)
. Fixed bug #73209 (RecursiveArrayIterator does not iterate object
properties). (Nikita)
Update NEWS
2018-06-28 12:38:40 +08:00
Update NEWS
2018-06-21 17:27:18 +08:00
- Standard:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #75781 (substr_count incorrect result). (Laruence)
. Fixed bug #75653 (array_values don't work on empty array). (Nikita)
Update NEWS
2018-06-21 17:27:18 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Zip:
. Display headers (buildtime) and library (runtime) versions in phpinfo
(with libzip >= 1.3.1). (Remi)
Fixed bug #76538
2018-06-28 05:06:25 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
04 Jan 2018, PHP 7.2.1
Update NEWS for 7.3.0alpha2
2018-06-06 16:06:08 +08:00
[ci skip] Update NEWS
2018-06-10 02:36:50 +08:00
- Core:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence)
. Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
(Anatol)
. Fixed bug #75525 (Access Violation in vcruntime140.dll). (Anatol)
. Fixed bug #74862 (Unable to clone instance when private __clone defined).
(Daniel Ciochiu)
. Fixed bug #75074 (php-process crash when is_file() is used with strings
longer 260 chars). (Anatol)
. Fixed bug #69727 (Remove timestamps from build to make it reproducible).
(jelle van der Waa)
Update NEWS for 7.3.0alpha2
2018-06-06 16:06:08 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- CLI server:
. Fixed bug #73830 (Directory does not exist). (Anatol)
Fix bug #44217: Output after stdout/stderr closed cause immediate exit with status 0 We exit with status 255 instead.
2018-06-15 14:08:49 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- FPM:
. Fixed bug #64938 (libxml_disable_entity_loader setting is shared between
requests). (Remi)
[ci skip] Update NEWS
2018-06-13 00:08:24 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- GD:
. Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).
(Christoph)
[ci skip] Update NEWS Cf. https://github.com/php/php-src/commit/3fdde65617e9f954e2c964768aac8831005497e5
2018-06-10 04:36:35 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Opcache:
. Fixed bug #75608 ("Narrowing occurred during type inference" error).
(Laruence, Dmitry)
. Fixed bug #75579 (Interned strings buffer overflow may cause crash).
(Dmitry)
. Fixed bug #75570 ("Narrowing occurred during type inference" error).
(Dmitry)
. Fixed bug #75681 (Warning: Narrowing occurred during type inference,
specific case). (Nikita)
. Fixed bug #75556 (Invalid opcode 138/1/1). (Laruence)
Correct NEWS
2018-06-11 21:10:13 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- PCRE:
. Fixed bug #74183 (preg_last_error not returning error code after error).
(Andrew Nester)
[ci skip] Update NEWS
2018-06-15 13:30:10 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Phar:
. Fixed bug #74782 (remove file name from output to avoid XSS). (stas)
Fixed bug #76463 (var has array key type but not value type)
2018-06-12 20:55:06 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Standard:
. Fixed bug #75511 (fread not free unused buffer). (Laruence)
. Fixed bug #75514 (mt_rand returns value outside [$min,$max]+ on 32-bit)
(Remi)
. Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP
segment fault). (Nikita)
. Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator
that getrandom() is missing). (sarciszewski)
. Fixed bug #73124 (php_ini_scanned_files() not reporting correctly).
(John Stevenson)
. Fixed bug #75574 (putenv does not work properly if parameter contains
non-ASCII unicode character). (Anatol)
Fixed bug #75218 I've introduced a new CompileError type, from which ParseError inherits. These errors are not parse errors in the narrow sense of the term, even though they happen to be generated during parsing in our implementation. Additionally reusing the ParseError class for this purpose would change existing error messages (if the exception is not caught) from a "Fatal error:" to a "Parse error:" prefix, and also the error kind from E_COMPILE_ERROR to E_PARSE.
2017-09-24 21:24:51 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Zip:
. Fixed bug #75540 (Segfault with libzip 1.3.1). (Remi)
30 Nov 2017, PHP 7.2.0
- BCMath:
. Fixed bug #46564 (bcmod truncates fractionals). (liborm85)
- CLI:
. Fixed bug #74849 (Process is started as interactive shell in PhpStorm).
