@@ -2,338 +2,6 @@ PHP NEWS
22|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
33?? ??? 201?, PHP 5.5.0
44
5- - Core:
6- . Fixed bug #62357 (compile failure: (S) Arguments missing for built-in
7- function __memcmp). (Laruence)
8- . Fixed bug #61998 (Using traits with method aliases appears to result in
9- crash during execution). (Dmitry)
10- . Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that
11- includes a semi-colon). (Pierrick)
12- . Fixed potential overflow in _php_stream_scandir (CVE-2012-2688).
13- (Jason Powell, Stas)
14- . Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
15- Salt). (Anthony Ferrara)
16-
17- - EXIF:
18- . Fixed information leak in ext exif (discovered by Martin Noga,
19- Matthew "j00ru" Jurczyk, Gynvael Coldwind)
20-
21- - FPM:
22- . Fixed bug #62205 (php-fpm segfaults (null passed to strstr)). (fat)
23- . Fixed bug #62160 (Add process.priority to set nice(2) priorities). (fat)
24- . Fixed bug #62153 (when using unix sockets, multiples FPM instances
25- . Fixed bug #62033 (php-fpm exits with status 0 on some failures to start).
26- (fat)
27- . Fixed bug #61839 (Unable to cross-compile PHP with --enable-fpm). (fat)
28- . Fixed bug #61835 (php-fpm is not allowed to run as root). (fat)
29- . Fixed bug #61295 (php-fpm should not fail with commented 'user'
30- . Fixed bug #61218 (FPM drops connection while receiving some binary values
31- in FastCGI requests). (fat)
32- . Fixed bug #61045 (fpm don't send error log to fastcgi clients). (fat)
33- for non-root start). (fat)
34- . Fixed bug #61026 (FPM pools can listen on the same address). (fat)
35- can be launched without errors). (fat)
36-
37- - Iconv:
38- . Fix bug #55042 (Erealloc in iconv.c unsafe). (Stas)
39-
40- - Intl:
41- . Fixed bug #62083 (grapheme_extract() memory leaks). (Gustavo)
42- . ResourceBundle constructor now accepts NULL for the first two arguments.
43- (Gustavo)
44- . Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called
45- twice). (Gustavo)
46- . Fixed bug #62070 (Collator::getSortKey() returns garbage). (Gustavo)
47- . Fixed bug #62017 (datefmt_create with incorrectly encoded timezone leaks
48- pattern). (Gustavo)
49-
50- - libxml:
51- . Fixed bug #62266 (Custom extension segfaults during xmlParseFile with FPM
52- SAPI). (Gustavo)
53-
54- - Readline:
55- . Fixed bug #62186 (readline fails to compile - void function should not
56- return a value). (Johannes)
57-
58- - Reflection:
59- . Fixed bug #62384 (Attempting to invoke a Closure more than once causes
60- segfault). (Felipe)
61- . Fixed bug #62202 (ReflectionParameter::getDefaultValue() memory leaks
62- with constant). (Laruence)
63-
64- - Sockets:
65- . Fixed bug #62025 (__ss_family was changed on AIX 5.3). (Felipe)
66-
67- - XML Writer:
68- . Fixed bug #62064 (memory leak in the XML Writer module).
69- (jean-pierre dot lozi at lip6 dot fr)
70-
71- - Zip:
72- . Upgraded libzip to 0.10.1 (Anatoliy)
73-
74- 14 Jun 2012, PHP 5.4.4
75-
76- - COM:
77- . Fixed bug #62146 com_dotnet cannot be built shared. (Johannes)
78-
79- - CLI Server:
80- . Implemented FR #61977 (Need CLI web-server support for files with .htm &
81- svg extensions). (Sixd, Laruence)
82- . Improved performance while sending error page, this also fixed
83- bug #61785 (Memory leak when access a non-exists file without router).
84- (Laruence)
85- . Fixed bug #61546 (functions related to current script failed when chdir()
86- in cli sapi). (Laruence, reeze.xia@gmail.com)
87-
88- - CURL:
89- . Fixed bug #61948 (CURLOPT_COOKIEFILE '' raises open_basedir restriction).
