non port: lang/php80/distinfo |
Number of commits found: 34 |
Sunday, 31 Dec 2023
|
00:06 Muhammad Moinur Rahman (bofh)
lang/php80: Sunset
beced89 |
Sunday, 6 Aug 2023
|
21:49 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.29=>8.0.30
Changelog: https://www.php.net/ChangeLog-8.php#8.0.30
Sponsored by: Bounce Experts
4070168 |
Friday, 9 Jun 2023
|
17:15 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.28=>8.0.29
Changelog: https://www.php.net/ChangeLog-8.php#8.0.29
Sponsored by: Bounce Experts
718a57b |
Wednesday, 15 Feb 2023
|
17:30 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.27=>8.0.28
Changelog: https://www.php.net/ChangeLog-8.php#8.0.28
Sponsored by: Bounce Experts
faabc6b |
Tuesday, 10 Jan 2023
|
00:07 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.26=>8.0.27
Approved by: tz (private email)
MFH: 2023Q1
Relnotes: https://www.php.net/ChangeLog-8.php#8.0.27
Sponsored by: Bounce Experts
bdae7d6 |
Sunday, 27 Nov 2022
|
13:36 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.25=>8.0.26
* CLI:
- Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
* Core:
- Fixed bug GH-9752 (Generator crashes when interrupted during
argument evaluation with extra named params).
- Fixed bug GH-9801 (Generator crashes when memory limit is exceeded
during initialization).
- Fixed potential NULL pointer dereference in Windows shm*()
functions.
- Fixed bug GH-9750 (Generator memory leak when interrupted during
argument evaluation.
* Date:
- Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null
byte if the argument is an offset larger than 100*60 minutes).
* FPM:
- Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when
running php-fpm 8.1.11).
* mysqli:
- Fixed bug GH-9841 (mysqli_query throws warning despite using
silenced error mode).
* OpenSSL:
- Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160
does not build).
* SOAP:
- Fixed GH-9720 (Null pointer dereference while serializing the
response).
Approved by: tz (By private mail)
Sponsored by: Bounce Experts
f636aab |
Saturday, 29 Oct 2022
|
19:49 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.24=>8.0.25
* GD:
- Fixed bug #81739: OOB read due to insufficient input validation in
imageloadfont(). (CVE-2022-31630)
* Hash:
- Fixed bug #81738: buffer overflow in hash_update() on long parameter
(CVE-2022-37454)
* Session:
- Fixed bug GH-9583 (session_create_id() fails with user defined save
handler that doesn't have a validateId() method).
* Streams:
- Fixed bug GH-9590 (stream_select does not abort upon exception or
empty valid fd set).
Approved by: tz (By private mail)
MFH: 2022Q4
Relnotes: https://www.php.net/ChangeLog-8.php#8.0.25
Sponsored by: Bounce Experts
5b7b2aa |
Saturday, 1 Oct 2022
|
18:36 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.23=>8.0.24
* Core:
- Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function)
(Tim Starling)
- Fixed bug GH-9361 (Segmentation fault on script exit #9379).
- Fixed bug GH-9407 (LSP error in eval'd code refers to wrong class
for static type).
- Fixed bug #81727: Don't mangle HTTP variable names that clash with
ones that have a specific semantic meaning. (CVE-2022-31629)
* DOM:
- Fixed bug #79451 (DOMDocument->replaceChild on doctype causes double
free).
* FPM:
- Fixed bug GH-8885 (FPM access.log with stderr begins to write logs
to error_log after daemon reload).
- Fixed bug #77780 ("Headers already sent..." when previous connection
was aborted).
* GMP:
- Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is
passed to gmp_init()).
* Intl:
- Fixed bug GH-9421 (Incorrect argument number for ValueError in
NumberFormatter).
* Phar:
- Fixed bug #81726: phar wrapper: DOS when using quine gzip file.
(CVE-2022-31628)
* PDO_PGSQL:
- Fixed bug GH-9411 (PgSQL large object resource is incorrectly
closed).
* Reflection:
- Fixed bug GH-8932 (ReflectionFunction provides no way to get the
called class of a Closure).
- Fixed bug GH-9409 (Private method is incorrectly dumped as
"overwrites").
* Streams:
- Fixed bug GH-9316 ($http_response_header is wrong for long status
line).
Approved by: tz (By private mail)
Relnotes: https://www.php.net/ChangeLog-8.php#8.0.24
Sponsored by: Bounce Experts
24d9ef5 |
Saturday, 3 Sep 2022
|
12:48 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.22=>8.0.23
* Core:
- Fixed incorrect double to long casting in latest clang.
* DBA:
- Fixed LMDB driver memory leak on DB creation failure (Girgias)
- Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile")
segfaults).
* Intl:
- Fixed IntlDateFormatter::formatObject() parameter type.
* OPcache:
- Fixed bug GH-9033 (Loading blacklist file can fail due to negative
length).
* PDO_SQLite:
- Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
* SQLite3:
- Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
* Standard:
- Fixed bug GH-9017 (php_stream_sock_open_from_socket could return
NULL).
* Streams:
- Fixed bug GH-8472 (The resource returned by stream_socket_accept may
have incorrect metadata).
- Fixed bug GH-8409 (SSL handshake timeout leaves persistent
connections hanging).
