-
Upgraded bundled sqlite to version 3.6.23.1.
-
Upgraded bundled PCRE to version 8.02.
-
Added support for JSON_NUMERIC_CHECK option in json_encode() that converts numeric strings to integers.
-
Added stream_set_read_buffer, allows to set the buffer for read operation.
-
Added stream filter support to mcrypt extension (ported from mcrypt_filter).
-
Added full_special_chars filter to ext/filter.
-
Added backlog socket context option for stream_socket_server().
-
Added fifth parameter to openssl_encrypt()/openssl_decrypt() (string $iv) to use non-NULL IV. Made implicit use of NULL IV a warning.
-
Added openssl_cipher_iv_length().
-
Added FastCGI Process Manager (FPM) SAPI.
-
Added recent Windows versions to php_uname and fix undefined windows version support.
-
Added Berkeley DB 5 support to the DBA extension.
-
Added support for copy to/from array/file for pdo_pgsql extension.
-
Added inTransaction() method to PDO, with specialized support for Postgres.
-
Changed namespaced classes so that the ctor can only be named __construct now.
-
Reset error state in PDO::beginTransaction() reset error state.
-
Implemented FR#51295 (SQLite3::busyTimeout not existing).
-
Implemented FR#35638 (Adding udate to imap_fetch_overview results).
Charles_Duffy at dell dot com
-
Rewrote var_export() to use smart_str rather than output buffering, prevents data disclosure if a fatal error occurs (CVE-2010-2531).
-
Fixed possible buffer overflows in mysqlnd_list_fields, mysqlnd_change_user.
-
Fixed possible buffer overflows when handling error packets in mysqlnd. Reported by Stefan Esser.
-
Fixed very rare memory leak in mysqlnd, when binding thousands of columns.
-
Fixed a crash when calling an inexistent method of a class that inherits PDOStatement if instantiated directly instead of doing by the PDO methods.
-
Fixed memory leak on error in mcrypt_create_iv on Windows.
-
Fixed a possible crash because of recursive GC invocation.
-
Fixed a possible resource destruction issues in shm_put_var(). Reported by Stefan Esser.
-
Fixed a possible information leak because of interruption of XOR operator. Reported by Stefan Esser.
-
Fixed a possible memory corruption because of unexpected call-time pass by refernce and following memory clobbering through callbacks. Reported by Stefan Esser.
-
Fixed a possible memory corruption in ArrayObject::uasort(). Reported by Stefan Esser.
-
Fixed a possible memory corruption in parse_str(). Reported by Stefan Esser.
-
Fixed a possible memory corruption in pack(). Reported by Stefan Esser.
-
Fixed a possible memory corruption in substr_replace(). Reported by Stefan Esser.
-
Fixed a possible memory corruption in addcslashes(). Reported by Stefan Esser.
-
Fixed a possible stack exhaustion inside fnmatch(). Reported by Stefan Esser.
-
Fixed a possible dechunking filter buffer overflow. Reported by Stefan Esser.
-
Fixed a possible arbitrary memory access inside sqlite extension. Reported by Mateusz Kocielski.
-
Fixed string format validation inside phar extension. Reported by Stefan Esser.
-
Fixed handling of session variable serialization on certain prefix characters. Reported by Stefan Esser.
-
Fixed a NULL pointer dereference when processing invalid XML-RPC requests (Fixes CVE-2010-0397, bug #51288).
-
Fixed 64-bit integer overflow in mhash_keygen_s2k().
-
Fixed SplObjectStorage unserialization problems (CVE-2010-2225).
-
Fixed the mail.log ini setting when no filename was given.
-
Fixed bug
#52317 (Segmentation fault when using mail() on a rhel 4.x (only 64 bit)).
-
Fixed bug
#52262 (json_decode() shows no errors on invalid UTF-8).
-
Fixed bug
#52240 (hash_copy() does not copy the HMAC key, causes wrong results and PHP crashes).
-
Fixed bug
#52238 (Crash when an Exception occured in iterator_to_array).
-
Fixed bug
#52193 (converting closure to array yields empty array).
-
Fixed bug
#52183 (Reflectionfunction reports invalid number of arguments for function aliases).
-
Fixed bug
#52162 (custom request header variables with numbers are removed).
-
Fixed bug
#52160 (Invalid E_STRICT redefined constructor error).
-
Fixed bug
#52138 (Constants are parsed into the ini file for section names).
-
Fixed bug
#52115 (mysqli_result::fetch_all returns null, not an empty array).
-
Fixed bug
#52101 (dns_get_record() garbage in 'ipv6' field on Windows).
-
Fixed bug
#52082 (character_set_client & character_set_connection reset after mysqli_change_user()).
-
Fixed bug
#52043 (GD doesn't recognize latest libJPEG versions).
php at group dot apple dot com
Pierre
-
Fixed bug
#52041 (Memory leak when writing on uninitialized variable returned from function).
-
Fixed bug
#52060 (Memory leak when passing a closure to method_exists()).
