mirrors/php-src
0
0 Fork 0
mirror of https://github.com/php/php-src.git synced 2026-10-29 10:22:06 +08:00
Code Activity
Files
php-8.2.35
php-src/ext
T
History
Arnaud Le BlancIlija ToviloJakub ZelenkaNora DosscheNicolas Grekas
 01a40e89fb Avoid state corruption via bailout 
- Replace bailout on OOM with UnwindExit
- Properly reset various globals that may be accessed during startup

Fix GHSA-w8hw-w9fx-j79w (CVE-2026-109618)
Fix GHSA-6wmf-4rv5-p3rp (CVE-2026-109619)

Co-authored-by: Ilija Tovilo <ilija.tovilo@me.com>
Co-authored-by: Jakub Zelenka <bukka@php.net>
Co-authored-by: Nora Dossche <7771979+ndossche@users.noreply.github.com>
Co-authored-by: Nicolas Grekas <nicolas.grekas@gmail.com>
2026-10-18 19:22:38 +02:00
..
bcmath
Convert remaining K&R function declarations in libbcmath
2026-04-04 22:50:59 +02:00
bz2
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
calendar
Fix GH-16834: cal_from_jd overflow on julian_day argument.
2024-11-17 12:27:02 +00:00
com_dotnet
Switch to VS18 for the master branch (#22094)
2026-05-20 20:01:06 +05:30
ctype
Merge branch 'PHP-8.1' into PHP-8.2
2025-10-15 19:38:51 +02:00
curl
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
date
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
dba
Backport GH-14962 to stable versions
2024-11-26 21:24:48 +01:00
dl_test
Add observer temporary to dl'ed functions
2024-12-20 18:45:34 +01:00
dom
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
enchant
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
exif
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
ffi
Fix GH-16397: Segmentation fault when comparing FFI object (#16401)
2024-10-14 19:23:04 +02:00
fileinfo
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
filter
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
ftp
Regenerate the expired ext/ftp/tests/cert.pem (#22873)
2026-07-23 15:08:36 -03:00
gd
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
gettext
Backport CI fixes to security branches
2024-10-28 15:57:16 +01:00
gmp
Revert "ext/gmp: gmp_pow fix FPE with large values."
2024-11-27 19:52:07 +00:00
hash
Fix v142 ARM64 hash and floating point results (#24317)
2026-10-14 18:07:59 +05:30
iconv
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
imap
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
intl
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
json
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
ldap
Add RUN_RESOURCE_HEAVY_TESTS env var
2026-02-27 15:00:35 +01:00
libxml
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
mbstring
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
mysqli
Fix GHSA-r6x9-5r99-36j7: Various packet overreads in mysqlnd wireprotocol
2026-09-18 17:12:11 +02:00
mysqlnd
Fix GHSA-r6x9-5r99-36j7: Various packet overreads in mysqlnd wireprotocol
2026-09-18 17:12:11 +02:00
oci8
Merge branch 'PHP-8.1' into PHP-8.2
2025-03-06 15:24:35 +01:00
odbc
Fix odbc_data_source_001.phpt
2024-08-06 16:54:19 +02:00
opcache
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
openssl
Fix GHSA-xr7j-rvgx-xq5p: OOB read in php_openssl_matches_wildcard_name()
2026-09-18 17:12:10 +02:00
pcntl
Merge branch 'PHP-8.1' into PHP-8.2
2023-09-22 10:26:01 +02:00
pcre
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
pdo
GHSA-m8rr-4c36-8gq4: Consistently pass unsigned char to ctype.h functions
2026-05-06 13:07:20 +02:00
pdo_dblib
Add RUN_RESOURCE_HEAVY_TESTS env var
2026-02-27 15:00:35 +01:00
pdo_firebird
GHSA-w476-322c-wpvm: [pdo_firebird] Fix SQL injection via NUL bytes in quoted strings
2026-05-06 12:59:33 +02:00
pdo_mysql
ext/pdo_mysql: Fix [-Wcalloc-transposed-args] compiler warning
2024-05-21 12:17:25 +01:00
pdo_oci
Upgrade security branches to Ubuntu 22.04
2025-03-06 15:24:15 +01:00
pdo_odbc
Fix GH-16450: PDO_ODBC can inject garbage into field values
2024-10-31 16:15:17 +01:00
pdo_pgsql
Merge branch 'PHP-8.1' into PHP-8.2
2025-12-16 15:30:54 +01:00
pdo_sqlite
Add RUN_RESOURCE_HEAVY_TESTS env var
2026-02-27 15:00:35 +01:00
pgsql
[skip ci] Remove CLEAN from GHSA-7qpv-r5mr-78m4.phpt in PHP 8.2
2026-08-03 13:52:57 +02:00
phar
Fix GHSA-j3wh-g957-2m85: phar tar entry injection
2026-09-18 22:26:47 +02:00
posix
Backport flaky flag for phar tests
2024-12-10 10:35:00 +01:00
pspell
Do not generate CONST_CS when registering constants (#9439)
2022-08-28 08:27:19 +02:00
random
Checks getrandom availability on solaris.
2024-08-13 20:50:15 +01:00
readline
ext/readline: Fix [-Wcalloc-transposed-args] compiler warning
2024-05-21 12:17:25 +01:00
reflection
Fix GH-16601: Memory leak in Reflection constructors
2024-11-02 19:35:20 +01:00
session
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
shmop
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
simplexml
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
skeleton
Add support for validation of missing method synopses (#9491)
2022-09-07 17:40:36 +02:00
snmp
[skip ci] Ignore snmp test on asan that frequently times out
2025-03-10 11:24:27 +01:00
soap
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
sockets
Use FreeBSD 14.4 in GitHub actions
2026-10-18 02:56:20 +02:00
sodium
Fix memory leaks in ext/sodium on failure of some functions
2024-05-23 22:40:28 +02:00
spl
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
sqlite3
Merge branch 'PHP-8.1' into PHP-8.2
2023-11-10 00:08:09 +01:00
standard
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
sysvmsg
Fix GH-16592 msg_send() crashes when the type does not serialize as expected.
2024-11-03 13:39:24 +00:00
sysvsem
Revert "Port all internally used classes to use default_object_handlers"
2022-09-14 11:13:23 +02:00
sysvshm
Fix GH-16591: Assertion error in shm_put_var
2024-10-26 15:07:22 +02:00
tidy
Add RUN_RESOURCE_HEAVY_TESTS env var
2026-02-27 15:00:35 +01:00
tokenizer
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
xml
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
xmlreader
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
xmlwriter
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
xsl
Backport e2d97314: Backport deprecation warning ignores to unbreak CI
2024-10-12 15:12:40 +02:00
zend_test
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
zip
Use EXTENSIONS instead of SKIPIF sections in *.phpt
2024-01-31 11:18:21 +01:00
zlib
Avoid state corruption via bailout
2026-10-18 19:22:38 +02:00
ext_skel.php
…