Approved by: tz (By private mail)
Relnotes: https://www.php.net/ChangeLog-8.php#8.0.23
Sponsored by: Bounce Experts
0d79b53 |
Saturday, 6 Aug 2022
|
19:12 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.20=>8.0.22
- STRIP Binaries [1]
CLI:
- Fixed potential overflow for the builtin server via the
PHP_CLI_SERVER_WORKERS environment variable.
Core:
- Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
- Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
Date:
- Fixed bug #80047 (DatePeriod doesn't warn with custom
DateTimeImmutable).
DBA:
- Fixed LMDB driver hanging when attempting to delete a non-existing
key.
FPM:
- Fixed zlog message prepend, free on incorrect address.
- Fixed possible double free on configuration loading failure.
GD:
- Fixed bug GH-8848 (imagecopyresized() error refers to the wrong
argument).
Intl:
- Fixed build for ICU 69.x and onwards.
OPcache:
- Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php
syntaxe of a valid file).
Standard:
- Fixed the crypt_sha256/512 api build with clang > 12.
- Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
Reported by: sunpoet [1]
Approved by: tz (private email)
Relnotes: https://www.php.net/ChangeLog-8.php#8.0.22
Sponsored by: Bounce Experts
33839ff |
Friday, 10 Jun 2022
|
13:58 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.19=>8.0.20
- CLI:
Fixed bug #8575 (CLI closes standard streams too early).
- Core:
Fixed Haiku ZTS builds.
- Date:
Fixed bug #8471 (Segmentation fault when converting immutable and
mutable DateTime instances created using reflection).
- FPM:
* Fixed ACL build check on MacOS.
* Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502
- Mysqlnd:
Fixed bug #81719: mysqlnd/pdo password buffer overflow.
(CVE-2022-31626)
- OPcache:
Fixed bug #8466 (ini_get() is optimized out when the option does not
exist).
- Pcntl:
Fixed Haiku build.
- Pgsql:
Fixed bug #81720: Uninitialized array in pg_query_params().
(CVE-2022-31625)
- Soap:
* Fixed bug #8578 (Error on wrong parameter on SoapHeader constructor).
* Fixed bug #8538 (SoapClient may strip parts of nmtokens).
- SPL:
Fixed bug #8235 (iterator_count() may run indefinitely).
- Zip:
Fixed type for index in ZipArchive::replaceFile.
Approved by: tz (private email)
Relnotes: https://www.php.net/ChangeLog-8.php#8.0.20
Sponsored by: Bounce Experts
debc129 |
Friday, 13 May 2022
|
18:57 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.18=>8.0.19
* Core:
Fixed bug #8289 (Exceptions thrown within a yielded from iterator are
not rethrown into the generator).
* Date:
Fixed bug #7979 (DatePeriod iterator advances when checking if valid).
* FFI:
Fixed bug #8433 (Assigning function pointers to structs in FFI leaks).
* FPM:
Fixed bug #76003 (FPM /status reports wrong number of active processe)
Fixed bug #77023 (FPM cannot shutdown processes).
Fixed comment in kqueue remove callback log message.
* Iconv:
Fixed bug #8218 (ob_end_clean does not reset Content-Encoding header).
* Intl:
Fixed bug #8364 (msgfmt_format $values may not support references).
* MySQLi:
Fixed bug #8267 (MySQLi uses unsupported format specifier on Windows).
* SPL:
Fixed bug #8366 (ArrayIterator may leak when calling __construct()).
Fixed bug #8273 (SplFileObject: key() returns wrong value).
* Streams:
Fixed php://temp does not preserve file-position when switched to
temporary file.
* zlib:
Fixed bug #8218 (ob_end_clean does not reset Content-Encoding header).
Approved by: tz (private email)
Sponsored by: Bounce Experts
a6acea5 |
Friday, 15 Apr 2022
|
22:31 Torsten Zuehlsdorff (tz)
lang/php80: Upgrade from 8.0.17 to 8.0.18
Changelog:
Core:
Fixed freeing of internal attribute arguments.
Fixed bug #8070 (memory leak of internal function attribute hash).
Fixed bug #8160 (ZTS support on Alpine is broken).
Filter:
Fixed signedness confusion in php_filter_validate_domain().
Intl:
Fixed bug #8142 (Compilation error on cygwin).
MBString:
Fixed bug #8208 (mb_encode_mimeheader: $indent functionality broken).
MySQLi:
Fixed bug #8068 (mysqli_fetch_object creates inaccessible properties).
Pcntl:
Fixed bug #8142 (Compilation error on cygwin).
PgSQL:
Fixed result_type related stack corruption on LLP64 architectures.
Fixed bug #8253 (pg_insert() fails for references).
Sockets:
Fixed Solaris builds.
SPL:
Fixed bug #8121 (SplFileObject - seek and key with csv file
inconsistent).
Standard:
Fixed bug #8048 (Force macOS to use statfs).
Sponsored by: Bounce Experts
adc832a |
Friday, 18 Mar 2022
|
01:29 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.16=>8.0.17
Core:
Fixed Haiku ZTS build.
GD:
Fixed libpng warning when loading interlaced images.
FPM:
Fixed bug #76109 (Unsafe access to fpm scoreboard).
Iconv:
Fixed bug #7953 (ob_clean() only does not set Content-Encoding).
Fixed bug #7980 (Unexpected result for iconv_mime_decode).
