| patch |
summary |
view |
raw |
| 001-libtool_fixes.patch |
TSRM/configure.in | 3 ---
configure.in | 3 ---
2 files changed, 6 deletions(-)
|
view
|
download
|
| 002-static_openssl.patch |
acinclude.m4 | 4 +---
1 file changed, 1 insertion(+), 3 deletions(-)
|
view
|
download
|
| 004-ldap_fix.patch |
ext/ldap/ldap.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
|
view
|
download
|
| 006-debian_quirks.patch |
configure.in | 10 +++----
ext/ext_skel | 2 -
ext/session/session.c | 4 +--
php.ini-dist | 65 ++++++-------------------------------------------
php.ini-recommended | 65 ++++++-------------------------------------------
sapi/caudium/config.m4 | 8 +++---
sapi/cli/php.1.in | 11 ++++----
scripts/Makefile.frag | 4 +--
scripts/php-config.in | 4 +--
scripts/phpize.in | 4 +--
10 files changed, 43 insertions(+), 134 deletions(-)
|
view
|
download
|
| 013-force_getaddrinfo.patch |
configure.in | 86 +++++++++++++++++++++++++++++------------------------------
1 file changed, 43 insertions(+), 43 deletions(-)
|
view
|
download
|
| 017-pread_pwrite_disable.patch |
acinclude.m4 | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
|
view
|
download
|
| 019-z_off_t_as_long.patch |
ext/zlib/zconf.h | 326 ++++++++++++++
ext/zlib/zlib.h | 1200 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
2 files changed, 1526 insertions(+)
|
view
|
download
|
| 029-php.ini_paranoid.patch |
php.ini-paranoid | 1504 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 1504 insertions(+)
|
view
|
download
|
| 033-we_WANT_libtool.patch |
build/build2.mk | 9 +++++++++
1 file changed, 9 insertions(+)
|
view
|
download
|
| 034-apache2_umask_fix.patch |
sapi/apache2handler/sapi_apache2.c | 18 ++++++++++++++++++
1 file changed, 18 insertions(+)
|
view
|
download
|
| 036-fd_setsize_fix.patch |
ext/sockets/sockets.c | 1 +
ext/standard/streamsfuncs.c | 3 +++
2 files changed, 4 insertions(+)
|
view
|
download
|
| 043-recode_size_t.patch |
ext/recode/recode.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
|
view
|
download
|
| 044-strtod_arm_fix.patch |
Zend/zend_strtod.c | 30 ++++++++++++++++++++----------
1 file changed, 20 insertions(+), 10 deletions(-)
|
view
|
download
|
| 045-exif_nesting_level.patch |
ext/exif/exif.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
|
view
|
download
|
| 047-zts_with_dl.patch |
ext/standard/dl.c | 5 -----
1 file changed, 5 deletions(-)
|
view
|
download
|
| 052-phpinfo_no_configure.patch |
ext/standard/info.c | 2 +-
ext/standard/tests/general_functions/phpinfo.phpt | 1 -
2 files changed, 1 insertion(+), 2 deletions(-)
|
view
|
download
|
| 053-extension_api.patch |
configure.in | 8 +++++++-
scripts/php-config.in | 4 ++++
2 files changed, 11 insertions(+), 1 deletion(-)
|
view
|
download
|
| 056-mime_magic_liberal.patch |
ext/mime_magic/mime_magic.c | 13 +++++++++++--
1 file changed, 11 insertions(+), 2 deletions(-)
|
view
|
download
|
| 057-no_apache_installed.patch |
sapi/apache/config.m4 | 10 +++++-----
sapi/apache2filter/config.m4 | 14 +++++++-------
sapi/apache2handler/config.m4 | 14 +++++++-------
sapi/apache_hooks/config.m4 | 10 +++++-----
