aboutsummaryrefslogtreecommitdiff
path: root/lang/php74
Commit message (Collapse)AuthorAgeFilesLines
* */*php74*: Sunset php 7.4Muhammad Moinur Rahman2022-12-2518-1254/+0
| | | | | | | | As per upstream php 7.4 has reached it's EOL on 2022-11-22. Remove php74 from the tree. Default version of php has already been switched to 8.1. Approved by: portmgr (blanket infrastructure) Sponsored by: Bounce Experts
* lang/php74: Update version 7.4.32=>7.4.33Muhammad Moinur Rahman2022-11-052-4/+4
| | | | | | | | | | | | | * GD: - Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630) * Hash: - Fixed bug #81738: buffer overflow in hash_update() on long parameter (CVE-2022-37454) Approved by: tz (By private mail) Relnotes: https://www.php.net/ChangeLog-7.php#7.4.33 Sponsored by: Bounce Experts
* lang/php74: Update version 7.4.30=>7.4.32Muhammad Moinur Rahman2022-10-022-4/+4
| | | | | | | | | | | * Core: - Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628) - Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629) Relnotes: https://www.php.net/ChangeLog-7.php Sponsored by: Bounce Experts
* Remove WWW entries moved into port MakefilesStefan Eßer2022-09-071-2/+0
| | | | | | | | | | Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)
* Add WWW entries to port MakefilesStefan Eßer2022-09-071-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)
* lang/php74: Update version 7.4.29=>7.4.30Muhammad Moinur Rahman2022-06-102-4/+4
| | | | | | | | | | | | | - mysqlnd: Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626) - pgsql: Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625) Approved by: tz (private email) Relnotes: https://www.php.net/ChangeLog-7.php#7.4.30 Sponsored by: Bounce Experts
* lang/php??, mail/php*-imap: chase panda-cclientThierry Thomas2022-04-191-1/+1
|
* lang/php74: Upgrade from 7.4.28 to 7.4.29Torsten Zuehlsdorff2022-04-152-5/+5
| | | | | | | | | | | Changelog: Core: No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates. Date: Updated to latest IANA timezone database (2022a). Sponsored by: Bounce Experts
* textproc/libxml2: bump all LIB_DEPENDS consumersCharlie Li2022-04-101-1/+1
| | | | | | | | This is a separate commit to facilitate easier cherry-picking for quarterly. PR: 262853, 262940, 262877, 263126 Approved by: fluffy (mentor)
* textproc/libxml2: bump all dependenciesMatthias Fechner2022-03-261-1/+1
| | | | | This should make sure that all dependent ports will pick up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
* pcre: fix runtime issues on powerpcPiotr Kubaj2022-03-252-1/+12
| | | | | | | In sljitConfigInternal.h, pcre checks for existence of __builtin___clear_cache() function. LLVM provides that function for all platforms, even those that don't have implemented flushing the cache. This leads to runtime errors on e.g. powerpc (32-bit) with __clear_cache() calling compilerrt_abort(), resulting in SIGABRT.
* lang/php74: Update version 7.4.27=>7.4.28Muhammad Moinur Rahman2022-02-192-4/+4
| | | | | | | | | | | Filter: Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708) CVE is not yet published. Approved by: tz (private email) Sponsored by: Bounce Experts
* lang/php*: remove support for 11 on powerpc64Piotr Kubaj2022-02-181-1/+0
|
* lang/php??: make CONFLICTS_INSTALL visible to PHP module portsStefan Eßer2022-02-061-2/+2
| | | | | | | | | | | | | | | | | | The definition of CONFLICTS_INSTALL already included ${PKGNAMESUFFIX}, but in a block that was conditional on ${PKGNAMESUFFIX} not being defined, defying the purpose. After this change all ports that refer to the lang/php?? interpreter ports get an automatic CONFLICTS_INSTALL definition that prevents the installation of the same module for multiple interpreter versions. This change adds correct CONFLICTS_INSTALL definitions to hundreds of PHP ports that previously lacked any such definition. PHP modules can override this generated CONFLICTS_INSTALL definition in their Makefiles, if required. Approved by: portmgr (implicit)
* lang/php74{-extensions}: Mark DEPRECATEDMuhammad Moinur Rahman2022-02-011-0/+3
| | | | | | | | | | | | | | | | Security support for php74 will expire on 28th November, 2022. For details please see: https://www.php.net/supported-versions EXPIRATION_DATE has been set 1 day after the EOL. A metabug has been created to track which ports explicitly depends on php74{-extensions} only; which is available at: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=261604 PR: 261604 Approved by: tz (private email) Sponsored by: Bounce Experts
* Remove references to defunct php73Muhammad Moinur Rahman2022-01-261-2/+2
