Modified: web/php/trunk/ChangeLog-5.php =================================================================== --- web/php/trunk/ChangeLog-5.php 2010-07-22 03:52:03 UTC (rev 301458) +++ web/php/trunk/ChangeLog-5.php 2010-07-22 09:08:37 UTC (rev 301459) @@ -12,7 +12,272 @@

PHP 5 ChangeLog

+ +

Version 5.3.3

+22-July-2010 +

Upgraded bundled PCRE to version 8.02. (Ilia)
Added support for JSON_NUMERIC_CHECK option in json_encode() that converts numeric strings to integers. (Ilia)
Added stream_set_read_buffer, allows to set the buffer for read operation. (Pierre)
Added stream filter support to mcrypt extension (ported from mcrypt_filter). (Stas)
Added full_special_chars filter to ext/filter. (Rasmus)
Added backlog socket context option for stream_socket_server(). (Mike)
Added fifth parameter to openssl_encrypt()/openssl_decrypt() (string $iv) to use non-NULL IV.
Added openssl_cipher_iv_length(). (Sara)
Added FastCGI Process Manager (FPM) SAPI. (Tony)
Added recent Windows versions to php_uname and fix undefined windows version support. (Pierre)
Added Berkeley DB 5 support to the DBA extension. (Johannes, Chris Jones)
Added support for copy to/from array/file for pdo_pgsql extension. (Denis Gasparin, Ilia)
Added inTransaction() method to PDO, with specialized support for Postgres. (Ilia, Denis Gasparin)
Changed namespaced classes so that the ctor can only be named __construct now. (Stas)
Reset error state in PDO::beginTransaction() reset error state. (Ilia)
Implemented FR (SQLite3::busyTimeout not existing). (Mark)
Implemented FR (Adding udate to imap_fetch_overview results). (Charles_Duffy at dell dot com )
Rewrote var_export() to use smart_str rather than output buffering, prevents data disclosure if a fatal error occurs (CVE-2010-2531). (Scott)
Fixed possible buffer overflows in mysqlnd_list_fields, mysqlnd_change_user. (Andrey)
Fixed possible buffer overflows when handling error packets in mysqlnd. Reported by Stefan Esser. (Andrey)
Fixed very rare memory leak in mysqlnd, when binding thousands of columns. (Andrey)
Fixed a crash when calling an inexistent method of a class that inherits PDOStatement if instantiated directly instead of doing by the PDO methods. (Felipe)
Fixed memory leak on error in mcrypt_create_iv on Windows. (Pierre)
Fixed a possible crash because of recursive GC invocation. (Dmitry)
Fixed a possible resource destruction issues in shm_put_var(). Reported by Stefan Esser. (Dmitry)
Fixed a possible information leak because of interruption of XOR operator. Reported by Stefan Esser. (Dmitry)
Fixed a possible memory corruption because of unexpected call-time pass by refernce and following memory clobbering through callbacks.
Fixed a possible memory corruption in ArrayObject::uasort(). Reported by Stefan Esser. (Dmitry)
Fixed a possible memory corruption in parse_str(). Reported by Stefan Esser. (Dmitry)
Fixed a possible memory corruption in pack(). Reported by Stefan Esser. (Dmitry)
Fixed a possible memory corruption in substr_replace(). Reported by Stefan Esser. (Dmitry)
Fixed a possible memory corruption in addcslashes(). Reported by Stefan Esser. (Dmitry)
Fixed a possible stack exhaustion inside fnmatch(). Reported by Stefan Esser. (Ilia)
Fixed a possible dechunking filter buffer overflow. Reported by Stefan Esser. (Pierre)
Fixed a possible arbitrary memory access inside sqlite extension. Reported by Mateusz Kocielski. (Ilia)
Fixed string format validation inside phar extension. Reported by Stefan Esser. (Ilia)
Fixed handling of session variable serialization on certain prefix characters. Reported by Stefan Esser. (Ilia)
Fixed a NULL pointer dereference when processing invalid XML-RPC requests (Fixes CVE-2010-0397, bug #51288). (Raphael Geissert)
Fixed 64-bit integer overflow in mhash_keygen_s2k(). (Clément LECIGNE, Stas)
Fixed SplObjectStorage unserialization problems (CVE-2010-2225). (Stas)
Fixed the mail.log ini setting when no filename was given. (Johannes)
(Segmentation fault when using mail() on a rhel 4.x (only 64 bit)). (Adam)
(json_decode() shows no errors on invalid UTF-8). (Scott)
(hash_copy() does not copy the HMAC key, causes wrong results and PHP crashes). (Felipe)