90- (Laruence)
91-
92- - Core:
93- . Fixed missing bound check in iptcparse(). (chris at chiappa.net)
94- . Fixed CVE-2012-2143. (Solar Designer)
95- . Fixed bug #62097 (fix for for bug #54547). (Gustavo)
96- . Fixed bug #62005 (unexpected behavior when incrementally assigning to a
97- member of a null object). (Laruence)
98- . Fixed bug #61978 (Object recursion not detected for classes that implement
99- JsonSerializable). (Felipe)
100- . Fixed bug #61991 (long overflow in realpath_cache_get()). (Anatoliy)
101- . Fixed bug #61922 (ZTS build doesn't accept zend.script_encoding config).
102- (Laruence)
103- . Fixed bug #61827 (incorrect \e processing on Windows) (Anatoliy)
104- . Fixed bug #61782 (__clone/__destruct do not match other methods when checking
105- access controls). (Stas)
106- . Fixed bug #61761 ('Overriding' a private static method with a different
107- signature causes crash). (Laruence)
108- . Fixed bug #61730 (Segfault from array_walk modifying an array passed by
109- reference). (Laruence)
110- . Fixed bug #61728 (PHP crash when calling ob_start in request_shutdown
111- phase). (Laruence)
112- . Fixed bug #61660 (bin2hex(hex2bin($data)) != $data). (Nikita Popov)
113- . Fixed bug #61650 (ini parser crashes when using ${xxxx} ini variables
114- (without apache2)). (Laruence)
115- . Fixed bug #61605 (header_remove() does not remove all headers). (Laruence)
116- . Fixed bug #54547 (wrong equality of string numbers). (Gustavo)
117- . Fixed bug #54197 ([PATH=] sections incompatibility with user_ini.filename
118- set to null). (Anatoliy)
119- . Changed php://fd to be available only for CLI.
120-
121- - PDO:
122- . Fixed bug #61755 (A parsing bug in the prepared statements can lead to
123- access violations). (Johannes)
124-
125- - Phar:
126- . Fix bug #61065 (Secunia SA44335, CVE-2012-2386). (Rasmus)
127-
128- - Pgsql:
129- . Added pg_escape_identifier/pg_escape_literal. (Yasuo Ohgaki)
130-
131- - Fileinfo
132- . Fixed bug #61812 (Uninitialised value used in libmagic).
133- (Laruence, Gustavo)
134- . Fixed bug #61566 failure caused by the posix lseek and read versions
135- under windows in cdf_read(). (Anatoliy)
136- . Fixed bug #61565 where php_stream_open_wrapper_ex tries to open a
137- directory descriptor under windows. (Anatoliy)
138-
139- - Intl
140- . Fixed bug #62082 (Memory corruption in internal function
141- get_icu_disp_value_src_php()). (Gustavo)
142-
143- - Libxml:
144- . Fixed bug #61617 (Libxml tests failed(ht is already destroyed)).
145- (Laruence)
146-
147- - Zlib:
148- . Fixed bug #61820 (using ob_gzhandler will complain about headers already
149- sent when no compression). (Mike)
150- . Fixed bug #61443 (can't change zlib.output_compression on the fly). (Mike)
151- . Fixed bug #60761 (zlib.output_compression fails on refresh). (Mike)
152-
153- 08 May 2012, PHP 5.4.3
154-
155- - CGI
156- . Re-Fix PHP-CGI query string parameter vulnerability, CVE-2012-1823.
157- (Stas)
158- . Fix bug #61807 - Buffer Overflow in apache_request_headers.
159- (nyt-php at countercultured dot net).
160-
161- 03 May 2012, PHP 5.4.2
162-
163- - Fix PHP-CGI query string parameter vulnerability, CVE-2012-1823. (Rasmus)
164-
165- 26 Apr 2012, PHP 5.4.1
166-
167- - CLI Server:
168- . Fixed bug #61461 (missing checks around malloc() calls). (Ilia)
169- . Implemented FR #60850 (Built in web server does not set
170- $_SERVER['SCRIPT_FILENAME'] when using router). (Laruence)
171- . "Connection: close" instead of "Connection: closed" (Gustavo)
172-
173- - Core:
174- . Fixed crash in ZTS using same class in many threads. (Johannes)
175- . Fixed bug #61374 (html_entity_decode tries to decode code points that don't
176- exist in ISO-8859-1). (Gustavo)
177- . Fixed bug #61273 (call_user_func_array with more than 16333 arguments
178- leaks / crashes). (Laruence)
179- . Fixed bug #61225 (Incorrect lexing of 0b00*+<NUM>). (Pierrick)
180- . Fixed bug #61165 (Segfault - strip_tags()). (Laruence)
181- . Fixed bug #61106 (Segfault when using header_register_callback). (Nikita
182- Popov)
183- . Fixed bug #61087 (Memory leak in parse_ini_file when specifying
184- invalid scanner mode). (Nikic, Laruence)
185- . Fixed bug #61072 (Memory leak when restoring an exception handler).
