php-src/ext
Niels Dossche 0a6326c6ac
Fix uouv when handling empty options in ZipArchive::addGlob()
Reported by OpenAI AARDVARK.

php_zip_parse_option is only called when options are passed to the function.
Prior to this patch, php_zip_parse_option was responsible for zeroing the
opts variable. So in the case when php_zip_parse_option is not called,
opts remains uninitialized yet it is being used anyway.
By just always zeroing opts at declaration time, we avoid this issue
and we are unlikely to reintroduce this in the future.

Closes GH-18329.
2025-04-16 10:44:59 +02:00
..
bcmath Fixed GH-17398: bcmul memory leak (#17615) 2025-01-29 19:12:18 +09:00
bz2
calendar Merge branch 'PHP-8.2' into PHP-8.3 2024-11-17 12:27:26 +00:00
com_dotnet Merge branch 'PHP-8.2' into PHP-8.3 2024-11-29 16:30:01 +01:00
ctype
curl Fix GH-17855: CURL_STATICLIB flag set even if linked with shared lib 2025-02-21 13:08:01 +01:00
date Fix GH-18304: Changing the properties of a DateInterval through dynamic properties triggers a SegFault 2025-04-11 23:33:58 +02:00
dba ext/dba/tests/gh16390.phpt: skip if inifile is disabled 2024-12-06 19:01:50 +01:00
dl_test Destroy temporary module classes in reverse order 2025-03-14 10:45:17 +01:00
dom Fix GH-18304: Changing the properties of a DateInterval through dynamic properties triggers a SegFault 2025-04-11 23:33:58 +02:00
enchant Fix crashes in enchant when passing null bytes 2025-01-08 20:47:01 +01:00
exif Merge branch 'PHP-8.2' into PHP-8.3 2024-10-13 21:12:46 +02:00
ffi Fix FFI Parsing of Pointer Declaration Lists (#17794) 2025-02-17 10:27:11 +03:00
fileinfo Merge branch 'PHP-8.2' into PHP-8.3 2025-01-27 21:49:03 +01:00
filter Fix GH-18309: ipv6 filter integer overflow 2025-04-11 23:35:00 +02:00
ftp Fix GH-16800: ftp functions can abort with EINTR 2025-01-03 12:30:43 +01:00
gd Fixed GH-18243: imagettftext underflow/overflow on size argument. 2025-04-05 15:56:45 +01:00
gettext ext/gettext/config.m4: symlink en_US.UTF-8 test bits to en_US for musl 2024-12-19 18:26:35 +01:00
gmp Merge branch 'PHP-8.2' into PHP-8.3 2024-11-27 19:54:06 +00:00
hash Merge branch 'PHP-8.2' into PHP-8.3 2024-11-10 20:16:33 +00:00
iconv Fix GH-17047: UAF on iconv filter failure 2024-12-06 17:43:38 +01:00
imap Merge branch 'PHP-8.1' into PHP-8.2 2025-03-06 15:24:35 +01:00
intl Add missing EXTENSIONS section to intl test 2025-03-31 23:05:15 +02:00
json Fix tests: Prevent stack overflow during dtor 2024-10-24 15:56:25 +02:00
ldap Fix #17776 LDAP_OPT_X_TLS_REQUIRE_CERT can't be overridden 2025-04-10 17:07:15 +02:00
libxml ext/libxml: Fixed custom external entity loader returning an invalid resource leading to a confusing TypeError message 2025-04-07 12:58:52 +01:00
mbstring Fix GH-17989: mb_output_handler crash with unset http_output_conv_mimetypes 2025-03-09 11:16:33 +01:00
mysqli Merge branch 'PHP-8.2' into PHP-8.3 2025-03-13 16:47:20 +01:00
mysqlnd Merge branch 'PHP-8.2' into PHP-8.3 2024-11-20 11:12:19 +01:00
oci8 Merge branch 'PHP-8.1' into PHP-8.2 2025-03-06 15:24:35 +01:00
odbc Merge branch 'PHP-8.2' into PHP-8.3 2024-08-06 16:54:58 +02:00
opcache [ci skip] Make sure opcache can output in these tests 2025-03-21 16:35:47 +01:00
openssl Fix potential leaks when writing to BIO fails 2025-04-11 21:02:37 +02:00