(Crash when an Exception occured in iterator_to_array). (Johannes)
(converting closure to array yields empty array). (Felipe)
(Reflectionfunction reports invalid number of arguments for function aliases). (Felipe)
(custom request header variables with numbers are removed). (Sriram Natarajan)
(Invalid E_STRICT redefined constructor error). (Felipe)
(Constants are parsed into the ini file for section names). (Felipe)
(mysqli_result::fetch_all returns null, not an empty array). (Andrey)
(dns_get_record() garbage in 'ipv6' field on Windows). (Pierre)
(character_set_client & character_set_connection reset after mysqli_change_user()). (Andrey)
(GD doesn't recognize latest libJPEG versions). (php at group dot apple dot com, Pierre)
(Memory leak when writing on uninitialized variable returned from function). (Dmitry)
(Memory leak when passing a closure to method_exists()). (Felipe)
(ReflectionClass fails on Closure class). (Felipe)
(handling of case sensitivity of old-style constructors changed in 5.3+). (Felipe)
(Concurrent builds fail in install-programs). (seanius at debian dot org, Kalle)
(make lcov doesn't support TESTS variable anymore). (Patrick)
(open_basedir restrictions mismatch on vacuum command). (Ilia)
(Memory allocation problems after using variable variables). (Dmitry)
(spl_autoload and *nix support with namespace). (Felipe)
(AIX: Several files are out of ANSI spec). (Kalle, coreystup at gmail dot com)
(ReflectionParameter::getDefaultValue() memory leaks with constant array). (Felipe)
(ReflectionParameter fails if default value is an array with an access to self::). (Felipe)
(Parse error in parse_ini_file() function when empy value followed by no newline). (Felipe)
(checkdnsrr does not support types other than MX). (Pierre)
(Bad warning when register_shutdown_function called with wrong num of parameters). (Felipe)
(Segfault with strange __destruct() for static class variables). (Dmitry)
(constant() aborts execution when fail to check undefined constant). (Felipe)
(Fileinfo __construct or open does not work with NULL). (Pierre)
(xmlrpc_get_type() returns true on invalid dates). (Mike)
(Content-length header is limited to 32bit integer with Apache2 on Windows). (Pierre)
(mark DOMNodeList and DOMNamedNodeMap as Traversable). (David Zuelke)
(Test mysql_mysqlnd_read_timeout_long must fail on MySQL4). (Andrey)
(Unsafe operations in free_storage of SPL iterators, causes crash during shutdown). (Etienne)
(Phar::setStub looks for case-sensitive __HALT_COMPILER()). (Ilia)
(ini per dir crashes when invalid document root are given). (Pierre)
(imagefill does not work correctly for small images). (Pierre)
(getColumnMeta causes segfault when re-executing query after calling nextRowset). (Pierrick)
Certificate file without private key (pk in another file) doesn't work. (Andrey)
(CURLOPT_FOLLOWLOCATION error message is misleading). (Pierre)
(script path not correctly evaluated). (russell dot tempero at rightnow dot com)
(Crash when calling mysqli_options()). (Felipe)
(PHP crash with wrong HTML in SimpleXML). (Felipe)
(pg_copy_to: Invalid results when using fourth parameter). (Felipe)
(pg_copy_to: WARNING: nonstandard use of \\ in a string literal). (cbandy at jbandy dot com)
(pg_copy_from does not allow schema in the tablename argument). (cbandy at jbandy dot com)
(Mysqli - zombie links). (Andrey)
(newline in end of header is shown in start of message). (Daniel Egeberg)
(JSON_ERROR_UTF8 is undefined). (Felipe)
(Bus error due to wrong alignment in mysqlnd). (Rainer Jung)
(Don't assume UINT64_C it's ever available). (reidrac at usebox dot net, Pierre)
(Uninitialized memory reference with oci_bind_array_by_name) (Oracle Corp.)
(query timeout in mssql can not be changed per query). (ejsmont dot artur at gmail dot com)
(debug_backtrace() causes segmentation fault and/or memory issues). (Dmitry)
(var_dump() invalid/slow *RECURSION* detection). (Felipe)
(Missing ifdefs / logic bug in crypt code cause compile errors). (Felipe)
(crypt() function hangs after 3rd call). (Pierre, Sriram)
(Error line reported incorrectly if error handler throws an exception). (Stas)