MySQLnd:
Fixed bug #8058 (NULL pointer dereference in mysqlnd package).
OPcache:
Fixed bug #8074 (Wrong type inference of range() result).
Reflection:
Fixed bug #8080 (ReflectionClass::getConstants() depends on def.
order).
Zlib:
Fixed bug #7953 (ob_clean() only does not set Content-Encoding).
Approved by: tz (private email)
Relnotes: https://www.php.net/ChangeLog-8.php#PHP_8_0
Sponsored by: Bounce Experts
34f845f |
Saturday, 19 Feb 2022
|
04:42 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.15=>8.0.16
Core:
Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
Fixed bug #7896 (Environment vars may be mangled on Windows).
FFI:
Fixed bug #7867 (FFI::cast() from pointer to array is broken).
Filter:
Fix #81708: UAF due to php_filter_float() failing for ints.
FPM:
Fixed memory leak on invalid port.
MBString:
Fixed bug #7902 (mb_send_mail may delimit headers with LF only).
MySQLnd:
Fixed bug #7972 (MariaDB version prefix 5.5.5- is not stripped).
Sockets:
Fixed ext/sockets build on Haiku.
Fixed bug #7978 (sockets extension compilation errors).
Standard:
Fixed bug #7875 (mails are sent even if failure to log throws exception).
Approved by: tz (private email)
Sponsored by: Bounce Experts
11c9b8a |
Friday, 21 Jan 2022
|
21:24 Torsten Zuehlsdorff (tz)
lang/php80: Update from 8.0.14 to 8.0.15
Core:
Fixed bug #81656 (GCC-11 silently ignores -R).
Fixed bug #81585 (cached_chunks are not counted to real_size on
shutdown).
Filter:
Fixed FILTER_FLAG_NO_RES_RANGE flag.
Hash:
Fixed bug #7759 (Incorrect return types for hash() and hash_hmac()).
Fixed bug #7826 (Inconsistent argument name in hash_hmac_file and
hash_file).
MySQLnd:
Fixed bug where large bigints may be truncated.
OCI8:
Fixed bug #7765 (php_oci_cleanup_global_handles segfaults at second
call).
OPcache:
Fixed bug #81679 (Tracing JIT crashes on reattaching).
PDO_PGSQL:
Fixed error message allocation of PDO PgSQL.
Sockets:
Avoid void* arithmetic in sockets/multicast.c on NetBSD.
Spl:
Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
Sponsored by: Bounce Experts
bcd3779 |
Tuesday, 28 Dec 2021
|
02:32 Muhammad Moinur Rahman (bofh)
lang/php80: Update version 8.0.13=>8.0.14
- Refactor with OPTIONSNG
Changelog:
Core:
Fixed bug #81582 (Stringable not implicitly declared if __toString()
came from a trait).
Fixed bug #81591 (Fatal Error not properly logged in particular
cases).
Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to
Closure::fromCallable()).
Fixed bug #81631 (::class with dynamic class name may yield wrong
line number).
FPM:
Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
GD:
Fixed bug #71316 (libpng warning from imagecreatefromstring).
IMAP:
Fixed bug #81649 (imap_(un)delete accept sequences, not single
numbers).
OpenSSL:
Fixed bug #75725 (./configure: detecting RAND_egd).
PCRE:
Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
SPL:
Fixed bug #81587 (MultipleIterator Segmentation fault w/
SimpleXMLElement attached).
Standard:
Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
Fixed bug #81659 (stream_get_contents() may unnecessarily
overallocate).
Approved by: tz (private email)
Relnotes: https://www.php.net/ChangeLog-8.php#8.0.14
Sponsored by: Bounce Experts
b68b508 |
Sunday, 26 Dec 2021
|
18:23 Muhammad Moinur Rahman (bofh)
Fix fetch for php*
- Primary hosting provider of php has introduced some sort of checking
which is blocking fetch although curl/wget works perfectly. fetch with
other --user-agent is also not working at the moment. An issue has been
opened with the upstream which can be found at:
https://github.com/php/web-php/issues/483
- Untill this is fixed add php Github distributions URL to MASTER_SITES
- Modify MASTER_SITES for php[73|74|80] and remove SUBDIR as it affects
DIST_SUBDIR
- Add DIST_SUBDIR as Github is IPv4 only which affects IPv6 only
builders. In case someone is running IPv6 only builders distcache will
pickup and serve.
- Although distinfo has been updated as we have added DIST_SUBDIR but
SHA256 and SIZE are unchanged. In case someone needs to verify those
are available from https://www.php.net/downloads
- We might have done some drastic changes but we are on the brink of
quarterly build and we do not want to start a new year and a new
quarter with BROKEN php and thousands of other ports.
PR: 260699
Reported by: chris@cretaforce.gr
Approved by: portmgr (blanket infrastructure)
Sponsored by: Bounce Experts
529117f |
Saturday, 20 Nov 2021
|
19:31 Torsten Zuehlsdorff (tz)
lang/php80: Upgrade from 8.0.12 to 8.0.13
Core:
Fixed bug #81518 (Header injection via default_mimetype /
default_charset).
Date:
Fixed bug #81500 (Interval serialization regression since 7.3.14 /
7.4.2).
DBA:
Fixed bug #81588 (TokyoCabinet driver leaks memory).
