archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-16 05:58:45 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
php-src/ext
History
Ahmed Lekssays 158aa14167
Fix GHSA-453j-q27h-5p8x 
Libxml versions prior to 2.13 cannot correctly handle a call to
xmlNodeSetName() with a name longer than 2G. It will leave the node
object in an invalid state with a NULL name. This later causes a NULL
pointer dereference when using the name during message serialization.

To solve this, implement a workaround that resets the name to the
sentinel name if this situation arises.

Versions of libxml of 2.13 and higher are not affected.

This can be exploited if a SoapVar is created with a fully qualified
name that is longer than 2G. This would be possible if some application
code uses a namespace prefix from an untrusted source like from a remote
SOAP service.

Co-authored-by: Niels Dossche <7771979+nielsdos@users.noreply.github.com>
2025-07-02 09:00:09 +09:00
..
bcmath Fix GH-18641: Accessing a BcMath\Number property by ref crashes 2025-05-24 20:38:33 +02:00
bz2
calendar Merge branch 'PHP-8.3' into PHP-8.4 2024-11-17 12:27:36 +00:00
com_dotnet Merge branch 'PHP-8.3' into PHP-8.4 2024-11-29 16:32:12 +01:00
ctype
curl Fix linking ext/curl against OpenSSL (#13262) 2025-06-06 13:51:21 +02:00
date Merge branch 'PHP-8.3' into PHP-8.4 2025-05-26 19:42:20 +02:00
dba Fixed GH-18247: dba_popen() memory leak on invalid path. 2025-04-05 18:29:24 +01:00
dl_test Merge branch 'PHP-8.3' into PHP-8.4 2025-03-14 10:49:10 +01:00
dom Fix GH-18744: PHP 8.4 classList works not correctly if copy HTMLElement by clone keyword. 2025-06-04 18:59:05 +02:00
enchant Merge branch 'PHP-8.3' into PHP-8.4 2025-06-01 18:21:34 +02:00
exif
ffi Merge branch 'PHP-8.3' into PHP-8.4 2025-02-17 10:27:33 +03:00
fileinfo Fix ZEND_NONSTRING attribute for data_file.c 2025-05-28 19:48:59 +02:00
filter Merge branch 'PHP-8.3' into PHP-8.4 2025-04-11 23:36:12 +02:00
ftp Merge branch 'PHP-8.3' into PHP-8.4 2025-01-03 12:31:08 +01:00
gd Merge branch 'PHP-8.3' into PHP-8.4 2025-04-05 15:57:26 +01:00
gettext Fix GH-17400: bindtextdomain segfault with UTF-16 domain value. 2025-01-09 13:45:59 +00:00
gmp Merge branch 'PHP-8.3' into PHP-8.4 2024-11-27 19:54:23 +00:00
hash Merge branch 'PHP-8.3' into PHP-8.4 2025-06-12 19:26:56 +02:00
iconv Merge branch 'PHP-8.3' into PHP-8.4 2024-12-06 17:44:01 +01:00
intl Fix handling of references in zval_try_get_long() 2025-06-04 21:00:05 +02:00
json Fix incorrect handling of hooked props without get hook in get_object_vars() 2025-03-08 12:27:28 +01:00
ldap Merge branch 'PHP-8.3' into PHP-8.4 2025-05-25 12:53:44 +01:00
libxml Fix GH-18597: Heap-buffer-overflow in zend_alloc.c when assigning string with UTF-8 bytes 2025-05-20 21:32:17 +02:00
