head 1.15; access; symbols pkgsrc-2018Q4:1.14.0.2 pkgsrc-2018Q4-base:1.14 pkgsrc-2018Q3:1.13.0.2 pkgsrc-2018Q3-base:1.13 pkgsrc-2018Q2:1.10.0.6 pkgsrc-2018Q2-base:1.10 pkgsrc-2018Q1:1.10.0.4 pkgsrc-2018Q1-base:1.10 pkgsrc-2017Q4:1.10.0.2 pkgsrc-2017Q4-base:1.10 pkgsrc-2017Q3:1.9.0.6 pkgsrc-2017Q3-base:1.9 pkgsrc-2017Q2:1.9.0.2 pkgsrc-2017Q2-base:1.9 pkgsrc-2017Q1:1.5.0.2 pkgsrc-2017Q1-base:1.5 pkgsrc-2016Q4:1.4.0.6 pkgsrc-2016Q4-base:1.4 pkgsrc-2016Q3:1.4.0.4 pkgsrc-2016Q3-base:1.4 pkgsrc-2016Q2:1.4.0.2 pkgsrc-2016Q2-base:1.4 pkgsrc-2016Q1:1.3.0.2 pkgsrc-2016Q1-base:1.3 pkgsrc-2015Q4:1.1.0.2 pkgsrc-2015Q4-base:1.1; locks; strict; comment @# @; 1.15 date 2019.01.14.13.13.08; author taca; state dead; branches; next 1.14; commitid hOEHcoTQuuXTGK7B; 1.14 date 2018.12.09.12.20.44; author taca; state Exp; branches; next 1.13; commitid ycsu3EWkrlVHy73B; 1.13 date 2018.07.31.01.17.56; author maya; state Exp; branches; next 1.12; commitid Gro7CKKmupAo5eMA; 1.12 date 2018.07.20.13.27.28; author taca; state Exp; branches; next 1.11; commitid WALoK2ElWhCMuSKA; 1.11 date 2018.07.16.10.58.50; author maya; state Exp; branches; next 1.10; commitid wY3qhLO395lGMlKA; 1.10 date 2017.10.27.08.46.49; author taca; state Exp; branches 1.10.6.1; next 1.9; commitid O9hF7GgQwsSwuFcA; 1.9 date 2017.06.20.07.24.08; author manu; state Exp; branches 1.9.6.1; next 1.8; commitid P0WbE0eCxqO6a5Wz; 1.8 date 2017.05.03.11.41.36; author maya; state Exp; branches; next 1.7; commitid mWSmSe9Py1xV8WPz; 1.7 date 2017.04.13.14.19.19; author taca; state Exp; branches; next 1.6; commitid gPKOcunCJfj7FnNz; 1.6 date 2017.04.05.12.28.59; author fhajny; state Exp; branches; next 1.5; commitid 9OcgD3GRUUMZhlMz; 1.5 date 2017.01.22.11.37.29; author maya; state Exp; branches 1.5.2.1; next 1.4; commitid RTj4B6A2h7hHmXCz; 1.4 date 2016.06.24.15.27.57; author taca; state Exp; branches 1.4.6.1; next 1.3; commitid DZFzpbMAG3elsJbz; 1.3 date 2016.04.02.09.02.11; author taca; state Exp; branches 1.3.2.1; next 1.2; commitid YY3rid1l8ptPZ11z; 1.2 date 2016.03.05.11.28.44; author jperkin; state Exp; branches; next 1.1; commitid 1LoxeQftu903HrXy; 1.1 date 2015.12.06.15.17.31; author taca; state Exp; branches; next ; commitid q7kz8KyseDYLRTLy; 1.10.6.1 date 2018.08.17.17.37.22; author bsiegert; state Exp; branches; next ; commitid ocgLnkl4cGZPYuOA; 1.9.6.1 date 2017.10.31.18.12.02; author spz; state Exp; branches; next ; commitid chTsLzokZugFuedA; 1.5.2.1 date 2017.04.12.18.22.19; author bsiegert; state Exp; branches; next ; commitid 43jsB1cDwItL2hNz; 1.4.6.1 date 2017.02.12.21.38.25; author spz; state Exp; branches; next ; commitid igm4pJj1Vq1D1IFz; 1.3.2.1 date 2016.06.28.19.38.32; author bsiegert; state Exp; branches; next ; commitid IpXiD64nQ5NRIgcz; desc @@ 1.15 log @lang/php70: remove php70 package Remove php70 package since PHP 7.0 has been EOL. @ text @# $NetBSD: Makefile,v 1.14 2018/12/09 12:20:44 taca Exp $ # # We can't omit PKGNAME here to handle PKG_OPTIONS. # PKGNAME= php-${PHP_VERSION} PKGREVISION= 1 CATEGORIES= lang HOMEPAGE= http://www.php.net/ COMMENT= PHP Hypertext Preprocessor version 7.0 LICENSE= php TEST_TARGET= test USE_TOOLS+= gmake lex pkg-config LIBTOOL_OVERRIDE= # empty PHP_CHECK_INSTALLED= No PHP_VERSIONS_ACCEPTED= 70 .include "Makefile.php" CGIDIR= ${PREFIX}/libexec/cgi-bin EGDIR= ${PREFIX}/share/examples/php MESSAGE_SUBST+= CGIDIR=${CGIDIR} CONFIGURE_ENV+= lt_cv_path_SED=${SED:Q} MAKE_ENV+= INSTALL_ROOT=${DESTDIR} CONF_FILES= ${EGDIR}/php.ini-production ${PKG_SYSCONFDIR}/php.ini PLIST_SUBST+= PHPEXTDIR="${PHP_EXTENSION_DIR}" SUBST_CLASSES+= path SUBST_MESSAGE.path= Fixing common paths. SUBST_STAGE.path= pre-configure SUBST_FILES.path= ext/phar/phar/phar.php SUBST_FILES.path+= php.ini-development php.ini-production run-tests.php SUBST_FILES.path+= sapi/cgi/Makefile.frag