| | | | | | | | | - Add regex in CONFLICTS* [1] Reported by: se [1] Approved by: portmgr (blanket infrastructure sweep) Sponsored by: Bounce Experts Differential Revision: https://reviews.freebsd.org/D33983 [1]
* Fix fetch for php*Muhammad Moinur Rahman2021-12-262-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | | - Primary hosting provider of php has introduced some sort of checking which is blocking fetch although curl/wget works perfectly. fetch with other --user-agent is also not working at the moment. An issue has been opened with the upstream which can be found at: https://github.com/php/web-php/issues/483 - Untill this is fixed add php Github distributions URL to MASTER_SITES - Modify MASTER_SITES for php[73|74|80] and remove SUBDIR as it affects DIST_SUBDIR - Add DIST_SUBDIR as Github is IPv4 only which affects IPv6 only builders. In case someone is running IPv6 only builders distcache will pickup and serve. - Although distinfo has been updated as we have added DIST_SUBDIR but SHA256 and SIZE are unchanged. In case someone needs to verify those are available from https://www.php.net/downloads - We might have done some drastic changes but we are on the brink of quarterly build and we do not want to start a new year and a new quarter with BROKEN php and thousands of other ports. PR: 260699 Reported by: chris@cretaforce.gr Approved by: portmgr (blanket infrastructure) Sponsored by: Bounce Experts
* lang/php74: Update version 7.4.26=>7.4.27Muhammad Moinur Rahman2021-12-234-115/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | - Refactor with OPTIONSNG Changelog: Core: Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()). FPM: Fixed bug #81513 (Future possibility for heap overflow in FPM zlog). GD: Fixed bug #71316 (libpng warning from imagecreatefromstring). OpenSSL: Fixed bug #75725 (./configure: detecting RAND_egd). PCRE: Fixed bug #74604 (Out of bounds in php_pcre_replace_impl). Standard: Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type). Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate). Approved by: tz (private mail) Relnotes: https://www.php.net/ChangeLog-7.php#7.4.27 Sponsored by: Bounce Experts
* */*: Remove redundant '-*' from CONFLICTS definitionsStefan Eßer2021-11-251-1/+1
| | | | | | | | | The conflict checks compare the patterns first against the package names without version (as reported by "pkg query "%n"), then - if there was no match - agsinst the full package names including the version (as reported by "pkg query "%n-%v"). Approved by: portmgr (blanket)
* lang/php74: Upgrade from 7.4.25 to 7.4.26Torsten Zuehlsdorff2021-11-204-4/+49
| | | | | | | | | | | | | | | | | | | | | | | | Core: Fixed bug #81518 (Header injection via default_mimetype / default_charset). Date: Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2). MBString: Fixed bug #76167 (mbstring may use pointer from some previous request). MySQLi: Fixed bug #81494 (Stopped unbuffered query does not throw error). PCRE: Fixed bug #81424 (PCRE2 10.35 JIT performance regression). Streams: Fixed bug #54340 (Memory corruption with user_filter). XML: Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707) Also include a patch to fix issue 259725: dns_get_record fails when requested record doesn't exist PR: 259725 Reported by: fsbruva@yahoo.com Sponsored by: Bounce Experts
* lang/php74: Upgrade from 7.4.24 to 7.4.25Torsten Zuehlsdorff2021-10-232-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: DOM: Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID). FFI: Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined). Fileinfo: Fixed bug #78987 (High memory usage during encoding detection). Filter: Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing). FPM: Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703). SPL: Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free). Streams: Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper). XML: Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace). Zip: Fixed bug #81490 (ZipArchive::extractTo() may leak memory). Fixed bug #77978 (Dirname ending in colon unzips to wrong dir). Sponsored by: Bounce Experts
* *: fix tab vs. space issues, and comments according to the guide.Jimmy Olgeni2021-10-161-1/+1
|
* lang/php7*: adjust CONFLICTS to new versionsTorsten Zuehlsdorff2021-09-301-1/+1
| | | | | | | | | PHP 7.3 conflicted with versions no longer in the ports-tree. Remove this conflicts. PHP 7.3 and 7.4 did not conflict with PHP 8.0. Add the missing conflict. PR: 258803 Reported by: Einar Bjarni Halldórsson <einar@isnic.is> Sponsored by: Bounce Experts
