summaryrefslogtreecommitdiff
path: root/www/php4/patches
AgeCommit message (Collapse)AuthorFilesLines
2004-12-19fix an incorrect test for __ppc__, unbreaking this package on Darwin.grant1-0/+16
2004-12-12completely ignore system php.ini for all pear-related operations; thisjdolecek1-0/+10
is necessary to avoid being subject to e.g. open_basedir or safe_mode settings
2004-12-09When apache2 is built with the "worker" MPM, the PHP4 configure scriptjlam1-0/+19
creates its own compiler wrapper script. This "meta_ccld" script isn't recognized by the installed libtool script as a compiler, and libtool gets confused as to which compiler tag to use. Rather than inserting "--tag=CC" into the Makefiles, we patch the configure script to not make the wrapper script, and instead, to simply append the appropriate pthreads CFLAGS to the normal CFLAGS variable subsituted into Makefiles. This fixes PR pkg/28485.
2004-10-31move php4-imap patches into php4/patches and use USE_PHP_EXT_PATCHESjdolecek2-0/+55
2004-10-31move php4-mysql patch into php4/patches and use USE_PHP_EXT_PATCHESjdolecek1-0/+11
2004-09-28Update php4 package to bug-fix release 4.3.9.jdolecek2-24/+7
Changes since 4.3.8: * fixes to GPC input processing * bundled GD extension synced with 2.0.28, re-introducing write support for GIF (patent expiration worldwide) * Implemented periodic PCRE compiled regexp cache cleanup, to avoid memory exhaustion * Fixed strip_tags() to correctly handle '\0' characters. * Rewritten UNIX and Windows install help files. * Fixed a file-descriptor leak with phpinfo() and other 'special' URLs. * Fixed possible crash inside php_shutdown_config(). * Fixed isset crashes on arrays. * Fixed imagecreatefromstring() crashes with external GD library. * Fixed fgetcsv() parsing of strings ending with escaped enclosures. * Fixed overflow in array_slice(), array_splice(), substr(), substr_replace(), strspn(), strcspn(). * Fixed '\0' in Authenticate header passed via safe_mode. * Allow bundled GD to compile against freetype 2.1.2. All in all this release fixes over 50 bugs that have been discovered and resolved since the 4.3.8 release.
2004-07-13fix a memory-use-after-free bug in the Zend engine constant codejdolecek1-0/+17
bump php4 PKGREVISION
2004-07-06Update php4 package to 4.3.7.jdolecek1-46/+0
Change list from release notes: * Synchronized bundled GD library with GD 2.0.23. * Fixed a bug that prevented compilation of GD extensions against FreeType 2.1.0-2.1.2. * Fixed thread safety issue with informix connection id. * Fixed incorrect resolving of relative paths by glob() in windows. * Fixed mapping of Greek letters to html entities. * Fixed a bug that caused an on shutdown crash when using PHP with Apache 2.0.49. * Fixed a number of crashes inside pgsql, cpdf and gd extensions. All in all this release fixes over 30 bugs that have been discovered and resolved since the 4.3.6 release.
2004-05-18Added this patch from FreeBSDcjones1-0/+46
(ports/lang/php4/files/patch-ext::pcre::php_pcre.c). Fixes a bug (described at http://bugs.php.net/bug.php?id=27810) which causes apache2 to dump core on receiving SIGHUP. This is supposedly fixed in the next release of PHP.
2004-04-30CGI/1.1, as documented at:lukem1-0/+33
http://cgi-spec.golux.com/ mentions SCRIPT_NAME but not SCRIPT_FILENAME. Support web servers that only supply the former, even though PHP 4.3 wants the latter to operate as a CGI... Fixes problem using PHP 4.3 under a variety of non-Apache web servers.
