00:20 Muhammad Moinur Rahman (bofh) 

lang/php73: Remove port

- EOL reached on 2021-12-06
  https://www.php.net/eol.php

PR:             260624
Approved by:	tz (private email) ale portmgr (blanket)
Sponsored by:	Bounce Experts

    cc378fb

18:23 Muhammad Moinur Rahman (bofh) 

Fix fetch for php*

- Primary hosting provider of php has introduced some sort of checking
  which is blocking fetch although curl/wget works perfectly. fetch with
  other --user-agent is also not working at the moment. An issue has been
  opened with the upstream which can be found at:
  https://github.com/php/web-php/issues/483
- Untill this is fixed add php Github distributions URL to MASTER_SITES
- Modify MASTER_SITES for php[73|74|80] and remove SUBDIR as it affects
  DIST_SUBDIR
- Add DIST_SUBDIR as Github is IPv4 only which affects IPv6 only
  builders. In case someone is running IPv6 only builders distcache will
  pickup and serve.
- Although distinfo has been updated as we have added DIST_SUBDIR but
  SHA256 and SIZE are unchanged. In case someone needs to verify those
  are available from https://www.php.net/downloads
- We might have done some drastic changes but we are on the brink of
  quarterly build and we do not want to start a new year and a new
  quarter with BROKEN php and thousands of other ports.

PR: 260699
Reported by: chris@cretaforce.gr
Approved by: portmgr (blanket infrastructure)
Sponsored by: Bounce Experts

    529117f

05:15 Muhammad Moinur Rahman (bofh) 

lang/php73: Fix typo

- Set EXPIRATION date on 2022-01-25
Reported by:    decke
Approved by:    tz (private mail)

    50a2e37

22:09 Muhammad Moinur Rahman (bofh) 

lang/php73: Mark DEPRECATED

- Upstream active support expired on 2021-12-06
- Set to EXPIRE on 2021-01-25
Approved by:    tz (via private mail)
Sponsored by:   Bounce Experts

    80a8fbe

21:40 Stefan Eßer (se) 

*/*: Remove redundant '-*' from CONFLICTS definitions

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)

    04b9da4

19:31 Torsten Zuehlsdorff (tz) 

lang/php73: Upgrade from 7.3.32 to 7.3.33

XML:

    Fixed bug #79971 (special character is breaking the path in xml function).
(CVE-2021-21707)

Sponsored by:	Bounce Experts

    bf95077

19:22 Torsten Zuehlsdorff (tz) 

lang/php73: Upgrade from 7.3.31 to 7.3.32

Changelog:

FPM:

    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege
escalation). (CVE-2021-21703)

    0bf9dc1

19:36 Torsten Zuehlsdorff (tz) 

lang/php7*: adjust CONFLICTS to new versions

PHP 7.3 conflicted with versions no longer in the ports-tree. Remove this
conflicts.
PHP 7.3 and 7.4 did not conflict with PHP 8.0. Add the missing conflict.

PR:		258803
Reported by:	Einar Bjarni Halldórsson <einar@isnic.is>
Sponsored by:	Bounce Experts

    1eeec1b

09:55 Torsten Zuehlsdorff (tz) 

lang/php73: Update from 7.3.30 to 7.3.31

Changelog:

Zip:

    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
(CVE-2021-21706)

Sponsored by:	Bounce Experts

    607fd2a

20:47 Torsten Zuehlsdorff (tz) 

lang/php73: Upgrade from 7.3.29 to 7.3.30

Changelog:

Phar:

    Fixed bug #81211: Symlinks are followed when creating PHAR archive.

Sponsored by:	Bounce Experts

    cf46723

08:32 Xin LI (delphij) 

net/openldap24-server: Make SASL permanent for OpenLDAP port.

PR:		ports/257374
Reviewed by:	obrien
Approved by:	portmgr (exp-run by antoine)
Differential Revision: https://reviews.freebsd.org/D31301

    974e13b

21:31 Torsten Zuehlsdorff (tz) 

lang/php73: Update from 7.3.28 to 7.3.29

Changelog:

    Core:
        Fixed bug #81122: SSRF bypass in FILTER_VALIDATE_URL. (CVE-2021-21705)
    PDO_Firebird:
        Fixed bug #76448: Stack buffer overflow in firebird_info_cb.
(CVE-2021-21704)
        Fixed bug #76449: SIGSEGV in firebird_handle_doer. (CVE-2021-21704)
        Fixed bug #76450: SIGSEGV in firebird_stmt_execute. (CVE-2021-21704)
        Fixed bug #76452: Crash while parsing blob data in firebird_fetch_blob.
(CVE-2021-21704)

Sponsored by:	Bounce Experts

    602c4c3

22:07 Torsten Zuehlsdorff (tz) 

lang/php73: Upgrade from 7.3.27 to 7.3.28

Changelog:

Imap:

    Fixed bug #80710 (imap_mail_compose() header injection).

Sponsored by: Bounce Experts

    413eb8a

08:09 Mathieu Arnold (mat) 

One more small cleanup, forgotten yesterday.
Reported by:	lwhsu

    cf118cc

14:31 Mathieu Arnold (mat) 

Remove # $FreeBSD$ from Makefiles.

    305f148

22:50 tz 

lang/php73: Upgrade from 7.3.26 to 7.3.27

SOAP:

    Fixed bug #80672 (Null Dereference in SoapClient). (CVE-2021-21702)

Sponsored by:	PHP Update Service

 

23:46 tz 

lang/php73: Upgrade from 7.3.25 to 7.3.26

Standard:

    Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo).
(CVE-2020-7071)
    Fixed bug #80457 (stream_get_contents() fails with maxlength=-1 or default).

PR:		252510
Submitted by:	<michael.glaus@hostpoint.ch>

 

17:09 tz 

lang/php73: Update from 7.3.24 to 7.3.25

    Core:
        Fixed bug #80280 (ADD_EXTENSION_DEP() fails for ext/standard and
ext/date).
        Fixed bug #80258 (Windows Deduplication Enabled, randon permission
errors).
    COM:
        Fixed bug #62474 (com_event_sink crashes on certain arguments).
    DOM:
        Fixed bug #80268 (loadHTML() truncates at NUL bytes).
    IMAP:
        Fixed bug #64076 (imap_sort() does not return FALSE on failure).
        Fixed bug #76618 (segfault on imap_reopen).
        Fixed bug #80239 (imap_rfc822_write_address() leaks memory).
        Fixed minor regression caused by fixing bug #80220.
        Fixed bug #80242 (imap_mail_compose() segfaults for multipart with
rfc822).
    Intl:
        Fixed bug #80310 (ext-intl with icu4c 68.1: use of undeclared identifier
'TRUE').
    ODBC:
        Fixed bug #44618 (Fetching may rely on uninitialized data).
    SNMP:
        Fixed bug #70461 (disable md5 code when it is not supported in
net-snmp).
    Standard:
        Fixed bug #80266 (parse_url silently drops port number 0).

