archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-15 21:48:51 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
php-src/ext
History
Jakub Zelenka c595455300
Fix GHSA-h35g-vwh6-m678: Mysqlnd - various heap buffer over-reads 
This fixes issues causing buffer over-read that leak heap content:
- RESP packet field default left over for COM_LIST
- RESP packet upsert filename
- OK packet message
- RESP packet for stmt row data
  - ps_fetch_from_1_to_8_bytes
  - ps_fetch_float
  - ps_fetch_double
  - ps_fetch_time
  - ps_fetch_date
  - ps_fetch_datetime
  - ps_fetch_string
  - ps_fetch_bit
- RESP packet for query row data (just possible overflow on 32bit)

It also adds various protocol tests using a new fake server.
2024-11-20 11:06:26 +01:00
..
bcmath ext/bcmath: Fixed bug (bcpowmod() with mod = -1 returns 1 when it must be 0) 2024-05-30 15:47:25 +01:00
bz2 Use EXTENSIONS instead of SKIPIF sections in *.phpt 2024-01-31 11:18:21 +01:00
calendar Fix GH-16834: cal_from_jd overflow on julian_day argument. 2024-11-17 12:27:02 +00:00
com_dotnet Fix out of bound writes to SafeArray data 2024-10-09 21:14:44 +02:00
ctype Merge branch 'PHP-8.1' into PHP-8.2 2023-09-26 21:44:00 +02:00
curl curl: Prevent a CurlMultiHandle from holding onto a CurlHandle if add_handle fails (#16302) 2024-10-09 09:37:13 +02:00
date Fix GH-14732: date_sun_info() fails for non-finite values 2024-11-01 23:46:19 +01:00
dba Fix GH-16390: dba_open() can segfault for "pathless" streams 2024-10-21 00:21:34 +02:00
dl_test Merge branch 'PHP-8.1' into PHP-8.2 2023-11-03 17:17:23 +00:00
dom Fix GH-16595: Another UAF in DOM -> cloneNode 2024-10-28 19:37:08 +01:00
enchant
exif Fix GH-16409: Segfault in exif_thumbnail when not dealing with a real file 2024-10-13 21:12:17 +02:00
ffi Fix GH-16397: Segmentation fault when comparing FFI object (#16401) 2024-10-14 19:23:04 +02:00
fileinfo Fix GH-15752: finfo_file() - parameter validation error messages 2024-09-05 01:41:15 +01:00
filter Fix GH-16523: FILTER_FLAG_HOSTNAME accepts ending hyphen 2024-10-21 21:19:54 +02:00
ftp Fix compilation of ftp without openssl 2023-12-05 11:55:44 +01:00
gd Fix GH-16771: imagecreatefromstring overflow on invalid format. 2024-11-13 12:48:37 +00:00
gettext ext/gettext: dcgettext/dcngettext fix for stable branches. 2024-03-05 18:39:14 +00:00
gmp ext/gmp: Fix segfault when null is encountered on an overloaded operator 2024-11-02 17:36:32 +00:00
hash ext/hash: Fix GH-16711: Segfault in mhash() 2024-11-10 20:15:44 +00:00
iconv Fix iconv_open basic test (#15611) 2024-08-28 14:29:49 +02:00
imap Merge branch 'PHP-8.1' into PHP-8.2 2023-07-10 13:34:21 +02:00
intl Adapt ext/intl tests for ICU 75.1 and 76.1 2024-11-15 18:55:01 +01:00
json Merge branch 'PHP-8.1' into PHP-8.2 2023-05-13 18:53:35 +01:00
ldap Fix GHSA-g665-fm4p-vhff: OOB access in ldap_escape 2024-11-20 11:06:12 +01:00
libxml Update error message for libxml 2.13 2024-09-12 23:06:25 +02:00
mbstring Fix GH-16360 mb_substr overflow on start and length arguments. 2024-10-11 08:46:48 +01:00
mysqli Fix GHSA-h35g-vwh6-m678: Mysqlnd - various heap buffer over-reads 2024-11-20 11:06:26 +01:00
mysqlnd Fix GHSA-h35g-vwh6-m678: Mysqlnd - various heap buffer over-reads 2024-11-20 11:06:26 +01:00
oci8 Update year to 2024 2024-01-04 19:26:32 +01:00
odbc Fix odbc_data_source_001.phpt 2024-08-06 16:54:19 +02:00
opcache Use the immutable twin of temporary op_array (#16861) 2024-11-19 20:55:15 +03:00
