Christoph M. Becker
dfa6c2046a
Remove deprecated image2wbmp()
...
Cf. <https://wiki.php.net/rfc/image2wbmp >.
2019-01-28 14:29:06 +01:00
Nikita Popov
e118151139
Clear NEWS, UPGRADING and UPGRADING.INTERNALS
2019-01-28 11:17:30 +01:00
Nikita Popov
909d0a3d78
Fixed bug #77518
2019-01-25 11:12:34 +01:00
Christoph M. Becker
6f3880c62f
Improve wording
...
As suggested by Tom Sommer[1].
[1] <8a4c2f1621 (r32037340)
2019-01-24 13:09:18 +01:00
Dmitry Stogov
e089d506d5
Added FFI extension
2019-01-14 11:47:50 +03:00
Sammy Kaye Powers
74c0e580ef
Improve openssl_random_pseudo_bytes()
...
CSPRNG implementations should always fail closed. Now
openssl_random_pseudo_bytes() will fail closed by throwing an
`\Exception` in fail conditions.
RFC: https://wiki.php.net/rfc/improve-openssl-random-pseudo-bytes
2019-01-11 11:16:05 +01:00
Andreas Treichel
3c9af3095c
Preserve aspect ratio for width or height
2019-01-05 13:39:49 +01:00
Michael Moravec
f5044a12dd
Implement ZEND_ARRAY_KEY_EXISTS opcode to speed up array_key_exists()
2018-12-26 23:54:11 +03:00
BohwaZ
82af24f2b2
Implement SQLite3Stmt::getSQL method, returning the original statement SQL, eventually expanded
2018-12-15 17:27:33 +01:00
Christoph M. Becker
3b0f051193
Allow empty $escape to eschew escaping CSV
...
Albeit CSV is still a widespread data exchange format, it has never been
officially standardized. There exists, however, the “informational” RFC
4180[1] which has no notion of escape characters, but rather defines
`escaped` as strings enclosed in double-quotes where contained
double-quotes have to be doubled. While this concept is supported by
PHP's implementation (`$enclosure`), the `$escape` sometimes interferes,
so that `fgetcsv()` is unable to correctly parse externally generated
CSV, and `fputcsv()` is sometimes generating non-compliant CSV. Since
PHP's `$escape` concept is availble for many years, we cannot drop it
for BC reasons (even though many consider it as bug). Instead we allow
to pass an empty string as `$escape` parameter to the respective
functions, which results in ignoring/omitting any escaping, and as such
is more inline with RFC 4180. It is noteworthy that this is almost no
userland BC break, since formerly most functions did not accept an empty
string, and failed in this case. The only exception was `str_getcsv()`
which did accept an empty string, and used a backslash as escape
character then (which appears to be unintended behavior, anyway).
The changed functions are `fputcsv()`, `fgetcsv()` and `str_getcsv()`,
and also the `::setCsvControl()`, `::getCsvControl()`, `::fputcsv()`,
and `::fgetcsv()` methods of `SplFileObject`.
The implementation also changes the type of the escape parameter of the
PHP_APIs `php_fgetcsv()` and `php_fputcsv()` from `char` to `int`, where
`PHP_CSV_NO_ESCAPE` means to ignore/omit escaping. The parameter
accepts the same values as `isalpha()` and friends, i.e. “the value of
which shall be representable as an `unsigned char` or shall equal the
value of the macro `EOF`. If the argument has any other value, the
behavior is undefined.” This is a subtle BC break, since the character
`chr(128)` has the value `-1` if `char` is signed, and so likely would
be confused with `EOF` when converted to `int`. We consider this BC
break to be acceptable, since it's rather unlikely that anybody uses
`chr(128)` as escape character, and it easily can be fixed by casting
all `escape` arguments to `unsigned char`.
This patch implements the feature requests 38301[2] and 51496[3].