2004-04-20Update PHP4 package and all PHP4 modules to version 4.3.6.jdolecek1-7/+23
Changes are bug-fixes mostly, but also synchronizes bundled GD with GD 2.0.22 and updates PCRE to version 4.5. Several NetBSD patches were integrated too, so future pkgsrc updates would be even more smooth. Full list of changes since PHP 4.3.4 is available at: http://www.php.net/ChangeLog-4.php#4.3.6 http://www.php.net/ChangeLog-4.php#4.3.5
2004-02-14remove the filestat patch, it's no longer neededjdolecek1-12/+0
bump PKGREVISION for this change
2004-02-14no need to add XXXes to mkstemp() call, g/c this patch in an effordjdolecek1-12/+0
to minimize number of PHP patches in pkgsrc
2004-02-13g/c, gettext extension module is not built into base phpjdolecek1-48/+0
2003-11-08Update PHP to 4.3.4jdolecek2-23/+26
From release announcemenet: After a lengthy QA process, PHP 4.3.4 is finally out! This is a medium size maintenance release, with a fair number of bug fixes. All users are encouraged to upgrade to 4.3.4. Bugfix release PHP 4.3.4 contains, among others, following important fixes, additions and improvements: * Fixed disk_total_space() and disk_free_space() under FreeBSD. * Fixed FastCGI support on Win32. * Fixed FastCGI being unable to bind to a specific IP. * Fixed several bugs in mail() implementation on win32. * Fixed crashes in a number of functions. * Fixed compile failure on MacOSX 10.3 Panther. * Over 60 various bug fixes! For full list of changes in PHP 4.3.4, see ChangeLog: http://www.php.net/ChangeLog-4.php#4.3.4
2003-09-01Add NetBSD RCS tagscjep6-0/+6
2003-09-01remove for now; I'll confirm whether or not this patch would be necessary laterjdolecek1-175/+0
2003-08-31Update PHP to final 4.3.3jdolecek9-226/+42
Some highlights of changes since 4.2.3: * PCRE updated to 4.3, GD to 2.0.15 * improved Apache2 support * much improved stream & URL wrapper support, output compression support * added CLI (Command Line Interface) SAPI * debug_backtrace() backported from ZendEngine2 * faster build system * huge number of other bug fixes and improvements Packaging changes: * 'pcre', 'xml', and 'session' modules folded back into main package - 'pcre' and 'xml' is required by PEAR, and 'session' is just too essential to be separate * 'gd' module now uses bundled PHP GD library, which is better integrated * PHP modules use shared distinfo when possible to ease future PHP updates * ${PREFIX}/bin/php is now CLI version, ${PREFIX}/libexec/cgi-big/php remains CGI version
2003-06-07Add NetBSD RCS tags.cjep1-0/+1
2003-06-03Teach ap2-perl and ap2-php4 how to find apr's includes. They need toepg1-15/+21
find this separately now that apr is provided in a separate package.
2003-02-21Fix for wordwrap() buffer overflow, perlukem1-0/+107
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1396 (Patch obtained from RedHat's php-4.2.2-8.0.7.src.rpm.) Bump PKGREVISION.
2003-02-03Bump PKGREVISION of www/php4 to 1. This fixes a problem reported onjlam1-4/+6
tech-pkg@ where the incorrect libtoolize was being invoked. We now pass in the path to libtoolize via the environment, much like how the other GNU auto* tools are found in pkgsrc.
2003-01-14make sure that gettext does not core dump on bad params.christos1-0/+68
2003-01-12PR/19207, PR/19681, PR/19367: package does not compile because threadschristos1-8/+112
are required for ZTS. Disable ZTS if no threads.
2003-01-12PR/18693: Simon Schubert: Remove stat stuff that breaks with apache2 virtualchristos1-0/+13
paths.