PR:		251398
Submitted by: Dani <i.dani@outlook.com>

 

13:56 linimon 

Disable dtrace on riscv64 for now to unbreak build.

Approved by:	portmgr (tier-2 blanket)
Obtained from:	lonesome.com build testing

 

22:50 tz 

lang/php73: Update from 7.3.23 to 7.3.24

Changelog:

    Core:
        Fixed bug #79423 (copy command is limited to size of file it can copy).
    Calendar:
        Fixed bug #80185 (jdtounix() fails after 2037).
    IMAP:
        Fixed bug #80213 (imap_mail_compose() segfaults on certain $bodies).
        Fixed bug #80215 (imap_mail_compose() may modify by-val parameters).
        Fixed bug #80220 (imap_mail_compose() may leak memory).
        Fixed bug #80223 (imap_mail_compose() leaks envelope on malformed
bodies).
        Fixed bug #80216 (imap_mail_compose() does not validate
types/encodings).
        Fixed bug #80226 (imap_sort() leaks sortpgm memory).
    MySQLnd:
        Fixed bug #80115 (mysqlnd.debug doesn't recognize absolute paths with
slashes).
        Fixed bug #80107 (mysqli_query() fails for ~16 MB long query when
compression is enabled).
    ODBC:
        Fixed bug #78470 (odbc_specialcolumns() no longer accepts $nullable).
        Fixed bug #80147 (BINARY strings may not be properly zero-terminated).
        Fixed bug #80150 (Failure to fetch error message).
        Fixed bug #80152 (odbc_execute() moves internal pointer of $params).
        Fixed bug #46050 (odbc_next_result corrupts prepared resource).
    OPcache:
        Fixed bug #80083 (Optimizer pass 6 removes variables used for ibm_db2
data binding).
    PDO_ODBC:
        Fixed bug #67465 (NULL Pointer dereference in odbc_handle_preparer).
    Standard:
        Fixed bug #80114 (parse_url does not accept URLs with port 0).
        Fixed bug #76943 (Inconsistent stream_wrapper_restore() errors).
        Fixed bug #76735 (Incorrect message in fopen on invalid mode).
    Tidy:
        Fixed bug #77040 (tidyNode::isHtml() is completely broken).

Sponsored by:	PHP Update Service

 

23:26 tz 

lang/php73: Update from 7.3.22 to 7.3.23

    Core:
        Fixed bug #80048 (Bug #69100 has not been fixed for Windows).
        Fixed bug #80049 (Memleak when coercing integers to string via variadic
argument).
        Fixed bug #79699 (PHP parses encoded cookie names so malicious `__Host-`
cookies can be sent). (CVE-2020-7070)
    Calendar:
        Fixed bug #80007 (Potential type confusion in unixtojd() parameter
parsing).
    COM:
        Fixed bug #64130 (COM obj parameters passed by reference are not
updated).
    OPcache:
        Fixed bug #80002 (calc free space for new interned string is wrong).
        Fixed bug #79825 (opcache.file_cache causes SIGSEGV when custom opcode
handlers changed).
    OpenSSL:
        Fixed bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12
bytes IV). (CVE-2020-7069)
    PDO:
        Fixed bug #80027 (Terrible performance using $query->fetch on queries
with many bind parameters).
    SOAP:
        Fixed bug #47021 (SoapClient stumbles over WSDL delivered with
"Transfer-Encoding: chunked").
    Standard:
        Fixed bug #79986 (str_ireplace bug with diacritics characters).
        Fixed bug #80077 (getmxrr test bug).
        Fixed bug #72941 (Modifying bucket->data by-ref has no effect any
longer).
        Fixed bug #80067 (Omitting the port in bindto setting errors).

Sponsored by:	Bounce Experts

 

22:15 tz 

lang/php73: Upgrade from 7.3.21 to 7.3.22

Changelog:

    Core:
        Fixed bug #79884 (PHP_CONFIG_FILE_PATH is meaningless).
        Fixed bug #77932 (File extensions are case-sensitive).
        Fixed bug #79806 (realpath() erroneously resolves link to link).
        Fixed bug #79895 (PHP_CHECK_GCC_ARG does not allow flags with equal
sign).
        Fixed bug #79919 (Stack use-after-scope in define()).
        Fixed bug #79934 (CRLF-only line in heredoc causes parsing error).
    COM:
        Fixed bug #48585 (com_load_typelib holds reference, fails on second
call).
    Exif:
        Fixed bug #75785 (Many errors from exif_read_data).
    Gettext:
        Fixed bug #70574 (Tests fail due to relying on Linux fallback behavior
for gettext()).
    LDAP:
        Fixed memory leaks.
    OPcache:
        Fixed bug #73060 (php failed with error after temp folder cleaned up).
    PDO:
        Fixed bug #64705 (errorInfo property of PDOException is null when
PDO::__construct() fails).
    Standard:
        Fixed bug #79930 (array_merge_recursive() crashes when called with array
with single reference).
        Fixed bug #79944 (getmxrr always returns true on Alpine linux).
        Fixed bug #79951 (Memory leak in str_replace of empty string).
    XML:
        Fixed bug #79922 (Crash after multiple calls to xml_parser_free()).

Sponsored by:	Bounce Experts

 

21:30 tz 

lang/php73: Update from 7.3.20 to 7.3.21

Changelog:

    Apache:
        Fixed bug #79030 (Upgrade apache2handler's
php_apache_sapi_get_request_time to return usec).
    Core:
        Fixed bug #79877 (getimagesize function silently truncates after a null
byte).
        Fixed bug #79778 (Assertion failure if dumping closure with unresolved
static variable).
        Fixed bug #79792 (HT iterators not removed if empty array is destroyed).
    COM:
        Fixed bug #63208 (BSTR to PHP string conversion not binary safe).
        Fixed bug #63527 (DCOM does not work with Username, Password parameter).
    Curl:
        Fixed bug #79741 (curl_setopt CURLOPT_POSTFIELDS asserts on object with
declared properties).
    Fileinfo:
        Fixed bug #79756 (finfo_file crash (FILEINFO_MIME)).
    FTP:
        Fixed bug #55857 (ftp_size on large files).
    Mbstring:
        Fixed bug #79787 (mb_strimwidth does not trim string).
    Phar:
        Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile
function). (CVE-2020-7068)
    Standard:
        Fixed bug #70362 (Can't copy() large 'data://' with open_basedir).
        Fixed bug #79817 (str_replace() does not handle INDIRECT elements).
        Fixed bug #78008 (dns_check_record() always return true on Alpine).