SUBST_SED.path= -e 's,@@CGIDIR@@,${CGIDIR},g' SUBST_SED.path+= -e 's,@@PREFIX@@,${PREFIX},g' INSTALLATION_DIRS+= ${CGIDIR} ${PHP_EXTENSION_DIR} ${EGDIR} share/php # segfault generating phar.phar for i386 & SPARC # revisit this if builtin PCRE is updated beyond PCRE1 8.38 # https://bugs.php.net/bug.php?id=73880 .if ${MACHINE_ARCH} != "x86_64" CONFIGURE_ARGS+= --without-pcre-jit .endif # Make sure modules can link correctly .if ${OPSYS} == "Darwin" INSTALL_UNSTRIPPED= yes .endif # Darwin < 9 (Mac OS X < 10.5 "Leopard") doesn't have gethostuuid(2) # and lacks the zone memory allocator .if !empty(MACHINE_PLATFORM:MDarwin-[0-8].*-*) CFLAGS+= -DSQLITE_ENABLE_LOCKING_STYLE=0 -DSQLITE_WITHOUT_ZONEMALLOC .endif post-install: ${INSTALL_PROGRAM} ${WRKSRC}/sapi/cli/php ${DESTDIR}${PREFIX}/bin/php ${INSTALL_DATA} ${WRKSRC}/sapi/cli/php.1 \ ${DESTDIR}${PREFIX}/${PKGMANDIR}/man1/php.1 ${INSTALL_PROGRAM} ${WRKSRC}/sapi/cgi/php-cgi ${DESTDIR}${CGIDIR}/php cd ${WRKSRC}; ${INSTALL_DATA} php.ini-development php.ini-production \ ${DESTDIR}${EGDIR} ${INSTALL_DATA} ${WRKSRC}/php.gif ${DESTDIR}${PREFIX}/share/php .include "../../mk/bsd.pkg.mk" @ 1.14 log @Bump PKGREVISION for separation of php-sqlite3 package from lang/php?? base packages. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 2018/07/31 01:17:56 maya Exp $ @ 1.13 log @move --disable-gcc-global-regs to Makefile.php. Seems to make a previously segfaulting netbsd-8/i386's build not segfault. ap-php runs PHP's configure and builds some of its code, so it needs the same flag. Now we can stop requiring an arbitrary GCC version. The test case in the GCC bugzilla fails on all GCC versions I tested, but magically some versions of GCC manage to build a working PHP. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 2018/07/20 13:27:28 taca Exp $ d7 1 @ 1.12 log @lang/php70: update to 7.0.31 19 Jul 2018 PHP 7.0.31 - Exif: . Fixed bug #76423 (Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.c). (Stas) . Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while reading exif data). (Stas) - Win32: . Fixed bug #76459 (windows linkinfo lacks openbasedir check). (Anatol) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 2018/07/16 10:58:50 maya Exp $ a50 6 .if ${MACHINE_ARCH} == "i386" # segfaults when buidling with many compilers # https://bugs.php.net/bug.php?id=74527 CONFIGURE_ARGS+= --disable-gcc-global-regs .endif @ 1.11 log @php*: disable global regs on i386. Fixes PR pkg/53222 that resurfaced Remove the previous workaround to add GCC_REQD, which isn't sufficient any more, possibly due to enabling ssp/fortify? XXX bumping PKGREVISION might not be sufficient, for the same reason the GCC_REQD had to be moved to Makefile.php, it affects modules too. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 2017/10/27 08:46:49 taca Exp $ a7 1 PKGREVISION= 1 @ 1.10 log @lang/php70: Update to 7.0.25 * pkgsrc change: remove post-extract which is not required any more. * including securiy fixes. 26 Oct 2017 PHP 7.0.25 - Core: . Fixed bug #75241 (Null pointer dereference in zend_mm_alloc_small()). (Laruence) . Fixed bug #75236 (infinite loop when printing an error-message). (Andrea) . Fixed bug #75252 (Incorrect token formatting on two parse errors in one request). (Nikita) . Fixed bug #75220 (Segfault when calling is_callable on parent). (andrewnester) . Fixed bug #75290 (debug info of Closures of internal functions contain garbage argument names). (Andrea) - Apache2Handler: . Fixed bug #75311 (error: 'zend_hash_key' has no member named 'arKey' in apache2handler). (mcarbonneaux) - Date: . Fixed bug #75055 (Out-Of-Bounds Read in timelib_meridian()). (Derick) - Intl: . Fixed bug #75318 (The parameter of UConverter::getAliases() is not optional). (cmb) - mcrypt: . Fixed bug #72535 (arcfour encryption stream filter crashes