summaryrefslogtreecommitdiffstats
path: root/package/php
Commit message (Collapse)AuthorAgeFilesLines
* package/php: security bump to version 7.2.5Bernd Kuhls2018-04-284-64/+2
| | | | | | | | | | | | | | | | | | | | Changelog: http://www.php.net/ChangeLog-7.php#7.2.5 This release fixes several security-related bugs for which no CVE id's are assigned at the time of writing: https://bugs.php.net/bug.php?id=76129 https://bugs.php.net/bug.php?id=76130 https://bugs.php.net/bug.php?id=76248 https://bugs.php.net/bug.php?id=76249 Removed patch 0007, applied upstream: https://github.com/php/php-src/commit/2842aa2a078eb1cad55540b61e7edf111395150d Re-numbered patch 0009 -> 0007. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* php: remove Blackfin patchThomas Petazzoni2018-04-153-17/+0
| | | | | | And renumber remaining patches. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* php: fix emalloc/efree/estrdup/... undefined referencesThomas Petazzoni2018-04-091-0/+71
| | | | | | | | | | | | | | | | zend_alloc.h defines some macros such as: Where _estrdup is the actual function implemented by the PHP core. If this header file is not included, and some code uses estrdup, one ends up with an undefined reference. This happens when libexpat support is enabled. This commit adds a PHP patch that fixes this issue. The patch has been submitted upstream through a Github pull request. Fixes: http://autobuild.buildroot.net/results/889d2c1f509c035cd506e36061939bfddc8f1500/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* php: fix how PCRE JIT is disabledThomas Petazzoni2018-04-061-6/+4
| | | | | | | | | | | | | | | | | When the internal PCRE library of PHP is used, it tries to use a JIT engine, which is only available on some architectures. However, the mechanism used to disable JIT has changed in recent PHP versions, and it now has a proper --without-pcre-jit option. Switch over to that to properly disable JIT on unsupported platforms. It has been tested to fix the build of PHP on ARC and Microblaze. Fixes: http://autobuild.buildroot.net/results/e1359fcad7bc57e3c5a7ecc37abaa2cf6a6a9ffa/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/*/Config.in: fix attributes orderRicardo Martincoski2018-04-011-4/+4
| | | | | | | ... to follow the convention: type, default, depends on, select, help. Signed-off-by: Ricardo Martincoski <ricardo.martincoski@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/php: security bump to version 7.2.4Bernd Kuhls2018-03-294-57/+2
| | | | | | | | | Fixes https://bugs.php.net/bug.php?id=75605, no CVE-ID yet. Removed patch 0008, applied upstream. Re-numbered patch 0009. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/php: security bump to version 7.2.3Bernd Kuhls2018-03-022-2/+2
| | | | | | | | | | Fixes CVE 2018-7584: https://bugs.php.net/bug.php?id=75981 For details see release notes: http://www.php.net/archive/2018.php#id2018-03-01-2 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* php: disable on configurations using BR2_BINFMT_FLATThomas Petazzoni2018-02-261-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | BR2_BINFMT_FLAT configurations require the use of elf2flt. However, PHP uses -export-dynamic which breaks badly with elf2flt. Even a simple program fails to build: $ ./output/host/bin/arm-linux-gcc -Wl,-export-dynamic -o toto toto.c /home/thomas/projets/buildroot/output/host/opt/ext-toolchain/arm-buildroot-uclinux-uclibcgnueabi/bin/ld.real: section .junk LMA [0000000000000000,0000000000000027] overlaps section .text LMA [0000000000000000,0000000000006d07] -export-dynamic is clearly not useful for FLAT configurations, which are always statically linked, but it's quite a bit of work to change the PHP build system to use it only conditionall. It looks more like an interaction bug between gcc (which wants to put the .text section at address 0x0 in its linker script) and elf2flt, which wants to put its .junk section (containing the .rel.text stuff) also at address 0x0. Fixes (works around) the "section overlap" part of: http://autobuild.buildroot.net/results/35cbed8927bb10500ecf2816aa728ea240a0be21/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Cc: Waldemar Brodkorb <wbx@openadk.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* php: add patch to fix build on static-only systemsThomas Petazzoni2018-02-261-0/+62
| | | | | | | | | | | | This commit adds a patch to PHP to fix the build on static-only system, a regression introduced in PHP recently. Fixes: http://autobuild.buildroot.net/results/fbf7ebbb9502424727006f39e169ec1ee870186d/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* php: fix build on C libraries that don't provide AI_IDNThomas Petazzoni2018-02-261-0/+55
