archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-15 21:48:51 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
php-src/ext/mysqli
History
Jakub Zelenka c595455300
Fix GHSA-h35g-vwh6-m678: Mysqlnd - various heap buffer over-reads 
This fixes issues causing buffer over-read that leak heap content:
- RESP packet field default left over for COM_LIST
- RESP packet upsert filename
- OK packet message
- RESP packet for stmt row data
  - ps_fetch_from_1_to_8_bytes
  - ps_fetch_float
  - ps_fetch_double
  - ps_fetch_time
  - ps_fetch_date
  - ps_fetch_datetime
  - ps_fetch_string
  - ps_fetch_bit
- RESP packet for query row data (just possible overflow on 32bit)

It also adds various protocol tests using a new fake server.
2024-11-20 11:06:26 +01:00
..
tests Fix GHSA-h35g-vwh6-m678: Mysqlnd - various heap buffer over-reads 2024-11-20 11:06:26 +01:00
config.m4 Remove MYSQLI_USE_MYSQLND constant and all the code with it 2022-05-30 15:28:08 +01:00
config.w32 Remove MYSQLI_USE_MYSQLND constant and all the code with it 2022-05-30 15:28:08 +01:00
CREDITS
mysqli.c Clear mysql error in fetch_into 2024-05-17 13:08:42 +02:00
mysqli.stub.php Rename @cname to @cvalue in stubs (#9043) 2022-07-19 15:11:42 +02:00
mysqli_api.c Implement mysqli_execute_query() (#8660) 2022-07-06 12:23:46 +01:00
mysqli_arginfo.h Improve string class constant code generation (#9577) 2022-09-26 23:12:34 +02:00
mysqli_driver.c Remove mysqli_driver::$reconnect property 2022-05-30 15:28:08 +01:00
mysqli_exception.c Fix bug GH-7746 (mysqli_sql_exception->sqlstate is inaccessible) 2021-12-30 14:23:06 +00:00
mysqli_mysqlnd.h Remove uses of TRUE/FALSE in mysqli/pdo_mysql 2021-05-26 15:07:23 +02:00
mysqli_nonapi.c Merge branch 'PHP-8.1' into PHP-8.2 2022-10-27 18:34:14 +01:00
mysqli_priv.h Remove MYSQLI_USE_MYSQLND constant and all the code with it 2022-05-30 15:28:08 +01:00
mysqli_prop.c Remove MYSQLI_USE_MYSQLND constant and all the code with it 2022-05-30 15:28:08 +01:00
mysqli_report.c Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
mysqli_result_iterator.c Remove MYSQLI_USE_MYSQLND constant and all the code with it 2022-05-30 15:28:08 +01:00
mysqli_warning.c Remove MYSQLI_USE_MYSQLND constant and all the code with it 2022-05-30 15:28:08 +01:00
php_mysqli.h Update http->https in license (#6945) 2021-05-06 12:16:35 +02:00
php_mysqli_structs.h Update globals to use bool type 2022-09-06 10:34:10 +01:00