Sponsored by:	Bounce Experts

 

11:24 tz 

lang/php73: Update from 7.3.19 to 7.3.20

Changelog:

    Core:
        Fixed bug #79650 (php-win.exe 100% cpu lockup).
        Fixed bug #79668 (get_defined_functions(true) may miss functions).
        Fixed possibly unsupported timercmp() usage.
    Exif:
        Fixed bug #79687 (Sony picture - PHP Warning - Make, Model, MakerNotes).
    Filter:
        Fixed bug #73527 (Invalid memory access in php_filter_strip).
    GD:
        Fixed bug #79676 (imagescale adds black border with IMG_BICUBIC).
    OpenSSL:
        Fixed bug #62890 (default_socket_timeout=-1 causes connection to
timeout).
    PDO SQLite:
        Fixed bug #79664 (PDOStatement::getColumnMeta fails on empty result
set).
    SPL:
        Fixed bug #79710 (Reproducible segfault in error_handler during GC
involved an SplFileObject).
    Standard:
        Fixed bug #74267 (segfault with streams and invalid data).

Sponsored by:	Bounce Experts

 

10:37 tz 

lang/php73: Update from 7.3.18 to 7.3.19

Changelog:

    Core:
        Fixed bug #79566 (Private SHM is not private on Windows).
        Fixed bug #79489 (.user.ini does not inherit).
    GD:
        Fixed bug #79615 (Wrong GIF header written in GD GIFEncode).
    MySQLnd:
        Fixed bug #79596 (MySQL FLOAT truncates to int some locales).
    Opcache:
        Fixed bug #79535 (PHP crashes with specific opcache.optimization_level).
        Fixed bug #79588 (Boolean opcache settings ignore on/off values).
    Standard:
        Fixed bug #79561 (dns_get_record() fails with DNS_ALL).

Sponsored by:	Bounce Experts

 

19:41 tz 

lang/php73: Update from 7.3.17 to 7.3.18

Changelog:

    Core:
        Fixed bug #78875 (Long filenames cause OOM and temp files are not
cleaned). (CVE-2019-11048)
        Fixed bug #78876 (Long variables in multipart/form-data cause OOM and
temp files are not cleaned). (CVE-2019-11048)
        Fixed bug #79434 (PHP 7.3 and PHP-7.4 crash with NULL-pointer
dereference on !CS constant).
        Fixed bug #79477 (casting object into array creates references).
        Fixed bug #79470 (PHP incompatible with 3rd party file system on
demand).
        Fixed bug #78784 (Unable to interact with files inside a VFS for Git
repository).
    DOM:
        Fixed bug #78221 (DOMNode::normalize() doesn't remove empty text nodes).
    FCGI:
        Fixed bug #79491 (Search for .user.ini extends up to root dir).
    MBString:
        Fixed bug #79441 (Segfault in mb_chr() if internal encoding is
unsupported).
    OpenSSL:
        Fixed bug #79497 (stream_socket_client() throws an unknown error
sometimes with <1s timeout).
    Phar:
        Fixed bug #79503 (Memory leak on duplicate metadata).
    SimpleXML:
        Fixed bug #79528 (Different object of the same xml between 7.4.5 and
7.4.4).
    Standard:
        Fixed bug #79468 (SIGSEGV when closing stream handle with a stream
filter appended).

Sponsored by:	Bounce Experts

 

21:09 tz 

lang/php73: Upgrade from 7.3.16 to 7.3.17

Changelog:

    Core:
        Fixed bug #79364 (When copy empty array, next key is unspecified).
        Fixed bug #78210 (Invalid pointer address).
    CURL:
        Fixed bug #79199 (curl_copy_handle() memory leak).
    Date:
        Fixed bug #79396 (DateTime hour incorrect during DST jump forward).
    Iconv:
        Fixed bug #79200 (Some iconv functions cut Windows-1258).
    OPcache:
        Fixed bug #79412 (Opcache chokes and uses 100% CPU on specific script).
    Session:
        Fixed bug #79413 (session_create_id() fails for active sessions).
    Shmop:
        Fixed bug #79427 (Integer Overflow in shmop_open()).
    SimpleXML:
        Fixed bug #61597 (SXE properties may lack attributes and content).
    Spl:
        Fixed bug #75673 (SplStack::unserialize() behavior).
        Fixed bug #79393 (Null coalescing operator failing with SplFixedArray).
    Standard:
        Fixed bug #79330 (shell_exec() silently truncates after a null byte).
        Fixed bug #79465 (OOB Read in urldecode()). (CVE-2020-7067)
        Fixed bug #79410 (system() swallows last chunk if it is exactly 4095
bytes without newline).
    Zip:
        Fixed bug #79296 (ZipArchive::open fails on empty file).
        Fixed bug #79424 (php_zip_glob uses gl_pathc after call to globfree).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.17

MFH:		2020Q2

 

22:03 tz 

lang/php73: Update from 7.3.15 to 7.3.16

Changelog:

    Core:
        Fixed bug #63206 (restore_error_handler does not restore previous errors
mask).
    COM:
        Fixed bug #66322 (COMPersistHelper::SaveToFile can save to wrong
location).
        Fixed bug #79242 (COM error constants don't match com_exception codes on
x86).
        Fixed bug #79248 (Traversing empty VT_ARRAY throws com_exception).
        Fixed bug #79299 (com_print_typeinfo prints duplicate variables).
        Fixed bug #79332 (php_istreams are never freed).
        Fixed bug #79333 (com_print_typeinfo() leaks memory).
    DOM:
        Fixed bug #77569: (Write Access Violation in DomImplementation).
        Fixed bug #79271 (DOMDocumentType::$childNodes is NULL).
    Enchant:
        Fixed bug #79311 (enchant_dict_suggest() fails on big endian
architecture).
    EXIF:
        Fixed bug #79282 (Use-of-uninitialized-value in exif). (CVE-2020-7064)
    MBstring:
        Fixed bug #79371 (mb_strtolower (UTF-32LE): stack-buffer-overflow at
php_unicode_tolower_full). (CVE-2020-7065)
    MySQLi:
        Fixed bug #64032 (mysqli reports different client_version).
    PCRE:
        Fixed bug #79188 (Memory corruption in
preg_replace/preg_replace_callback and unicode).
    PDO_ODBC:
        Fixed bug #79038 (PDOStatement::nextRowset() leaks column values).
    Reflection:
        Fixed bug #79062 (Property with heredoc default value returns false for
getDocComment).
    SQLite3:
        Fixed bug #79294 (::columnType() may fail after SQLite3Stmt::reset()).
    Standard:
        Fixed bug #79329 (get_headers() silently truncates after a null byte).
(CVE-2020-7066)
        Fixed bug #79254 (getenv() w/o arguments not showing changes).
        Fixed bug #79265 (Improper injection of Host header when using fopen for
http requests).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.16

MFH:		2020Q1
Sponsored by:	PHP Update Service

 

22:02 tz 

lang/php73: Upgrade from 7.3.14 to 7.3.15

Changelog:

    Core:
        Fixed bug #71876 (Memory corruption htmlspecialchars(): charset `*' not
supported).
        Fixed bug #79146 (cscript can fail to run on some systems).
        Fixed bug #78323 (Code 0 is returned on invalid options).
        Fixed bug #76047 (Use-after-free when accessing already destructed
backtrace arguments).
    CURL:
        Fixed bug #79078 (Hypothetical use-after-free in
curl_multi_add_handle()).
    Intl:
        Fixed bug #79212 (NumberFormatter::format() may detect wrong type).
    Libxml:
        Fixed bug #79191 (Error in SoapClient ctor disables
DOMDocument::save()).
    MBString:
        Fixed bug #79154 (mb_convert_encoding() can modify $from_encoding).
    MySQLnd:
        Fixed bug #79084 (mysqlnd may fetch wrong column indexes with
MYSQLI_BOTH).
    OpenSSL:
        Fixed bug #79145 (openssl memory leak).
    Phar:
        Fixed bug #79082 (Files added to tar with Phar::buildFromIterator have
all-access permissions). (CVE-2020-7063)
        Fixed bug #79171 (heap-buffer-overflow in phar_extract_file).
(CVE-2020-7061)
        Fixed bug #76584 (PharFileInfo::decompress not working).
    Reflection:
        Fixed bug #79115 (ReflectionClass::isCloneable call reflected class
__destruct).
    Session:
        Fixed bug #79221 (Null Pointer Dereference in PHP Session Upload
Progress). (CVE-2020-7062)
    SPL:
        Fixed bug #79151 (heap use after free caused by
spl_dllist_it_helper_move_forward).
    Standard:
        Fixed bug #78902 (Memory leak when using stream_filter_append).
    Testing:
        Fixed bug #78090 (bug45161.phpt takes forever to finish).
    XSL:
        Fixed bug #70078 (XSL callbacks with nodes as parameter leak memory).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.15

MFH:		2020Q1

 

09:49 pkubaj 

lang/php7?: enable DTRACE on powerpc, powerpc64

Tested to work now.

 

23:57 tz 

lang/php73: Update from 7.3.13 to 7.3.14

Changelog:

    Core:
        Fixed bug #78999 (Cycle leak when using function result as temporary).
    CURL:
        Fixed bug #79033 (Curl timeout error with specific url and post).
    Date:
        Fixed bug #79015 (undefined-behavior in php_date.c).
    DBA:
        Fixed bug #78808 ([LMDB] MDB_MAP_FULL: Environment mapsize limit
reached).
    Fileinfo:
        Fixed bug #74170 (locale information change after mime_content_type).
    GD:
        Fixed bug #78923 (Artifacts when convoluting image with transparency).
        Fixed bug #79067 (gdTransformAffineCopy() may use unitialized values).
        Fixed bug #79068 (gdTransformAffineCopy() changes interpolation method).
    Libxml:
        Fixed bug #79029 (Use After Free's in XMLReader / XMLWriter).
    Mbstring:
        Fixed bug #79037 (global buffer-overflow in
`mbfl_filt_conv_big5_wchar`). (CVE-2020-7060)
    OPcache:
        Fixed bug #79040 (Warning Opcode handlers are unusable due to ASLR).
    Pcntl:
        Fixed bug #78402 (Converting null to string in error message is bad DX).
    PDO_PgSQL:
        Fixed bug #78983 (pdo_pgsql config.w32 cannot find libpq-fe.h).
        Fixed bug #78980 (pgsqlGetNotify() overlooks dead connection).
        Fixed bug #78982 (pdo_pgsql returns dead persistent connection).
    Session:
        Fixed bug #79091 (heap use-after-free in session_create_id()).
    Shmop:
        Fixed bug #78538 (shmop memory leak).
    Standard:
        Fixed bug #79099 (OOB read in php_strip_tags_ex). (CVE-2020-7059)
        Fixed bug #54298 (Using empty additional_headers adding extraneous
CRLF).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.14

MFH:		2020Q1

 

14:32 tz 

lang/php73: Upgrade from 7.3.12 to 7.3.13

Changelog:

    Bcmath:
        Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046)
    Core:
        Fixed bug #78862 (link() silently truncates after a null byte on
Windows). (CVE-2019-11044)
        Fixed bug #78863 (DirectoryIterator class silently truncates after a
null byte). (CVE-2019-11045)
        Fixed bug #78943 (mail() may release string with refcount==1 twice).
(CVE-2019-11049)
        Fixed bug #78787 (Segfault with trait overriding inherited private
shadow property).
        Fixed bug #78868 (Calling __autoload() with incorrect EG(fake_scope)
value).
        Fixed bug #78296 (is_file fails to detect file).
    EXIF:
        Fixed bug #78793 (Use-after-free in exif parsing under memory
sanitizer). (CVE-2019-11050)
        Fixed bug #78910 (Heap-buffer-overflow READ in exif) (CVE-2019-11047).
    GD:
        Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW).
    MBString:
        Upgraded bundled Oniguruma to 6.9.4.
    OPcache:
        Fixed potential ASLR related invalid opline handler issues.
        Fixed $x = (bool)$x; with opcache (should emit undeclared variable
notice).
    PCRE:
        Fixed bug #78853 (preg_match() may return integer > 1).
    Standard:
        Fixed bug #78759 (array_search in $GLOBALS).
        Fixed bug #77638 (var_export'ing certain class instances segfaults).
        Fixed bug #78840 (imploding $GLOBALS crashes).
        Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
        Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.13

MFH:		2019Q4

 

19:58 pkubaj 

lang/php7*: disable DTRACE on powerpc64

php ports don't build on elfv2 with DTRACE.

PR:		242113, 242114, 242116
Approved by:	tz (maintainer), tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D22577
Differential Revision:	https://reviews.freebsd.org/D22578
Differential Revision:	https://reviews.freebsd.org/D22579

 

22:11 tz 

lang/php73: Update from 7.3.11 to 7.3.12

Changelog:

    Core:
        Fixed bug #78658 (Memory corruption using Closure::bindTo).
        Fixed bug #78656 (Parse errors classified as highest log-level).
        Fixed bug #78752 (Segfault if GC triggered while generator stack frame
is being destroyed).
        Fixed bug #78689 (Closure::fromCallable() doesn't handle [Closure,
'__invoke']).
    COM:
        Fixed bug #78694 (Appending to a variant array causes segfault).
    Date:
        Fixed bug #70153 (\DateInterval incorrectly unserialized).
        Fixed bug #78751 (Serialising DatePeriod converts DateTimeImmutable).
    Iconv:
        Fixed bug #78642 (Wrong libiconv version displayed).
    OpCache:
        Fixed bug #78654 (Incorrectly computed opcache checksum on files with
non-ascii characters).
        Fixed bug #78747 (OpCache corrupts custom extension result).
    OpenSSL:
        Fixed bug #78775 (TLS issues from HTTP request affecting other encrypted
connections).
    Reflection:
        Fixed bug #78697 (ReflectionClass::ImplementsInterface - inaccurate
error message with traits).
    Sockets:
        Fixed bug #78665 (Multicasting may leak memory).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.12