MBString:
Fixed bug #76167 (mbstring may use pointer from some previous request).
Opcache:
Fixed bug #81512 (Unexpected behavior with arrays and JIT).
PCRE:
Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
XML:
Fixed bug #79971 (special character is breaking the path in xml
function). (CVE-2021-21707)
XMLReader:
Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid
property).
Also include a patch to fix issue 259725:
dns_get_record fails when requested record doesn't exist
PR: 259725
Reported by: fsbruva@yahoo.com
Sponsored by: Bounce Experts
91fd937 |
Saturday, 23 Oct 2021
|
22:52 Torsten Zuehlsdorff (tz)
lang/php80: Upgrade from 8.0.11 to 8.0.12
Changelog:
CLI:
Fixed bug #81496 (Server logs incorrect request method).
Core:
Fixed bug #81435 (Observer current_observed_frame may point to an old
(overwritten) frame).
Fixed bug #81380 (Observer may not be initialized properly).
DOM:
Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove
ID).
FFI:
Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not
defined).
FPM:
Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege
escalation) (CVE-2021-21703).
Fileinfo:
Fixed bug #78987 (High memory usage during encoding detection).
Filter:
Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE
failing).
Opcache:
Fixed bug #81472 (Cannot support large linux major/minor device number
when read /proc/self/maps).
Reflection:
ReflectionAttribute is no longer final.
SPL:
Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause
double-free).
Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
Standard:
Fixed bug #69751 (Change Error message of sprintf/printf for
missing/typo position specifier).
Streams:
Fixed bug #81475 (stream_isatty emits warning with attached stream
wrapper).
XML:
Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
Zip:
Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
Sponsored by: Bounce Experts
cf94bba |
Wednesday, 29 Sep 2021
|
09:55 Torsten Zuehlsdorff (tz)
lang/php80: Update from 8.0.10 to 8.0.11
Changelog:
Core:
Fixed bug #81302 (Stream position after stream filter removed).
Fixed bug #81346 (Non-seekable streams don't update position after
write).
Fixed bug #73122 (Integer Overflow when concatenating strings).
GD:
Fixed bug #53580 (During resize gdImageCopyResampled cause colors
change).
Opcache:
Fixed bug #81353 (segfault with preloading and statically bound
closure).
Shmop:
Fixed bug #81407 (shmop_open won't attach and causes php to crash).
Standard:
Fixed bug #71542 (disk_total_space does not work with relative paths).
Fixed bug #81400 (Unterminated string in dns_get_record() results).
SysVMsg:
Fixed bug #78819 (Heap Overflow in msg_send).
XML:
Fixed bug #81351 (xml_parse may fail, but has no error code).
Zip:
Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
Fixed bug #81420 (ZipArchive::extractTo extracts outside of
destination).
Sponsored by: Bounce Experts
4a29572 |
Sunday, 29 Aug 2021
|
20:47 Torsten Zuehlsdorff (tz)
lang/php80: Upgrade from 8.0.9 to 8.0.10
Changelog:
Core:
Fixed bug #72595 (php_output_handler_append illegal write access).
Fixed bug #66719 (Weird behaviour when using get_called_class() with
call_user_func()).
Fixed bug #81305 (Built-in Webserver Drops Requests With "Upgrade"
Header).
BCMath:
Fixed bug #78238 (BCMath returns "-0").
CGI:
Fixed bug #80849 (HTTP Status header truncation).
Date:
Fixed bug #64975 (Error parsing when AM/PM not at the end).
Fixed bug #78984 (DateTimeZone accepting invalid UTC timezones).
Fixed bug #79580 (date_create_from_format misses leap year).
Fixed bug #80409 (DateTime::modify() loses time with 'weekday'
parameter).
GD:
Fixed bug #51498 (imagefilledellipse does not work for large circles).
MySQLi:
Fixed bug #74544 (Integer overflow in mysqli_real_escape_string()).
Opcache:
Fixed bug #81225 (Wrong result with pow operator with JIT enabled).
Fixed bug #81249 (Intermittent property assignment failure with JIT
enabled).
Fixed bug #81206 (Multiple PHP processes crash with JIT enabled).
Fixed bug #81272 (Segfault in var[] after array_slice with JIT).
Fixed bug #81255 (Memory leak in PHPUnit with functional JIT).
Fixed bug #80959 (Infinite loop in building cfg during JIT compilation)
(Nikita, Dmitry)
Fixed bug #81226 (Integer overflow behavior is different with JIT
enabled).
OpenSSL:
Fixed bug #81327 (Error build openssl extension on php 7.4.22).
PDO_ODBC:
Fixed bug #81252 (PDO_ODBC doesn't account for SQL_NO_TOTAL).
Phar:
Fixed bug #81211: Symlinks are followed when creating PHAR archive (cmb)
Shmop:
Fixed bug #81283 (shmop can't read beyond 2147483647 bytes).
SimpleXML:
Fixed bug #81325 (Segfault in zif_simplexml_import_dom).
Standard:
Fixed bug #72146 (Integer overflow on substr_replace).
Fixed bug #81265 (getimagesize returns 0 for 256px ICO images).
Fixed bug #74960 (Heap buffer overflow via str_repeat).
Streams:
Fixed bug #81294 (Segfault when removing a filter).