4 files changed, 24 insertions(+), 24 deletions(-)
|
view
|
download
|
| 100-recode_is_shared.patch |
ext/recode/config9.m4 | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
|
view
|
download
|
| 101-sqlite_is_shared.patch |
ext/sqlite/config.m4 | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
|
view
|
download
|
| 107-reflection_is_ext.patch |
ext/reflection/config.m4 | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
|
view
|
download
|
| 108-64_bit_datetime.patch |
ext/standard/datetime.c | 3 +++
1 file changed, 3 insertions(+)
|
view
|
download
|
| 112-proc_open.patch |
ext/standard/proc_open.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
|
view
|
download
|
| 113-php.ini_securitynotes.patch |
php.ini-dist | 17 +++++++++++++++++
1 file changed, 17 insertions(+)
|
view
|
download
|
| disable_dl_by_default.patch |
php.ini-dist | 3 ++-
php.ini-recommended | 4 +++-
2 files changed, 5 insertions(+), 2 deletions(-)
|
view
|
download
|
| libdb_is_-ldb |
ext/dba/config.m4 | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
|
view
|
download
|
| suhosin.patch |
TSRM/TSRM.h | 8
TSRM/tsrm_virtual_cwd.c | 172 ++++++++++++++++
TSRM/tsrm_virtual_cwd.h | 16 +
Zend/Makefile.am | 2
Zend/Zend.dsp | 4
Zend/ZendTS.dsp | 4
Zend/zend.c | 83 +++++++-
Zend/zend.h | 10
Zend/zend_alloc.c | 137 ++++++++++++-
Zend/zend_alloc.h | 3
Zend/zend_canary.c | 64 ++++++
Zend/zend_compile.c | 5
Zend/zend_compile.h | 6
Zend/zend_constants.c | 69 ++++++
Zend/zend_errors.h | 14 +
Zend/zend_hash.c | 194 ++++++++++++++++++
Zend/zend_llist.c | 182 +++++++++++++++++
configure.in | 5
ext/standard/basic_functions.c | 4
ext/standard/dl.c | 13 +
ext/standard/file.c | 2
ext/standard/file.h | 2
ext/standard/info.c | 25 ++
ext/standard/syslog.c | 2
main/fopen_wrappers.c | 34 +++
main/main.c | 25 ++
main/php.h | 11 +
main/php_logos.c | 7
main/snprintf.c | 4
main/spprintf.c | 4
main/suhosin_globals.h | 61 +++++
main/suhosin_logo.h | 178 +++++++++++++++++
main/suhosin_patch.c | 380 +++++++++++++++++++++++++++++++++++++
main/suhosin_patch.h | 40 +++
main/suhosin_patch.m4 | 8
sapi/apache/mod_php5.c | 4
sapi/apache2filter/sapi_apache2.c | 4
sapi/apache2handler/sapi_apache2.c | 4
sapi/cgi/cgi_main.c | 8
sapi/cli/php_cli.c | 10
win32/build/config.w32 | 4
41 files changed, 1789 insertions(+), 23 deletions(-)
|
view
|
download
|
| fix_broken_upstream_tests.patch |
ext/soap/tests/server009.phpt | 4 ++++
ext/standard/tests/general_functions/phpinfo.phpt | 3 +++
ext/standard/tests/strings/moneyformat.phpt | 2 ++
tests/basic/bug20539.phpt | 1 +
4 files changed, 10 insertions(+)
|
view
|
download
|
| use_embedded_timezonedb.patch |
ext/date/lib/parse_tz.c | 219 ++++++++++++++++++++++++++++++++++++++++++++++++
ext/date/lib/timelib.h | 4
ext/date/lib/timelib.m4 | 14 +++
ext/date/php_date.c | 5 +
4 files changed, 242 insertions(+)
|
view
|
download
|
| manpage_spelling.patch |
sapi/cli/php.1.in | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
|
view
|
download
|
| force_libmysqlclient_r.patch |
ext/mysql/config.m4 | 2 +-
ext/mysqli/config.m4 | 2 +-
ext/pdo_mysql/config.m4 | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