MFH:		2019Q4

 

10:35 tz 

lang/php73: Update from 7.3.10 to 7.3.11

Changelog:

    Core:
        Fixed bug #78535 (auto_detect_line_endings value not parsed as bool).
        Fixed bug #78620 (Out of memory error).
    Exif:
        Fixed bug #78442 ('Illegal component' on exif_read_data since PHP7)
(Kalle)
    FPM:
        Fixed bug #78599 (env_path_info underflow in fpm_main.c can lead to
RCE). (CVE-2019-11043)
        Fixed bug #78413 (request_terminate_timeout does not take effect after
fastcgi_finish_request).
    MBString:
        Fixed bug #78633 (Heap buffer overflow (read) in mb_eregi).
        Fixed bug #78579 (mb_decode_numericentity: args number inconsistency).
        Fixed bug #78609 (mb_check_encoding() no longer supports stringable
objects).
    MySQLi:
        Fixed bug #76809 (SSL settings aren't respected when persistent
connections are used).
    Mysqlnd:
        Fixed bug #78525 (Memory leak in pdo when reusing native prepared
statements).
    PCRE:
        Fixed bug #78272 (calling preg_match() before pcntl_fork() will freeze
child process).
    PDO_MySQL:
        Fixed bug #78623 (Regression caused by "SP call yields additional empty
result set").
    Session:
        Fixed bug #78624 (session_gc return value for user defined session
handlers).
    Standard:
        Fixed bug #76342 (file_get_contents waits twice specified timeout).
        Fixed bug #78612 (strtr leaks memory when integer keys are used and the
subject string shorter).
        Fixed bug #76859 (stream_get_line skips data if used with
data-generating filter).
    Zip:
        Fixed bug #78641 (addGlob can modify given remove_path value).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.11

MFH:		2019Q4

 

21:08 tz 

lang/php73: Update from 7.3.9 to 7.3.10

Changelog:

    Core:
        Fixed bug #78220 (Can't access OneDrive folder).
        Fixed bug #77922 (Double release of doc comment on inherited shadow
property).
        Fixed bug #78441 (Parse error due to heredoc identifier followed by
digit).
        Fixed bug #77812 (Interactive mode does not support PHP 7.3-style
heredoc).
    FastCGI:
        Fixed bug #78469 (FastCGI on_accept hook is not called when using named
pipes on Windows).
    FPM:
        Fixed bug #78334 (fpm log prefix message includes wrong stdout/stderr
notation).
    Intl:
        Ensure IDNA2003 rules are used with idn_to_ascii() and idn_to_utf8()
when requested.
    MBString:
        Fixed bug #78559 (Heap buffer overflow in mb_eregi).
    MySQLnd:
        Fixed connect_attr issues and added the _server_host connection
attribute.
    ODBC:
        Fixed bug #78473 (odbc_close() closes arbitrary resources).
    PDO_MySQL:
        Fixed bug #41997 (SP call yields additional empty result set).
    sodium:
        Fixed bug #78510 (Partially uninitialized buffer returned by
sodium_crypto_generichash_init()).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.10

No MFH requested, because the new branch should be created in two days and i
won't be able to commit
it before.

 

20:24 tz 

lang/php73: Update from 7.3.8 to 7.3.9

Changelog:

    Core:
        Fixed bug #78363 (Buffer overflow in zendparse).
        Fixed bug #78379 (Cast to object confuses GC, causes crash).
        Fixed bug #78412 (Generator incorrectly reports non-releasable $this as
GC child).
    Curl:
        Fixed bug #77946 (Bad cURL resources returned by
curl_multi_info_read()).
    Exif:
        Fixed bug #78333 (Exif crash (bus error) due to wrong alignment and
invalid cast).
    FPM:
        Fixed bug #77185 (Use-after-free in FPM master event handling).
    Iconv:
        Fixed bug #78342 (Bus error in configure test for iconv //IGNORE).
    LiteSpeed:
        Updated to LiteSpeed SAPI V7.5 (Fixed clean shutdown).
    MBString:
        Fixed bug #78380 (Oniguruma 6.9.3 fixes CVEs). (CVE-2019-13224)
    MySQLnd:
        Fixed bug #78179 (MariaDB server version incorrectly detected).
        Fixed bug #78213 (Empty row pocket).
    Opcache:
        Fixed bug #77191 (Assertion failure in dce_live_ranges() when silencing
is used).
    Standard:
        Fixed bug #69100 (Bus error from stream_copy_to_stream (file -> SSL
stream) with invalid length).
        Fixed bug #78282 (atime and mtime mismatch).
        Fixed bug #78326 (improper memory deallocation on stream_get_contents()
with fixed length buffer).
        Fixed bug #78346 (strip_tags no longer handling nested php tags).

MFH:		2019Q3

 

18:29 tz 

Update PHP 7.3 from 7.3.7 to 7.3.8

Changelog:

    Core:
        Added syslog.filter=raw option.
        Fixed bug #78212 (Segfault in built-in webserver).
    Date:
        Fixed bug #69044 (discrepency between time and microtime).
        Updated timelib to 2018.02.
    EXIF:
        Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment).
(CVE-2019-11042)
        Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail).
(CVE-2019-11041)
    FTP:
        Fixed bug #78039 (FTP with SSL memory leak).
    Libxml:
        Fixed bug #78279 (libxml_disable_entity_loader settings is shared
between requests (cgi-fcgi)).
    LiteSpeed:
        Updated to LiteSpeed SAPI V7.4.3 (increased response header count limit
from 100 to 1000, added crash handler to cleanly shutdown PHP request, added
CloudLinux mod_lsapi mode).
        Fixed bug #76058 (After "POST data can't be buffered", using php://input
makes huge tmp files).
    Openssl:
        Fixed bug #78231 (Segmentation fault upon stream_socket_accept of
exported socket-to-stream).
    Opcache:
        Fixed bug #78341 (Failure to detect smart branch in DFA pass).
        Fixed bug #78189 (file cache strips last character of uname hash).
        Fixed bug #78202 (Opcache stats for cache hits are capped at 32bit NUM).
        Fixed bug #78271 (Invalid result of if-else).
        Fixed bug #78291 (opcache_get_configuration doesn't list all
directives).
    PCRE:
        Fixed bug #78338 (Array cross-border reading in PCRE).
        Fixed bug #78197 (PCRE2 version check in configure fails for "##.##-xxx"
version strings).
    PDO_Sqlite:
        Fixed bug #78192 (SegFault when reuse statement after schema has
changed).
    Phar:
        Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN).
    Phpdbg:
        Fixed bug #78297 (Include unexistent file memory leak).
    SQLite:
        Upgraded to SQLite 3.28.0.
    Standard:
        Fixed bug #78241 (touch() does not handle dates after 2038 in PHP
64-bit).
        Fixed bug #78269 (password_hash uses weak options for argon2).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.8