* lang/php74: Update from 7.4.23 to 7.4.24Torsten Zuehlsdorff2021-09-292-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: Core: Fixed bug #81302 (Stream position after stream filter removed). Fixed bug #81346 (Non-seekable streams don't update position after write). Fixed bug #73122 (Integer Overflow when concatenating strings). GD: Fixed bug #53580 (During resize gdImageCopyResampled cause colors change). Opcache: Fixed bug #81353 (segfault with preloading and statically bound closure). Shmop: Fixed bug #81407 (shmop_open won't attach and causes php to crash). Standard: Fixed bug #71542 (disk_total_space does not work with relative paths). Fixed bug #81400 (Unterminated string in dns_get_record() results). SysVMsg: Fixed bug #78819 (Heap Overflow in msg_send). XML: Fixed bug #81351 (xml_parse may fail, but has no error code). Zip: Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination). (CVE-2021-21706) Sponsored by: Bounce Experts
* lang/php74: Upgrade from 7.4.22 to 7.4.23Torsten Zuehlsdorff2021-08-292-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: Core: Fixed bug #72595 (php_output_handler_append illegal write access). Fixed bug #66719 (Weird behaviour when using get_called_class() with call_user_func()). Fixed bug #81305 (Built-in Webserver Drops Requests With "Upgrade" Header). BCMath: Fixed bug #78238 (BCMath returns "-0"). CGI: Fixed bug #80849 (HTTP Status header truncation). GD: Fixed bug #51498 (imagefilledellipse does not work for large circles). MySQLi: Fixed bug #74544 (Integer overflow in mysqli_real_escape_string()). OpenSSL: Fixed bug #81327 (Error build openssl extension on php 7.4.22). PDO_ODBC: Fixed bug #81252 (PDO_ODBC doesn't account for SQL_NO_TOTAL). Phar: Fixed bug #81211: Symlinks are followed when creating PHAR archive.(cmb) Shmop: Fixed bug #81283 (shmop can't read beyond 2147483647 bytes). Standard: Fixed bug #72146 (Integer overflow on substr_replace). Fixed bug #81265 (getimagesize returns 0 for 256px ICO images). Fixed bug #74960 (Heap buffer overflow via str_repeat). Streams: Fixed bug #81294 (Segfault when removing a filter). Sponsored by: Bounce Experts
* net/openldap24-server: Make SASL permanent for OpenLDAP port.Xin LI2021-08-012-6/+2
| | | | | | | PR: ports/257374 Reviewed by: obrien Approved by: portmgr (exp-run by antoine) Differential Revision: https://reviews.freebsd.org/D31301
* lang/php74: Update from 7.4.21 to 7.4.22Torsten Zuehlsdorff2021-07-312-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: Core: Fixed bug #81145 (copy() and stream_copy_to_stream() fail for +4GB files). Fixed bug #81163 (incorrect handling of indirect vars in __sleep). Fixed bug #80728 (PHP built-in web server resets timeout when it can kill the process). Fixed bug #73630 (Built-in Weberver - overwrite $_SERVER['request_uri']). Fixed bug #80173 (Using return value of zend_assign_to_variable() is not safe). Fixed bug #73226 (--r[fcez] always return zero exit code). Intl: Fixed bug #72809 (Locale::lookup() wrong result with canonicalize option). Fixed bug #68471 (IntlDateFormatter fails for "GMT+00:00" timezone). Fixed bug #74264 (grapheme_strrpos() broken for negative offsets). OpenSSL: Fixed bug #52093 (openssl_csr_sign truncates $serial). PCRE: Fixed bug #81101 (PCRE2 10.37 shows unexpected result). Fixed bug #81243 (Too much memory is allocated for preg_replace()). Standard: Fixed bug #81223 (flock() only locks first byte of file). Sponsored by: Bounce Experts
* lang/php74: Update from 7.4.20 to 7.4.21Torsten Zuehlsdorff2021-07-052-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | Changelog: Core: Fixed bug #81068 (Double free in realpath_cache_clean()). Fixed bug #76359 (open_basedir bypass through adding ".."). Fixed bug #81090 (Typed property performance degradation with .= operator). Fixed bug #81070 (Integer underflow in memory limit comparison). Fixed bug #81122 (SSRF bypass in FILTER_VALIDATE_URL). (CVE-2021-21705) Bzip2: Fixed bug #81092 (fflush before stream_filter_remove corrupts stream). OpenSSL: Fixed bug #76694 (native Windows cert verification uses CN as sever name). PDO_Firebird: Fixed bug #76448 (Stack buffer overflow in firebird_info_cb). (CVE-2021-21704) Fixed bug #76449 (SIGSEGV in firebird_handle_doer). (CVE-2021-21704) Fixed bug #76450 (SIGSEGV in firebird_stmt_execute). (CVE-2021-21704) Fixed bug #76452 (Crash while parsing blob data in firebird_fetch_blob). (CVE-2021-21704) Standard: Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string conversion"). Sponsored by: Bounce Experts
* lang/php74: fix build on riscv64Piotr Kubaj2021-06-161-0/+5
| | | | Same fix as for php80.