|
view
|
download
|
| CVE-2008-2829.patch |
ext/imap/php_imap.c | 37 +++++++++++++++++++++++++++++++++----
1 file changed, 33 insertions(+), 4 deletions(-)
|
view
|
download
|
| libedit_is_editline.patch |
ext/readline/config.m4 | 2 +-
ext/readline/readline.c | 4 +++-
2 files changed, 4 insertions(+), 2 deletions(-)
|
view
|
download
|
| bad_whatis_entries.patch |
sapi/cli/php.1.in | 1 -
scripts/man1/php-config.1.in | 1 -
scripts/man1/phpize.1.in | 3 +--
3 files changed, 1 insertion(+), 4 deletions(-)
|
view
|
download
|
| gentoo/freetds-compat.patch |
ext/mssql/config.m4 | 12 ++++++------
ext/pdo_dblib/config.m4 | 12 ++++++------
2 files changed, 12 insertions(+), 12 deletions(-)
|
view
|
download
|
| snmp_leaks.patch |
ext/snmp/snmp.c | 12 ++++++++++--
1 file changed, 10 insertions(+), 2 deletions(-)
|
view
|
download
|
| CVE-2008-3658.patch |
ext/gd/gd.c | 16 ++++++++++++++++
1 file changed, 16 insertions(+)
|
view
|
download
|
| CVE-2008-3659.patch |
Zend/zend_operators.h | 3 +++
1 file changed, 3 insertions(+)
|
view
|
download
|
| CVE-2008-3660.patch |
sapi/cgi/cgi_main.c | 45 ++++++++++++++++++++++++++++++++++++---------
1 file changed, 36 insertions(+), 9 deletions(-)
|
view
|
download
|
| BG-initializing-fix.patch |
ext/standard/basic_functions.c | 4 ++++
1 file changed, 4 insertions(+)
|
view
|
download
|
| CVE-2008-5557.patch |
ext/mbstring/libmbfl/filters/mbfilter_htmlent.c | 17 +++++++++--------
1 file changed, 9 insertions(+), 8 deletions(-)
|
view
|
download
|
| pdo-fetchobject-prototype-error.patch |
ext/pdo/pdo_stmt.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
|
view
|
download
|
| zend_object_handlers-invalid-write.patch |
Zend/zend_object_handlers.c | 8 ++++++++
1 file changed, 8 insertions(+)
|
view
|
download
|
| dba-inifile-truncation.patch |
ext/dba/libinifile/inifile.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
|
view
|
download
|
| gentoo/010_ticks-zts-crashes.patch |
main/main.c | 4 +++-
main/php_ticks.c | 7 ++++++-
main/php_ticks.h | 3 ++-
3 files changed, 11 insertions(+), 3 deletions(-)
|
view
|
download
|
| gentoo/019_new-memory-corruption.patch |
Zend/tests/bug45178.phpt | 29 +++++++++++++++++++++++++++++
Zend/zend_compile.c | 2 ++
Zend/zend_compile.h | 4 +++-
Zend/zend_language_parser.y | 4 ++--
Zend/zend_vm_def.h | 8 +++++++-
Zend/zend_vm_execute.h | 24 ++++++++++++++++++++++++
6 files changed, 67 insertions(+), 4 deletions(-)
|
view
|
download
|
| gentoo/009_array-function-crashes.patch |
ext/standard/array.c | 20 ++++++++++++++++
ext/standard/tests/array/bug45312.phpt | 40 +++++++++++++++++++++++++++++++++
2 files changed, 60 insertions(+)
|
view
|
download
|
| gentoo/015_CVE-2008-2665-wrapper-safemode-bypass.patch |
main/safe_mode.c | 11 +----------
1 file changed, 1 insertion(+), 10 deletions(-)
|
view
|
download
|
| gentoo/017_xmlrpc-invalid-callback-crash.patch |
ext/xmlrpc/tests/bug45555.phpt | 20
ext/xmlrpc/xmlrpc-epi-php.c | 921 ++++++++++++++++++++---------------------
2 files changed, 475 insertions(+), 466 deletions(-)
|
view
|
download
|
| gentoo/007_dom-setAttributeNode-crash.patch |
