archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-15 13:38:49 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
php-src/ext
History
Ahmed Lekssays 97c51c0e3d
Fix GHSA-453j-q27h-5p8x 
Libxml versions prior to 2.13 cannot correctly handle a call to
xmlNodeSetName() with a name longer than 2G. It will leave the node
object in an invalid state with a NULL name. This later causes a NULL
pointer dereference when using the name during message serialization.

To solve this, implement a workaround that resets the name to the
sentinel name if this situation arises.

Versions of libxml of 2.13 and higher are not affected.

This can be exploited if a SoapVar is created with a fully qualified
name that is longer than 2G. This would be possible if some application
code uses a namespace prefix from an untrusted source like from a remote
SOAP service.

Co-authored-by: Niels Dossche <7771979+nielsdos@users.noreply.github.com>
2025-07-01 18:24:47 +03:00
..
bcmath ext/bcmath: Fixed bug (bcpowmod() with mod = -1 returns 1 when it must be 0) 2024-05-30 15:47:25 +01:00
bz2 Use EXTENSIONS instead of SKIPIF sections in *.phpt 2024-01-31 11:18:21 +01:00
calendar Fix GH-16834: cal_from_jd overflow on julian_day argument. 2024-11-17 12:27:02 +00:00
com_dotnet Fix GH-16991: Getting typeinfo of non DISPATCH variant segfaults 2024-11-29 16:29:11 +01:00
ctype Merge branch 'PHP-8.1' into PHP-8.2 2023-09-26 21:44:00 +02:00
curl Merge branch 'PHP-8.1' into PHP-8.2 2025-02-05 19:22:20 +01:00
date Merge branch 'PHP-8.1' into PHP-8.2 2025-03-06 15:04:08 +01:00
dba Backport GH-14962 to stable versions 2024-11-26 21:24:48 +01:00
dl_test Add observer temporary to dl'ed functions 2024-12-20 18:45:34 +01:00
dom Merge branch 'PHP-8.1' into PHP-8.2 2025-03-11 21:57:33 +01:00
enchant
exif Fix GH-16409: Segfault in exif_thumbnail when not dealing with a real file 2024-10-13 21:12:17 +02:00
ffi Fix GH-16397: Segmentation fault when comparing FFI object (#16401) 2024-10-14 19:23:04 +02:00
fileinfo Merge branch 'PHP-8.1' into PHP-8.2 2025-04-24 11:27:16 +02:00
filter Fixed CS 2024-11-26 15:40:46 +00:00
ftp Fix compilation of ftp without openssl 2023-12-05 11:55:44 +01:00
gd Fix GH-16771: imagecreatefromstring overflow on invalid format. 2024-11-13 12:48:37 +00:00
gettext Backport CI fixes to security branches 2024-10-28 15:57:16 +01:00
gmp Revert "ext/gmp: gmp_pow fix FPE with large values." 2024-11-27 19:52:07 +00:00
hash ext/hash: Fix GH-16711: Segfault in mhash() 2024-11-10 20:15:44 +00:00
iconv Fix iconv_open basic test (#15611) 2024-08-28 14:29:49 +02:00
imap Merge branch 'PHP-8.1' into PHP-8.2 2025-03-06 15:24:35 +01:00
intl backporting C++17 detection support for recent icu4c releases. 2025-04-23 11:01:11 +02:00
json Merge branch 'PHP-8.1' into PHP-8.2 2023-05-13 18:53:35 +01:00
ldap Fix GHSA-g665-fm4p-vhff: OOB access in ldap_escape 2024-11-20 11:06:12 +01:00
libxml Merge branch 'PHP-8.1' into PHP-8.2 2025-03-11 21:57:33 +01:00
mbstring Fix GH-16360 mb_substr overflow on start and length arguments. 2024-10-11 08:46:48 +01:00
mysqli Merge branch 'PHP-8.1' into PHP-8.2 2025-03-13 16:46:03 +01:00
mysqlnd Fix MySQLnd possible buffer over read in auth_protocol 2024-11-20 11:06:53 +01:00
oci8 Merge branch 'PHP-8.1' into PHP-8.2 2025-03-06 15:24:35 +01:00
odbc Fix odbc_data_source_001.phpt 2024-08-06 16:54:19 +02:00