-
Fixed bug
#52057 (ReflectionClass fails on Closure class).
-
Fixed bug
#52051 (handling of case sensitivity of old-style constructors changed in 5.3+).
-
Fixed bug
#52037 (Concurrent builds fail in install-programs).
seanius at debian dot org
Kalle
-
Fixed bug
#52019 (make lcov doesn't support TESTS variable anymore).
-
Fixed bug
#52010 (open_basedir restrictions mismatch on vacuum command).
-
Fixed bug
#52001 (Memory allocation problems after using variable variables).
-
Fixed bug
#51991 (spl_autoload and *nix support with namespace).
-
Fixed bug
#51943 (AIX: Several files are out of ANSI spec).
Kalle
coreystup at gmail dot com
-
Fixed bug
#51911 (ReflectionParameter::getDefaultValue() memory leaks with constant array).
-
Fixed bug
#51905 (ReflectionParameter fails if default value is an array with an access to self::).
-
Fixed bug
#51899 (Parse error in parse_ini_file() function when empy value followed by no newline).
-
Fixed bug
#51844 (checkdnsrr does not support types other than MX).
-
Fixed bug
#51827 (Bad warning when register_shutdown_function called with wrong num of parameters).
-
Fixed bug
#51822 (Segfault with strange __destruct() for static class variables).
-
Fixed bug
#51791 (constant() aborts execution when fail to check undefined constant).
-
Fixed bug
#51732 (Fileinfo __construct or open does not work with NULL).
-
Fixed bug
#51725 (xmlrpc_get_type() returns true on invalid dates).
-
Fixed bug
#51723 (Content-length header is limited to 32bit integer with Apache2 on Windows).
-
Fixed bug
#51721 (mark DOMNodeList and DOMNamedNodeMap as Traversable).
-
Fixed bug
#51712 (Test mysql_mysqlnd_read_timeout_long must fail on MySQL4).
-
Fixed bug
#51697 (Unsafe operations in free_storage of SPL iterators, causes crash during shutdown).
-
Fixed bug
#51690 (Phar::setStub looks for case-sensitive __HALT_COMPILER()).
-
Fixed bug
#51688 (ini per dir crashes when invalid document root are given).
-
Fixed bug
#51671 (imagefill does not work correctly for small images).
-
Fixed bug
#51670 (getColumnMeta causes segfault when re-executing query after calling nextRowset).
-
Fixed bug
#51647 Certificate file without private key (pk in another file) doesn't work.
-
Fixed bug
#51629 (CURLOPT_FOLLOWLOCATION error message is misleading).
-
Fixed bug
#51627 (script path not correctly evaluated).
russell dot tempero at rightnow dot com
-
Fixed bug
#51624 (Crash when calling mysqli_options()).
-
Fixed bug
#51615 (PHP crash with wrong HTML in SimpleXML).
-
Fixed bug
#51609 (pg_copy_to: Invalid results when using fourth parameter).
-
Fixed bug
#51608 (pg_copy_to: WARNING: nonstandard use of \\ in a string literal).
-
Fixed bug
#51607 (pg_copy_from does not allow schema in the tablename argument).
-
Fixed bug
#51605 (Mysqli - zombie links).
-
Fixed bug
#51604 (newline in end of header is shown in start of message).
-
Fixed bug
#51590 (JSON_ERROR_UTF8 is undefined).
-
Fixed bug
#51583 (Bus error due to wrong alignment in mysqlnd).
-
Fixed bug
#51582 (Don't assume UINT64_C it's ever available).
reidrac at usebox dot net
Pierre
-
Fixed bug
#51577 (Uninitialized memory reference with oci_bind_array_by_name) (Oracle Corp.)
-
Fixed bug
#51562 (query timeout in mssql can not be changed per query).
ejsmont dot artur at gmail dot com
-
Fixed bug
#51552 (debug_backtrace() causes segmentation fault and/or memory issues).
-
Fixed bug
#51445 (var_dump() invalid/slow *RECURSION* detection).
-
Fixed bug
#51435 (Missing ifdefs / logic bug in crypt code cause compile errors).
-
Fixed bug
#51424 (crypt() function hangs after 3rd call).
-
Fixed bug
#51394 (Error line reported incorrectly if error handler throws an exception).
-
Fixed bug
#51393 (DateTime::createFromFormat() fails if format string contains timezone).
-
Fixed bug
#51347 (mysqli_close / connection memory leak).
-
Fixed bug
#51338 (URL-Rewriter is still enabled if use_only_cookies is on).
Ilia
j dot jeising at gmail dot com
-
Fixed bug
#51291 (oci_error doesn't report last error when called two times) (Oracle Corp.)
-
Fixed bug
#51276 (php_load_extension() is missing when HAVE_LIBDL is undefined).
-
Fixed bug
#51273 (Faultstring property does not exist when the faultstring is empty) (Ilia, dennis at transip dot nl)
-
Fixed bug
#51269 (zlib.output_compression Overwrites Vary Header).
