php-src/ext
Niels Dossche d70f3ba9a5
Fix GH-16465: Heap buffer overflow in DOMNode->getElementByTagName
If the input contains NUL bytes then the length doesn't match the actual
duplicated string's length. Note that libxml can't handle this properly
anyway so we just reject NUL bytes and too long strings.

Closes GH-16467.
2024-10-16 22:55:18 +02:00
..
bcmath Fix GH-15968: Avoid converting objects to strings in operator calculations. (#16021) 2024-09-24 22:33:36 +09:00
bz2 Use "must not" instead of "cannot" wording 2024-08-21 21:12:17 +01:00
calendar Merge branch 'PHP-8.3' into PHP-8.4 2024-10-06 18:07:48 +01:00
com_dotnet Merge branch 'PHP-8.3' into PHP-8.4 2024-10-09 21:16:29 +02:00
ctype
curl Fix GH-16359 curl write callback crash on FCC usage w/o user function. 2024-10-12 14:53:22 +01:00
date Merge branch 'PHP-8.3' 2024-09-14 22:15:49 +02:00
dba Generated arginfo header files: remove empty zend_function_entry arrays (#15705) 2024-09-03 23:19:53 +02:00
dl_test Autotools: Mark always-shared extensions with ext_shared variable (#15739) 2024-09-04 23:28:29 +02:00
dom Fix GH-16465: Heap buffer overflow in DOMNode->getElementByTagName 2024-10-16 22:55:18 +02:00
enchant Rename ZEND_STR_DEPRECATED to ZEND_STR_DEPRECATED_CAPITALIZED (#15831) 2024-09-10 22:45:23 +01:00
exif Merge branch 'PHP-8.3' into PHP-8.4 2024-10-13 21:13:06 +02:00
ffi Merge branch 'PHP-8.3' into PHP-8.4 2024-10-14 19:24:17 +02:00
fileinfo backporting GH-15755 fix. 2024-09-05 02:02:36 +01:00
filter Use "must not" instead of "cannot" wording 2024-08-21 21:12:17 +01:00
ftp Generated arginfo header files: remove empty zend_function_entry arrays (#15705) 2024-09-03 23:19:53 +02:00
gd Merge branch 'PHP-8.3' into PHP-8.4 2024-10-14 13:54:52 +02:00
gettext Use "must not" instead of "cannot" wording 2024-08-21 21:12:17 +01:00
gmp Merge branch 'PHP-8.3' into PHP-8.4 2024-10-15 15:59:53 +02:00
hash Rename ZEND_STR_DEPRECATED to ZEND_STR_DEPRECATED_CAPITALIZED (#15831) 2024-09-10 22:45:23 +01:00
iconv Autotools: Fix iconv shared build with external library (#15686) 2024-09-01 22:06:37 +02:00
intl Rename ZEND_STR_DEPRECATED to ZEND_STR_DEPRECATED_CAPITALIZED (#15831) 2024-09-10 22:45:23 +01:00
json [ci skip] Skip test under ASAN 2024-10-01 13:58:40 +02:00
ldap Merge branch 'PHP-8.3' into PHP-8.4 2024-09-30 22:24:39 +01:00
libxml Merge branch 'PHP-8.3' 2024-09-12 23:07:22 +02:00
mbstring Merge branch 'PHP-8.3' into PHP-8.4 2024-10-11 08:49:00 +01:00
mysqli Rename ZEND_STR_DEPRECATED to ZEND_STR_DEPRECATED_CAPITALIZED (#15831) 2024-09-10 22:45:23 +01:00
mysqlnd mysqlnd: support ER_CLIENT_INTERACTION_TIMEOUT (#13618) 2024-08-26 12:52:26 +09:00
odbc Rename ZEND_STR_DEPRECATED to ZEND_STR_DEPRECATED_CAPITALIZED (#15831) 2024-09-10 22:45:23 +01:00
opcache Merge branch 'PHP-8.3' into PHP-8.4 2024-10-15 12:03:36 +03:00
openssl Merge branch 'PHP-8.3' into PHP-8.4 2024-10-16 11:10:12 +02:00
pcntl Generated arginfo header files: combine preprocessor conditional blocks (#15736) 2024-09-04 13:04:22 +02:00
pcre Merge branch 'PHP-8.3' into PHP-8.4 2024-10-03 21:12:42 +02:00