* lang/php74: enable DTRACE on powerpcPiotr Kubaj2021-06-101-1/+0
|
* lang/php74: Upgrade from 7.4.19 to 7.4.20Torsten Zuehlsdorff2021-06-042-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: Core: Fixed bug #80929 (Method name corruption related to repeated calls to call_user_func_array). Fixed bug #80960 (opendir() warning wrong info when failed on Windows). Fixed bug #67792 (HTTP Authorization schemes are treated as case-sensitive). Fixed bug #80972 (Memory exhaustion on invalid string offset). FPM: Fixed bug #65800 (Events port mechanism). FTP: Fixed bug #80901 (Info leak in ftp extension). Fixed bug #79100 (Wrong FTP error messages). GD: Fixed bug #81032 (GD install is affected by external libgd installation). MBString: Fixed bug #81011 (mb_convert_encoding removes references from arrays). ODBC: Fixed bug #80460 (ODBC doesn't account for SQL_NO_TOTAL indicator). PDO_MySQL: Fixed bug #81037 (PDO discards error message text from prepared statement). PDO_ODBC: Fixed bug #44643 (bound parameters ignore explicit type definitions). pgsql: Fixed php_pgsql_fd_cast() wrt. php_stream_can_cast(). SPL: Fixed bug #80933 (SplFileObject::DROP_NEW_LINE is broken for NUL and CR). Opcache: Fixed bug #80900 (switch statement behavior inside function). Fixed bug #81015 (Opcache optimization assumes wrong part of ternary operator in if-condition). XMLReader: Fixed bug #73246 (XMLReader: encoding length not checked). Zip: Fixed bug #80863 (ZipArchive::extractTo() ignores references). Sponsored by: Bounce Experts
* lang/php74: Update from 7.4.18 to 7.4.19Torsten Zuehlsdorff2021-05-072-4/+4
| | | | | | | | PDO_pgsql: Revert "Fixed bug #80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR)" Sponsored by: Bounce Experts
* lang/php74: Update from 7.4.16 to 7.4.18Torsten Zuehlsdorff2021-05-012-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: Core: Fixed bug #80781 (Error handler that throws ErrorException infinite loop). Fixed bug #75776 (Flushing streams with compression filter is broken). (cmb) 04 Mar 2021, php 7.4.16 Fixed #80706 (mail(): Headers after Bcc headers may be ignored). Dba: Fixed bug #80817 (dba_popen() may cause segfault during RSHUTDOWN). DOM: Fixed bug #66783 (UAF when appending DOMDocument to element). FPM: Fixed bug #80024 (Duplication of info about inherited socket after pool removing). FTP: Fixed bug #80880 (SSL_read on shutdown, ftp/proc_open). Imap: Fixed bug #80710 (imap_mail_compose() header injection). Intl: Fixed bug #80763 (msgfmt_format() does not accept DateTime references). LibXML: Fixed bug #51903 (simplexml_load_file() doesn't use HTTP headers). Fixed bug #73533 (Invalid memory access in php_libxml_xmlCheckUTF8). MySQLnd: Fixed bug #80713 (SegFault when disabling ATTR_EMULATE_PREPARES and MySQL 8.0). Fixed bug #80837 (Calling stmt_store_result after fetch doesn't throw an error). Fixed bug #78680 (mysqlnd's mysql_clear_password does not transmit null-terminated password). Opcache: Fixed bug #80805 (create simple class and get error in opcache.so). Fixed bug #80950 (Variables become null in if statements). Pcntl: Fixed bug #79812 (Potential integer overflow in pcntl_exec()). PCRE: Fixed bug #80866 (preg_split ignores limit flag when pattern with \K has 0-width fullstring match). PDO_ODBC: Fixed bug #80783 (PDO ODBC truncates BLOB records at every 256th byte). PDO_pgsql: Fixed bug #80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR). phpdbg: Fixed bug #80757 (Exit code is 0 when could not open file). Session: Fixed bug #80774 (session_name() problem with backslash). Fixed bug #80889 (Cannot set save handler when save_handler is invalid). SOAP: Fixed bug #69668 (SOAP special XML characters in namespace URIs not encoded). Standard: Fixed bug #78719 (http wrapper silently ignores long Location headers). Fixed bug #80771 (phpinfo(INFO_CREDITS) displays nothing in CLI). Fixed bug #80838 (HTTP wrapper waits for HTTP 1 response after HTTP 101). Fixed bug #80915 (Taking a reference to $_SERVER hides its values from phpinfo()). Fixed