[1] <https://tools.ietf.org/html/rfc4180 >
[2] <https://bugs.php.net/bug.php?id=38301 >
[3] <https://bugs.php.net/bug.php?id=51496 >
2018-12-15 14:38:15 +01:00
Christoph M. Becker
8c781c1c20
Resolve imagecropauto() default $mode quirk
...
The `$mode` parameter of `imagecropauto()` defaults to `-1`. However,
`-1` is changed to `GD_CROP_DEFAULT` right away, so basically the
default is `GD_CROP_DEFAULT`, which is rather confusing and
unnecessary.
Therefore, we change the default to `IMG_CROP_DEFAULT`, but still allow
an explicit `-1` to be passed for BC reasons, in which case we trigger
a deprecation notice, so we can rid the `-1` support eventually.
2018-12-12 17:25:37 +01:00
Craig Andrews
40c4d7f182
Implement FR #72510 : systemd service should be hardened
2018-12-12 17:12:02 +01:00
Christoph M. Becker
f0f4ab4b02
[ci skip] Fix names of the constants
...
`GD_CROP_DEFAULT` and `GD_CROP_SIDES` are names of libgd constants, and
as such they are not relevant for userland developers. Therefore, we
replace them by the constant names of our wrapper, i.e.
`IMG_CROP_DEFAULT` and `IMG_CROP_SIDES`, respectively.
2018-12-01 23:54:17 +01:00
Christoph M. Becker
dcad13e8c9
Fix #73291 : imagecropauto() $threshold differs from external libgd
...
Since upstream does not appear to move in any way[1], we sync our
behavior. Even though the BC break is ugly (which is the reason we
target master only), having to deal with different algorithms is even
worse for portable userland code.
[1] <https://github.com/libgd/libgd/issues/334 >
2018-12-01 18:49:30 +01:00
Christoph M. Becker
947ca9f43d
Sync behavior of gdImageAutoCrop() with upstream
...
Since cropping support has been added to our bundled libgd,
`gdImageAutoCrop` differs from upstream in that `GD_CROP_DEFAULT` falls
back on `GD_CROP_SIDES` if there is no transparent color in the image.
While this difference seem to be a useful improvement in our bundled
libgd, upstream has not yet signaled that there willing to back-port
it[1], so we revert it to stay in sync with upstream.
We also remove the additional NULL bailout at the end of the function,
which doesn't appear to be relevant any longer since bug 77198 has been
fixed.
[1] <https://github.com/libgd/libgd/issues/298 >
2018-12-01 15:34:10 +01:00
Christoph M. Becker
a757ebb5b5
Require SQLite ≥ 3.7.4 for ext/sqlite3
...
`SQLite3::readOnly()` uses `sqlite3_stmt_readonly()` which is only
available as of libsqlite 3.7.4. For older SQLite3 versions we return
always `false`, which can be confusing. Instead of sticking with this
behavior, or even undefining the method for old SQLite3 versions, we
lift the requirements to SQLite 3.7.4 (released on 2010-12-08),
according to a respective discussion[1].
Since pdo_sqlite doesn't use `sqlite3_stmt_readonly()`, we stick with
the minimum requirement of SQLite 3.5.0.
[1] <https://github.com/php/php-src/pull/3614 >
2018-11-29 15:10:39 +01:00
Christoph M. Becker
035de21d77
Deny (un)serialization of SQLite3, SQLite3Stmt and SQLite3Result
...
Serializing `SQLite3`, `SQLite3Stmt` and `SQLite3Result` instances is
possible but pointless, since unserializing results in uninitialized
instances, which will bail out of any method call. Therefore, we deny
serialization and unserialization in the first place.
2018-11-29 01:08:03 +01:00
Peter Kokot
698f8bec93
[ci skip] Update NEWS
2018-11-14 21:45:24 +01:00
Dmitry Stogov
f6d227ed4f
Implemented preloading RFC: https://wiki.php.net/rfc/preload .