php). (Leigh) - OCI8: . Fixed incorrect reference counting. (Dmitry, Tianfang Yang) - PCRE: . Fixed bug #75207 (applied upstream patch for CVE-2016-1283). (Anatol) - litespeed: . Fixed bug #75248 (Binary directory doesn't get created when building only litespeed SAPI). (petk) . Fixed bug #75251 (Missing program prefix and suffix). (petk) - SPL: . Fixed bug #73629 (SplDoublyLinkedList::setIteratorMode masks intern flags). (J. Jeising, cmb) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.9 2017/06/20 07:24:08 manu Exp $ d8 1 d52 6 @ 1.10.6.1 log @Pullup ticket #5799 - requested by taca lang/php70: security fix Revisions pulled up: - lang/php/phpversion.mk 1.224 - lang/php70/Makefile 1.11-1.12 - lang/php70/Makefile.php 1.8-1.9 - lang/php70/distinfo 1.46-1.47 - lang/php70/patches/patch-disable-filter-url 1.1 --- Module Name: pkgsrc Committed By: maya Date: Mon Jul 16 10:58:50 UTC 2018 Modified Files: pkgsrc/lang/php70: Makefile Makefile.php pkgsrc/lang/php71: Makefile Makefile.php pkgsrc/lang/php72: Makefile Makefile.php Log Message: php*: disable global regs on i386. Fixes PR pkg/53222 that resurfaced Remove the previous workaround to add GCC_REQD, which isn't sufficient any more, possibly due to enabling ssp/fortify? XXX bumping PKGREVISION might not be sufficient, for the same reason the GCC_REQD had to be moved to Makefile.php, it affects modules too. --- Module Name: pkgsrc Committed By: manu Date: Wed Jul 18 07:33:12 UTC 2018 Modified Files: pkgsrc/lang/php56: Makefile.php distinfo pkgsrc/lang/php70: Makefile.php distinfo pkgsrc/lang/php71: Makefile.php distinfo pkgsrc/lang/php72: Makefile.php distinfo Added Files: pkgsrc/lang/php56/patches: patch-disable-filter-url pkgsrc/lang/php70/patches: patch-disable-filter-url pkgsrc/lang/php71/patches: patch-disable-filter-url pkgsrc/lang/php72/patches: patch-disable-filter-url Log Message: Add pkgsrc build option disable-filter-url to disable php://filter URL php://filter URL is a feature documented here: http://php.net/manual/en/wrappers.php.php Unfortunately, it allows remote control of include() behavior beyond what many developpers expected, enabling easy dump of PHP source files. The administrator may want to disable the feature for security sake, and this option makes that possible. --- Module Name: pkgsrc Committed By: taca Date: Fri Jul 20 13:27:28 UTC 2018 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php70: Makefile distinfo Log Message: lang/php70: update to 7.0.31 19 Jul 2018 PHP 7.0.31 - Exif: . Fixed bug #76423 (Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.c). (Stas) . Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while reading exif data). (Stas) - Win32: . Fixed bug #76459 (windows linkinfo lacks openbasedir check). (Anatol) @ text @d1 1 a1 1 # $NetBSD$ a50 6 .if ${MACHINE_ARCH} == "i386" # segfaults when buidling with many compilers # https://bugs.php.net/bug.php?id=74527 CONFIGURE_ARGS+= --disable-gcc-global-regs .endif @ 1.9 log @Fix crash on i386 in www/ap-php build with PHP 7.x PHP 7.x on i386 crashes unless built with GCC >= 4.9. There was the necessary tweak for the lang/php70 and lang/php71 packages, but not for dependencies such www/ap-php. As a result, www/ap-php crashed during the build. We fix this by moving the GCC_REQD to Makefile.php which is included by dependent packages @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5.2.1 2017/04/12 18:22:19 bsiegert Exp $ a61 4 post-extract: cd ${WRKSRC} && \ ${FIND} . -xdev -type f -name '*.orig' -exec ${RM} -f {} \; @ 1.9.6.1 log @Pullup ticket #5611 - requested by taca lang/php70: security update Revisions pulled up: - lang/php70/Makefile 1.10 - lang/php70/distinfo 1.38-1.39 - lang/php/phpversion.mk patch ------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Sun Oct 1 15:48:17 UTC 2017 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php70: distinfo Log Message: lang/php70: update to 7.0.24. 