(DateTime::createFromFormat() fails if format string contains timezone). (Adam)
(mysqli_close / connection memory leak). (Andrey, Johannes)
(URL-Rewriter is still enabled if use_only_cookies is on). (Ilia, j dot jeising at gmail dot com)
(oci_error doesn't report last error when called two times) (Oracle Corp.)
(php_load_extension() is missing when HAVE_LIBDL is undefined). (Tony)
(Faultstring property does not exist when the faultstring is empty) (Ilia, dennis at transip dot nl)
(zlib.output_compression Overwrites Vary Header). (Adam)
(CURL_VERSION_LARGEFILE incorrectly used after libcurl version 7.10.1). (aron dot ujvari at microsec dot hu)
(Empty mysql.default_port does not default to 3306 anymore, but 0). (Adam)
(milter SAPI crash on startup). (igmar at palsenberg dot com)
(pdo_mssql is trimming value of the money column). (Ilia, alexr at oplot dot com)
(ftp_put() returns false when transfer was successful). (Ilia)
(ext/date/php_date.c fails to compile with Sun Studio). (Sriram Natarajan)
(Static calling in non-static method behaves like $this->). (Felipe)
(curl_setopt() doesn't output any errors or warnings when an invalid option is provided). (Ilia)
(imagefill() doesn't work with large images). (Pierre)
('last day' and 'first day' are handled incorrectly when parsing date strings). (Derick)
(DBA DB4 doesn't work with Berkeley DB 4.8). (Chris Jones)
(DBA DB4 uses mismatched headers and libraries). (Chris Jones)
(mysqli_ssl_set not working). (Andrey)
(filter doesn't detect int overflows with GCC 4.4). (Raphael Geissert)
(unaligned memory access in dba_fetch()). (Felipe)
(Soap headers Authorization not allowed). (Brain France, Dmitry)
(DOMNotation is not subclass of DOMNode). (Rob)
(property_exists does not work for private). (Felipe)
(in WSDL mode Soap Header handler function only being called if defined in WSDL). (mephius at gmail dot com)
(Inconsistent namespaces sent to functions registered with spl_autoload_register). (Felipe)
(removing E_WARNING from parse_url). (ralph at smashlabs dot com, Pierre)
(incorrect shebang in phar.phar). (Fedora at FamilleCollet dot com)
(DateTime::sub() allows 'relative' time modifications). (Derick)
(date_create_from_format enforces 6 digits for 'u' format character). (Derick)
(Exceptions thrown in __call / __callStatic do not include file and line in trace). (Felipe)
(Compile failure compiling ext/phar/util.lo). (Felipe)
(name clash between global and local variable). (patch by yoarvi at gmail dot com)
(fix possible memory corruption with very long names). (Pierre)
(Crash while creating an instance of Zend_Mail_Storage_Pop3). (Dmitry)
(STDOUT losing data with posix_isatty()). (Mike)
(DateInterval::format("%a") is always zero when an interval is created from an ISO string). (Derick)
(memory leaks in php_date.c if garbage collector is enabled). (Dmitry)
(FILTER_VALIDATE_EMAIL filter needs updating) (Rasmus)
(XPath namespace prefix conflict). (Rob)
(odbc_autocommit doesn't work). (Felipe)
(PDO returns null when SQLite connection fails). (Felipe)
(mysqli_ssl_set not found). (Andrey)
(Reflection doesn't seem to work properly on MySqli). (Andrey)
(PHP crashes when GC invoked on COM object). (Stas)
(DateTime::diff() mistake if start in January and interval > 28 days). (Derick)
(DateTime::diff() repeats previous sub() operation). (yoarvi@gmail.com, Derick)
(DomDocument : saveHTMLFile wrong charset). (Rob)
(__COMPILER_HALT_OFFSET__ incorrect in PHP >= 5.3). (Felipe)
(Timezone database fallback map is outdated). (Derick)
(Cyclical garbage collector memory leak). (Dmitry)
(xpath() returns FALSE for legitimate query). (Rob)
(SplFileInfo::getPathInfo should return the parent dir). (Etienne)
(iconv_mime_encode() quoted-printable scheme is broken). (Adam, patch from hiroaki dot kawai at gmail dot com).
(sscanf() does not support 64-bit values). (Mike)
(Some timezone identifiers can not be parsed). (Derick)
(stream_socket_enable_crypto() blocks and eats CPU). (vincent at optilian dot com)
(sasl support for ldap on Windows). (Pierre)
(formatOutput does not work with saveHTML). (Rob)
(getimagesize() fails to detect width/height on certain JPEGs). (Ilia)