bug #80654 (file_get_contents() maxlen fails above (2**31)-1 bytes). MySQLi: Fixed bug #74779 (x() and y() truncating floats to integers). OPcache: Fixed bug #80682 (opcache doesn't honour pcre.jit option). OpenSSL: Fixed bug #80747 (Providing RSA key size < 512 generates key that crash PHP). Phar: Fixed bug #75850 (Unclear error message wrt. __halt_compiler() w/o semicolon) (cmb) Fixed bug #70091 (Phar does not mark UTF-8 filenames in ZIP archives). Fixed bug #53467 (Phar cannot compress large archives). SPL: Fixed bug#80719 (Iterating after failed ArrayObject::setIteratorClass() causes Segmentation fault). Zip: Fixed bug #80648 (Fix for bug 79296 should be based on runtime version). Sponsored by: Bounce Experts
* One more small cleanup, forgotten yesterday.Mathieu Arnold2021-04-071-1/+0
| | | | Reported by: lwhsu
* all: Remove all other $FreeBSD keywords.Mathieu Arnold2021-04-061-3/+0
|
* Remove # $FreeBSD$ from Makefiles.Mathieu Arnold2021-04-062-3/+0
|
* Convert to @touchBaptiste Daroussin2021-03-271-1/+1
| | | | Notes: svn path=/head/; revision=569365
* lang/php74: Update from 7.4.15 to 7.4.16Torsten Zuehlsdorff2021-03-062-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: Core: Fixed #80706 (mail(): Headers after Bcc headers may be ignored). MySQLnd: Fixed bug #78680 (mysqlnd's mysql_clear_password does not transmit null-terminated password). MySQLi: Fixed bug #74779 (x() and y() truncating floats to integers). OPcache: Fixed bug #80682 (opcache doesn't honour pcre.jit option). OpenSSL: Fixed bug #80747 (Providing RSA key size < 512 generates key that crash PHP). Phar: Fixed bug #75850 (Unclear error message wrt. __halt_compiler() w/o semicolon) (cmb) Fixed bug #70091 (Phar does not mark UTF-8 filenames in ZIP archives). Fixed bug #53467 (Phar cannot compress large archives). SPL: Fixed bug#80719 (Iterating after failed ArrayObject::setIteratorClass() causes Segmentation fault). Standard: Fixed bug #80654 (file_get_contents() maxlen fails above (2**31)-1 bytes). Zip: Fixed bug #80648 (Fix for bug 79296 should be based on runtime version). Sponsored by: PHP Upgrade Service Notes: svn path=/head/; revision=567449
* lang/php74: Update from 7.4.14 to 7.4.15Torsten Zuehlsdorff2021-02-052-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | Core: Fixed bug #80523 (bogus parse error on >4GB source code). Fixed bug #80384 (filter buffers entire read until file closed). Curl: Fixed bug #80595 (Resetting POSTFIELDS to empty array breaks request). Date: Fixed bug #80376 (last day of the month causes runway cpu usage. MySQLi: Fixed bug #67983 (mysqlnd with MYSQLI_OPT_INT_AND_FLOAT_NATIVE fails to interpret bit columns). Fixed bug #64638 (Fetching resultsets from stored procedure with cursor fails). Fixed bug #72862 (segfault using prepared statements on stored procedures that use a cursor). Fixed bug #77935 (Crash in mysqlnd_fetch_stmt_row_cursor when calling an SP with a cursor). Phar: Fixed bug #77565 (Incorrect locator detection in ZIP-based phars). Fixed bug #69279 (Compressed ZIP Phar extractTo() creates garbage files). SOAP: Fixed bug #80672 (Null Dereference in SoapClient). (CVE-2021-21702) Sponsored by: PHP Update Service Notes: svn path=/head/; revision=564155
* lang/php74: Upgrade from 7.4.13 to 7.4.14Torsten Zuehlsdorff2021-01-092-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Core: Fixed bug #74558 (Can't rebind closure returned by Closure::fromCallable()). Fixed bug #80345 (PHPIZE configuration has outdated PHP_RELEASE_VERSION). Fixed bug #72964 (White space not unfolded for CC/Bcc headers). Fixed bug #80362 (Running dtrace scripts can cause php to crash). Fixed bug #80393 (Build of PHP extension fails due to configuration gap with libtool). Fixed bug #80402 (configure filtering out -lpthread). Fixed bug #77069 (stream filter loses final block of data). Fileinfo: Fixed bug #77961 (finfo_open crafted magic parsing SIGABRT). FPM: Fixed bug #69625 (FPM returns 200 status on request without SCRIPT_FILENAME env). Intl: Fixed bug #80425 (MessageFormatAdapter::getArgTypeList redefined). OpenSSL: Fixed bug #80368 (OpenSSL extension fails to build against LibreSSL due to lack of OCB support). Phar: Fixed bug #73809 (Phar Zip parse crash - mmap fail). Fixed bug #75102 (`PharData` says invalid checksum for valid tar). Fixed bug #77322 (PharData::addEmptyDir('/') Possible integer overflow). PDO MySQL: Fixed bug #80458 (PDOStatement::fetchAll() throws for upsert queries). Fixed bug #63185 (nextRowset() ignores MySQL errors with native prepared statements). Fixed bug #78152 (PDO::exec() - Bad error handling with multiple commands). Fixed bug #70066 (Unexpected "Cannot execute queries while other unbuffered queries"). Fixed bug #71145 (Multiple statements in init command triggers unbuffered query error). Fixed bug #76815 (PDOStatement cannot be GCed/closeCursor-ed when a PROCEDURE resultset SIGNAL). Standard: Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo). (CVE-2020-7071) Fixed bug #80366 (Return Value of zend_fstat() not Checked). Fixed bug #80411 (References to null-serialized object break serialize()). Tidy: Fixed bug #77594 (ob_tidyhandler is never reset). Zlib: Fixed #48725 (Support for flushing in zlib stream). PR: 252509 Submitted by: <michael.glaus@hostpoint.ch> Notes: svn path=/head/; revision=560906
* lang/php74, security/php74-openssl: fix build with LibreSSLPietro Cerutti2020-12-041-1/+1
| | | | | | | | Upstream: https://bugs.php.net/bug.php?id=80368 https://github.com/php/php-src/commit/ecee3f1209a7c0ac9f99c7f640b2f5df56656e58 Notes: svn path=/head/; revision=556964
* lang/php74: Update from 7.4.12 to 7.4.13Torsten Zuehlsdorff2020-12-032-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Core: Fixed bug #80280 (ADD_EXTENSION_DEP() fails for ext/standard and ext/date). Fixed bug #80258 (Windows Deduplication Enabled, randon permission errors). COM: Fixed bug #62474 (com_event_sink crashes on certain arguments). DOM: Fixed bug #80268 (loadHTML() truncates at NUL bytes). FFI: Fixed bug #79177 (FFI doesn't handle well PHP exceptions within callback). IMAP: Fixed bug #64076 (imap_sort() does not return FALSE on failure). Fixed bug #76618 (segfault on imap_reopen). Fixed bug #80239 (imap_rfc822_write_address() leaks memory). Fixed minor regression caused by fixing bug #80220. Fixed bug #80242 (imap_mail_compose() segfaults for multipart with rfc822). MySQLi: Fixed bug #79375 (mysqli_store_result does not report error from lock wait timeout). Fixed bug #76525 (mysqli::commit does not throw if MYSQLI_REPORT_ERROR enabled and mysqlnd used). Fixed bug #72413 (mysqlnd segfault (fetch_row second parameter typemismatch)). ODBC: Fixed bug #44618 (Fetching may rely on uninitialized data). Opcache: Fixed bug #79643 (PHP with Opcache crashes when a file with specific name is included). Fixed run-time binding of preloaded dynamically declared function. OpenSSL: Fixed bug #79983 (openssl_encrypt / openssl_decrypt fail with OCB mode). PDO MySQL: Fixed bug #66528 (No PDOException or errorCode if database becomes unavailable before PDO::commit). Fixed bug #65825 (PDOStatement::fetch() does not throw exception on broken server connection). SNMP: Fixed bug #70461 (disable md5 code when it is not supported in net-snmp). Standard: Fixed bug #80266 (parse_url silently drops port number 0). PR: 251396 Submitted by: Pascal Christen <pascal.christen@hostpoint.ch> Notes: svn path=/head/; revision=556915
* lang/php74: enable DTRACE on powerpc64 headPiotr Kubaj2020-12-021-2/+4
| | | | | | | Builds fine. Notes: svn path=/head/; revision=556843