(Anatol)
. Fixed bug #74979 (Interactive shell opening instead of script execution
with -f flag). (Anatol)
NEWS
2018-06-12 15:36:31 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- CLI server:
. Fixed bug #60471 (Random "Invalid request (unexpected EOF)" using a router
script). (SammyK)
Update NEWS for 7.2.0beta1
2017-07-04 17:27:47 +08:00
Redesigned ext_skel to be written entirely in PHP with no dependencies, this means it will now run on Windows without Cygwin and other nonsense. It no longer includes a way to generate XML documentation (the PHP documentation utilities already got tools for that in svn under phpdoc/doc-base) and it no longer support function stubs. $ php ext_skel.php --help php ext_skel.php --ext=<name> [--experimental] [--author=<name>] [--dir=<path>] [--std] [--onlyunix] [--onlywindows] [--help] --ext=<name> The name of the extension defined as <name> --experimental Passed if this extension is experimental, this creates the EXPERIMENTAL file in the root of the extension --author=<name> Your name, this is used if --header is passed and for the CREDITS file --dir=<path> Path to the directory for where extension should be created. Defaults to the directory of where this script lives --std If passed, the standard header and vim rules footer used in extensions that is included in the core, will be used --onlyunix Only generate configure scripts for Unix --onlywindows Only generate configure scripts for Windows --help This help Example usage: $ php ext_skel.php --ext test --std --experimental $ php ext_skel.php --ext kalle --author "Kalle Sommer Nielsen" $ php ext_skel.php --ext phpfi --dir "/home/kalle/dev/" --onlyunix
2017-07-23 16:36:35 +08:00
- Core:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Added ZEND_COUNT, ZEND_GET_CLASS, ZEND_GET_CALLED_CLASS, ZEND_GET_TYPE,
ZEND_FUNC_NUM_ARGS, ZEND_FUNC_GET_ARGS instructions, to implement
corresponding builtin functions. (Dmitry)
. "Countable" interface is moved from SPL to Core. (Dmitry)
. Added ZEND_IN_ARRAY instruction, implementing optimized in_array() builtin
function, through hash lookup in flipped array. (Dmitry)
. Removed IS_TYPE_IMMUTABLE (it's the same as COPYABLE & !REFCOUNTED). (Dmitry)
. Removed the sql.safe_mode directive. (Kalle)
. Removed support for Netware. (Kalle)
. Renamed ReflectionClass::isIterateable() to ReflectionClass::isIterable()
(alias original name for BC). (Sara)
. Fixed bug #54535 (WSA cleanup executes before MSHUTDOWN). (Kalle)
. Implemented FR #69791 (Disallow mail header injections by extra headers)
(Yasuo)
. Implemented FR #49806 (proc_nice() for Windows). (Kalle)
. Fix pthreads detection when cross-compiling (ffontaine)
. Fixed memory leaks caused by exceptions thrown from destructors. (Bob,
Dmitry).
. Fixed bug #73215 (uniqid() should use better random source). (Yasuo)
. Implemented FR #72768 (Add ENABLE_VIRTUAL_TERMINAL_PROCESSING flag for
php.exe). (Michele Locati)
. Implemented "Convert numeric keys in object/array casts" RFC, fixes
bugs #53838, #61655, #66173, #70925, #72254, etc. (Andrea)
. Implemented "Deprecate and Remove Bareword (Unquoted) Strings" RFC.
(Rowan Collins)
. Raised minimum supported Windows versions to Windows 7/Server 2008 R2.
(Anatol)
. Implemented minor optimization in array_keys/array_values(). (Sara)
. Added PHP_OS_FAMILY constant to determine on which OS we are. (Jan Altensen)
. Fixed bug #73987 (Method compatibility check looks to original
definition and not parent). (pmmaga)
. Fixed bug #73991 (JSON_OBJECT_AS_ARRAY not respected). (Sara)
. Fixed bug #74053 (Corrupted class entries on shutdown when a destructor
spawns another object). (jim at commercebyte dot com)
. Fixed bug #73971 (Filename got limited to MAX_PATH on Win32 when scan
directory). (Anatol)
. Fixed bug #72359, bug #72451, bug #73706, bug #71115 and others related
to interned strings handling in TS builds. (Anatol, Dmitry)
. Implemented "Trailing Commas In List Syntax" RFC for group use lists only.
