svn: /php/php-src/ branches/PHP_5_2/NEWS branches/PHP_5_2/ext/spl/SplObjectStorage_unserialize_bad.phpt
branches/PHP_5_2/ext/spl/SplObjectStorage_unserialize_nested.phpt branches/PHP_5_2/ext/spl/spl_observer.c branches/PHP_5_3/NEWS
branches/PHP_5_3/ext/spl/spl_observer.c branches/PHP_5_3/ext/spl/tests/SplObjectStorage_unserialize_bad.phpt
branches/PHP_5_3/ext/spl/tests/SplObjectStorage_unserialize_nested.phpt branches/PHP_5_3/ext/standard/php_var.h
branches/PHP_5_3/ext/standard/var_unserializer.
| From: | Stanislav Malyshev | Date: | Tue, 29 Jun 2010 00:58:31 +0000 |
| Subject: | svn: /php/php-src/ branches/PHP_5_2/NEWS branches/PHP_5_2/ext/spl/SplObjectStorage_unserialize_bad.phpt branches/PHP_5_2/ext/spl/SplObjectStorage_unserialize_nested.phpt branches/PHP_5_2/ext/spl/spl_observer.c branches/PHP_5_3/NEWS branches/PHP_5_3/ext/spl/spl_observer.c branches/PHP_5_3/ext/spl/tests/SplObjectStorage_unserialize_bad.phpt branches/PHP_5_3/ext/spl/tests/SplObjectStorage_unserialize_nested.phpt branches/PHP_5_3/ext/standard/php_var.h branches/PHP_5_3/ext/standard/var_unserializer. |
||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-62981@lists.php.net to get a copy of this message | ||
stas Tue, 29 Jun 2010 00:58:31 +0000
Revision: http://svn.php.net/viewvc?view=revision&revision=300843
Log:
fix SplObjectStorage unserialization (CVE-2010-2225)
Changed paths:
U php/php-src/branches/PHP_5_2/NEWS
A php/php-src/branches/PHP_5_2/ext/spl/SplObjectStorage_unserialize_bad.phpt
A php/php-src/branches/PHP_5_2/ext/spl/SplObjectStorage_unserialize_nested.phpt
U php/php-src/branches/PHP_5_2/ext/spl/spl_observer.c
U php/php-src/branches/PHP_5_3/NEWS
U php/php-src/branches/PHP_5_3/ext/spl/spl_observer.c
A php/php-src/branches/PHP_5_3/ext/spl/tests/SplObjectStorage_unserialize_bad.phpt
A php/php-src/branches/PHP_5_3/ext/spl/tests/SplObjectStorage_unserialize_nested.phpt
U php/php-src/branches/PHP_5_3/ext/standard/php_var.h
U php/php-src/branches/PHP_5_3/ext/standard/var_unserializer.c
U php/php-src/branches/PHP_5_3/ext/standard/var_unserializer.re
U php/php-src/trunk/ext/spl/spl_observer.c
A php/php-src/trunk/ext/spl/tests/SplObjectStorage_unserialize_bad.phpt
A php/php-src/trunk/ext/spl/tests/SplObjectStorage_unserialize_nested.phpt
U php/php-src/trunk/ext/standard/php_var.h
U php/php-src/trunk/ext/standard/var_unserializer.c
U php/php-src/trunk/ext/standard/var_unserializer.re
Attachment: [text/x-diff] svn-diffs-300843.txt
Attachment: [text/x-diff] svn-diffs-300843.txt