Sponsored by: Bounce Experts
02593a6 |
Saturday, 31 Jul 2021
|
21:31 Torsten Zuehlsdorff (tz)
lang/php80: Update from 8.0.8 to 8.0.9
Changelog:
Core:
Fixed bug #81145 (copy() and stream_copy_to_stream() fail for +4GB
files).
Fixed bug #81163 (incorrect handling of indirect vars in __sleep).
Fixed bug #81159 (Object to int warning when using an object as a string
offset).
Fixed bug #80728 (PHP built-in web server resets timeout when it can
kill the process).
Fixed bug #73630 (Built-in Weberver - overwrite
$_SERVER['request_uri']).
Fixed bug #80173 (Using return value of zend_assign_to_variable() is not
safe).
Fixed bug #73226 (--r[fcez] always return zero exit code).
Intl:
Fixed bug #72809 (Locale::lookup() wrong result with canonicalize
option).
Fixed bug #68471 (IntlDateFormatter fails for "GMT+00:00" timezone).
Fixed bug #74264 (grapheme_strrpos() broken for negative offsets).
OpenSSL:
Fixed bug #52093 (openssl_csr_sign truncates $serial).
PCRE:
Fixed bug #81101 (PCRE2 10.37 shows unexpected result).
Fixed bug #81243 (Too much memory is allocated for preg_replace()).
Reflection:
Fixed bug #81208 (Segmentation fault while create newInstance from
attribute).
Standard:
Fixed bug #81223 (flock() only locks first byte of file).
Sponsored by: Bounce Experts
0b55474 |
Monday, 5 Jul 2021
|
21:31 Torsten Zuehlsdorff (tz)
lang/php80: Update from 8.0.7 to 8.0.8
Changelog:
Core:
Fixed bug #81076 (incorrect debug info on Closures with implicit binds).
Fixed bug #81068 (Double free in realpath_cache_clean()).
Fixed bug #76359 (open_basedir bypass through adding "..").
Fixed bug #81090 (Typed property performance degradation with .=
operator).
Fixed bug #81070 (Integer underflow in memory limit comparison).
Fixed bug #81122 (SSRF bypass in FILTER_VALIDATE_URL). (CVE-2021-21705)
Bzip2:
Fixed bug #81092 (fflush before stream_filter_remove corrupts stream).
Fileinfo:
Fixed bug #80197 (implicit declaration of function 'magic_stream' is
invalid).
GMP:
Fixed bug #81119 (GMP operators throw errors with wrong parameter
names).
OCI8:
Fixed bug #81088 (error in regression test for oci_fetch_object() and
oci_fetch_array()).
Opcache:
Fixed bug #81051 (Broken property type handling after incrementing
reference).
Fixed bug #80968 (JIT segfault with return from required file).
OpenSSL:
Fixed bug #76694 (native Windows cert verification uses CN as sever
name).
MySQLnd:
Fixed bug #80761 (PDO uses too much memory).
PDO_Firebird:
Fixed bug #76448 (Stack buffer overflow in firebird_info_cb).
(CVE-2021-21704)
Fixed bug #76449 (SIGSEGV in firebird_handle_doer). (CVE-2021-21704)
Fixed bug #76450 (SIGSEGV in firebird_stmt_execute). (CVE-2021-21704)
Fixed bug #76452 (Crash while parsing blob data in firebird_fetch_blob).
(CVE-2021-21704)
readline:
Fixed bug #72998 (invalid read in readline completion).
Standard:
Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string conversion").
Fixed bug #77627 (method_exists on Closure::__invoke inconsistency).
Windows:
Fixed bug #81120 (PGO data for main PHP DLL are not used).
Sponsored by: Bounce Experts
526e568 |
Friday, 4 Jun 2021
|
20:44 Torsten Zuehlsdorff (tz)
lang/php80: Upgrade from 8.0.6 to 8.0.7
Changelog:
Core:
Fixed bug #80960 (opendir() warning wrong info when failed on Windows).
Fixed bug #67792 (HTTP Authorization schemes are treated as
case-sensitive).
Fixed bug #80972 (Memory exhaustion on invalid string offset).
FPM:
Fixed bug #65800 (Events port mechanism).
FTP:
Fixed bug #80901 (Info leak in ftp extension).
Fixed bug #79100 (Wrong FTP error messages).
GD:
Fixed bug #81032 (GD install is affected by external libgd
installation).
Intl:
Fixed bug #81019 (Unable to clone NumberFormatter after failed parse()).
MBString:
Fixed bug #81011 (mb_convert_encoding removes references from arrays).
ODBC:
Fixed bug #80460 (ODBC doesn't account for SQL_NO_TOTAL indicator).
Opcache:
Fixed bug #81007 (JIT "not supported" on 32-bit x86 -- build problem?).
Fixed bug #81015 (Opcache optimization assumes wrong part of ternary
operator in if-condition).
Fixed bug #81046 (Literal compaction merges non-equal related literals).
PDO_MySQL:
Fixed bug #81037 (PDO discards error message text from prepared
statement).
PDO_ODBC:
Fixed bug #44643 (bound parameters ignore explicit type definitions).
pgsql:
Fixed php_pgsql_fd_cast() wrt. php_stream_can_cast().
SPL:
Fixed bug #80933 (SplFileObject::DROP_NEW_LINE is broken for NUL and
CR).
XMLReader:
Fixed bug #73246 (XMLReader: encoding length not checked).