(Sammy Kaye Powers)
. Fixed bug #74269 (It's possible to override trait property with different
loosely-equal value). (pmmaga)
. Fixed bug #61970 (Restraining __construct() access level in subclass gives
a fatal error). (pmmaga)
. Fixed bug #63384 (Cannot override an abstract method with an abstract
method). (pmmaga, wes)
. Fixed bug #74607 (Traits enforce different inheritance rules). (pmmaga)
. Fixed misparsing of abstract unix domain socket names. (Sara)
. Change PHP_OS_FAMILY value from "OSX" to "Darwin". (Sebastian, Kalle)
. Allow loading PHP/Zend extensions by name in ini files (extension=<name>).
(francois at tekwire dot net)
. Added object type annotation. (brzuchal)
. Fixed bug #74815 (crash with a combination of INI entries at startup).
(Anatol)
. Fixed bug #74836 (isset on zero-prefixed numeric indexes in array broken).
Added NEWS entry
2018-03-12 16:07:26 +08:00
(Dmitry)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Added new VM instuctions ISSET_ISEMPTY_CV and UNSET_CV. Previously they
were implemented as ISSET_ISEMPTY_VAR and UNSET_VAR variants with
ZEND_QUICK_SET flag. (Nikita, Dmitry)
. Fixed bug #49649 (unserialize() doesn't handle changes in property
visibility). (pmmaga)
. Fixed #74866 (extension_dir = "./ext" now use current directory for base).
(Francois Laupretre)
. Implemented FR #74963 (Improved error message on fetching property of
non-object). (Laruence)
. Fixed Bug #75142 (buildcheck.sh check for autoconf version needs to be updated
for v2.64). (zizzy at zizzy dot net, Remi)
. Fixed bug #74878 (Data race in ZTS builds). (Nikita, Dmitry)
. Fixed bug #75515 ("stream_copy_to_stream" doesn't stream anymore). (Sara)
Merge branch 'pull-request/2739' * pull-request/2739: Fix proto and indentation Fix arginfo Return old scale value from bcscale()
2017-09-13 22:04:19 +08:00
Prepare NEWS file for release - set release date - merge all alpha/beta/RC entries - clean entries already in 7.1
2017-11-27 19:49:28 +08:00
- cURL:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #75093 (OpenSSL support not detected). (Remi)
. Better fix for #74125 (use pkg-config instead of curl-config). (Remi)
Update NEWS that did not get updated in #2442 [ci skip]
2017-09-01 22:43:26 +08:00
Added method DateTime::createFromImmutable()
2017-04-18 00:36:30 +08:00
- Date:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #55407 (Impossible to prototype DateTime::createFromFormat).
(kelunik)
. Implemented FR #71520 (Adding the DateTime constants to the
DateTimeInterface interface). (Majkl578)
. Fixed bug #75149 (redefinition of typedefs ttinfo and t1info). (Remi)
Merge branch 'PHP-7.2' * PHP-7.2: fix bug #75222 DateInterval microseconds property always 0
2017-09-27 13:23:52 +08:00
. Fixed bug #75222 (DateInterval microseconds property always 0). (jhdxr)
Added method DateTime::createFromImmutable()
2017-04-18 00:36:30 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Dba:
. Fixed bug #72885 (flatfile: dba_fetch() fails to read replaced entry).
(Anatol)
- DOM:
. Implement #74837 (Implement Countable for DomNodeList and DOMNamedNodeMap).
(Andreas Treichel)
- EXIF:
. Added support for vendor specific tags for the following formats:
Samsung, DJI, Panasonic, Sony, Pentax, Minolta, Sigma/Foveon, AGFA,
Kyocera, Ricoh & Epson. (Kalle)
. Fixed bug #72682 (exif_read_data() fails to read all data for some
images). (Kalle)
. Fixed bug #71534 (Type confusion in exif_read_data() leading to heap
overflow in debug mode). (hlt99 at blinkenshell dot org, Kalle)
. Fixed bug #68547 (Exif Header component value check error).