186- (Nikic, Laruence)
187- . Fixed bug #61058 (array_fill leaks if start index is PHP_INT_MAX).
188- (Laruence)
189- . Fixed bug #61052 (Missing error check in trait 'insteadof' clause). (Stefan)
190- . Fixed bug #61011 (Crash when an exception is thrown by __autoload
191- accessing a static property). (Laruence)
192- . Fixed bug #61000 (Exceeding max nesting level doesn't delete numerical
193- vars). (Laruence)
194- . Fixed bug #60978 (exit code incorrect). (Laruence)
195- . Fixed bug #60911 (Confusing error message when extending traits). (Stefan)
196- . Fixed bug #60801 (strpbrk() mishandles NUL byte). (Adam)
197- . Fixed bug #60717 (Order of traits in use statement can cause a fatal
198- error). (Stefan)
199- . Fixed bug #60573 (type hinting with "self" keyword causes weird errors).
200- (Laruence)
201- . Fixed bug #60569 (Nullbyte truncates Exception $message). (Ilia)
202- . Fixed bug #52719 (array_walk_recursive crashes if third param of the
203- function is by reference). (Nikita Popov)
204- . Improve performance of set_exception_handler while doing reset (Laruence)
205-
206- - fileinfo:
207- . Fix fileinfo test problems. (Anatoliy Belsky)
208-
209- - FPM
210- . Fixed bug #61430 (Transposed memset() params in sapi/fpm/fpm/fpm_shm.c).
211- (michaelhood at gmail dot com, Ilia)
212-
213- - Ibase
214- . Fixed bug #60947 (Segmentation fault while executing ibase_db_info).
215- (Ilia)
216-
217- - Installation
218- . Fixed bug #61172 (Add Apache 2.4 support). (Chris Jones)
219-
220- - Intl:
221- . Fixed bug #61487 (Incorrent bounds checking in grapheme_strpos).
222- (Stas)
223-
224- - mbstring:
225- . MFH mb_ereg_replace_callback() for security enhancements. (Rui)
226-
227- - mysqli
228- . Fixed bug #61003 (mysql_stat() require a valid connection). (Johannes).
229-
230- - mysqlnd
231- . Fixed bug #61704 (Crash apache, phpinfo() threading issue). (Johannes)
232- . Fixed bug #60948 (mysqlnd FTBFS when -Wformat-security is enabled).
233- (Johannes)
234-
235- - Readline:
236- . Fixed bug #61088 (Memory leak in readline_callback_handler_install).
237- (Nikic, Laruence)
238-
239- - Session
240- . Fixed bug #60634 (Segmentation fault when trying to die() in
241- SessionHandler::write()). (Ilia)
242-
243- - SOAP
244- . Fixed bug #61423 (gzip compression fails). (Ilia)
245- . Fixed bug #60887 (SoapClient ignores user_agent option and sends no
246- User-Agent header). (carloschilazo at gmail dot com)
247- . Fixed bug #60842, #51775 (Chunked response parsing error when
248- chunksize length line is > 10 bytes). (Ilia)
249- . Fixed bug #49853 (Soap Client stream context header option ignored).
250- (Dmitry)
251-
252- - PDO
253- . Fixed bug #61292 (Segfault while calling a method on an overloaded PDO
254- object). (Laruence)
255-
256- - PDO_mysql
257- . Fixed bug #61207 (PDO::nextRowset() after a multi-statement query doesn't
258- always work). (Johannes)
259- . Fixed bug #61194 (PDO should export compression flag with myslqnd).