-
Fixed bug
#51257 (CURL_VERSION_LARGEFILE incorrectly used after libcurl version 7.10.1).
aron dot ujvari at microsec dot hu
-
Fixed bug
#51242 (Empty mysql.default_port does not default to 3306 anymore, but 0).
-
Fixed bug
#51237 (milter SAPI crash on startup).
igmar at palsenberg dot com
-
Fixed bug
#51213 (pdo_mssql is trimming value of the money column).
Ilia
alexr at oplot dot com
-
Fixed bug
#51190 (ftp_put() returns false when transfer was successful).
-
Fixed bug
#51183 (ext/date/php_date.c fails to compile with Sun Studio).
-
Fixed bug
#51176 (Static calling in non-static method behaves like $this->).
-
Fixed bug
#51171 (curl_setopt() doesn't output any errors or warnings when an invalid option is provided).
-
Fixed bug
#51128 (imagefill() doesn't work with large images).
-
Fixed bug
#51096 ('last day' and 'first day' are handled incorrectly when parsing date strings).
-
Fixed bug
#51086 (DBA DB4 doesn't work with Berkeley DB 4.8).
-
Fixed bug
#51062 (DBA DB4 uses mismatched headers and libraries).
-
Fixed bug
#51026 (mysqli_ssl_set not working).
-
Fixed bug
#51023 (filter doesn't detect int overflows with GCC 4.4).
-
Fixed bug
#50999 (unaligned memory access in dba_fetch()).
-
Fixed bug
#50976 (Soap headers Authorization not allowed).
-
Fixed bug
#50828 (DOMNotation is not subclass of DOMNode).
-
Fixed bug
#50810 (property_exists does not work for private).
-
Fixed bug
#50762 (in WSDL mode Soap Header handler function only being called if defined in WSDL).
-
Fixed bug
#50731 (Inconsistent namespaces sent to functions registered with spl_autoload_register).
-
Fixed bug
#50563 (removing E_WARNING from parse_url).
ralph at smashlabs dot com
Pierre
-
Fixed bug
#50578 (incorrect shebang in phar.phar).
Fedora at FamilleCollet dot com
-
Fixed bug
#50392 (date_create_from_format enforces 6 digits for 'u' format character).
-
Fixed bug
#50383 (Exceptions thrown in __call / __callStatic do not include file and line in trace).
-
Fixed bug
#50358 (Compile failure compiling ext/phar/util.lo).
-
Fixed bug
#50101 (name clash between global and local variable).
patch by yoarvi at gmail dot com
-
Fixed bug
#50055 (DateTime::sub() allows 'relative' time modifications).
-
Fixed bug
#51002 (fix possible memory corruption with very long names).
-
Fixed bug
#49893 (Crash while creating an instance of Zend_Mail_Storage_Pop3).
-
Fixed bug
#49819 (STDOUT losing data with posix_isatty()).
-
Fixed bug
#49778 (DateInterval::format("%a") is always zero when an interval is created from an ISO string).
-
Fixed bug
#49700 (memory leaks in php_date.c if garbage collector is enabled).
-
Fixed bug
#49576 (FILTER_VALIDATE_EMAIL filter needs updating) (Rasmus)
-
Fixed bug
#49490 (XPath namespace prefix conflict).
-
Fixed bug
#49429 (odbc_autocommit doesn't work).
-
Fixed bug
#49320 (PDO returns null when SQLite connection fails).
-
Fixed bug
#49234 (mysqli_ssl_set not found).
-
Fixed bug
#49216 (Reflection doesn't seem to work properly on MySqli).
-
Fixed bug
#49192 (PHP crashes when GC invoked on COM object).
-
Fixed bug
#49081 (DateTime::diff() mistake if start in January and interval > 28 days).
-
Fixed bug
#49059 (DateTime::diff() repeats previous sub() operation).
-
Fixed bug
#48983 (DomDocument : saveHTMLFile wrong charset).
-
Fixed bug
#48930 (__COMPILER_HALT_OFFSET__ incorrect in PHP >= 5.3).
-
Fixed bug
#48902 (Timezone database fallback map is outdated).
-
Fixed bug
#48781 (Cyclical garbage collector memory leak).
-
Fixed bug
#48601 (xpath() returns FALSE for legitimate query).
-
Fixed bug
#48361 (SplFileInfo::getPathInfo should return the parent dir).
-
Fixed bug
#48289 (iconv_mime_encode() quoted-printable scheme is broken). (Adam, patch from hiroaki dot kawai at gmail dot com).
-
Fixed bug
#47842 (sscanf() does not support 64-bit values).
-
Fixed bug
#46111 (Some timezone identifiers can not be parsed).
-
Fixed bug
#45808 (stream_socket_enable_crypto() blocks and eats CPU).
vincent at optilian dot com
-
Fixed bug
#43233 (sasl support for ldap on Windows).
-
Fixed bug
#35673 (formatOutput does not work with saveHTML).
-
Fixed bug
#33210 (getimagesize() fails to detect width/height on certain JPEGs).