(sjh21a at gmail dot com, Kalle)
. Fixed bug #66443 (Corrupt EXIF header: maximum directory nesting level
reached for some cameras). (Kalle)
. Fixed Redhat bug #1362571 (PHP not returning full results for
exif_read_data function). (Kalle)
. Implemented #65187 (exif_read_data/thumbnail: add support for stream
resource). (Kalle)
. Deprecated the read_exif_data() alias. (Kalle)
. Fixed bug #74428 (exif_read_data(): "Illegal IFD size" warning occurs with
correct exif format). (bradpiccho at gmail dot com, Kalle)
. Fixed bug #72819 (EXIF thumbnails not read anymore). (Kalle)
. Fixed bug #62523 (php crashes with segfault when exif_read_data called).
(Kalle)
. Fixed bug #50660 (exif_read_data(): Illegal IFD offset (works fine with
other exif readers). (skinny dot bravo at gmail dot com, Kalle)
- Fileinfo:
. Upgrade bundled libmagic to 5.31. (Anatol)
- FPM:
. Configuration to limit fpm slow log trace callers. (Sannis)
. Fixed bug #75212 (php_value acts like php_admin_value). (Remi)
- FTP:
. Implement MLSD for structured listing of directories. (blar)
. Added ftp_append() function. (blar)
Fix bug #75264
2017-09-27 07:07:52 +08:00
Merge branch 'pull-request/2664' * pull-request/2664: Fix unittest for minimal length in random string Add support for webp in imagecreatefromstring
2017-08-08 05:56:31 +08:00
- GD:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Implemented imageresolution as getter and setter (Christoph)
. Fixed bug #74744 (gd.h: stdarg.h include missing for va_list use in
gdErrorMethod). (rainer dot jung at kippdata dot de, cmb)
. Fixed bug #75111 (Memory disclosure or DoS via crafted .bmp image). (cmb)
Merge branch 'pull-request/2664' * pull-request/2664: Fix unittest for minimal length in random string Add support for webp in imagecreatefromstring
2017-08-08 05:56:31 +08:00
Make GMP more usable by third-party extensions. Export a PHPAPI function to return gmp_ce (and make the actual storage static). Provide gmp_object struct in header w/ inline accessor. Install php_gmp_int.h header. Remove unnecessary `#ifdef HAVE_GMP` checks.
2017-10-03 05:26:05 +08:00
- GMP:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #70896 (gmp_fact() silently ignores non-integer input). (Sara)
Make GMP more usable by third-party extensions. Export a PHPAPI function to return gmp_ce (and make the actual storage static). Provide gmp_object struct in header w/ inline accessor. Install php_gmp_int.h header. Remove unnecessary `#ifdef HAVE_GMP` checks.
2017-10-03 05:26:05 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Hash:
. Changed HashContext from resource to object. (Rouven Weßling, Sara)
. Disallowed usage of non-cryptographic hash functions with HMAC and PBKDF2.
(Andrey Andreev, Nikita)
. Fixed Bug #75284 (sha3 is not supported on bigendian machine). (Remi)
add 7.1 NEW entries
2017-11-23 18:08:53 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- IMAP:
. Fixed bug #72324 (imap_mailboxmsginfo() return wrong size).
(ronaldpoon at udomain dot com dot hk, Kalle)
- Intl:
. Fixed bug #63790 (test using Spoofchecker which may be unavailable). (Sara)
. Fixed bug #75378 ([REGRESSION] IntlDateFormatter::parse() does not change
$position argument). (Laruence)
Update NEWS for 7.2.0RC1
2017-08-15 16:54:17 +08:00
Merge JSON_THROW_ON_ERROR
2017-10-23 02:41:23 +08:00
- JSON:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Add JSON_INVALID_UTF8_IGNORE and JSON_INVALID_UTF8_SUBSTITUTE options for
json_encode and json_decode to ignore or replace invalid UTF-8 byte
sequences - it addresses request #65082. (Jakub Zelenka)
. Fixed bug #75185 (Buffer overflow in json_decode() with
JSON_INVALID_UTF8_IGNORE or JSON_INVALID). (Jakub Zelenka)
. Fixed bug #68567 (JSON_PARTIAL_OUTPUT_ON_ERROR can result in JSON with null
key). (Jakub Zelenka)
Merge JSON_THROW_ON_ERROR
2017-10-23 02:41:23 +08:00
Added ldap_exop_refresh helper for EXOP REFRESH operation on dds overlay ldap_exop_refresh(resource link, string dn, int ttl) Returns FALSE on failure, newttl on success
2017-07-20 22:14:47 +08:00
- LDAP:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Implemented FR #69445 (Support for LDAP EXOP operations)
. Fixed support for LDAP_OPT_SERVER_CONTROLS and LDAP_OPT_CLIENT_CONTROLS in ldap_get_option
. Fixed passing an empty array to ldap_set_option for client or server controls.