...
Squashed commit of the following:
commit 106c815fffb8eb3efe00a27a5229cb1f8ffc9736
Author: Dmitry Stogov <dmitry@zend.com>
Date: Wed Nov 14 16:36:44 2018 +0300
Added NEWS entry
commit 1dacd5e20b7043368ef9e80db296d1781134b6fd
Merge: d516139abf ba99aa133c45fdd034ce8bda22592eFix #77141 : Signedness issue in SOAP when precision=-1
Support SQLite3 @name notation
Remove lexer files generated by RE2C
Update libmagic.patch [ci skip]
Update libmagic.patch [ci skip]
Fork test with pcre.jit=0
Rework magic data
Fix regex
Fix regex
Rework magic data
Sync one more upstream libmagic piece
Suppress already used warning
Ignore getaddrinfo failed message
...
commit 45fdd034ce34645aeb42cef0d67c3e08ffc9a5528d3429cda87ae3a47d209b0a53ed1c049f239cfcFix #76825 : Undefined symbols ___cpuid_count
NEWS
Fix : #77110 undefined symbol zend_string_equal_val in C++ build
Fix #77105 : Use position:sticky for <th> in `phpinfo()`
Implement handling for JIT recognition when cross compiling
Backport 7f5f4601Fix #76348 : WSDL_CACHE_MEMORY causes Segmentation fault
Rework places in libmagic regarding previous CVE-2014-3538 fixes
Change the way JIT availability is checked
Fix a test for ldap extension
Fixed bug #77092
Future-proof email addresses
commit 9b0a53ed1c0bd17bd438b6104670513a9d90f74a67e0138c0d3a9d90f74aaea85c65bd36b644fbb77a20781d2eb91690c892#77081 ftruncate() changes seek pointer in c mode
Fix and improve test case
commit 7a20781d2e4a57b5d56368c4f99e2338ab7ef4cfeb6e2c529fbf38e6c10aeb6e2c529f562049510f2fefa8c61e562049510fe806cb732a4828fb7b6b#77079
Add missing null initialization
Remove redundant mbfl_string_init calls
Use zend_string for mbstring last encoding cache
commit e806cb732a2f697ef8afc559f22b3e310631cc05ea2e67876a310631cc050a24d7ba8f17a3cb4a2a6d4b22c518386c9d3470d7fbb4d402359f19edc9Fix #71592 : External entity processing never fails
Add TIDY_TAG_* constants supported by libtidy 5
Add is_iterable to opcache Optimizer
commit d7fbb4d4020fe9ea1c073a2d1bcc1fe6b76ecb4b4531fbf93168694c99974531fbf931a594a618ceab9a40f63ce3c65db0994f57c1e02933e777acbf#77058
Improve "narrowing" error message
bump versions
commit 4f57c1e02926587a95c0d70cb10480aabe685dbbd9fc51bc3b40808ac41ed9fc51bc3bb5ffba0fafb6ef8998d5b5ffba0fafe4a7ef0c43a404383118e4a7ef0c43811f20aaa5d1e14e2cc0#50675
bump to 7.2.13-dev
[ci skip] Update NEWS wrt. php-7.3.0RC4 tagging
Inlining in the most frequently used code paths
Fixed test failurs introduced by 9c144e0d82Fix #75282 : xmlrpc_encode_request() crashes
Fix tests for ICU 63.1
...