pdo Generated arginfo header files: remove empty zend_function_entry arrays (#15705) 2024-09-03 23:19:53 +02:00
pdo_dblib Add comments about internal headers (GH-15689) 2024-09-08 16:11:25 +02:00
pdo_firebird Fix PDO_Firebird tests for 32bit 2024-10-07 19:52:39 +02:00
pdo_mysql PDO_MYSQL: Properly quote binary strings 2024-10-07 11:04:50 +02:00
pdo_odbc Add comments about internal headers (GH-15689) 2024-09-08 16:11:25 +02:00
pdo_pgsql GH-12940 ext/pdo_pgsql: using PQclosePrepared to free statement resources. 2024-09-24 12:09:56 +01:00
pdo_sqlite Don't export php_pdo_int.h 2024-09-01 13:33:53 +02:00
pgsql Rename ZEND_STR_DEPRECATED to ZEND_STR_DEPRECATED_CAPITALIZED (#15831) 2024-09-10 22:45:23 +01:00
phar Merge branch 'PHP-8.3' 2024-09-24 02:24:02 -03:00
posix Merge branch 'PHP-8.3' into PHP-8.4 2024-10-13 02:07:19 +02:00
random Rename ZEND_STR_DEPRECATED to ZEND_STR_DEPRECATED_CAPITALIZED (#15831) 2024-09-10 22:45:23 +01:00
readline Fix -Wundef/C4668 warnings (#15853) 2024-09-14 11:28:32 +02:00
reflection Fix GH-16162: No ReflectionProperty::IS_VIRTUAL 2024-10-07 14:17:40 +02:00
session Merge branch 'PHP-8.3' into PHP-8.4 2024-10-13 14:19:45 +01:00
shmop Make ext/shmop/tests/gh14537.phpt more resilient (GH-15985) 2024-09-22 17:03:16 +02:00
simplexml Merge branch 'PHP-8.3' 2024-09-11 20:40:01 +02:00
skeleton Update skeleton extension .gitignore (#15738) 2024-09-05 07:14:29 +02:00
snmp Support bug64159.phpt on Windows CI (GH-15895) 2024-09-21 16:03:25 +02:00
soap Merge branch 'PHP-8.3' into PHP-8.4 2024-10-14 22:00:45 +02:00
sockets Merge branch 'PHP-8.3' into PHP-8.4 2024-10-12 15:23:48 +01:00
sodium Generated arginfo header files: combine preprocessor conditional blocks (#15736) 2024-09-04 13:04:22 +02:00
spl Merge branch 'PHP-8.3' into PHP-8.4 2024-10-12 13:39:06 +02:00
sqlite3 Generated arginfo header files: remove empty zend_function_entry arrays (#15705) 2024-09-03 23:19:53 +02:00
standard Merge branch 'PHP-8.3' into PHP-8.4 2024-10-14 14:01:16 +02:00
sysvmsg Generated arginfo header files: remove empty zend_function_entry arrays (#15705) 2024-09-03 23:19:53 +02:00
sysvsem Generated arginfo header files: remove empty zend_function_entry arrays (#15705) 2024-09-03 23:19:53 +02:00
sysvshm Generated arginfo header files: remove empty zend_function_entry arrays (#15705) 2024-09-03 23:19:53 +02:00
tidy Autotools: Fix tidy library checks (#15576) 2024-08-27 00:00:20 +02:00
tokenizer [RFC] Asymmetric visibility v2 (GH-15063) 2024-08-27 02:04:48 +02:00
xml Merge branch 'PHP-8.3' 2024-09-13 20:02:00 +02:00
xmlreader Merge branch 'PHP-8.3' into PHP-8.4 2024-10-08 20:58:20 +02:00
xmlwriter Fix registration of internal readonly child classes (#15459) 2024-08-24 12:36:54 +02:00
xsl Fix registration of internal readonly child classes (#15459) 2024-08-24 12:36:54 +02:00
zend_test [skip ci] Fix new closure dump syntax in test 2024-10-14 15:03:53 +02:00
zip zip extension is 1.22.4 2024-09-26 09:39:10 +02:00
zlib Merge branch 'PHP-8.3' into PHP-8.4 2024-10-13 02:30:38 +02:00
ext_skel.php