+ + + +

Version 5.2.14

+22-July-2010 +

Reverted bug fix #49521 (PDO fetchObject sets values before calling constructor). (Felipe)
Updated timezone database to version 2010.5. (Derick)
Upgraded bundled PCRE to version 8.02. (Ilia)
Rewrote var_export() to use smart_str rather than output buffering, revents data disclosure if a fatal error occurs (CVE-2010-2531). (Scott)
Fixed a possible interruption array leak in strrchr(). Reported by Péter Veres. (CVE-2010-2484) (Felipe)
Fixed a possible interruption array leak in strchr(), strstr(), substr(), chunk_split(), strtok(), addcslashes(), str_repeat(), trim(). (Felipe)
Fixed a possible memory corruption in substr_replace() (Dmitry)
Fixed SplObjectStorage unserialization problems (CVE-2010-2225). (Stas)
Fixed a possible stack exaustion inside fnmatch(). Reporeted by Stefan Esser (Ilia)
Reset error state in PDO::beginTransaction() reset error state. (Ilia)
Fixed a NULL pointer dereference when processing invalid XML-RPC requests (Fixes CVE-2010-0397, bug #51288). (Raphael Geissert)
Fixed handling of session variable serialization on certain prefix characters. Reported by Stefan Esser (Ilia)
Fixed a possible arbitrary memory access inside sqlite extension. Reported by Mateusz Kocielski. (Ilia)
Fixed a crash when calling an inexistent method of a class that inherits PDOStatement if instantiated directly instead of doing by the PDO methods. (Felipe)
(Segmentation fault when using mail() on a rhel 4.x (only 64 bit)). (Adam)
(Crash when an Exception occured in iterator_to_array). (Johannes)
(Crash when passing the reference of the property of a non-object). (Dmitry)
(SplFileObject::fgetss() fails due to parameter that can't be set). (Felipe)
(custom request header variables with numbers are removed). (Sriram Natarajan)
(Invalid E_STRICT redefined constructor error). (Felipe)
(memory_limit above 2G). (Felipe)
(Memory leak when writing on uninitialized variable returned from function). (Dmitry)
(Concurrent builds fail in install-programs). (seanius at debian dot org, Kalle)
(make lcov doesn't support TESTS variable anymore). (Patrick)
(open_basedir restrictions mismatch on vacuum command). (Ilia, Felipe)
(AIX: Several files are out of ANSI spec). (Kalle, coreystup at gmail dot com)
(ReflectionParameter::getDefaultValue() memory leaks with constant array). (Felipe)
(ReflectionParameter fails if default value is an array with an access to self::). (Felipe)
(Segfault with strange __destruct() for static class variables). (Dmitry)
(imagefill does not work correctly for small images). (Pierre)
(getColumnMeta causes segfault when re-executing query after calling nextRowset). (Pierrick)
(CURLOPT_FOLLOWLOCATION error message is misleading). (Pierre)
