php-src/ext at php-8.4.27 - php-src - Gitea: Git with a cup of tea

mirrors/php-src

0 Fork 0

mirror of https://github.com/php/php-src.git synced 2026-10-29 02:07:35 +08:00

Files

T

History

506e87fa7d Avoid state corruption via bailout

- Replace bailout on OOM with UnwindExit
- Properly reset various globals that may be accessed during startup

Fix GHSA-w8hw-w9fx-j79w (CVE-2026-109618)
Fix GHSA-6wmf-4rv5-p3rp (CVE-2026-109619)

Co-authored-by: Ilija Tovilo <ilija.tovilo@me.com>
Co-authored-by: Jakub Zelenka <bukka@php.net>
Co-authored-by: Nora Dossche <7771979+ndossche@users.noreply.github.com>
Co-authored-by: Nicolas Grekas <nicolas.grekas@gmail.com>

2026-10-18 19:23:32 +02:00

..

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

ext/calendar: Fix integer overflow in GregorianToSdn() and JulianToJd() (#22604 )

2026-07-07 22:23:58 +08:00

ext/com_dotnet: release the held IUnknown in com_get_active_object()

2026-06-21 12:42:35 -04:00

Merge branch 'PHP-8.3' into PHP-8.4

2025-10-15 19:39:12 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

ext/dba: fix oob read on malformed length field in dba flatfile handler

2026-07-02 11:51:35 +01:00

Zend: Skip frameless registration for temporary modules

2026-09-30 10:59:46 -04:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Merge branch 'PHP-8.3' into PHP-8.4

2025-06-01 18:21:34 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

ext/ffi: Hold a reference to the callable of an FFI callback

2026-09-27 12:24:45 -04:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Fix GH-23619: ext/ftp: cryptic error on servers that don't support TLS session resumption on data connection

2026-09-21 22:27:29 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

ext/gettext/tests: updates for musl-1.2.6

2026-08-12 21:53:33 +01:00

GHSA-m8rr-4c36-8gq4: Consistently pass unsigned char to ctype.h functions

2026-05-06 13:09:23 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Fix freeing uninitialized memory in LDAP sort control parsing

2026-06-24 07:28:39 -04:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Fix memory leak when closing a statement on a killed connection

2026-09-29 17:37:39 +01:00

ext/mysqlnd: Fix VIO plugin area getter

2026-10-01 10:08:41 -04:00

odbc: check SQLColAttribute return codes in the field info functions

2026-09-07 18:29:57 -04:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Fix TLS stream EOF detection after close_notify with stale errno (#24132 )

2026-10-05 11:35:05 +02:00

Fix GH-23986: Clear the realpath cache in the child after pcntl_fork() (#23987 )

2026-09-29 18:02:57 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

ext/pdo: Return false from rewrite_name_to_position() on IM001 error

2026-10-05 20:02:29 -04:00

Fix GH-23741: pdo_dblib use-after-free of statement error state

2026-09-29 14:01:24 -04:00

Fix GH-23758: PDO_Firebird returns null for empty BLOBs (#23763 )

2026-09-29 20:48:16 +09:00

Reset field_count for OK packet (#23890 )

2026-09-29 17:13:13 +01:00

ext/pdo: Bound-check column index in getColumnMeta()

2026-09-16 06:39:11 -04:00

ext/pdo_pgsql: Fix CURSOR_SCROLL statements closing a nonexistent cursor

2026-09-06 20:58:28 +01:00

Fix HashTable UAF when rebound from a parameter __toString()

2026-09-30 08:49:09 -04:00

[skip ci] Remove CLEAN from GHSA-7qpv-r5mr-78m4.phpt in PHP 8.2

2026-08-03 13:52:57 +02:00

Merge branch 'PHP-8.3' into PHP-8.4

2026-09-22 11:03:08 +02:00

Fix posix_getgrnam()/posix_getgrgid() crash on NULL group name

2026-06-24 12:55:25 -04:00

Fix GH-21731: Random\Engine\Xoshiro256StarStar::__unserialize() accepts all-zero state (#21732 )

2026-04-12 19:51:30 +02:00

Fix heap over-read in cli_get_prompt() for empty cli.prompt

2026-09-19 17:22:58 -04:00

Fix GH-23842: skipLazyInitialization() copies unresolved constant defaults

2026-09-29 21:39:12 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

…

[skip ci] Add CREDITS for gh23453.phpt

2026-09-25 00:57:12 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Fix GH-11662: Skip multicast test when unavailable

2026-09-22 09:40:01 +01:00

Throw on below-minimum opslimit/memlimit in sodium pwhash

2026-06-21 13:23:51 -04:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

ext/sqlite3: reject close() from inside a callback

2026-09-16 09:02:46 -04:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Merge branch 'PHP-8.3' into PHP-8.4

2024-11-03 13:40:25 +00:00

…

ext/sysvshm: do not trust $size when opening an existing segment

2026-08-02 21:54:32 +01:00

ext/tidy: Reject tidyNode use after the document is reparsed

2026-09-29 15:57:32 -04:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Fix GH-23896: Assertion failure in zend_call_function() after a throwing deprecation

2026-09-30 05:23:06 +01:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

Fix GH-24006: Skip gh18431.phpt when libzip lacks progress callbacks (#24009 )

2026-09-30 19:03:19 +08:00

Avoid state corruption via bailout

2026-10-18 19:23:32 +02:00

ext_skel.php

…