pcntl ext/pcntl: Fix memory leak in cleanup code of pcntl_exec() 2024-12-15 22:13:27 +00:00
pcre Relax test expectation for pcre2lib 10.45 Using e92848789a 2025-03-13 07:46:18 +01:00
pdo Fix GH-18304: Changing the properties of a DateInterval through dynamic properties triggers a SegFault 2025-04-11 23:33:58 +02:00
pdo_dblib Merge branch 'PHP-8.2' into PHP-8.3 2024-11-20 11:12:19 +01:00
pdo_firebird Fixed GH-18276 - persistent connection - "zend_mm_heap corrupted" with setAttribute() (#18280) 2025-04-15 09:01:40 +09:00
pdo_mysql
pdo_oci Upgrade security branches to Ubuntu 22.04 2025-03-06 15:24:15 +01:00
pdo_odbc Fix crash in PDO_ODBC statement dtor (#17586) 2025-01-27 13:41:11 -04:00
pdo_pgsql Fix GH-15729 PDO tests name conflicts. 2024-09-12 18:19:20 +01:00
pdo_sqlite Fix memory leak when destroying PDORow 2025-03-20 23:13:42 +01:00
pgsql ext/pgsql fixing further calls with flexible arguments number. 2024-12-15 14:50:59 +00:00
phar [ci skip] Fix GH-17808 dependencies 2025-02-16 00:16:57 +01:00
posix Fix FD getting code on big endian (#17259) 2024-12-30 12:40:32 -04:00
pspell
random Checks getrandom availability on solaris. 2024-08-13 20:54:12 +01:00
readline CI disable leak sanitizer on two libedit tests temporarily. 2024-08-07 22:38:30 +01:00
reflection Reflection: show the type of object constants used as default properties 2025-02-21 09:32:10 +01:00
session ext/session: Fix GH-17541 (ext/session NULL pointer dereferencement during ID reset) 2025-01-24 14:04:58 +00:00
shmop
simplexml Fix GH-18304: Changing the properties of a DateInterval through dynamic properties triggers a SegFault 2025-04-11 23:33:58 +02:00
skeleton
snmp Fix GH-18304: Changing the properties of a DateInterval through dynamic properties triggers a SegFault 2025-04-11 23:33:58 +02:00
soap Fix #66049 Typemap can break parsing in parse_packet_soap leading to a segfault 2025-03-21 08:23:12 +01:00
sockets Fix GH-17921 socket_read/socket_recv overflows on buffer size. 2025-02-25 21:54:24 +00:00
sodium
spl Fix GH-18322: SplObjectStorage debug handler mismanages memory 2025-04-14 14:11:09 +02:00
sqlite3 Fix cycle leak in sqlite3 setAuthorizer() 2025-02-23 16:34:41 +01:00
standard Mark ob_start callback parameter nullable 2025-04-14 22:35:06 +02:00
sysvmsg Merge branch 'PHP-8.2' into PHP-8.3 2024-11-03 13:39:41 +00:00
sysvsem
sysvshm Merge branch 'PHP-8.2' into PHP-8.3 2024-10-26 15:07:57 +02:00
tidy Fix memory leaks in ext/tidy basedir restriction code 2024-07-21 16:28:15 +02:00
tokenizer
xml Merge branch 'PHP-8.2' into PHP-8.3 2025-03-11 22:09:00 +01:00
xmlreader Fix GH-18304: Changing the properties of a DateInterval through dynamic properties triggers a SegFault 2025-04-11 23:33:58 +02:00
xmlwriter Backport 4fe82131: Backport libxml2 2.13.2 fixes (#14816) 2024-10-12 15:12:40 +02:00
xsl Backport e2d97314: Backport deprecation warning ignores to unbreak CI 2024-10-12 15:12:40 +02:00
zend_test Fix GH-17938: UAF with zend_test opline observer and magic_quotes_gpc=1 (#17958) 2025-03-03 08:20:48 +01:00
zip Fix uouv when handling empty options in ZipArchive::addGlob() 2025-04-16 10:44:59 +02:00
zlib Fix zlib support for large files 2025-02-14 23:09:57 +01:00
ext_skel.php