28 Sep 2017 PHP 7.0.24 - Core: . Fixed bug #75042 (run-tests.php issues with EXTENSION block). (John Boehr) - BCMath: . Fixed bug #44995 (bcpowmod() fails if scale != 0). (cmb) . Fixed bug #46781 (BC math handles minus zero incorrectly). (cmb) . Fixed bug #54598 (bcpowmod() may return 1 if modulus is 1). (okano1220, cmb) . Fixed bug #75178 (bcpowmod() misbehaves for non-integer base or modulus). (cmb) - CLI server: . Fixed bug #70470 (Built-in server truncates headers spanning over TCP packets). (bouk) - CURL: . Fixed bug #75093 (OpenSSL support not detected). (Remi) - GD: . Fixed bug #75124 (gdImageGrayScale() may produce colors). (cmb) . Fixed bug #75139 (libgd/gd_interpolation.c:1786: suspicious if ?). (cmb) - Gettext: . Fixed bug #73730 (textdomain(null) throws in strict mode). (cmb) - Intl: . Fixed bug #75090 (IntlGregorianCalendar doesn't have constants from parent class). (tpunt) . Fixed bug #75193 (segfault in collator_convert_object_to_string). (Remi) - PDO_OCI: . Fixed bug #74631 (PDO_PCO with PHP-FPM: OCI environment initialized before PHP-FPM sets it up). (Ingmar Runge) - SPL: . Fixed bug #75173 (incorrect behavior of AppendIterator::append in foreach loop). (jhdxr) - Standard: . Fixed bug #75097 (gethostname fails if your host name is 64 chars long). (Andrea) To generate a diff of this commit: cvs rdiff -u -r1.37 -r1.38 pkgsrc/lang/php70/distinfo ------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Fri Oct 27 08:46:49 UTC 2017 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php70: Makefile distinfo Log Message: lang/php70: Update to 7.0.25 * pkgsrc change: remove post-extract which is not required any more. * including securiy fixes. 26 Oct 2017 PHP 7.0.25 - Core: . Fixed bug #75241 (Null pointer dereference in zend_mm_alloc_small()). (Laruence) . Fixed bug #75236 (infinite loop when printing an error-message). (Andrea) . Fixed bug #75252 (Incorrect token formatting on two parse errors in one request). (Nikita) . Fixed bug #75220 (Segfault when calling is_callable on parent). (andrewnester) . Fixed bug #75290 (debug info of Closures of internal functions contain garbage argument names). (Andrea) - Apache2Handler: . Fixed bug #75311 (error: 'zend_hash_key' has no member named 'arKey' in apache2handler). (mcarbonneaux) - Date: . Fixed bug #75055 (Out-Of-Bounds Read in timelib_meridian()). (Derick) - Intl: . Fixed bug #75318 (The parameter of UConverter::getAliases() is not optional). (cmb) - mcrypt: . Fixed bug #72535 (arcfour encryption stream filter crashes php). (Leigh) - OCI8: . Fixed incorrect reference counting. (Dmitry, Tianfang Yang) - PCRE: . Fixed bug #75207 (applied upstream patch for CVE-2016-1283). (Anatol) - litespeed: . Fixed bug #75248 (Binary directory doesn't get created when building only litespeed SAPI). (petk) . Fixed bug #75251 (Missing program prefix and suffix). (petk) - SPL: . Fixed bug #73629 (SplDoublyLinkedList::setIteratorMode masks intern flags). (J. Jeising, cmb) To generate a diff of this commit: cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/php70/Makefile cvs rdiff -u -r1.38 -r1.39 pkgsrc/lang/php70/distinfo @ text @d1 1 a1 1 # $NetBSD$ d62 4 @ 1.8 log @php70: require a GCC version newer than the one in PHP bug #74527 on i386. It doesn't appear with any pkgsrc compiler I've tried (GCC 6, 5, 4.9). Fixes i386 build. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.7 2017/04/13 14:19:19 taca Exp $ a20 5 # PHP bug #74526 - segfaults on build with GCC 4.8.5 i386 .if ${MACHINE_ARCH} == "i386" GCC_REQD+= 4.9 .endif @ 1.7 log @Update php70 to 7.0.18. 