commit 811f20aaa5093e8b1bbfa2ba970ce3b67e28367cb0139dc228a609520adb3fe698b904Fix #77035 : The phpize and ./configure create redundant .deps file
Remove outdated PEAR artefacts
Fix tests/output/bug74815.phpt generating errors.log
Revert "Use C++ symbols, when C++11 or upper is compiled"
Use C++ symbols, when C++11 or upper is compiled
Added new line
Remove stamp-h
Move all testing docs to qa.php.net
Fix a typo in UPGRADING.INTERNALS
Fix test when it's run on another drive
[ci skip] Update UPGRADING wrt. tidyp support
Fixed incorrect reallocation
Fix #77027 : tidy::getOptDoc() not available on Windows
Run CI tests under opcache.protect_memory=1
commit a609520adbac8f45f61bb6ac50f9e6ac8f45f61b632b30b545d57cd36e47632b30b545d33908a99acd0c36c3f9#77025
Add vtbls for EUC-TW encoding
commit cd0c36c3f94740dabb84ad6738e886#77025
Add vtbls for EUC-TW encoding
commit d33908a99a21e0bebca34740dabb844740dabb8421e0bebca3c78277ae84ad7a78b253ad7a78b2530276ea5187c63fc5d5f1b945548e93d5a41088408dadca88649ef07c88bda06f0f3d3a94099586ec3412345ffec78277ae84f76a955c020810ce0d8194099586ec
2018-11-14 16:46:05 +03:00
Joe Watkins
177d45b7e7
Merge branch 'PHP-7.3'
...
* PHP-7.3:
Validate length on socket_write
2018-11-13 13:00:50 +01:00
Joe Watkins
8a11c9ee76
Merge branch 'PHP-7.2' into PHP-7.3
...
* PHP-7.2:
Validate length on socket_write
2018-11-13 13:00:08 +01:00
Joe Watkins
ce4eb89976
Merge branch 'PHP-7.1' into PHP-7.2
...
* PHP-7.1:
Validate length on socket_write
2018-11-13 12:58:23 +01:00
Thiago Carvalho
ec2e7a2d48
Validate length on socket_write
2018-11-13 12:56:37 +01:00
Christoph M. Becker
512b93e9d6
Merge branch 'PHP-7.2' into PHP-7.3
...
* PHP-7.2:
Fix #77141 : Signedness issue in SOAP when precision=-1
2018-11-12 23:24:48 +01:00
Christoph M. Becker
77646d2fd9
Merge branch 'PHP-7.1' into PHP-7.2
...
* PHP-7.1:
Fix #77141 : Signedness issue in SOAP when precision=-1
2018-11-12 23:22:16 +01:00
Christoph M. Becker
f6079e3c56
Fix #77141 : Signedness issue in SOAP when precision=-1
...
According to php_gcvt(), we assume at most 17 fractional digits for
negative precision.
2018-11-12 23:19:30 +01:00
Christoph M. Becker
86c6b3bdcd
Support SQLite3 @name notation
...
Besides the common `:param` notation to designate named parameters in
prepared statements, SQLite3 also supports `@param` and `$param`.
While the latter is mostly to support the Tcl programming language, and
would be confusing for PHP's sqlite3 binding due to the similarity with
string interpolation, the former is common under .NET and raises no
such issue. Therefore we add support for it.
This patch has been developed in cooperation with @BohwaZ.
2018-11-11 14:55:34 +01:00
Eli Schwartz
2d03197749
ext/gd: Use pkg-config to detect the availability of freetype2
...
The latest version of freetype2 does not install freetype-config by
default, but pkg-config support has been there for approximately 15
years. In order to reliably detect freetype2, pkg-config *must* be used.
See:
https://savannah.nongnu.org/bugs/?53093
https://bugs.php.net/bug.php?id=76324
2018-11-07 13:05:47 +01:00
Christoph M. Becker
155aecd397
[ci skip] Update NEWS wrt. php-7.3.0RC5 tagging
2018-11-06 11:46:20 +01:00
Anatol Belski
ddd54401db
Update NEWS [ci skip]
2018-11-05 22:53:45 +01:00
Anatol Belski
fab72d7571
Update NEWS [ci skip]
2018-11-05 22:53:01 +01:00
Christoph M. Becker
7625f972db
Fix #76825 : Undefined symbols ___cpuid_count
...