ext/dom/element.c | 10 +++++++++-
1 file changed, 9 insertions(+), 1 deletion(-)
|
view
|
download
|
| gentoo/006_PDORow-crash.patch |
ext/pdo/pdo_stmt.c | 12 +++++++-----
1 file changed, 7 insertions(+), 5 deletions(-)
|
view
|
download
|
| gentoo/005_stream_context_set_params-crash.patch |
ext/standard/streamsfuncs.c | 10 +++++++---
1 file changed, 7 insertions(+), 3 deletions(-)
|
view
|
download
|
| CVE-2008-5658.patch |
ext/zip/php_zip.c | 279 +++++++++++++++++++++++++++++++++++++++++++++++++++---
1 file changed, 265 insertions(+), 14 deletions(-)
|
view
|
download
|
| CVE-2008-5814.patch |
ext/standard/head.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
|
view
|
download
|
| CVE-2009-0754.patch |
ext/mbstring/mbstring.c | 11 ++++++++---
1 file changed, 8 insertions(+), 3 deletions(-)
|
view
|
download
|
| CVE-2009-1271.patch |
ext/json/JSON_parser.c | 8 ++------
ext/json/tests/001.phpt | 2 ++
2 files changed, 4 insertions(+), 6 deletions(-)
|
view
|
download
|
| CVE-2009-2687.patch |
ext/exif/exif.c | 4 ++++
1 file changed, 4 insertions(+)
|
view
|
download
|
| CVE-2009-2626.patch |
Zend/zend_ini.c | 7 ++++++-
main/main.c | 3 +--
tests/func/null-new_val.phpt | 10 ++++++++++
3 files changed, 17 insertions(+), 3 deletions(-)
|
view
|
download
|
| CVE-2009-3292.patch |
ext/exif/exif.c | 18 +++++++++++++++---
1 file changed, 15 insertions(+), 3 deletions(-)
|
view
|
download
|
| CVE-2009-3291.patch |
ext/openssl/openssl.c | 14 +++++++++-----
1 file changed, 9 insertions(+), 5 deletions(-)
|
view
|
download
|
| max_file_uploads.patch |
main/main.c | 1 +
main/rfc1867.c | 6 ++++++
php.ini-dist | 3 +++
php.ini-recommended | 3 +++
4 files changed, 13 insertions(+)
|
view
|
download
|
| curl_read-overflow.patch |
ext/curl/interface.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
|
view
|
download
|
| filter-valid-email-characters.patch |
ext/filter/logical_filters.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
|
view
|
download
|
| odbc-64bits-len.patch |
ext/odbc/php_odbc_includes.h | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
|
view
|
download
|
| sybase-alias.patch |
ext/mssql/php_mssql.c | 32 ++++++++++++++++++++++++++++++++
1 file changed, 32 insertions(+)
|
view
|
download
|
| CVE-2009-4142.patch |
ext/standard/html.c | 260 -
ext/standard/tests/strings/bug49785.phpt | 4114 +++++++++++++++++++++++
ext/standard/tests/strings/htmlentities-utf.phpt | 46
3 files changed, 4286 insertions(+), 134 deletions(-)
|
view
|
download
|
| CVE-2009-4143.patch |
ext/session/session.c | 10 ++++++++--
1 file changed, 8 insertions(+), 2 deletions(-)
|
view
|
download
|
| CVE-2010-0397.patch |
ext/xmlrpc/tests/bug51288.phpt | 14 ++++++++++++++
ext/xmlrpc/xmlrpc-epi-php.c | 15 +++++++++++----
2 files changed, 25 insertions(+), 4 deletions(-)
|
view
|
download
|
| CVE-2010-1917.patch |
ext/standard/file.c | 4 ++++
1 file changed, 4 insertions(+)
|
view
|
download
|
| CVE-2010-2225.patch |
ext/spl/spl_observer.c | 38 ++++++++++++-----
ext/spl/tests/SplObjectStorage_unserialize_bad.phpt | 24 ++++++++++
ext/spl/tests/SplObjectStorage_unserialize_nested.phpt | 33 ++++++++++++++