* lang/php74: Update from 7.4.11 to 7.4.12Torsten Zuehlsdorff2020-11-012-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: Core: Fixed bug #80061 (Copying large files may have suboptimal performance). Fixed bug #79423 (copy command is limited to size of file it can copy). Fixed bug #80126 (Covariant return types failing compilation). Fixed bug #80186 (Segfault when iterating over FFI object). Calendar: Fixed bug #80185 (jdtounix() fails after 2037). IMAP: Fixed bug #80213 (imap_mail_compose() segfaults on certain $bodies). Fixed bug #80215 (imap_mail_compose() may modify by-val parameters). Fixed bug #80220 (imap_mail_compose() may leak memory). Fixed bug #80223 (imap_mail_compose() leaks envelope on malformed bodies). Fixed bug #80216 (imap_mail_compose() does not validate types/encodings). Fixed bug #80226 (imap_sort() leaks sortpgm memory). MySQLnd: Fixed bug #80115 (mysqlnd.debug doesn't recognize absolute paths with slashes). Fixed bug #80107 (mysqli_query() fails for ~16 MB long query when compression is enabled). ODBC: Fixed bug #78470 (odbc_specialcolumns() no longer accepts $nullable). Fixed bug #80147 (BINARY strings may not be properly zero-terminated). Fixed bug #80150 (Failure to fetch error message). Fixed bug #80152 (odbc_execute() moves internal pointer of $params). Fixed bug #46050 (odbc_next_result corrupts prepared resource). OPcache: Fixed bug #80083 (Optimizer pass 6 removes variables used for ibm_db2 data binding). Fixed bug #80194 (Assertion failure during block assembly of unreachable free with leading nop). PCRE: Updated to PCRE 10.35. Fixed bug #80118 (Erroneous whitespace match with JIT only). PDO_ODBC: Fixed bug #67465 (NULL Pointer dereference in odbc_handle_preparer). Standard: Fixed bug #80114 (parse_url does not accept URLs with port 0). Fixed bug #76943 (Inconsistent stream_wrapper_restore() errors). Fixed bug #76735 (Incorrect message in fopen on invalid mode). Tidy: Fixed bug #77040 (tidyNode::isHtml() is completely broken). Sponsored by: PHP Update Service Notes: svn path=/head/; revision=553872
* Convert to use @rmemptyBaptiste Daroussin2020-10-221-1/+1
| | | | Notes: svn path=/head/; revision=552964
* lang/php74: Update from 7.4.10 to 7.4.11Torsten Zuehlsdorff2020-10-092-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Core: Fixed bug #79699 (PHP parses encoded cookie names so malicious `__Host-` cookies can be sent). (CVE-2020-7070) Fixed bug #79979 (passing value to by-ref param via CUFA crashes). Fixed bug #80037 (Typed property must not be accessed before initialization when __get() declared). Fixed bug #80048 (Bug #69100 has not been fixed for Windows). Fixed bug #80049 (Memleak when coercing integers to string via variadic argument). Calendar: Fixed bug #80007 (Potential type confusion in unixtojd() parameter parsing). COM: Fixed bug #64130 (COM obj parameters passed by reference are not updated). OPcache: Fixed bug #80002 (calc free space for new interned string is wrong). Fixed bug #80046 (FREE for SWITCH_STRING optimized away). Fixed bug #79825 (opcache.file_cache causes SIGSEGV when custom opcode handlers changed). OpenSSL: Fixed bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV). (CVE-2020-7069) PDO: Fixed bug #80027 (Terrible performance using $query->fetch on queries with many bind parameters). SOAP: Fixed bug #47021 (SoapClient stumbles over WSDL delivered with "Transfer-Encoding: chunked"). Standard: Fixed bug #79986 (str_ireplace bug with diacritics characters). Fixed bug #80077 (getmxrr test bug). Fixed bug #72941 (Modifying bucket->data by-ref has no effect any longer). Fixed bug #80067 (Omitting the port in bindto setting errors). Sponsored by: Bounce Experts Notes: svn path=/head/; revision=551837
* lang/php74: Add missing dependency from php74-xmlreader to php74-domTorsten Zuehlsdorff2020-10-081-0/+2
| | | | | | | | | | | | | xmlreader needs not only the DOM extension, but to be compiled with --enabled-dom. This commit adds the missing configuration to etablish the dependency. PR: 249886 Submitted by: michael.glaus@hostpoint.ch Sponsored by: Bounce Experts Notes: svn path=/head/; revision=551733