2003-01-08Make php4 and ap-php4 actually use our libtool again.jlam1-7/+18
2002-10-14Updated php to 4.2.3martti5-50/+26
* lots of bug fixes * experimental apache2 support * added IPv6 support to gethostbyaddr() ATTENTION!! register_globals defaults to 'off' now
2002-10-02Make modules use automake.mk. Bump PKGREVISION for phpize change.wiz1-0/+19
2002-09-04Apply patches from Lubomir Sedlacik <salo@Xtrmntr.org> in PR 18115 toagc1-2/+2
generalise the linker flags used to export symbols by setting them on a per-OS basis. > many packages force -Wl,-export-dynamic which is not portable outside GNU ld > and cause problems e.g. on Solaris. some of these packages use if > conditionals either only for NetBSD or except SunOS, but the state is not > coherent and it may complicate later when support for new OS is added to > pkgsrc (e.g. ongoing work on HP-UX support). > > jlam proposed the following framework in discussion on tech-pkg: > > http://mail-index.netbsd.org/tech-pkg/2002/06/21/0009.html > > now, ${EXPORT_SYMBOLS_LDFLAGS} is used instead of directly defining > -Wl,-export-dynamic which is set in appropriate defs.*.mk to reasonable > values. packages should be converted to this framework by: > > 1) replacing LDFLAGS+= -Wl,-export-dynamic and LIBS+= -export-dynamic with: > > LDFLAGS+= ${EXPORT_SYMBOLS_LDFLAGS} > > 2) for use in patchfiles, add this variable to MAKE_ENV if needed: > > MAKE_ENV+= EXPORT_SYMBOLS_LDFLAGS=${EXPORT_SYMBOLS_LDFLAGS} > > 3) replace occurances of -Wl,-export-dynamic and -export-dynamic in patch > files with: > > $(EXPORT_SYMBOLS_LDFLAGS)
2002-08-26backout previous, the problem seems to lie with our Apache pkg on Solaris.grant1-25/+7
2002-08-26fix configure problem on Solaris while calling apxs.grant1-7/+25
2002-08-25Merge changes in packages from the buildlink2 branch that havejlam1-1/+10
buildlink2.mk files back into the main trunk. This provides sufficient buildlink2 infrastructure to start merging other packages from the buildlink2 branch that have already been converted to use the buildlink2 framework.
2002-02-28Update php4 and ap-php4 to 4.1.2. Changes from version 4.1.1 include:jlam1-6/+6
- Fixed start up failure when mm save handler is used and there is multiple SAPIs are working at the same time. (Yasuo) - Fixed a buffer overflow in the RFC-1867 file upload code (Stefan) <===> SECURITY NOTE <===> Note that the buffer overflow fix is a major security fix. Quoting from the security advisory at: http://security.e-matters.de/advisories/012002.html "PHP supports multipart/form-data POST requests (as described in RFC1867) known as POST fileuploads. Unfourtunately there are several flaws in the php_mime_split function that could be used by an attacker to execute arbitrary code. During our research we found out that not only PHP4 but also older versions from the PHP3 tree are vulnerable. [...] "If you are running PHP 4.0.3 or above one way to workaround these bugs is to disable the fileupload support within your php.ini (file_uploads = Off). If you are running php as module keep in mind to restart the webserver. Anyway you should better install the fixed or a properly patched version to be safe."
2001-12-31Update www/php4 to 4.1.0. Major changes from version 4.0.6 include:jlam6-59/+55
- Introduced a new $_REQUEST array, which includes any GET, POST or COOKIE variables. Like the other new variables, this variable is also available regardless of the context. - Introduced $_GET, $_POST, $_COOKIE, $_SERVER and $_ENV variables, which deprecate the old $HTTP_*_VARS arrays. In addition to be much shorter to type - these variables are also available regardless of the scope, and there's no need to import them using the 'global' statement. Other relevant changes include: - Bug fixes to prevent crashes on unexpected input. - Huge performance improvements, especially in thread-safe code. - Introduced extension version numbers. - Added support for single dimensional SafeArrays and Enumerations. Added an is_enum() function to check if a component implements an enumeration. - Improved speed of the serializer/deserializer. - Floating point numbers are better detected when converting from strings. - Added import_request_variables(), to allow users to safely import form variables to the global scope - Add config option (always_populate_raw_post_data) which when enabled will always populate $HTTP_RAW_POST_DATA regardless of the post mime type - Added getmygid() and safe_mode_gid ini directive to allow safe mode to do a gid check instead of a uid check. - Assigning to a string offset beyond the end of the string now automatically increases the string length by padding it with spaces, and performs the assignment.