MFH:		2019Q3

 

21:27 tz 

lang/php73: Update from 7.3.6 to 7.3.7

Changelog:

    Core:
        Fixed bug #76980 (Interface gets skipped if autoloader throws an
exception).
    DOM:
        Fixed bug #78025 (segfault when accessing properties of
DOMDocumentType).
    MySQLi:
        Fixed bug #77956 (When mysqli.allow_local_infile = Off, use a meaningful
error message).
        Fixed bug #38546 (bindParam incorrect processing of bool types).
    MySQLnd:
        Fixed bug #77955 (Random segmentation fault in mysqlnd from php-fpm).
    Opcache:
        Fixed bug #78015 (Incorrect evaluation of expressions involving partials
arrays in SCCP).
        Fixed bug #78106 (Path resolution fails if opcache disabled during
request).
    OpenSSL:
        Fixed bug #78079 (openssl_encrypt_ccm.phpt fails with OpenSSL 1.1.1c).
    phpdbg:
        Fixed bug #78050 (SegFault phpdbg + opcache on include file twice).
    Sockets:
        Fixed bug #78038 (Socket_select fails when resource array contains
references).
    Sodium:
        Fixed bug #78114 (segfault when calling sodium_* functions from eval).
    Standard:
        Fixed bug #77135 (Extract with EXTR_SKIP should skip $this).
        Fixed bug #77937 (preg_match failed).
    Zip:
        Fixed bug #76345 (zip.h not found).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.7

MFH:		2019Q3

 

22:02 tz 

lang/php73: Update from 7.3.5 to 7.3.6

Changelog:

    cURL:
        Implemented FR #72189 (Add missing CURL_VERSION_* constants).
    EXIF:
        Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16)
(CVE-2019-11040).
    FPM:
        Fixed bug #77934 (php-fpm kill -USR2 not working).
        Fixed bug #77921 (static.php.net doesn't work anymore).
    GD:
        Fixed bug #77943 (imageantialias($image, false); does not work).
        Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm)
(CVE-2019-11038).
    Iconv:
        Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode()
due to integer overflow) (CVE-2019-11039).
    JSON:
        Fixed bug #77843 (Use after free with json serializer).
    Opcache:
        Fixed possible crashes, because of inconsistent PCRE cache and opcache
SHM reset.
    PDO_MySQL:
        Fixed bug #77944 (Wrong meta pdo_type for bigint on LLP64).
    Reflection:
        Fixed bug #75186 (Inconsistent reflection of Closure:::__invoke()).
    Session:
        Fixed bug #77911 (Wrong warning for session.sid_bits_per_character).
    SOAP:
        Fixed bug #77945 (Segmentation fault when constructing SoapClient with
WSDL_CACHE_BOTH).
    SPL:
        Fixed bug #77024 (SplFileObject::__toString() may return array).
    SQLite:
        Fixed bug #77967 (Bypassing open_basedir restrictions via file uris).
    Standard:
        Fixed bug #77931 (Warning for array_map mentions wrong type).
        Fixed bug #78003 (strip_tags output change since PHP 7.3).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.6

MFH:		2019Q2

 

06:46 tz 

lang/php73: Upgrade from 7.3.4 to 7.3.5

Changelog:

    Core:
        Fixed bug #77903 (ArrayIterator stops iterating after offsetSet call).
    CLI:
        Fixed bug #77794 (Incorrect Date header format in built-in server).
    EXIF:
        Fixed bug #77950 (Heap-buffer-overflow in _estrndup via
exif_process_IFD_TAG).
    Interbase:
        Fixed bug #72175 (Impossibility of creating multiple connections to
Interbase with php 7.x).
    Intl:
        Fixed bug #77895 (IntlDateFormatter::create fails in strict mode if
$locale = null).
    litespeed:
        LiteSpeed SAPI 7.3.1, better process management, new API function
litespeed_finish_request().
    LDAP:
        Fixed bug #77869 (Core dump when using server controls) (mcmic)
    Mail:
        Fixed bug #77821 (Potential heap corruption in TSendMail()).
    mbstring:
        Implemented FR #72777 (Implement regex stack limits for mbregex
functions).
    MySQLi:
        Fixed bug #77773 (Unbuffered queries leak memory - MySQLi / mysqlnd).
    PCRE:
        Fixed bug #77827 (preg_match does not ignore \r in regex flags).
    PDO:
        Fixed bug #77849 (Disable cloning of PDO handle/connection objects).
    phpdbg:
        Fixed bug #76801 (too many open files).
        Fixed bug #77800 (phpdbg segfaults on listing some conditional
breakpoints).
        Fixed bug #77805 (phpdbg build fails when readline is shared).
    Reflection:
        Fixed bug #77772 (ReflectionClass::getMethods(null) doesn't work).
        Fixed bug #77882 (Different behavior: always calls destructor).
    Standard:
        Fixed bug #77793 (Segmentation fault in extract() when overwriting
reference with itself).
        Fixed bug #77844 (Crash due to null pointer in parse_ini_string with
INI_SCANNER_TYPED).
        Fixed bug #77853 (Inconsistent substr_compare behaviour with empty
haystack).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.5

MFH:		2019Q2

 

20:27 tz 

lang/php73: convert CPPFLAGS from /usr/local to ${LOCALBASE}

As mat point out too often: if you write /usr/local you should write
${LOCALBASE}

PR:		237722
Reported by:	mikael.urankar@gmail.com

 

22:31 tz 

lang/php73: enable PRCE2 JIT support

This will speed up certain PHP scripts relying on regex matches.

PR:		237722
Submitted by: Jon Tejnung <jon@herrskogen.se>

 

05:28 antoine 

Revert r500402 and unbreak all php73 ports

Pointy hat:	amdmi3

 

09:31 amdmi3 

- Add LICENSE_FILE
- Update WWW

Approved by:	portmgr blanket

 

09:49 tz 

PHP: Change MOD_PRIO for imap to avoid core dumps

PR:		235917
Reported by:	Sergey Anokhin <admin@5034.ru>
MFH:		2019Q2

 

14:04 sunpoet 

Update devel/readline to 8.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://tiswww.case.edu/php/chet/readline/CHANGES
PR:		236156
Exp-run by:	antoine

 

13:51 tz 

Update PHP 7.3 from 7.3.3 to 7.3.4

Changelog:

    Core:
        Fixed bug #77738 (Nullptr deref in zend_compile_expr).
        Fixed bug #77660 (Segmentation fault on break 2147483648).
        Fixed bug #77652 (Anonymous classes can lose their interface
information).
        Fixed bug #77345 (Stack Overflow caused by circular reference in garbage
collection).
        Fixed bug #76956 (Wrong value for 'syslog.filter' documented in
php.ini).
    Apache2Handler:
        Fixed bug #77648 (BOM in sapi/apache2handler/php_functions.c).
    Bcmath:
        Fixed bug #77742 (bcpow() implementation related to gcc compiler
optimization).
    CLI Server:
        Fixed bug #77722 (Incorrect IP set to $_SERVER['REMOTE_ADDR'] on the
localhost).
    COM:
        Fixed bug #77578 (Crash when php unload).
    EXIF:
        Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s).
        Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value).
    FPM:
        Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).
    GD:
        Fixed bug #77700 (Writing truecolor images as GIF ignores interlace
flag).
    MySQLi:
        Fixed bug #77597 (mysqli_fetch_field hangs scripts).
    Opcache:
        Fixed bug #77743 (Incorrect pi node insertion for jmpznz with identical
successors).
    PCRE:
        Fixed bug #76127 (preg_split does not raise an error on invalid UTF-8).
    Phar:
        Fixed bug #77697 (Crash on Big_Endian platform).
    phpdbg:
        Fixed bug #77767 (phpdbg break cmd aliases listed in help do not match
actual aliases).
    sodium:
        Fixed bug #77646 (sign_detached() strings not terminated).
    SQLite3:
        Added sqlite3.defensive INI directive.
    Standard:
        Fixed bug #77664 (Segmentation fault when using undefined constant in
custom wrapper).
        Fixed bug #77669 (Crash in extract() when overwriting extracted array).
        Fixed bug #76717 (var_export() does not create a parsable value for
PHP_INT_MIN).
        Fixed bug #77765 (FTP stream wrapper should set the directory as
executable).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.4

MFH:		2019Q2

 

15:49 tz 

lang/php73: Upgrade from 7.3.2 to 7.3.3

Changelog:

    Core:
        Fixed bug #77589 (Core dump using parse_ini_string with numeric
sections).
        Fixed bug #77329 (Buffer Overflow via overly long Error Messages).
        Fixed bug #77494 (Disabling class causes segfault on member access).
        Fixed bug #77498 (Custom extension Segmentation fault when declare
static property).
        Fixed bug #77530 (PHP crashes when parsing `(2)::class`).
        Fixed bug #77546 (iptcembed broken function).
        Fixed bug #77630 (rename() across the device may allow unwanted access
during processing).
    COM:
        Fixed bug #77621 (Already defined constants are not properly reported).
        Fixed bug #77626 (Persistence confusion in php_com_import_typelib()).
    EXIF:
        Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).
        Fixed bug #77540 (Invalid Read on exif_process_SOFn).
        Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
        Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
    Mbstring:
        Fixed bug #77514 (mb_ereg_replace() with trailing backslash adds null
byte).
    MySQL:
        Disabled LOCAL INFILE by default, can be enabled using php.ini directive
mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE attribute
for pdo_mysql.
    OpenSSL:
        Fixed bug #77390 (feof might hang on TLS streams in case of fragmented
TLS records).
    PDO_OCI:
        Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO,
and CLIENT_IDENTIFIER.
    PHAR:
        Fixed bug #77396 (Null Pointer Dereference in
phar_create_or_parse_filename).
        Fixed bug #77586 (phar_tar_writeheaders_int() buffer overflow).
    phpdbg:
        Fixed bug #76596 (phpdbg support for display_errors=stderr).
    SPL:
        Fixed bug #51068 (DirectoryIterator glob:// don't support current path
relative queries).
        Fixed bug #77431 (openFile() silently truncates after a null byte).
    Standard:
        Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions).
        Fixed bug #77612 (setcookie() sets incorrect SameSite header if all of
its options filled).

Changelog taken from: http://www.php.net/ChangeLog-7.php#7.3.3

MFH:		2019Q1

 

11:09 tz 

lang/php73: Upgrade from 7.3.1 to 7.3.2

Changelog:

    Core:
        Fixed bug #77369 (memcpy with negative length via crafted DNS response).
        Fixed bug #77387 (Recursion detection broken when printing GLOBALS).
        Fixed bug #77376 ("undefined function" message no longer includes
namespace).
        Fixed bug #77357 (base64_encode / base64_decode doest not work on nested
VM).
        Fixed bug #77339 (__callStatic may get incorrect arguments).
        Fixed bug #77317 (__DIR__, __FILE__, realpath() reveal physical path for
subst virtual drive).
        Fixed bug #77263 (Segfault when using 2 RecursiveFilterIterator).
        Fixed bug #77447 (PHP 7.3 built with ASAN crashes in
zend_cpu_supports_avx2).
        Fixed bug #77484 (Zend engine crashes when calling realpath in invalid
working dir).
    Curl:
        Fixed bug #76675 (Segfault with H2 server push).
    Fileinfo:
        Fixed bug #77346 (webm files incorrectly detected as
application/octet-stream).
    FPM:
        Fixed bug #77430 (php-fpm crashes with Main process exited, code=dumped,
status=11/SEGV).
    GD:
        Fixed bug #73281 (imagescale(..., IMG_BILINEAR_FIXED) can cause black
border).
        Fixed bug #73614 (gdImageFilledArc() doesn't properly draw pies).
        Fixed bug #77272 (imagescale() may return image resource on failure).
        Fixed bug #77391 (1bpp BMPs may fail to be loaded).
        Fixed bug #77479 (imagewbmp() segfaults with very large images).
    ldap:
        Fixed bug #77440 (ldap_bind using ldaps or ldap_start_tls()=exception in
libcrypto-1_1-x64.dll).
    Mbstring:
        Fixed bug #77428 (mb_ereg_replace() doesn't replace a substitution
variable).
        Fixed bug #77454 (mb_scrub() silently truncates after a null byte).
    MySQLnd:
        Fixed bug #77308 (Unbuffered queries memory leak).
        Fixed bug #75684 (In mysqlnd_ext_plugin.h the plugin methods family has
no external visibility).
    Opcache:
        Fixed bug #77266 (Assertion failed in dce_live_ranges).
        Fixed bug #77257 (value of variable assigned in a switch() construct
gets lost).
        Fixed bug #77434 (php-fpm workers are segfaulting in zend_gc_addre).
        Fixed bug #77361 (configure fails on 64-bit AIX when opcache enabled).
        Fixed bug #77287 (Opcache literal compaction is incompatible with EXT
opcodes).
    PCRE:
        Fixed bug #77338 (get_browser with empty string).
    PDO:
        Fixed bug #77273 (array_walk_recursive corrupts value types leading to
PDO failure).
    PDO MySQL:
        Fixed bug #77289 (PDO MySQL segfaults with persistent connection).
    SOAP:
        Fixed bug #77410 (Segmentation Fault when executing method with an empty
parameter).
    Sockets:
        Fixed bug #76839 (socket_recvfrom may return an invalid 'from' address
on MacOS).
    SPL:
        Fixed bug #77298 (segfault occurs when add property to unserialized
empty ArrayObject).
    Standard:
        Fixed bug #77395 (segfault about array_multisort).
        Fixed bug #77439 (parse_str segfaults when inserting item into existing
array).