* lang/php74: Upgrade from 7.4.9 to 7.4.10Torsten Zuehlsdorff2020-09-072-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: Core: Fixed bug #79884 (PHP_CONFIG_FILE_PATH is meaningless). Fixed bug #77932 (File extensions are case-sensitive). Fixed bug #79806 (realpath() erroneously resolves link to link). Fixed bug #79895 (PHP_CHECK_GCC_ARG does not allow flags with equal sign). Fixed bug #79919 (Stack use-after-scope in define()). Fixed bug #79934 (CRLF-only line in heredoc causes parsing error). Fixed bug #79947 (Memory leak on invalid offset type in compound assignment). COM: Fixed bug #48585 (com_load_typelib holds reference, fails on second call). Exif: Fixed bug #75785 (Many errors from exif_read_data). Gettext: Fixed bug #70574 (Tests fail due to relying on Linux fallback behavior for gettext()). LDAP: Fixed memory leaks. OPcache: Fixed bug #73060 (php failed with error after temp folder cleaned up). Fixed bug #79917 (File cache segfault with a static variable in inherited method). PDO: Fixed bug #64705 (errorInfo property of PDOException is null when PDO::__construct() fails). Session: Fixed bug #79724 (Return type does not match in ext/session/mod_mm.c). Standard: Fixed bug #79930 (array_merge_recursive() crashes when called with array with single reference). Fixed bug #79944 (getmxrr always returns true on Alpine linux). Fixed bug #79951 (Memory leak in str_replace of empty string). XML: Fixed bug #79922 (Crash after multiple calls to xml_parser_free()). Sponsored by: Bounce Experts Notes: svn path=/head/; revision=547952
* lang/php74: Update from 7.4.8 to 7.4.9Torsten Zuehlsdorff2020-08-192-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: Apache: Fixed bug #79030 (Upgrade apache2handler's php_apache_sapi_get_request_time to return usec). COM: Fixed bug #63208 (BSTR to PHP string conversion not binary safe). Fixed bug #63527 (DCOM does not work with Username, Password parameter). Core: Fixed bug #79740 (serialize() and unserialize() methods can not be called statically). Fixed bug #79783 (Segfault in php_str_replace_common). Fixed bug #79778 (Assertion failure if dumping closure with unresolved static variable). Fixed bug #79779 (Assertion failure when assigning property of string offset by reference). Fixed bug #79792 (HT iterators not removed if empty array is destroyed). Fixed bug #78598 (Changing array during undef index RW error segfaults). Fixed bug #79784 (Use after free if changing array during undef var during array write fetch). Fixed bug #79793 (Use after free if string used in undefined index warning is changed). Fixed bug #79862 (Public non-static property in child should take priority over private static). Fixed bug #79877 (getimagesize function silently truncates after a null byte) (cmb) Fileinfo: Fixed bug #79756 (finfo_file crash (FILEINFO_MIME)). FTP: Fixed bug #55857 (ftp_size on large files). Mbstring: Fixed bug #79787 (mb_strimwidth does not trim string). Phar: Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile function). (CVE-2020-7068) Reflection: Fixed bug #79487 (::getStaticProperties() ignores property modifications). Fixed bug #69804 (::getStaticPropertyValue() throws on protected props). Fixed bug #79820 (Use after free when type duplicated into ReflectionProperty gets resolved). Standard: Fixed bug #70362 (Can't copy() large 'data://' with open_basedir). Fixed bug #78008 (dns_check_record() always return true on Alpine). Fixed bug #79839 (array_walk() does not respect property types). Sponsored by: Bounce Experts Notes: svn path=/head/; revision=545456
* mail/php7[2-4]-imap: change client from cclient to panda-cclientTorsten Zuehlsdorff2020-07-131-1/+4
| | | | | | | | | | | | | | | | | | | | | | There are some reports about PHP crashes, when using php-imap (especially with OpenSSL and TSL 1.3). All this problems went away, when using the panda-cclient instead of the old cclient. Therefore we make the panda-cclient the new default, but still allow cclient in order to allow backwards compatibility. Special thanks to bofh for figuring out the complex details and the solution! Special thanks to Jason for being patience and helpful about so many months! Reported by: Jason de Cordoba <jason@aventia.pw> Reviewed by: bofh Sponsored by: Bounce Experts Notes: svn path=/head/; revision=542132
generated by cgit v1.3 (git 2.53.0) at 2026-09-05 22:44:57 +0000