Zip:
Fixed bug #80863 (ZipArchive::extractTo() ignores references).
Sponsored by: Bounce Experts
c4d81d7 |
Friday, 7 May 2021
|
22:53 Torsten Zuehlsdorff (tz)
lang/php80: Update from 8.0.5 to 8.0.6
PDO_pgsql:
Revert "Fixed bug #80892 (PDO::PARAM_INT is treated the same as
PDO::PARAM_STR)"
Sponsored by: Bounce Experts
85d390d |
Saturday, 1 May 2021
|
22:10 Torsten Zuehlsdorff (tz)
lang/php80: Upgrade from 8.0.3 to 8.0.5
Changelog:
Core:
Fixed bug #75776 (Flushing streams with compression filter is broken).
Fixed bug #80811 (Function exec without $output but with $restult_code
parameter crashes).
Fixed bug #80814 (threaded mod_php won't load on FreeBSD: No space
available for static Thread Local Storage).
Changed PowerPC CPU registers used by Zend VM to work around GCC bug.
Old registers (r28/r29) might be clobbered by _restgpr routine used for return
from C function compiled with -Os.
Dba:
Fixed bug #80817 (dba_popen() may cause segfault during RSHUTDOWN).
DOM:
Fixed bug #66783 (UAF when appending DOMDocument to element).
FFI:
Fixed bug #80847 (CData structs with fields of type struct can't be
passed as C function argument).
FPM:
Fixed bug #80024 (Duplication of info about inherited socket after pool
removing).
FTP:
Fixed bug #80880 (SSL_read on shutdown, ftp/proc_open).
IMAP:
Fixed bug #80800 (imap_open() fails when the flags parameter includes
CL_EXPUNGE).
Fixed bug #80710 (imap_mail_compose() header injection).
Intl:
Fixed bug #80763 (msgfmt_format() does not accept DateTime references).
LibXML:
Fixed bug #73533 (Invalid memory access in php_libxml_xmlCheckUTF8).
Fixed bug #51903 (simplexml_load_file() doesn't use HTTP headers).
MySQLnd:
Fixed bug #80837 (Calling stmt_store_result after fetch doesn't throw an
error).
Opcache:
Fixed bug #80839 (PHP problem with JIT).
Fixed bug #80861 (erronous array key overflow in 2D array with JIT).
Fixed bug #80786 (PHP crash using JIT).
Fixed bug #80782 (DASM_S_RANGE_VREG on PHP_INT_MIN-1).
Pcntl:
Fixed bug #79812 (Potential integer overflow in pcntl_exec()).
PCRE:
Fixed bug #80866 (preg_split ignores limit flag when pattern with \K has
0-width fullstring match).
PDO_ODBC:
Fixed bug #80783 (PDO ODBC truncates BLOB records at every 256th byte).
PDO_pgsql:
Fixed bug #80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR).
Session:
Fixed bug #80889 (Cannot set save handler when save_handler is invalid).
Fixed bug #80774 (session_name() problem with backslash).
SOAP:
Fixed bug #69668 (SOAP special XML characters in namespace URIs not
encoded).
Standard:
Fixed bug #80915 (Taking a reference to $_SERVER hides its values from
phpinfo()).
Fixed bug #80914 ('getdir' accidentally defined as an alias of 'dir').
Fixed bug #80771 (phpinfo(INFO_CREDITS) displays nothing in CLI).
Fixed bug #78719 (http wrapper silently ignores long Location headers).
Fixed bug #80838 (HTTP wrapper waits for HTTP 1 response after HTTP
101).
Zip:
Fixed bug #80825 (ZipArchive::isCompressionMethodSupported does not
exist).
Sponsored by: Bounce Experts
3de8c62 |
Saturday, 6 Mar 2021
|
01:34 tz
lang/php80: Update from 8.0.2 to 8.0.3
Changelog:
Core:
Fixed #80706 (mail(): Headers after Bcc headers may be ignored).
DOM:
Fixed bug #80600 (DOMChildNode::remove() doesn't work on CharacterData
nodes).
Gettext:
Fixed bug #53251 (bindtextdomain with null dir doesn't return old
value).
MySQLnd:
Fixed bug #78680 (mysqlnd's mysql_clear_password does not transmit
null-terminated password).
Fixed bug #80713 (SegFault when disabling ATTR_EMULATE_PREPARES and
MySQL 8.0).
MySQLi:
Fixed bug #74779 (x() and y() truncating floats to integers).
Opcache:
Fixed bug #80634 (write_property handler of internal classes is skipped
on preloaded JITted code).
Fixed bug #80682 (opcache doesn't honour pcre.jit option).
Fixed bug #80742 (Opcache JIT makes some boolean logic unexpectedly be
true).
Fixed bug #80745 (JIT produces Assert failure and UNKNOWN:0 var_dumps in
code involving bitshifts).
OpenSSL:
Fixed bug #80747 (Providing RSA key size < 512 generates key that crash
PHP).
Phar:
Fixed bug #75850 (Unclear error message wrt. __halt_compiler() w/o
semicolon) (cmb)
Fixed bug #70091 (Phar does not mark UTF-8 filenames in ZIP archives).
Fixed bug #53467 (Phar cannot compress large archives).
Socket:
Fixed bug #80723 (Different sockets compare as equal (regression in
8.0)).