mbstring Fix handling of references in zval_try_get_long() 2025-06-04 21:00:05 +02:00
mysqli Fix mysql test date flakiness 2025-03-16 14:26:04 +01:00
mysqlnd Merge branch 'PHP-8.3' into PHP-8.4 2024-11-20 11:14:04 +01:00
odbc Merge branch 'PHP-8.3' into PHP-8.4 2025-06-09 11:25:41 +02:00
opcache Merge branch 'PHP-8.3' into PHP-8.4 2025-06-09 11:41:02 +02:00
openssl Merge branch 'PHP-8.3' into PHP-8.4 2025-06-05 18:05:24 +02:00
pcntl Fix handling of references in zval_try_get_long() 2025-06-04 21:00:05 +02:00
pcre Merge branch 'PHP-8.3' into PHP-8.4 2025-03-13 07:46:55 +01:00
pdo Merge branch 'PHP-8.3' into PHP-8.4 2025-05-27 20:42:12 +02:00
pdo_dblib Merge branch 'PHP-8.3' into PHP-8.4 2024-11-20 11:14:04 +01:00
pdo_firebird Fixed GH-17383 - pdo_firebird: PDOException has wrong code and message since PHP 8.4 (#18072) 2025-04-19 14:11:20 +09:00
pdo_mysql
pdo_odbc Merge branch 'PHP-8.3' into PHP-8.4 2025-06-09 11:25:41 +02:00
pdo_pgsql Fix GHSA-hrwm-9436-5mv3: pgsql escaping no error checks 2025-07-02 09:00:08 +09:00
pdo_sqlite ext/pdo_sqlite: createCollation memory leaks fix. 2025-06-07 14:28:29 +01:00
pgsql Fix GHSA-hrwm-9436-5mv3: pgsql escaping no error checks 2025-07-02 09:00:08 +09:00
phar Merge branch 'PHP-8.3' into PHP-8.4 2025-05-28 18:54:15 +02:00
posix Merge branch 'PHP-8.3' into PHP-8.4 2024-12-30 12:41:58 -04:00
random Merge branch 'PHP-8.3' into PHP-8.4 2025-06-01 15:45:57 +02:00
readline Merge branch 'PHP-8.3' into PHP-8.4 2025-05-24 20:39:38 +02:00
reflection Fix ReflectionFunction::isDeprecated() for materialized __call() (#17914) 2025-02-27 14:48:08 +01:00
session Merge branch 'PHP-8.3' into PHP-8.4 2025-01-24 14:10:00 +00:00
shmop
simplexml Fix GH-18597: Heap-buffer-overflow in zend_alloc.c when assigning string with UTF-8 bytes 2025-05-20 21:32:17 +02:00
skeleton
snmp Merge branch 'PHP-8.3' into PHP-8.4 2025-04-11 23:36:12 +02:00
soap Fix GHSA-453j-q27h-5p8x 2025-07-02 09:00:09 +09:00
sockets Merge branch 'PHP-8.3' into PHP-8.4 2025-05-22 20:47:25 +01:00
sodium
spl Merge branch 'PHP-8.3' into PHP-8.4 2025-04-25 20:06:18 +02:00
sqlite3 Merge branch 'PHP-8.3' into PHP-8.4 2025-02-23 16:35:25 +01:00
standard Fix GHSA-3cr5-j632-f35r: Null byte in hostnames 2025-07-02 09:00:08 +09:00
sysvmsg
sysvsem
sysvshm
tidy Merge branch 'PHP-8.3' into PHP-8.4 2025-06-04 20:35:17 +01:00
tokenizer
xml Merge branch 'PHP-8.3' into PHP-8.4 2025-04-23 22:08:10 +02:00
xmlreader Merge branch 'PHP-8.3' into PHP-8.4 2025-04-11 23:36:12 +02:00
xmlwriter
xsl Fix using Dom\Node with Dom\XPath callbacks 2025-02-22 16:00:39 +01:00
zend_test Merge branch 'PHP-8.3' into PHP-8.4 2025-06-09 11:25:41 +02:00
zip bump zip extension version to 1.22.6 2025-05-07 14:24:07 +02:00
zlib Merge branch 'PHP-8.3' into PHP-8.4 2025-02-14 23:10:40 +01:00
ext_skel.php