13 Apr 2017 PHP 7.0.18 - Core: . Fixed bug #73370 (falsely exits with "Out of Memory" when using USE_ZEND_ALLOC=0). (Nikita) . Fixed bug #73960 (Leak with instance method calling static method with referenced return). (Nikita) . Fixed bug #74265 (Build problems after 7.0.17 release: undefined reference to `isfinite'). (Nikita) . Fixed bug #74302 (yield fromLABEL is over-greedy). (Sara) - Apache: . Reverted patch for bug #61471, fixes bug #74318. (Anatol) - Date: . Fixed bug #72096 (Swatch time value incorrect for dates before 1970). (mcq8) - DOM: . Fixed bug #74004 (LIBXML_NOWARNING flag ingnored on loadHTML*). (somedaysummer) - iconv: . Fixed bug #74230 (iconv fails to fail on surrogates). (Anatol) - OpenSSL: . Fixed bug #72333 (fwrite() on non-blocking SSL sockets doesn't work). (Jakub Zelenka) - PDO MySQL: . Fixed bug #71003 (Expose MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT to PDO interface). (Thomas Orozco) - Streams: . Fixed bug #74216 (Correctly fail on invalid IP address ports). (Sara) - Zlib: . Fixed bug #74240 (deflate_add can allocate too much memory). (Matt Bonneau) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 2017/04/05 12:28:59 fhajny Exp $ d21 5 @ 1.6 log @Build the dom extension embedded. This enables full functionality in xmlreader and fixes joyent/pkgsrc/issues/477. Bump PKREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2017/01/22 11:37:29 maya Exp $ a6 1 PKGREVISION= 1 @ 1.5 log @php70: add workaround requested in PR pkg/51787, pcre-jit segfaults on non-amd64 (i386, SPARC - at least). disable it until PHP, add note that it's mostly relevant for PCRE1 8.38, so if PHP updates to PCRE2 as they plan, it will be irrelevant. From Joern Clausen / cmb@@php @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2016/06/24 15:27:57 taca Exp $ d7 1 @ 1.5.2.1 log @Pullup ticket #5243 - requested by sevan lang/php56: build fix lang/php70: build fix lang/php71: build fix Revisions pulled up: - lang/php56/Makefile 1.13 - lang/php56/Makefile.php 1.2 - lang/php56/PLIST 1.3 - lang/php56/distinfo 1.41 - lang/php56/patches/patch-ext_xsl_php__xsl.h 1.1 - lang/php70/Makefile 1.6 - lang/php70/Makefile.php 1.3 - lang/php70/PLIST 1.3 - lang/php70/distinfo 1.31 - lang/php70/patches/patch-ext_xsl_php__xsl.h 1.1 - lang/php71/Makefile 1.9 - lang/php71/Makefile.php 1.2 - lang/php71/PLIST 1.3 - lang/php71/distinfo 1.17 - lang/php71/patches/patch-ext_xsl_php__xsl.h 1.1 - textproc/Makefile 1.918 - textproc/php-dom/DESCR deleted - textproc/php-dom/Makefile deleted --- Module Name: pkgsrc Committed By: fhajny Date: Wed Apr 5 12:28:59 UTC 2017 Modified Files: pkgsrc/lang/php56: Makefile Makefile.php PLIST distinfo pkgsrc/lang/php70: Makefile Makefile.php PLIST distinfo pkgsrc/lang/php71: Makefile Makefile.php PLIST distinfo Added Files: pkgsrc/lang/php56/patches: patch-ext_xsl_php__xsl.h pkgsrc/lang/php70/patches: patch-ext_xsl_php__xsl.h pkgsrc/lang/php71/patches: patch-ext_xsl_php__xsl.h Log Message: Build the dom extension embedded. This enables full functionality in xmlreader and fixes joyent/pkgsrc/issues/477. Bump PKREVISION. --- Module Name: pkgsrc Committed By: fhajny Date: Wed Apr 5 12:34:47 UTC 2017 Modified Files: pkgsrc/textproc: Makefile Removed Files: pkgsrc/textproc/php-dom: DESCR Makefile Log Message: Remove textproc/php-dom, the module is now built into the resp. PHP packages. @ text @d1 1 a1 1 # $NetBSD$ a6 1 PKGREVISION= 1 @ 1.4 log @Update php70 to 7.0.8 (PHP 7.0.8), including security fixes. pkgsrc change: * remove confiugre from SUBST_FILES.path. * Remove --with-regex=system and --without-mysql from CONFIGURE_ARGS. * Add --without-mysqli to CONFIGURE_ARGS. 23 Jun 2016 PHP 7.0.8 - Core: . Fixed bug #72218 (If host name cannot be resolved then PHP 7 crashes). (Esminis at esminis dot lt) . Fixed bug #72221 (segfault, past-the-end access). (Lauri Kenttä) . Fixed bug #72268 (Integer Overflow in nl2br()). (Stas) . Fixed bug #72275 (Integer Overflow in