archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-18 23:18:56 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
php-src/ext/soap
History
Stanislav Malyshev ed709d5aa0 Merge branch 'PHP-5.5' into PHP-5.6 
* PHP-5.5:
  update NEWS
  fix test
  update NEWS
  Fix bug #70019 - limit extracted files to given directory
  Do not do convert_to_* on unserialize, it messes up references
  Fix #69793 - limit what we accept when unserializing exception
  Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList)
  Fixed bug #70166 - Use After Free Vulnerability in unserialize() with SPLArrayObject
  ignore signatures for packages too
  Fix bug #70168 - Use After Free Vulnerability in unserialize() with SplObjectStorage
  Fixed bug #69892
  Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes
  Improved fix for Bug #69441
  Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items)
  Fix bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref)
  Fix bug #70081: check types for SOAP variables

Conflicts:
	ext/soap/php_http.c
	ext/spl/spl_observer.c
2015-08-04 15:29:13 -07:00
..
interop typo fixes - https://github.com/vlajos/misspell_fixer 2014-11-23 14:33:43 -08:00
tests slightly revised bug69462.phpt 2015-06-26 23:20:22 +02:00
config.m4 Fix long-standing visual pain point: the misalignment of './configure help' text. 2013-08-06 11:06:09 -07:00
config.w32
CREDITS
package.xml typo fixes - https://github.com/vlajos/misspell_fixer 2014-11-23 14:33:43 -08:00
php_encoding.c Fixed bug #69293 2015-03-27 18:40:58 +03:00
php_encoding.h bump year 2015-01-15 23:26:37 +08:00
php_http.c Merge branch 'PHP-5.5' into PHP-5.6 2015-08-04 15:29:13 -07:00
php_http.h bump year 2015-01-15 23:26:37 +08:00
php_packet_soap.c bump year 2015-01-15 23:26:37 +08:00
php_packet_soap.h bump year 2015-01-15 23:26:37 +08:00
php_schema.c bump year 2015-01-15 23:26:37 +08:00
php_schema.h bump year 2015-01-15 23:26:37 +08:00
php_sdl.c bump year 2015-01-15 23:26:37 +08:00
php_sdl.h bump year 2015-01-15 23:26:37 +08:00
php_soap.dsp
php_soap.h bump year 2015-01-15 23:26:37 +08:00
php_xml.c - Fix merge 2015-02-16 13:09:40 -02:00
php_xml.h bump year 2015-01-15 23:26:37 +08:00
soap.c fix type in fix for #69085 2015-04-13 14:41:39 +02:00
TODO
TODO.old typo fixes - https://github.com/vlajos/misspell_fixer 2014-11-23 14:33:43 -08:00