php-src/main
Jakub Zelenka 9234b0d62c
Fix GHSA-3cr5-j632-f35r: Null byte in hostnames
This fixes stream_socket_client() and fsockopen().

Specifically it adds a check to parse_ip_address_ex and it also makes
sure that the \0 is not ignored in fsockopen() hostname formatting.
2025-07-02 09:00:08 +09:00
..
streams Fix GHSA-3cr5-j632-f35r: Null byte in hostnames 2025-07-02 09:00:08 +09:00
build-defs.h.in Remove remainings of recent oci extensions removal (#13352) 2024-02-08 18:04:00 +01:00
debug_gdb_scripts.c GDB: Import gdb.printing 2025-03-27 16:31:28 +01:00
explicit_bzero.c Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
fastcgi.c Merge branch 'PHP-8.3' 2024-05-19 22:57:08 +02:00
fastcgi.h Mark various functions with void arguments. 2021-05-12 14:55:53 +01:00
fopen_wrappers.c Merge branch 'PHP-8.3' into PHP-8.4 2025-02-15 10:12:20 +00:00
fopen_wrappers.h Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
getopt.c Fix i386 release build warning 2024-11-14 20:36:23 +01:00
http_status_codes.h Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
internal_functions.c.in Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
main.c Merge branch 'PHP-8.3' into PHP-8.4 2024-11-25 23:09:13 +01:00
main.stub.php Add PHP_SBINDIR (#13363) 2024-05-29 07:04:05 +02:00
main_arginfo.h Add PHP_SBINDIR (#13363) 2024-05-29 07:04:05 +02:00
network.c Merge branch 'PHP-8.3' into PHP-8.4 2025-06-09 22:05:21 +02:00
output.c Fix GH-15181: Disabled output handler is flushed again 2024-08-06 16:45:51 +02:00
php.h update API/ABI versions 2024-09-25 00:44:02 +09:00
php_compat.h Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
php_content_types.c Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
php_content_types.h Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
php_getopt.h Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
php_globals.h Fix open_basedir leak 2023-07-25 17:54:14 +02:00
php_ini.c Sync #if/ifdef/defined (#14508) 2024-06-09 14:23:41 +02:00
php_ini.h Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
php_ini_builder.c sapi/*: move duplicate "--define" code to library 2022-04-18 16:52:08 +02:00
php_ini_builder.h sapi/*: move duplicate "--define" code to library 2022-04-18 16:52:08 +02:00
php_main.h Show build provider and unify version information printing (#14657) 2024-08-12 23:24:41 -03:00
php_memory_streams.h Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
php_network.h Merge branch 'PHP-8.3' into PHP-8.4 2024-09-30 18:11:25 +01:00
php_odbc_utils.c Preferably include from build dir (#13516) 2024-06-26 00:26:43 +02:00
php_odbc_utils.h Quote when adding to connection string in (PDO_)ODBC 2022-05-27 16:56:44 +02:00
php_open_temporary_file.c Improve randomness of uploaded file names and files created by tempnam() 2024-06-10 15:37:51 +02:00
php_open_temporary_file.h Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
php_output.h main/output.c: Refine int return type to bool or zend_result (#13997) 2024-04-19 10:46:40 +01:00
php_reentrancy.h Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
php_scandir.c Fix some leaks in php_scandir 2025-04-21 13:20:45 +02:00
php_scandir.h Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
php_streams.h Revert fix for GH-14930: truncating readdir output (#15533) 2024-08-22 23:41:34 +01:00
php_syslog.c Make globals const (part 2) (#10610) 2023-02-18 19:52:53 +00:00
php_syslog.h Fix strict prototype for php_closelog 2022-06-19 22:56:44 +01:00
php_ticks.c Fix GH-10737: PHP 8.1.16 segfaults on line 597 of sapi/apache2handler/sapi_apache2.c 2023-04-08 16:34:07 +02:00
php_ticks.h Fix GH-10737: PHP 8.1.16 segfaults on line 597 of sapi/apache2handler/sapi_apache2.c 2023-04-08 16:34:07 +02:00
php_variables.c Merge branch 'PHP-8.3' into PHP-8.4 2024-09-26 15:35:42 +02:00
php_variables.h Remove unused PARSE_SESSION and PARSE_REQUEST (#14081) 2024-04-30 16:39:00 +02:00
php_version.h PHP-8.3 is now for PHP 8.3.23-dev 2025-05-21 00:39:56 +02:00
reentrancy.c Remove unused includes of php_random.h (#13131) 2024-01-12 18:35:18 +01:00
rfc1867.c Merge branch 'PHP-8.3' into PHP-8.4 2024-12-01 11:00:17 +01:00
rfc1867.h Fix -Wenum-int-mismatch warnings on gcc 13 2023-04-20 16:04:59 +02:00
safe_bcmp.c Update http links to https and sync www.php.net URLs (#14854) 2024-07-07 04:23:08 +02:00
SAPI.c Merge branch 'PHP-8.3' into PHP-8.4 2024-10-06 19:43:19 +01:00
SAPI.h Add request_parse_body() function 2024-02-08 12:08:07 +01:00
snprintf.c [skip ci] Fix various typos and grammar issues (#11143) 2023-04-28 11:05:32 +02:00
snprintf.h Revert GH-10220 2023-01-16 12:27:33 +01:00
spprintf.c Introduce %S modifier and use it (#13168) 2024-01-16 22:51:02 +01:00
spprintf.h Revert GH-10220 2023-01-16 12:27:33 +01:00
strlcat.c strlcpy/strlcat update to last openbsd version. 2022-04-28 15:09:55 +02:00
strlcpy.c strlcpy/strlcat update to last openbsd version. 2022-04-28 15:09:55 +02:00