json_encode()/json_decode()/ json_utf8_to_utf16()). (Stas) . Fixed bug #72400 (Integer Overflow in addcslashes/addslashes). (Stas) . Fixed bug #72403 (Integer Overflow in Length of String-typed ZVAL). (Stas) - FPM: . Fixed bug #72308 (fastcgi_finish_request and logging environment variables). (Laruence) - GD: . Fixed bug #72298 (pass2_no_dither out-of-bounds access). (Stas) . Fixed bug #72337 (invalid dimensions can lead to crash) (Pierre) . Fixed bug #72339 (Integer Overflow in _gd2GetHeader() resulting in heap overflow). (Pierre) . Fixed bug #72407 (NULL Pointer Dereference at _gdScaleVert). (Stas) - Intl: . Fixed bug #64524 (Add intl.use_exceptions to php.ini-*). (Anatol) - mbstring: . Fixed bug #72402 (_php_mb_regex_ereg_replace_exec - double free). (Stas) - mcrypt: . Fixed bug #72455 (Heap Overflow due to integer overflows). (Stas) - PCRE: . Fixed bug #72143 (preg_replace uses int instead of size_t). (Joe) - PDO_pgsql: . Fixed bug #71573 (Segfault (core dumped) if paramno beyond bound). (Laruence) . Fixed bug #72294 (Segmentation fault/invalid pointer in connection with pgsql_stmt_dtor). (Anatol) - Phpdbg: . Fixed bug #72284 (phpdbg fatal errors with coverage). (Bob) - Postgres: . Fixed bug #72195 (pg_pconnect/pg_connect cause use-after-free). (Laruence) . Fixed bug #72197 (pg_lo_create arbitrary read). (Anatol) - SPL: . Fixed bug #72262 (int/size_t confusion in SplFileObject::fread). (Stas) . Fixed bug #72433 (Use After Free Vulnerability in PHP's GC algorithm and unserialize). (Dmitry) - Standard: . Fixed bug #72017 (range() with float step produces unexpected result). (Thomas Punt) . Fixed bug #72193 (dns_get_record returns array containing elements of type 'unknown'). (Laruence) . Fixed bug #72229 (Wrong reference when serialize/unserialize an object). (Laruence) . Fixed bug #72300 (ignore_user_abort(false) has no effect). (Laruence) - XML: . Fixed bug #72206 (xml_parser_create/xml_parser_free leaks mem). (Joe) - XMLRPC: . Fixed bug #72155 (use-after-free caused by get_zval_xmlrpc_type). (Joe, Laruence) - WDDX: . Fixed bug #72340 (Double Free Courruption in wddx_deserialize). (Stas) - Zip: . Fixed ug #72258 (ZipArchive converts filenames to unrecoverable form). (Anatol) . Fixed bug #72434 (ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize). (Dmitry) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2016/04/02 09:02:11 taca Exp $ d44 7 @ 1.4.6.1 log @Pullup ticket #5203 - requested by maya lang/php70: build fix lang/php71: build fix Revisions pulled up: - lang/php70/Makefile 1.5 - lang/php71/Makefile 1.6 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: maya Date: Sun Jan 22 11:37:29 UTC 2017 Modified Files: pkgsrc/lang/php70: Makefile Log Message: php70: add workaround requested in PR pkg/51787, pcre-jit segfaults on non-amd64 (i386, SPARC - at least). disable it until PHP, add note that it's mostly relevant for PCRE1 8.38, so if PHP updates to PCRE2 as they plan, it will be irrelevant. >From Joern Clausen / cmb@@php To generate a diff of this commit: cvs rdiff -u -r1.4 -r1.5 pkgsrc/lang/php70/Makefile ------------------------------------------------------------------- Module Name: pkgsrc Committed By: maya Date: Sun Jan 22 11:42:22 UTC 2017 Modified Files: pkgsrc/lang/php71: Makefile Log Message: php71: add workaround requested in PR pkg/51787, pcre-jit segfaults on non-amd64 (i386, SPARC - at least). disable it until PHP, add note that it's mostly relevant for PCRE1 8.38, so if PHP updates to PCRE2 as they plan, it will be irrelevant. >From Joern Clausen / cmb@@php To generate a diff of this commit: cvs rdiff -u -r1.5 -r1.6 pkgsrc/lang/php71/Makefile @ text @d1 1 a1 1 # $NetBSD$ a43 7 # segfault generating phar.phar for i386 & SPARC # revisit this if builtin PCRE is updated beyond PCRE1 8.38 # https://bugs.php.net/bug.php?id=73880 .if ${MACHINE_ARCH} != "x86_64" CONFIGURE_ARGS+= --without-pcre-jit .endif @ 1.3 log @Update php70 to 7.0.5, including security fix. Add add an patch to fix memory leak noted from Zafer AydoÄŸan via private mail. 31 Mar 2016 PHP 7.0.5 - Core: . Huge pages disabled by default. (Rasmus) . Added ability to enable huge pages in Zend Memory Manager through the environment variable USE_ZEND_ALLOC_HUGE_PAGES=1. (Dmitry) . Fixed bug #71756 (Call-by-reference widens scope to uninvolved functions when used in switch). (Laruence) . Fixed bug #71729 (Possible crash in zend_bin_strtod, zend_oct_strtod, zend_hex_strtod). (Laruence) . Fixed bug #71695 (Global variables are reserved before execution). (Laruence) . Fixed bug #71629 (Out-of-bounds access in php_url_decode in context php_stream_url_wrap_rfc2397). (mt at debian dot org) . Fixed bug #71622 (Strings used in pass-as-reference cannot be used to invoke C::$callable()). (Bob) . Fixed bug #71596 (Segmentation fault on ZTS with date function (setlocale)). (Anatol) . Fixed bug #71535 (Integer overflow in zend_mm_alloc_heap()). (Dmitry) . Fixed bug #71470 (Leaked 1 hashtable iterators). (Nikita) . Fixed bug #71575 (ISO C does not allow extra ‘;’ outside of a function). (asgrim) . Fixed bug #71724 (yield from does not count EOLs). (Nikita) . Fixed bug #71767 (ReflectionMethod::getDocComment returns the wrong comment). (Grigorii Sokolik) . Fixed bug #71806 (php_strip_whitespace() fails on some numerical values). (Nikita) . Fixed bug #71624 (`php -R` (PHP_MODE_PROCESS_STDIN) is broken). (Sean DuBois) - CLI Server: . Fixed bug #69953 (Support MKCALENDAR request method). (Christoph) - Curl: . Fixed bug #71694 (Support constant CURLM_ADDED_ALREADY). (mpyw) - Date: . Fixed bug #71635 (DatePeriod::getEndDate segfault). (Thomas Punt) - Fileinfo: . Fixed bug #71527 (Buffer over-write in finfo_open with malformed magic file). (Anatol) - libxml: . Fixed bug #71536 (Access Violation crashes php-cgi.exe). (Anatol) - mbstring: . Fixed bug #71906 (AddressSanitizer: negative-size-param (-1) in mbfl_strcut). (Stas) - ODBC: . Fixed bug #47803, #69526 (Executing prepared statements is succesfull only for the first two statements). (einavitamar at gmail dot com, Anatol) - PCRE: . Fixed bug #71659 (segmentation fault in pcre running twig tests). (nish dot aravamudan at canonical dot com) - PDO_DBlib: . Bug #54648 (PDO::MSSQL forces format of datetime fields). (steven dot lambeth at gmx dot de, Anatol) - Phar: . Fixed bug #71625 (Crash in php7.dll with bad phar filename). (Anatol) . Fixed bug #71317 (PharData fails to open specific file). (Jos Elstgeest) . Fixed bug #71860 (Invalid memory write in phar on filename with \0 in name). (Stas) - phpdbg: . Fixed crash when advancing (except step) inside an internal function. (Bob) - Session: . Fixed Bug #71683 (Null pointer dereference in zend_hash_str_find_bucket). (Yasuo) - SNMP: . Fixed bug #71704 (php_snmp_error() Format String Vulnerability). (andrew at jmpesp dot org) - SPL: . Fixed bug #71617 (private properties lost when unserializing ArrayObject). (Nikita) - Standard: . Fixed bug #71660 (array_column behaves incorrectly after foreach by reference). (Laruence) . Fixed bug #71798 (Integer Overflow in php_raw_url_encode). (taoguangchen at icloud dot com, Stas) - Zip: . Update bundled libzip to 1.1.2. (Remi, Anatol) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2016/03/05 11:28:44 jperkin Exp $ d36 1 a36 1 SUBST_FILES.path= configure ext/phar/phar/phar.php @ 1.3.2.1 log @Pullup ticket #5052 - requested by taca lang/php70: security fix Revisions pulled up: - lang/php/phpversion.mk 1.141 - lang/php70/Makefile 1.4 - lang/php70/Makefile.php 1.2 - lang/php70/distinfo 1.14 --- Module Name: pkgsrc Committed By: taca Date: Fri Jun 24 15:27:57 UTC 2016 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php70: Makefile Makefile.php distinfo Log Message: Update php70 to 7.0.8 (PHP 7.0.8), including security fixes. pkgsrc change: * remove confiugre from SUBST_FILES.path. * Remove --with-regex=3Dsystem and --without-mysql from CONFIGURE_ARGS.