SPL:
Fixed bug#80719 (Iterating after failed ArrayObject::setIteratorClass()
causes Segmentation fault).
Standard:
Fixed bug #80654 (file_get_contents() maxlen fails above (2**31)-1
bytes).
Fixed bug #80718 (ext/standard/dl.c fallback code path with syntax
error).
Sponsored by: PHP Upgrade Service
|
Friday, 5 Feb 2021
|
22:54 tz
lang/php80: Update from 8.0.1 to 8.0.2
Core:
Fixed bug #80523 (bogus parse error on >4GB source code).
Fixed bug #80384 (filter buffers entire read until file closed).
Fixed bug #80596 (Invalid union type TypeError in anonymous classes).
Fixed bug #80617 (GCC throws warning about type narrowing in
ZEND_TYPE_INIT_CODE).
BCMath:
Fixed bug #80545 (bcadd('a', 'a') doesn't throw an exception).
Curl:
Fixed bug #80595 (Resetting POSTFIELDS to empty array breaks request).
Date:
Fixed bug #80376 (last day of the month causes runway cpu usage).
DOM:
Fixed bug #80537 (Wrong parameter type in
DOMElement::removeAttributeNode stub).
Filter:
Fixed bug #80584 (0x and 0X are considered valid hex numbers by
filter_var()).
GMP:
Fixed bug #80560 (Strings containing only a base prefix return 0
object).
Intl:
Fixed bug #80644 (Missing resource causes subsequent get() calls to
fail).
MySQLi:
Fixed bug #67983 (mysqlnd with MYSQLI_OPT_INT_AND_FLOAT_NATIVE fails to
interpret bit columns).
Fixed bug #64638 (Fetching resultsets from stored procedure with cursor
fails).
Fixed bug #72862 (segfault using prepared statements on stored
procedures that use a cursor).
Fixed bug #77935 (Crash in mysqlnd_fetch_stmt_row_cursor when calling an
SP with a cursor).
ODBC:
Fixed bug #80592 (all floats are the same in ODBC parameters).
Opcache:
Fixed bug #80422 (php_opcache.dll crashes when using Apache 2.4 with
JIT).
PDO_Firebird:
Fixed bug #80521 (Parameters with underscores no longer recognized).
Phar:
Fixed bug #76929 (zip-based phar does not respect phar.require_hash).
Fixed bug #77565 (Incorrect locator detection in ZIP-based phars).
Fixed bug #69279 (Compressed ZIP Phar extractTo() creates garbage
files).
Phpdbg:
Reverted fix for bug #76813 (Access violation near NULL on source
operand).
SOAP:
Fixed bug #80672 (Null Dereference in SoapClient). (CVE-2021-21702)
Sponsored by: PHP Update Service
|
Saturday, 9 Jan 2021
|
23:53 tz
lang/php80: Update from 8.0.0 to 8.0.1
Core:
Fixed bug #80345 (PHPIZE configuration has outdated
PHP_RELEASE_VERSION).
Fixed bug #72964 (White space not unfolded for CC/Bcc headers).
Fixed bug #80391 (Iterable not covariant to mixed).
Fixed bug #80393 (Build of PHP extension fails due to configuration gap
with libtool).
Fixed bug #77069 (stream filter loses final block of data).
Fileinfo:
Fixed bug #77961 (finfo_open crafted magic parsing SIGABRT).
FPM:
Fixed bug #69625 (FPM returns 200 status on request without
SCRIPT_FILENAME env).
IMAP:
Fixed bug #80438 (imap_msgno() incorrectly warns and return false on
valid UIDs in PHP 8).
Fix a regression with valid UIDs in imap_savebody().
Make warnings for invalid message numbers/UIDs between functions
consistent.
Intl:
Fixed bug #80425 (MessageFormatAdapter::getArgTypeList redefined).
Opcache:
Fixed bug #80404 (Incorrect range inference result when division results
in float).
Fixed bug #80377 (Opcache misses executor_globals).
Fixed bug #80433 (Unable to disable the use of the AVX command when
using JIT).
Fixed bug #80447 (Strange out of memory error when running with JIT).
Fixed bug #80480 (Segmentation fault with JIT enabled).
Fixed bug #80506 (Immediate SIGSEGV upon ini_set("opcache.jit_debug",
1)).
OpenSSL:
Fixed bug #80368 (OpenSSL extension fails to build against LibreSSL due
to lack of OCB support).
PDO MySQL:
Fixed bug #80458 (PDOStatement::fetchAll() throws for upsert queries).
Fixed bug #63185 (nextRowset() ignores MySQL errors with native prepared
statements).
Fixed bug #78152 (PDO::exec() - Bad error handling with multiple
commands).
Fixed bug #66878 (Multiple rowsets not returned unless PDO statement
object is unset()).
Fixed bug #70066 (Unexpected "Cannot execute queries while other
unbuffered queries").
Fixed bug #71145 (Multiple statements in init command triggers
unbuffered query error).
Fixed bug #76815 (PDOStatement cannot be GCed/closeCursor-ed when a
PROCEDURE resultset SIGNAL).
Fixed bug #79872 (Can't execute query with pending result sets).
Fixed bug #79131 (PDO does not throw an exception when parameter values
are missing).
Fixed bug #72368 (PdoStatement->execute() fails but does not throw an
exception).