Added ldap_exop_refresh helper for EXOP REFRESH operation on dds overlay ldap_exop_refresh(resource link, string dn, int ttl) Returns FALSE on failure, newttl on success
2017-07-20 22:14:47 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Mbstring:
. Implemented request #66024 (mb_chr() and mb_ord()). (Masakielastic, Yasuo)
. Implemented request #65081 (mb_scrub()). (Masakielastic, Yasuo)
. Implemented request #69086 (enhancement for mb_convert_encoding() that
handles multibyte replacement char nicely). (Masakielastic, Yasuo)
. Added array input support to mb_convert_encoding(). (Yasuo)
. Added array input support to mb_check_encoding(). (Yasuo)
. Fixed bug #69079 (enhancement for mb_substitute_character). (masakielastic)
. Update to oniguruma version 6.3.0. (Remi)
. Fixed bug #69267 (mb_strtolower fails on titlecase characters). (Nikita)
- Mcrypt:
. The deprecated mcrypt extension has been moved to PECL. (leigh)
Fix bug #73528
2017-07-23 17:06:01 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Opcache:
. Added global optimisation passes based on data flow analysis using Single
Static Assignment (SSA) form: Sparse Conditional Constant Propagation (SCCP),
Dead Code Elimination (DCE), and removal of unused local variables
(Nikita, Dmitry)
. Fixed incorect constant conditional jump elimination. (Dmitry)
. Fixed bug #75230 (Invalid opcode 49/1/8 using opcache). (Laruence)
. Fixed bug (assertion fails with extended info generated). (Laruence)
. Fixed bug (Phi sources removel). (Laruence)
. Fixed bug #75370 (Webserver hangs on valid PHP text). (Laruence)
. Fixed bug #75357 (segfault loading WordPress wp-admin). (Laruence)
Bump versions and NEWS for 7.1.1-dev
2016-12-02 18:14:51 +08:00
Merge branch 'PHP-7.2' * PHP-7.2: Fix bug #75307 Wrong reflection for openssl_open function
2017-10-27 23:07:10 +08:00
- OpenSSL:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Use TLS_ANY for default ssl:// and tls:// negotiation. (kelunik)
. Fix leak in openssl_spki_new(). (jelle at vdwaa dot nl)
. Added openssl_pkcs7_read() and pk7 parameter to openssl_pkcs7_verify().
(jelle at vdwaa dot nl)
. Add ssl security_level stream option to support OpenSSL security levels.
(Jakub Zelenka).
. Allow setting SNI cert and private key in separate files. (Jakub Zelenka)
. Fixed bug #74903 (openssl_pkcs7_encrypt() uses different EOL than before).
(Anatol)
. Automatically load OpenSSL configuration file. (Jakub Zelenka)
Fixed bug #75090
2017-08-24 06:35:18 +08:00
[ci skip] update NEWS
2017-11-14 07:03:16 +08:00
- PCRE:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Added support for PCRE JIT fast path API. (dmitry)
. Fixed bug #61780 (Inconsistent PCRE captures in match results). (cmb)
. Fixed bug #74873 (Minor BC break: PCRE_JIT changes output of preg_match()).
(Dmitry)
. Fixed bug #75089 (preg_grep() is not reporting PREG_BAD_UTF8_ERROR after
first input string). (Dmitry)
. Fixed bug #75223 (PCRE JIT broken in 7.2). (Dmitry)
. Fixed bug #75285 (Broken build when system libpcre don't have jit support).
(Remi)
[ci skip] update NEWS
2017-11-14 07:03:16 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- phar:
. Fixed bug #74196 (phar does not correctly handle names containing dots).
(mhagstrand)
Implemented request #69592: allow 0-column rowsets to be skipped automatically This adds a new attribute PDO::DBLIB_ATTR_SKIP_EMPTY_ROWSETS to enable automatic skipping of empty rowsets. This happens with some SQL commands (like PRINT or SET): a rowset with 0 columns is returned by the driver. With this option enabled, 0 columns rowsets are automatically skipped, mirroring the behavior of the deprecated mssql extension. Credits go to MiRacLe-RPZ for developping and promoting this patch.