2001-10-16Update ap-php and php to 4.0.6. Changes from version 4.0.5 include:jlam10-151/+171
- Bug fixes (memory leaks and other errors) - Made $HTTP_SESSION_VARS['foo'] and $foo be references to the same value when register_globals is on. (Andrei) - Added is_callable() function that can be used to find out whether its argument is a valid callable construct. (Andrei) - Added pg_last_notice() function. (Rasmus from suggestion by Dirk@rackspace.com) - Added support to getimagesize to return dimensions of BMP and PSD files. (Derick) - Added Japanese multibyte string functions support. (Rui) - Added key_exists() to check if a given key or index exists in an array or object. (David Croft) - Added -C command-line option to avoid chdir to the script's directory. (Stig) - printf argnum (parameter swapping) support. (Morten Poulsen, Rasmus) - Modified get_parent_class() and get_class_methods() to accept a class name as well as a class instance. (Andrei, Zend Engine) - Added array_map() function that applies a callback to the elements of given arrays and returns the result. It can also be used with a null callback to transpose arrays. (Andrei) - Added array_filter(), which allows filtering of array elements via the specified callback. (Andrei)
2001-05-14Update php4 and modules to 4.0.5. Changes from version 4.0.4.1nb1 includejlam8-148/+65
many general bugfixes, important fixes to the pgsql module to support PostgreSQL transactions correctly, speedups, and a zlib output compressor.
2001-05-01Add support for building the mcrypt module as a separate package.jlam2-1/+47
2001-03-14Update php4-imap to 4.0.4.1nb2. The only change from version 4.0.4.1nb1 isjlam1-2/+78
a security fix for a buffer overflow problem. The fix was provided in private email by Anil Madhavapeddy <anil@recoil.org>.
2001-03-13Include <sys/types.h> before including <sys/socket.h> in thest for IPv6jlam2-7/+25
support. Fix suggested in pkg/12199 by Olaf Seibert <rhialto@polderland.nl>.
2001-02-12Link c-client object files directly into PHP4 IMAP shared module. This getsjlam3-23/+13
php4-imap working on my Apache 1.3.17 + mod_ssl 2.8.0 + PHP4 installation.
2001-01-25libintl.a is now a part of NetBSD, so build the gettext module by default.jlam1-0/+13
This bumps the version number to 4.0.4.1nb1. Also, build the php CGI binary by statically linking against the helper library libphp4.la so we aren't forced to install a shared library used solely by one program.
2001-01-15Update to version 4.0.4pl1. Changes from version 4.0.4:jlam1-7/+7
* Make NetBSD PHP extensions_dir equal the compiled-in default for PHP4. * Install the PEAR PHP4 script repository and tools. * Use the source's install target instead of homegrown one. - Fixed the various pdf_open_*() functions (Daniel) - Fixed a bug that could cause invalid INI entries to be used under certain circumstances (Zeev) - Fixed a bug in the Apache module that could cause invalid INI values to propogate to different virtual hosts, if one or more of the virtual hosts was configured with engine=Off (Zeev) - Fixed possible crash bugs in the session module (Sascha) - Fixed the ODBC module to build properly with Solid 3.0 and OpenLink (Dan Kalowsky) - Fixed possible corruption of line number information in PHP scripts (Zeev, Zend Engine) - Fixed a few possible crashes in functions that use user-defined callbacks (Zeev, Zend Engine)
2000-12-25Update php4 to the latest stable release 4.0.4. Relevant changes from versionjlam5-47/+62
4.0.3 include many bugfixes (including one bad interaction with mod_perl which caused segfaults) and additions of several new functions. Several new PHP modules were also added to the main distribution, including new database extensions and OpenSSL, and some bugs with improperly closing database connections was fixed.
2000-12-17Make this package look more like php3 by installing a php binary for use asjlam1-1/+11
a CGI executable for HTTP servers without a SAPI module.
2000-12-17Use the installed c-client linkage.c to determine which drivers andjlam1-0/+17
authenticators are linked into the imap extension module.
2000-12-17Patch to find imap-uw libraries and headers in correct location.jlam1-0/+13
2000-12-17Add 'www' to common CATEGORIES.jlam1-2/+11
Patches to find imap-uw headers and libraries in correct location.
2000-12-17Create a php4 package upon which both HTTP/PHP4 servers and PHP4 extensionjlam2-0/+36
modules depend. Move most of the guts of the ap-php4 package into this one.
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-19 02:39:11 +0000