(PDO PGSQL still broken against PostGreSQL <7.4). (Felipe, wdierkes at 5dollarwhitebox dot org)
(PHP crash with wrong HTML in SimpleXML). (Felipe)
(pg_copy_to: Invalid results when using fourth parameter). (Felipe)
(pg_copy_to: WARNING: nonstandard use of \\ in a string literal). (cbandy at jbandy dot com)
(pg_copy_from does not allow schema in the tablename argument). (cbandy at jbandy dot com)
(newline in end of header is shown in start of message). (Daniel Egeberg)
(query timeout in mssql can not be changed per query). (ejsmont dot artur at gmail dot com)
(debug_backtrace() causes segmentation fault and/or memory issues). (Dmitry)
(Wrong prototype for SplFileObject::fscanf()). (Etienne)
(var_dump() invalid/slow *RECURSION* detection). (Felipe)
(DateTime::createFromFormat() fails if format string contains timezone). (Adam)
(Wrongly initialized object properties). (Etienne)
(URL-Rewriter is still enabled if use_only_cookies is on). (Ilia, j dot jeising at gmail dot com)
(Faultstring property does not exist when the faultstring is empty) (Ilia, dennis at transip dot nl)
(zlib.output_compression Overwrites Vary Header). (Adam)
(imagettftext and rotated text uses wrong baseline) (cschneid at cschneid dot com, Takeshi Abe)
(milter SAPI crash on startup). (igmar at palsenberg dot com)
(pdo_mssql is trimming value of the money column). (Ilia, alexr at oplot dot com)
(FILTER_VALIDATE_URL will invalidate a hostname that includes '-'). (Adam, solar at azrael dot ws).
(ftp_put() returns false when transfer was successful). (Ilia)
(ext/date/php_date.c fails to compile with Sun Studio). (Sriram Natarajan)
(curl_setopt() doesn't output any errors or warnings when an invalid option is provided). (Ilia)
(imagefill() doesn't work with large images). (Pierre)
(DBA DB4 doesn't work with Berkeley DB 4.8). (Chris Jones)
(DBA DB4 uses mismatched headers and libraries). (Chris Jones)
(filter doesn't detect int overflows with GCC 4.4). (Raphael Geissert)
(in WSDL mode Soap Header handler function only being called if defined in WSDL). (mephius at gmail dot com)
(SoapClient should handle wsdls with some incompatiable endpoints). (Justin Dearing)
(Exceptions thrown in __call() / __callStatic() do not include file and line in trace). (Felipe)
(Firebird - new PDO() returns NULL). (Felipe)
(LimitIterator with empty SeekableIterator). (Etienne)
(FILTER_VALIDATE_EMAIL filter needs updating) (Rasmus)
(PDO returns null when SQLite connection fails). (Felipe)
(Linking fails for iconv). (Moriyosh)
(xpath() returns FALSE for legitimate query). (Rob)
(iconv_mime_encode() quoted-printable scheme is broken).
(iconv_mime_encode(), broken Q scheme). (Rasmus)
(getimagesize() fails to detect width/height on certain
(syslog() truncates messages). (Adam)

+ +

Version 5.3.2

04-March-2010