260- (Johannes)
261-
262- - PDO_odbc
263- . Fixed bug #61212 (PDO ODBC Segfaults on SQL_SUCESS_WITH_INFO). (Ilia)
264-
265- - Phar
266- . Fixed bug #61184 (Phar::webPhar() generates headers with trailing NUL
267- bytes). (Nikita Popov)
268-
269- - Reflection:
270- . Implemented FR #61602 (Allow access to the name of constant
271- used as function/method parameter's default value). (reeze.xia@gmail.com)
272- . Fixed bug #60968 (Late static binding doesn't work with
273- ReflectionMethod::invokeArgs()). (Laruence)
274-
275- - SPL:
276- . Fixed bug #61453 (SplObjectStorage does not identify objects correctly).
277- (Gustavo)
278- . Fixed bug #61347 (inconsistent isset behavior of Arrayobject). (Laruence)
279-
280- - Standard:
281- . Fixed memory leak in substr_replace. (Pierrick)
282- . Make max_file_uploads ini directive settable outside of php.ini (Rasmus)
283- . Fixed bug #61409 (Bad formatting on phpinfo()). (Jakub Vrana)
284- . Fixed bug #60222 (time_nanosleep() does validate input params). (Ilia)
285- . Fixed bug #60106 (stream_socket_server silently truncates long unix socket
286- paths). (Ilia)
287-
288- - XMLRPC:
289- . Fixed bug #61264 (xmlrpc_parse_method_descriptions leaks temporary
290- variable). (Nikita Popov)
291- . Fixed bug #61097 (Memory leak in xmlrpc functions copying zvals). (Nikita
292- Popov)
293-
294- - Zlib:
295- . Fixed bug #61306 (initialization of global inappropriate for ZTS). (Gustavo)
296- . Fixed bug #61287 (A particular string fails to decompress). (Mike)
297- . Fixed bug #61139 (gzopen leaks when specifying invalid mode). (Nikita Popov)
298-
299- 01 Mar 2012, PHP 5.4.0
300-
301- - Installation:
302- . autoconf 2.59+ is now supported (and required) for generating the
303- configure script with ./buildconf. Autoconf 2.60+ is desirable
304- otherwise the configure help order may be incorrect. (Rasmus, Chris Jones)
305-
306- - Removed legacy features:
307- . break/continue $var syntax. (Dmitry)
308- . Safe mode and all related php.ini options. (Kalle)
309- . register_globals and register_long_arrays php.ini options. (Kalle)
310- . import_request_variables(). (Kalle)
311- . allow_call_time_pass_reference. (Pierrick)
312- . define_syslog_variables php.ini option and its associated function. (Kalle)
313- . highlight.bg php.ini option. (Kalle)
314- . safe_mode, safe_mode_gid, safe_mode_include_dir,
315- safe_mode_exec_dir, safe_mode_allowed_env_vars and
316- safe_mode_protected_env_vars php.ini options.
317- . zend.ze1_compatibility_mode php.ini option.
318- . Session bug compatibility mode (session.bug_compat_42 and
319- session.bug_compat_warn php.ini options). (Kalle)
320- . session_is_registered(), session_register() and session_unregister()
321- functions. (Kalle)
322- . y2k_compliance php.ini option. (Kalle)
323- . magic_quotes_gpc, magic_quotes_runtime and magic_quotes_sybase
324- php.ini options. get_magic_quotes_gpc, get_magic_quotes_runtime are kept
325- but always return false, set_magic_quotes_runtime raises an
326- E_CORE_ERROR. (Pierrick, Pierre)
327- . Removed support for putenv("TZ=..") for setting the timezone. (Derick)
328- . Removed the timezone guessing algorithm in case the timezone isn't set with
329- date.timezone or date_default_timezone_set(). Instead of a guessed
330- timezone, "UTC" is now used instead. (Derick)
331-
332- - Moved extensions to PECL:
333- . ext/sqlite. (Note: the ext/sqlite3 and ext/pdo_sqlite extensions are
334- not affected) (Johannes)
335- >>>>>>> PHP-5.4
336-
3375- General improvements:
3386 . Drop Windows XP and 2003 support. (Pierre)
3397 . World domination
@@ -344,6 +12,8 @@ PHP NEWS
34412 (Nikita Popov)
34513
34614- Core:
15+ . Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed
16+ Salt). (Anthony Ferrara)
34717 . Added boolval(). (Jille Timmermans).
34818 . Fixed bug #61681 (Malformed grammar). (Nikita Popov, Etienne, Laruence).
34919 . Fixed bug #61038 (unpack("a5", "str\0\0") does not work as expected).
0 commit comments