openssl Fix memory leak in php_openssl_pkey_from_zval() 2024-11-09 10:58:44 +01:00
pcntl Merge branch 'PHP-8.1' into PHP-8.2 2023-09-22 10:26:01 +02:00
pcre Fix GH-16184: UBSan address overflowed in ext/pcre/php_pcre.c 2024-10-03 21:10:57 +02:00
pdo Added gc_handler to properly handle circular references. (#16703) 2024-11-06 20:30:08 +09:00
pdo_dblib Fix GHSA-5hqh-c84r-qjcv: Integer overflow in the dblib quoter causing OOB writes 2024-11-20 11:05:48 +01:00
pdo_firebird Fix GHSA-5hqh-c84r-qjcv: Integer overflow in the firebird quoter causing OOB writes 2024-11-20 11:05:55 +01:00
pdo_mysql ext/pdo_mysql: Fix [-Wcalloc-transposed-args] compiler warning 2024-05-21 12:17:25 +01:00
pdo_oci Unparallelize IO heavy tests 2023-03-27 16:33:36 +02:00
pdo_odbc Fix GH-16450: PDO_ODBC can inject garbage into field values 2024-10-31 16:15:17 +01:00
pdo_pgsql Use EXTENSIONS instead of SKIPIF sections in *.phpt 2024-01-31 11:18:21 +01:00
pdo_sqlite Fix GH-14712: segfault on invalid object. 2024-06-29 15:51:57 +01:00
pgsql Revert "Fix GH-13519: PGSQL_CONNECT_FORCE_RENEW with persistent connections." 2024-02-27 23:03:28 +00:00
phar Fix GH-16695: phar:// tar parser and zero-length file header blocks 2024-11-09 17:07:53 +01:00
posix [skip ci] Mark some more macOS tests as flaky 2024-10-13 02:06:57 +02:00
pspell
random Checks getrandom availability on solaris. 2024-08-13 20:50:15 +01:00
readline ext/readline: Fix [-Wcalloc-transposed-args] compiler warning 2024-05-21 12:17:25 +01:00
reflection Fix GH-16601: Memory leak in Reflection constructors 2024-11-02 19:35:20 +01:00
session Fix GH-16290: session cookie_lifetime ini value overflow. 2024-10-13 14:19:18 +01:00
shmop Fix GH-14537: shmop Windows 11 crashes the process 2024-06-28 20:13:47 +02:00
simplexml Fix GH-16808: Segmentation fault in RecursiveIteratorIterator->current() with a xml element input 2024-11-16 13:39:46 +01:00
skeleton
snmp
soap Fix GH-16429: Segmentation fault (access null pointer) in SoapClient 2024-10-14 21:59:51 +02:00
sockets Fix socket_recvfrom overflow on buffer size. 2024-10-12 15:23:03 +01:00
sodium Fix memory leaks in ext/sodium on failure of some functions 2024-05-23 22:40:28 +02:00
spl Also fix same issue in ArrayObject::exchangeArray() 2024-11-04 17:46:17 +01:00
sqlite3 Merge branch 'PHP-8.1' into PHP-8.2 2023-11-10 00:08:09 +01:00
standard Fix GHSA-c5f2-jwm7-mmq2: stream HTTP fulluri CRLF injection 2024-11-20 11:06:02 +01:00
sysvmsg Fix GH-16592 msg_send() crashes when the type does not serialize as expected. 2024-11-03 13:39:24 +00:00
sysvsem
sysvshm Fix GH-16591: Assertion error in shm_put_var 2024-10-26 15:07:22 +02:00
tidy Fix memory leaks in ext/tidy basedir restriction code 2024-07-21 16:28:15 +02:00
tokenizer
xml Fix GH-15868: Assertion failure in xml_parse_into_struct after exception 2024-09-13 19:59:41 +02:00
xmlreader Fix GH-16292: Segmentation fault in ext/xmlreader/php_xmlreader.c:1282 2024-10-08 20:54:07 +02:00
xmlwriter Backport libxml2 2.13.2 fixes (#14816) 2024-07-04 15:29:50 +02:00
xsl Add SKIPIFs for upstream regression in libxslt (#14674) 2024-06-26 19:35:52 +02:00
zend_test Fix GH-16628: FPM logs are getting corrupted with this log statement 2024-11-02 19:36:20 +01:00
zip Use EXTENSIONS instead of SKIPIF sections in *.phpt 2024-01-31 11:18:21 +01:00
zlib Fix GH-16326: Memory management is broken for bad dictionaries 2024-10-13 02:28:07 +02:00
ext_skel.php