3 files changed, 84 insertions(+), 11 deletions(-)
|
view
|
download
|
| MOPS-60.patch |
ext/session/session.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
|
view
|
download
|
| php-5.2-CVE-2010-1128.patch |
ext/standard/lcg.c | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
|
view
|
download
|
| php-5.2-CVE-2010-3709.patch |
ext/zip/php_zip.c | 3 +++
1 file changed, 3 insertions(+)
|
view
|
download
|
| php-5.2-CVE-2010-3710.patch |
ext/filter/logical_filters.c | 5 +++++
ext/filter/tests/bug52929.phpt | 18 ++++++++++++++++++
2 files changed, 23 insertions(+)
|
view
|
download
|
| php-5.2-CVE-2010-3870.patch |
ext/xml/tests/bug49687.phpt | 24 +++++++
ext/xml/xml.c | 140 ++++++++++++++++++++++++++++++++++----------
2 files changed, 134 insertions(+), 30 deletions(-)
|
view
|
download
|
| php-5.2-CVE-2010-4150.patch |
ext/imap/php_imap.c | 2 ++
1 file changed, 2 insertions(+)
|
view
|
download
|
| php-5.2-CWE-170.patch |
ext/zip/php_zip.c | 3 +++
1 file changed, 3 insertions(+)
|
view
|
download
|
| CVE-2010-4645-test.patch |
Zend/tests/bug53632.phpt | 10 ++++++++++
1 file changed, 10 insertions(+)
|
view
|
download
|
| CVE-2011-0421.patch |
ext/zip/lib/zip_name_locate.c | 4 ++++
ext/zip/tests/bug53885.phpt | 19 +++++++++++++++++++
2 files changed, 23 insertions(+)
|
view
|
download
|
| CVE-2011-1466.patch |
ext/calendar/julian.c | 26 ++++++++++++++++++++------
ext/calendar/tests/bug53574.phpt | 35 +++++++++++++++++++++++++++++++++++
2 files changed, 55 insertions(+), 6 deletions(-)
|
view
|
download
|
| CVE-2011-0708.patch |
ext/exif/exif.c | 17 +++++++++++++++--
ext/exif/tests/bug54002.phpt | 20 ++++++++++++++++++++
2 files changed, 35 insertions(+), 2 deletions(-)
|
view
|
download
|
| CVE-2011-1471.patch |
ext/zip/zip_stream.c | 10 ++++++----
1 file changed, 6 insertions(+), 4 deletions(-)
|
view
|
download
|
| CVE-2011-2202.patch |
main/rfc1867.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
|
view
|
download
|
| CVE-2010-2531.patch |
ext/standard/php_var.h | 2
ext/standard/tests/array/var_export.phpt | 2
ext/standard/var.c | 135 ++++++++++++++++++++++---------
3 files changed, 101 insertions(+), 38 deletions(-)
|
view
|
download
|
| CVE-2011-4566.patch |
ext/exif/exif.c | 4 ++--
ext/exif/tests/bug60150.phpt | 21 +++++++++++++++++++++
2 files changed, 23 insertions(+), 2 deletions(-)
|
view
|
download
|
| CVE-2011-4885.patch |
main/main.c | 1 +
main/php_globals.h | 2 ++
main/php_variables.c | 20 ++++++++++++++++----
php.ini-dist | 1 +
php.ini-paranoid | 1 +
php.ini-recommended | 1 +
6 files changed, 22 insertions(+), 4 deletions(-)
|
view
|
download
|
| CVE-2012-0057.patch |
ext/xsl/php_xsl.c | 17 ++++++
ext/xsl/php_xsl.h | 10 +++
ext/xsl/tests/bug54446.phpt | 95 +++++++++++++++++++++++++++++++++++
ext/xsl/tests/bug54446_with_ini.phpt | 95 +++++++++++++++++++++++++++++++++++
ext/xsl/xsltprocessor.c | 51 ++++++++++++++++++
5 files changed, 266 insertions(+), 2 deletions(-)
|
view
|
download
|
| memory_leaks.patch |
main/php_variables.c | 16 ++++++++++++++--
1 file changed, 14 insertions(+), 2 deletions(-)
|
view
|
download
|