= * Add --without-mysqli to CONFIGURE_ARGS. 23 Jun 2016 PHP 7.0.8 - Core: . Fixed bug #72218 (If host name cannot be resolved then PHP 7 crashe= s). (Esminis at esminis dot lt) . Fixed bug #72221 (segfault, past-the-end access). (Lauri Kentt=E4) . Fixed bug #72268 (Integer Overflow in nl2br()). (Stas) . Fixed bug #72275 (Integer Overflow in json_encode()/json_decode()/ json_utf8_to_utf16()). (Stas) . Fixed bug #72400 (Integer Overflow in addcslashes/addslashes). (Sta= s) . Fixed bug #72403 (Integer Overflow in Length of String-typed ZVAL).= (Stas) - FPM: . Fixed bug #72308 (fastcgi_finish_request and logging environment variables). (Laruence) - GD: . Fixed bug #72298 (pass2_no_dither out-of-bounds access). (Stas) . Fixed bug #72337 (invalid dimensions can lead to crash) (Pierre) . Fixed bug #72339 (Integer Overflow in _gd2GetHeader() resulting in heap overflow). (Pierre) . Fixed bug #72407 (NULL Pointer Dereference at _gdScaleVert). (Stas)= - Intl: . Fixed bug #64524 (Add intl.use_exceptions to php.ini-*). (Anatol) - mbstring: . Fixed bug #72402 (_php_mb_regex_ereg_replace_exec - double free). (= Stas) - mcrypt: . Fixed bug #72455 (Heap Overflow due to integer overflows). (Stas) - PCRE: . Fixed bug #72143 (preg_replace uses int instead of size_t). (Joe) - PDO_pgsql: . Fixed bug #71573 (Segfault (core dumped) if paramno beyond bound). (Laruence) . Fixed bug #72294 (Segmentation fault/invalid pointer in connection with pgsql_stmt_dtor). (Anatol) - Phpdbg: . Fixed bug #72284 (phpdbg fatal errors with coverage). (Bob) - Postgres: . Fixed bug #72195 (pg_pconnect/pg_connect cause use-after-free). (La= ruence) . Fixed bug #72197 (pg_lo_create arbitrary read). (Anatol) - SPL: . Fixed bug #72262 (int/size_t confusion in SplFileObject::fread). (S= tas) . Fixed bug #72433 (Use After Free Vulnerability in PHP's GC algorith= m and unserialize). (Dmitry) - Standard: . Fixed bug #72017 (range() with float step produces unexpected resul= t). (Thomas Punt) . Fixed bug #72193 (dns_get_record returns array containing elements = of type 'unknown'). (Laruence) . Fixed bug #72229 (Wrong reference when serialize/unserialize an obj= ect). (Laruence) . Fixed bug #72300 (ignore_user_abort(false) has no effect). (Laruenc= e) - XML: . Fixed bug #72206 (xml_parser_create/xml_parser_free leaks mem). (Jo= e) - XMLRPC: . Fixed bug #72155 (use-after-free caused by get_zval_xmlrpc_type). (Joe, Laruence) - WDDX: . Fixed bug #72340 (Double Free Courruption in wddx_deserialize). (St= as) - Zip: . Fixed ug #72258 (ZipArchive converts filenames to unrecoverable for= m). (Anatol) . Fixed bug #72434 (ZipArchive class Use After Free Vulnerability in = PHP's GC algorithm and unserialize). (Dmitry) @ text @d1 1 a1 1 # $NetBSD$ d36 1 a36 1 SUBST_FILES.path= ext/phar/phar/phar.php @ 1.2 log @Bump PKGREVISION for security/openssl ABI bump. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1 2015/12/06 15:17:31 taca Exp $ a6 1 PKGREVISION= 1 @ 1.1 log @Add php70 version 7.0.0 (PHP 7.0.0). PHP 7.0.0 comes with a new version of the Zend Engine, numerous improvements and new features such as * Improved performance: PHP 7 is up to twice as fast as PHP 5.6 * Significantly reduced memory usage * Abstract Syntax Tree * Consistent 64-bit support * Improved Exception hierarchy * Many fatal errors converted to Exceptions * Secure random number generator * Removed old and unsupported SAPIs and extensions * The null coalescing operator (??) * Return and Scalar Type Declarations * Anonymous Classes * Zero cost asserts @ text @d1 1 a1 1 # $NetBSD$ d7 1 @