com php-src: Merge branch 'PHP-5.5' into PHP-5.6.20: ext/phar/phar.c ext/phar/phar_object.c ext/phar/tests/phar_extract.ph pt ext/standard/url.c

Commit: a50e1cb5a325b33a27d1059ec8b2a68516362413 Author: Stanislav Malyshev <stas@php.net> Mon, 28 Mar 2016 23:44:55 -0700 Parents: dc318cd7db947088a3ba7c4b7e9a5dd0957e5f68 3dd82caf57d48973e98b02e5c1058ab36b30043b Branches: PHP-5.6.20 Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=a50e1cb5a325b33a27d1059ec8b2a68516362413 Log: Merge branch 'PHP-5.5' into PHP-5.6.20 * PHP-5.5: Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut Fixed bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut Fix bug #71798 - Integer Overflow in php_raw_url_encode Fix bug #71860: Require valid paths for phar filenames Going for 5.5.34 Conflicts: configure.in ext/phar/tests/create_path_error.phpt main/php_version.h Bugs: https://bugs.php.net/71906 https://bugs.php..net/71798 https://bugs.php.net/71860 Changed paths: MM ext/phar/phar.c MM ext/phar/phar_object.c MM ext/phar/tests/phar_extract..phpt MM ext/standard/url.c Diff: diff --cc ext/phar/phar.c index 228dfca,17b0aff..14b80e1 --- a/ext/phar/phar.c +++ b/ext/phar/phar.c @@@ -2240,8 -2259,12 +2240,12 @@@ int phar_split_fname(const char *filena #ifdef PHP_WIN32 char *save; #endif - int ext_len, free_filename = 0; + int ext_len; + if (CHECK_NULL_PATH(filename, filename_len)) { + return FAILURE; + } + if (!strncasecmp(filename, "phar://", 7)) { filename += 7; filename_len -= 7;