2017-10-18 02:16:38 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- PDO:
. Add "Sent SQL" to debug dump for emulated prepares. (Adam Baratz)
. Add parameter types for national character set strings. (Adam Baratz)
Update NEWS
2017-08-22 13:52:48 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- PDO_DBlib:
. Fixed bug #73234 (Emulated statements let value dictate parameter type).
(Adam Baratz)
. Fixed bug #73396 (bigint columns are returned as strings). (Adam Baratz)
. Expose DB-Library version as \PDO::DBLIB_ATTR_VERSION attribute on \PDO
instance. (Adam Baratz)
. Add test coverage for bug #72969. (Jeff Farr)
Add support for SQLite open flags
2017-09-04 07:02:12 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- PDO_OCI:
. Fixed Bug #74537 (Align --with-pdo-oci configure option with --with-oci8 syntax).
(Tianfang Yang)
Implemented FR #74781 (Add the latest PG_DIAG_* const)
2017-08-18 03:04:41 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- PDO_Sqlite
. Switch to sqlite3_prepare_v2() and sqlite3_close_v2() functions (rasmus)
add 7.1 NEW entries
2017-11-23 18:08:53 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- PHPDBG
. Added extended_value to opcode dump output. (Sara)
Add support for rl_completion_suppress_append and rl_completion_append_character These options are only available with libreadline.
2017-08-29 16:43:04 +08:00
Redesigned ext_skel to be written entirely in PHP with no dependencies, this means it will now run on Windows without Cygwin and other nonsense. It no longer includes a way to generate XML documentation (the PHP documentation utilities already got tools for that in svn under phpdoc/doc-base) and it no longer support function stubs. $ php ext_skel.php --help php ext_skel.php --ext=<name> [--experimental] [--author=<name>] [--dir=<path>] [--std] [--onlyunix] [--onlywindows] [--help] --ext=<name> The name of the extension defined as <name> --experimental Passed if this extension is experimental, this creates the EXPERIMENTAL file in the root of the extension --author=<name> Your name, this is used if --header is passed and for the CREDITS file --dir=<path> Path to the directory for where extension should be created. Defaults to the directory of where this script lives --std If passed, the standard header and vim rules footer used in extensions that is included in the core, will be used --onlyunix Only generate configure scripts for Unix --onlywindows Only generate configure scripts for Windows --help This help Example usage: $ php ext_skel.php --ext test --std --experimental $ php ext_skel.php --ext kalle --author "Kalle Sommer Nielsen" $ php ext_skel.php --ext phpfi --dir "/home/kalle/dev/" --onlyunix
2017-07-23 16:36:35 +08:00
- Session:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #73461 (Prohibit session save handler recursion). (Yasuo)
. PR #2233 Removed register_globals related code and "!" can be used as $_SESSION key name. (Yasuo)
. Improved bug #73100 fix. 'user' save handler can only be set by session_set_save_handler()
. Fixed bug #74514 (5 session functions incorrectly warn when calling in
read-only/getter mode). (Yasuo)
. Fixed bug #74936 (session_cache_expire/cache_limiter/save_path() trigger a
warning in read mode). (morozov)
Trim trailing whitespace in source code files
2018-10-13 20:16:33 +08:00
. Fixed bug #74941 (session fails to start after having headers sent).
Redesigned ext_skel to be written entirely in PHP with no dependencies, this means it will now run on Windows without Cygwin and other nonsense. It no longer includes a way to generate XML documentation (the PHP documentation utilities already got tools for that in svn under phpdoc/doc-base) and it no longer support function stubs. $ php ext_skel.php --help php ext_skel.php --ext=<name> [--experimental] [--author=<name>] [--dir=<path>] [--std] [--onlyunix] [--onlywindows] [--help] --ext=<name> The name of the extension defined as <name> --experimental Passed if this extension is experimental, this creates the EXPERIMENTAL file in the root of the extension --author=<name> Your name, this is used if --header is passed and for the CREDITS file --dir=<path> Path to the directory for where extension should be created. Defaults to the directory of where this script lives --std If passed, the standard header and vim rules footer used in extensions that is included in the core, will be used --onlyunix Only generate configure scripts for Unix --onlywindows Only generate configure scripts for Windows --help This help Example usage: $ php ext_skel.php --ext test --std --experimental $ php ext_skel.php --ext kalle --author "Kalle Sommer Nielsen" $ php ext_skel.php --ext phpfi --dir "/home/kalle/dev/" --onlyunix
2017-07-23 16:36:35 +08:00
(morozov)
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- Sodium:
. New cryptographic extension
. Added missing bindings for libsodium > 1.0.13. (Frank)
Update NEWS
2017-07-21 18:17:54 +08:00
Fixed bug #74936 - session_*() functions trigger a warning in read mode when the session is active
2017-07-17 17:39:34 +08:00
- SPL:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #71412 (Incorrect arginfo for ArrayIterator::__construct).