opcache Merge branch 'PHP-8.1' into PHP-8.2 2025-03-06 15:24:35 +01:00
openssl Port OpenSSL gh10495, gh13860 and gh9310 test to use ephemeral ports 2024-12-31 15:02:08 +01:00
pcntl Merge branch 'PHP-8.1' into PHP-8.2 2023-09-22 10:26:01 +02:00
pcre Fix GH-16184: UBSan address overflowed in ext/pcre/php_pcre.c 2024-10-03 21:10:57 +02:00
pdo Upgrade security branches to Ubuntu 22.04 2025-03-06 15:24:15 +01:00
pdo_dblib Fix GHSA-5hqh-c84r-qjcv: Integer overflow in the dblib quoter causing OOB writes 2024-11-20 11:05:48 +01:00
pdo_firebird Fix GHSA-5hqh-c84r-qjcv: Integer overflow in the firebird quoter causing OOB writes 2024-11-20 11:05:55 +01:00
pdo_mysql ext/pdo_mysql: Fix [-Wcalloc-transposed-args] compiler warning 2024-05-21 12:17:25 +01:00
pdo_oci Upgrade security branches to Ubuntu 22.04 2025-03-06 15:24:15 +01:00
pdo_odbc Fix GH-16450: PDO_ODBC can inject garbage into field values 2024-10-31 16:15:17 +01:00
pdo_pgsql Fix GHSA-hrwm-9436-5mv3: pgsql escaping no error checks 2025-07-01 18:24:44 +03:00
pdo_sqlite Fix GH-14712: segfault on invalid object. 2024-06-29 15:51:57 +01:00
pgsql Fix GHSA-hrwm-9436-5mv3: pgsql escaping no error checks 2025-07-01 18:24:44 +03:00
phar Merge branch 'PHP-8.1' into PHP-8.2 2025-02-04 14:52:15 +01:00
posix Backport flaky flag for phar tests 2024-12-10 10:35:00 +01:00
pspell
random Checks getrandom availability on solaris. 2024-08-13 20:50:15 +01:00
readline ext/readline: Fix [-Wcalloc-transposed-args] compiler warning 2024-05-21 12:17:25 +01:00
reflection Fix GH-16601: Memory leak in Reflection constructors 2024-11-02 19:35:20 +01:00
session Fix GH-16290: session cookie_lifetime ini value overflow. 2024-10-13 14:19:18 +01:00
shmop Fix GH-14537: shmop Windows 11 crashes the process 2024-06-28 20:13:47 +02:00
simplexml Merge branch 'PHP-8.1' into PHP-8.2 2025-03-10 20:22:27 +01:00
skeleton
snmp [skip ci] Ignore snmp test on asan that frequently times out 2025-03-10 11:24:27 +01:00
soap Fix GHSA-453j-q27h-5p8x 2025-07-01 18:24:47 +03:00
sockets Fix socket_recvfrom overflow on buffer size. 2024-10-12 15:23:03 +01:00
sodium Fix memory leaks in ext/sodium on failure of some functions 2024-05-23 22:40:28 +02:00
spl Also fix same issue in ArrayObject::exchangeArray() 2024-11-04 17:46:17 +01:00
sqlite3 Merge branch 'PHP-8.1' into PHP-8.2 2023-11-10 00:08:09 +01:00
standard Fix GHSA-3cr5-j632-f35r: Null byte in hostnames 2025-07-01 18:24:41 +03:00
sysvmsg Fix GH-16592 msg_send() crashes when the type does not serialize as expected. 2024-11-03 13:39:24 +00:00
sysvsem
sysvshm Fix GH-16591: Assertion error in shm_put_var 2024-10-26 15:07:22 +02:00
tidy Fix memory leaks in ext/tidy basedir restriction code 2024-07-21 16:28:15 +02:00
tokenizer
xml Merge branch 'PHP-8.1' into PHP-8.2 2025-03-11 21:57:33 +01:00
xmlreader Fix GH-16292: Segmentation fault in ext/xmlreader/php_xmlreader.c:1282 2024-10-08 20:54:07 +02:00
xmlwriter Backport 4fe82131: Backport libxml2 2.13.2 fixes (#14816) 2024-10-12 15:12:40 +02:00
xsl Backport e2d97314: Backport deprecation warning ignores to unbreak CI 2024-10-12 15:12:40 +02:00
zend_test Fix GH-16908: _ZendTestMagicCallForward does not handle references well 2024-11-25 19:38:33 +01:00
zip Use EXTENSIONS instead of SKIPIF sections in *.phpt 2024-01-31 11:18:21 +01:00
zlib Fix GH-16326: Memory management is broken for bad dictionaries 2024-10-13 02:28:07 +02:00
ext_skel.php