Fixed bug #62889 (LOAD DATA INFILE broken).
Fixed bug #67004 (Executing PDOStatement::fetch() more than once
prevents releasing resultset).
Fixed bug #79132 (PDO re-uses parameter values from earlier calls to
execute()).
Phar:
Fixed bug #73809 (Phar Zip parse crash - mmap fail).
Fixed bug #75102 (`PharData` says invalid checksum for valid tar).
Fixed bug #77322 (PharData::addEmptyDir('/') Possible integer overflow).
Phpdbg:
Fixed bug #76813 (Access violation near NULL on source operand).
SPL:
Fixed bug #62004 (SplFileObject: fgets after seek returns wrong line).
Standard:
Fixed bug #80366 (Return Value of zend_fstat() not Checked).
Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid
userinfo). (CVE-2020-7071)
Tidy:
Fixed bug #77594 (ob_tidyhandler is never reset).
Tokenizer:
Fixed bug #80462 (Nullsafe operator tokenize with TOKEN_PARSE flag
fails).
XML:
XmlParser opaque object renamed to XMLParser for consistency with other
XML objects.
Zlib:
Fixed bug #48725 (Support for flushing in zlib stream).
PR: 252508
Submitted by: <michael.glaus@hostpoint.ch>, samm
Differential Revision: D28065
|
Thursday, 3 Dec 2020
|
17:20 tz
lang/phph80: Upgrade from RC 5 to 8.0.0
PHP 8.0 comes with numerous improvements and new features such as:
Union Types
Named Arguments
Match Expressions
Attributes
Constructor Property Promotion
Nullsafe Operator
Weak Maps
Just In Time Compilation
And much much more...
Take a look at the PHP 8.0 Announcement Addendum for more information:
https://www.php.net/releases/8.0/
Sponsored by: PHP Update Service
|
Sunday, 22 Nov 2020
|
23:39 tz
lang/php80: Upgrade from RC3 to RC5
Changelogs:
19 Nov 2020, PHP 8.0.0RC5
- Core:
. Fixed bug #74558 (Can't rebind closure returned by Closure::fromCallable()).
(cmb)
- Reflection:
. Fixed bug #80370 (getAttributes segfault on dynamic properties). (Benjamin
Eberlei)
12 Nov 2020, PHP 8.0.0RC4
- Core:
. Fixed bug #80334 (assert() vs named parameters - confusing error). (Nikita)
- FFI:
. Fixed bug #79177 (FFI doesn't handle well PHP exceptions within callback).
(cmb, Dmitry, Nikita)
- ODBC:
. Fixed bug #44618 (Fetching may rely on uninitialized data). (cmb)
- Opcache:
. Fixed run-time binding of preloaded dynamically declared function. (Dmitry)
- Reflection:
. Fixed bug #80299 (ReflectionFunction->invokeArgs confused in arguments).
(Nikita)
- SNMP:
. Fixed bug #70461 (disable md5 code when it is not supported in net-snmp).
(Alexander Bergmann, cmb)
- Standard:
. Don't force rebuild of symbol table, when populating $http_response_header
variable by the HTTP stream wrapper. (Dmitry)
. Fixed bug #80290 (Double free when ASSERT_CALLBACK is used with a dynamic
message). (Nikita)
. Fixed bug #80266 (parse_url silently drops port number 0). (cmb, Nikita)
- Tokenizer:
. Fixed bug #80328 (PhpToken::getAll() confusing name). (Nikita)
Sponsored by: PHP Update Service
|
Sunday, 1 Nov 2020
|
22:54 tz
lang/php80: Update from RC2 to RC3
Changelog:
- Core:
. Fixed bug #8055 (Abstract trait methods returning "self" cannot be
fulfilled by traits). (Nikita)
. Fixed bug #80280 (ADD_EXTENSION_DEP() fails for ext/standard and ext/date).
(cmb)
. Fixed bug #80258 (Windows Deduplication Enabled, randon permission errors).
(cmb)
- COM:
. Fixed bug #62474 (com_event_sink crashes on certain arguments). (cmb)
- DOM:
. Fixed bug #80268 (loadHTML() truncates at NUL bytes). (cmb)
- IMAP:
. Fixed bug #76618 (segfault on imap_reopen). (girgias)
. Fixed bug #80239 (imap_rfc822_write_address() leaks memory). (cmb)
. Fixed minor regression caused by fixing bug #80220. (cmb)
. Fixed bug #80242 (imap_mail_compose() segfaults for multipart with rfc822).
(cmb)
- Opcache:
. Fixed bug #80255 (Opcache bug (bad condition result) in 8.0.0rc1). (Nikita)
- Standard:
. Fixed bug #80256 (file_get_contents strip first line with chunked encoding
redirect). (Nikita)
Sponsored by: PHP Update Service
|
Wednesday, 21 Oct 2020
|
22:58 tz
Welcome PHP 8.0 RC 2 to the ports tree
There are many greater changes including:
- json is now part of core
- xmlrpc is removed
- More than 150 backward incompatible changes
Have a look at: https://github.com/php/php-src/blob/php-8.0.0RC2/UPGRADING
Reviewed by: ale, mfechner, Pascal Christen
Sponsored by: PHP Update Service
Differential Revision: https://reviews.freebsd.org/D26848
|
Number of commits found: 34 |