(tysonandre775 at hotmail dot com)
. Added spl_object_id(). (Tyson Andre)
Update NEWS for 7.2.0beta2
2017-07-19 00:00:34 +08:00
Updated bundled libsqlite to 3.21.0
2017-11-07 23:21:07 +08:00
- SQLite3:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Implement writing to blobs. (bohwaz at github dot com)
. Update to Sqlite 3.20.1. (cmb)
Updated bundled libsqlite to 3.21.0
2017-11-07 23:21:07 +08:00
Fixed unzserialize(), to disable creation of unsupported data structures through manually crafted strings. (Dmitry)
2017-10-13 20:53:11 +08:00
- Standard:
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
. Fixed bug #69442 (closing of fd incorrect when PTS enabled). (jaytaph)
. Fixed bug #74300 (unserialize accepts two plus/minus signs for float number exponent part).
(xKerman)
. Compatibility with libargon2 versions 20161029 and 20160821.
(charlesportwoodii at erianna dot com)
. Fixed Bug #74737 (mysqli_get_client_info reflection info).
(mhagstrand at gmail dot com)
. Add support for extension name as argument to dl().
(francois at tekwire dot net)
. Fixed bug #74851 (uniqid() without more_entropy performs badly).
(Emmanuel Dreyfus)
. Fixed bug #74103 (heap-use-after-free when unserializing invalid array
size). (Nikita)
. Fixed bug #75054 (A Denial of Service Vulnerability was found when
performing deserialization). (Nikita)
. Fixed bug #75170 (mt_rand() bias on 64-bit machines). (Nikita)
. Fixed bug #75221 (Argon2i always throws NUL at the end). (cmb)
- Streams:
. Default ssl/single_dh_use and ssl/honor_cipher_order to true. (kelunik)
Fixed unzserialize(), to disable creation of unsupported data structures through manually crafted strings. (Dmitry)
2017-10-13 20:53:11 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- XML:
. Moved utf8_encode() and utf8_decode() to the Standard extension. (Andrea)
Implemented request #62055 (Make run-tests.php support --CGI-- sections) Not regarding the CGI section might even been seen as a bug, and since server-tests.php appears to broken, anway[1][2], we implement it for run-tests.php in the way as described[3] for server-tests.php, i.e. respective tests are skipped if no CGI executable is found. [1] <https://github.com/php/php-src/pull/222#commitcomment-2064387> [2] <https://github.com/php/php-src/pull/1811#issuecomment-256677997> [3] <https://qa.php.net/phpt_details.php#cgi_section>
2017-10-31 04:04:59 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- XMLRPC:
. Use Zend MM for allocation in bundled libxmlrpc (Joe)
Fixed bug #74707 Several tidy functions receive a tidy object as mandatory parameter
2018-02-08 03:41:03 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- ZIP:
. Add support for encrypted archives. (Remi)
. Use of bundled libzip is deprecated, --with-libzip option is recommended. (Remi)
. Fixed Bug #73803 (Reflection of ZipArchive does not show public properties). (Remi)
. ZipArchive implements countable, added ZipArchive::count() method. (Remi)
. Fix segfault in php_stream_context_get_option call. (Remi)
. Fixed bug #75143 (new method setEncryptionName() seems not to exist
in ZipArchive). (Anatol)
Add support for zlib/level context option
2017-10-24 10:10:56 +08:00
[ci skip] Prepare NEWS for 7.3 GA
2018-12-03 20:56:14 +08:00
- zlib:
. Expose inflate_get_status() and inflate_get_read_len() functions.
(Matthew Trescott)
Reference in New Issue Copy Permalink