Changelog taken from: http://www.php.net/ChangeLog-7.php#7.3.2

PR:		235576 235578
MFH:		2019Q1

 

10:48 tz 

lang/php73: disable DTRACE option on PowerPC

DTRACE causes ld(1) link probe failures and therefore fails the build.

PR:           233850
Submitted by: Chip Cuccio <chip.cuccio@gmail.com>
MFH:		  2019Q1

 

13:19 tz 

lang/php7*: Rename option MYSQL to MYSQLND

Renaming the option to be inline with the already existing MYSQLND option
in the mysqli and pdo_mysqli ports.

Reported by:	Jarrod Sayers <jarrod@downtools.com.au>

 

10:41 tz 

lang/php73: Make enabling MYSQL native driver optional

Currently PHP is always compiled with --enable-mysqlnd, to allow the use
of the native MySQL Native Driver. MySQL Native Driver is a replacement for the
MySQL Client Library.

While this is handy when working with MySQL there is no need for
it when MySQL is *not* used at all. This happens frequently when
working without databases or simply with other databases.

To avoid POLA the newly introduced option is a default option.

Disabling it will reduce the size of the package by ca. 175 KB,
which also helps in modern constraint VM run environments.

Submitted by:	Reko Turja <reko.turja@liukuma.net>

 

11:05 tz 

lang/php73: Upgrade from 7.3.0 to 7.3.1

Changelog:

    Core:
        Fixed bug #76654 (Build failure on Mac OS X on 32-bit Intel).
        Fixed bug #71041 (zend_signal_startup() needs ZEND_API).
        Fixed bug #76046 (PHP generates "FE_FREE" opcode on the wrong line).
        Fixed bug #77291 (magic methods inherited from a trait may be ignored).
    CURL:
        Fixed bug #77264 (curl_getinfo returning microseconds, not seconds).
    COM:
        Fixed bug #77177 (Serializing or unserializing COM objects crashes).
    Exif:
        Fixed bug #77184 (Unsigned rational numbers are written out as signed
rationals).
    GD:
        Fixed bug #77195 (Incorrect error handling of imagecreatefromjpeg()).
        Fixed bug #77198 (auto cropping has insufficient precision).
        Fixed bug #77200 (imagecropauto(..., GD_CROP_SIDES) crops left but not
right).
        Fixed bug #77269 (efree() on uninitialized Heap data in imagescale leads
to use-after-free).
        Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap).
    MBString:
        Fixed bug #77367 (Negative size parameter in mb_split).
        Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token).
        Fixed bug #77371 (heap buffer overflow in mb regex functions -
compile_string_node).
        Fixed bug #77381 (heap buffer overflow in multibyte match_at).
        Fixed bug #77382 (heap buffer overflow due to incorrect length in
expand_case_fold_string).
        Fixed bug #77385 (buffer overflow in fetch_token).
        Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode).
        Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code).
    OCI8:
        Fixed bug #76804 (oci_pconnect with OCI_CRED_EXT not working).
        Added oci_set_call_timeout() for call timeouts.
        Added oci_set_db_operation() for the DBOP end-to-end-tracing attribute.
    Opcache:
        Fixed bug #77215 (CFG assertion failure on multiple finalizing switch
frees in one block).
        Fixed bug #77275 (OPcache optimization problem for
ArrayAccess->offsetGet).
    PCRE:
        Fixed bug #77193 (Infinite loop in preg_replace_callback).
    PDO:
        Handle invalid index passed to PDOStatement::fetchColumn() as error.
    Phar:
        Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext).
    Soap:
        Fixed bug #77088 (Segfault when using SoapClient with null options).
    Sockets:
        Fixed bug #77136 (Unsupported IPV6_RECVPKTINFO constants on macOS).
    Sodium:
        Fixed bug #77297 (SodiumException segfaults on PHP 7.3).
    SPL:
        Fixed bug #77359 (spl_autoload causes segfault).
        Fixed bug #77360 (class_uses causes segfault).
    SQLite3:
        Fixed bug #77051 (Issue with re-binding on SQLite3).
    Xmlrpc:
        Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()).
        Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code).

Changelog taken from: http://www.php.net/ChangeLog-7.php#7.3.1

Also removing the patch committed in r489721. The patch disables the use of
ifuncs and is part of the new relase 7.3.1.

MFH:		2019Q1

 

15:54 tz 

lang/php73: Fix "Bus error (core dumped)" by disabling ifuncs

PHP 7.3 uses ifuncs optimisations which generates a list of problems on FreeBSD:
https://bugs.php.net/bug.php?id=77284
https://bugs.php.net/bug.php?id=77279
https://bugs.php.net/bug.php?id=77261

Therefore ifuncs will be disabled in PHP 7.3.1. To make it usable until the
release,
we import the patch until then:
https://github.com/php/php-src/commit/291589114aa9be899cf7d5d874c3b5bbdb35f336

PR:		233024
Submitted by:	Pascal Christen <pascal.christen@hostpoint.ch>
MFH:		2019Q1

 

07:50 tz 

lang/php73: Upgrade from RC6 to 7.3.0

Changelog: http://www.php.net/ChangeLog-7.php#7.3.0

 

10:28 joneum 

Update to RC6

Changelog: https://github.com/php/php-src/blob/php-7.3.0RC6/NEWS

Approved by:	tz (implicit)
Sponsored by:	Netzkommune GmbH

 

20:20 emaste 

lang/php73: link with -znotext on i386

This port links some non-PIC code, which fails with lld as it defaults
to disallowing relocations against read-only segments. For i386 we can
just add -znotext unconditionally: for GNU BFD ld it just affirms BFD's
existing default.

PR:		214864, 230207
Sponsored by:	The FreeBSD Foundation

 

21:05 joneum 

Update to RC5

Changelog: https://github.com/php/php-src/blob/php-7.3.0RC5/NEWS

Approved by:	tz (implicit)
Sponsored by:	Netzkommune GmbH

 

10:15 joneum 

Update to RC4

Changelog: https://github.com/php/php-src/blob/php-7.3.0RC4/NEWS

Approved by:	tz (implicit)
Sponsored by:	Netzkommune GmbH

 

14:19 joneum 

Update to RC3

Changelog: https://github.com/php/php-src/blob/php-7.3.0RC3/NEWS

Approved by:	tz (implicit)
Sponsored by:	Netzkommune GmbH

 

17:32 joneum 

bump PORTREVISON after fix in r481618

Approved by:	tz (implicit)
Sponsored by:	Netzkommune HmbH

 

10:02 tz 

PHP 7.3: Convert PCRE2 dependency from BUILD to LIB_DEPENDS

This fixes fallout located to PEAR.

Reported by:	mat, antoine

 

08:52 tz 

Add PHP 7.3 RC2 to the ports-tree.

Notable changes:
- Switch from PCRE to PCRE2
- Many modules now require PCRE2 for building
- graphics/php73-gd: X11 option is no longer default

Changes to Mk/Uses/php.mk approved by ale