Apparently, the presence of `cpuid.h` is not necessarily sufficient to
guarantee the availability of `__cpuid_count()`. We therefore test for
the latter explicitly.
2018-11-05 18:24:39 +01:00
Remi Collet
d78479737c
NEWS
2018-11-05 17:06:40 +01:00
Christoph M. Becker
579d76d87b
Merge branch 'PHP-7.2' into PHP-7.3
...
* PHP-7.2:
Fix #76348 : WSDL_CACHE_MEMORY causes Segmentation fault
2018-11-04 16:47:13 +01:00
Christoph M. Becker
0afc818976
Merge branch 'PHP-7.1' into PHP-7.2
...
* PHP-7.1:
Fix #76348 : WSDL_CACHE_MEMORY causes Segmentation fault
2018-11-04 16:44:45 +01:00
Christoph M. Becker
625f614cb1
Fix #76348 : WSDL_CACHE_MEMORY causes Segmentation fault
...
“Thou shalt not follow the NULL pointer, for chaos and madness await
thee at its end.”
2018-11-04 16:40:27 +01:00
Nikita Popov
d92f7630f7
Merge branch 'PHP-7.2' into PHP-7.3
2018-11-02 14:30:50 +01:00
Nikita Popov
4daa413898
Fixed bug #77092
...
Weird that this worked for so long, probably because nearly all
ext/standard functions use fast ZPP rather than ordinary ZPP.
2018-11-02 14:29:03 +01:00
Anatol Belski
8827cc34cf
Fixed bug #77081 ftruncate() changes seek pointer in c mode
2018-10-30 20:42:00 +01:00
Peter Kokot
17df3a194b
[ci skip] Update NEWS
2018-10-30 00:24:07 +01:00
Peter Kokot
69496a04ff
[ci skip] Update NEWS
2018-10-30 00:23:20 +01:00
Peter Kokot
91a1111160
[ci skip] Update NEWS
2018-10-30 00:22:03 +01:00
Christoph M. Becker
829b0df77b
Fix #71592 : External entity processing never fails
...
If the callback set via `xml_set_external_entity_ref_handler()` returns
a falsy value, parsing is supposed to stop and the error number set to
`XML_ERROR_EXTERNAL_ENTITY_HANDLING`. This is already correctly done
by the libexpat binding, but the libxml2 binding ignores the return
value. We fix this by calling `xmlStopParser()` which is available as
of libxml 2.1.0[1] (PHP-7.1 requires at least libxml 2.6.11 anyway),
and setting the desired `errNo` ourselves.
[1] <http://xmlsoft.org/news.html >
2018-10-27 17:30:13 +02:00
Christoph M. Becker
0d6490598d
Add TIDY_TAG_* constants supported by libtidy 5
...
Cf. <http://api.html-tidy.org/tidy/tidylib_api_5.0.0/tidyenum_8h.html#ae5b597c0999422ff383f08ab595ef5e8a16d20becf3c3cb022ddabccc83d8c314 >.
2018-10-27 16:17:09 +02:00
Nikita Popov
78c2e0e342
Merge branch 'PHP-7.2' into PHP-7.3
2018-10-25 16:44:19 +02:00
Nikita Popov
902ec36710
Merge branch 'PHP-7.1' into PHP-7.2
2018-10-25 16:43:36 +02:00
Nikita Popov
f1ceec5533
Fixed bug #77058
...
Account for the fact that undef must be interpreted as null for
the purposes of INC/DEC inference.
2018-10-25 16:37:41 +02:00
Joe Watkins
33fa02ea38
bump versions
2018-10-24 08:43:27 +02:00
Nikita Popov
3fb0f34059
Merge branch 'PHP-7.2' into PHP-7.3
2018-10-23 14:24:55 +02:00
Cameron Porter
db47e35373
Fixed bug #50675
...
SOAP: Stop overwriting the node name when creating an XML node
for an object reference.
2018-10-23 14:20:19 +02:00