| | | | | | | | | | | | | | | | | | The PHP sockets module now provides access to AI_IDN functionality (by simply declaring a bunch of constants available from PHP code). AI_IDN (internationalized domain names) is not supported in uClibc or musl, which breaks the build. This commit adds a patch to PHP which makes the use of AI_IDN conditional, in a way that is identical to what is already done for AI_ALL. The patch has been submitted upstream. Fixes: http://autobuild.buildroot.net/results/ef040cc45bb2789ead82a8c445db3376e36b5ac7/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* php: disable valgrindAdam Duskett2018-02-131-0/+5
| | | | | | | | | | | | Introduced in PHP7.2, if a host has valgrind headers installed, PHP will detect them and set HAVE_VALGRIND to 1. Disable this entry after configuring. fixes: http://autobuild.buildroot.net/results/d59/d59b5961890aeddcd6d59ed52243be6554d1fe21 Signed-off-by: Adam Duskett <aduskett@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* php: bump version to 7.2.2Adam Duskett2018-02-028-12/+21
| | | | | | | | | | Additional changes: - Fix ordering of patches. - Update patches to apply cleanly against 7.2.2 - Updates License sha256sum Signed-off-by: Adam Duskett <aduskett@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* php: bump to 7.2.1Adam Duskett2018-01-303-9/+11
| | | | | | | | Also update 0003-configure-disable-the-phar-tool.patch as configure.in is no longer provided in the tarballs. Instead, configure.ac is patched. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/php: security bump to 7.1.13Bernd Kuhls2018-01-074-30/+2
| | | | | | | | | | | Removed 0008-fix-asm-constraints-in-aarch64-multiply-macro.patch, patch was applied upstream: https://github.com/php/php-src/commit/d6d4f2a9b38cd7fa7e938142e49e5a514d612e52 Renumbered patch 0009. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/php: bump version to 7.1.12Bernd Kuhls2017-11-252-2/+2
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/php: bump version to 7.1.11Bernd Kuhls2017-10-282-2/+2
| | | | | | Changelog: http://www.php.net/ChangeLog-7.php#7.1.11 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/php: bump version to 7.1.10Bernd Kuhls2017-10-032-2/+2
| | | | | | | Changelog: http://www.php.net/ChangeLog-7.php#7.1.10 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/php: bump version to 7.1.9Bernd Kuhls2017-09-072-2/+2
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* php: security bump to version 7.1.7Peter Korsgaard2017-07-112-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes the following security issues: CVE-2017-7890 - Buffer over-read into uninitialized memory. The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c (which can be reached with a call to the imagecreatefromstring() function) uses constant-sized color tables of size 3 * 256, but does not zero-out these arrays before use. CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229 - Out-of-bonds access in oniguruma regexp library. CVE-2017-11144 - In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission. CVE-2017-11145 - In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, lack of a bounds check in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to an ext/date/lib/parse_date.c out-of-bounds read affecting the php_parse_date function. CVE-2017-11146 - In PHP through 5.6.31, 7.x through 7.0.21, and 7.1.x through 7.1.7, lack of bounds checks in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-11145. While we're at it, add a hash for the license file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* php: use the new gettext logicThomas Petazzoni2017-07-052-5/+4
| | | | | | | | | | | | This commit switches to use the new gettext logic, which involves: - using TARGET_NLS_DEPENDENCIES instead of hand-encoded dependencies on gettext/host-gettext - dropping BR2_PACKAGE_GETTEXT selection. Thanks to this, we can drop the BR2_USE_WCHAR dependency Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/php: fix icu supportBernd Kuhls2017-06-102-3/+10
| | | | | | | | | | | | | | | | | Propagate icu reverse dependencies. Php lacks "-std=c++11", provided by icu-config, when compiling icu support leading to a build failure: /home/peko/autobuild/instance-1/output/host/usr/sh4-buildroot-linux-uclibc/sysroot/usr/include/unicode/umachine.h:347:13: error: 'char16_t' does not name a type typedef char16_t UChar; Fixes http://autobuild.buildroot.net/results/238/238d0e4bb205c0e7288903c6498e6c1787d86a1b/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/php: bump version to 7.1.6Bernd Kuhls2017-06-102-2/+2
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: bump version to 7.1.5Vicente Olivert Riera2017-05-152-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/p*/Config.in: fix ordering of statementsAdam Duskett2017-05-011-4/+4
| | | | | | | | | | | | | The check-package script when ran gives warnings on ordering issues on all of these Config files. This patch cleans up all warnings related to the ordering in the Config files for packages starting with the letter p in the package directory. The appropriate ordering is: type, default, depends on, select, help See http://nightly.buildroot.org/#_config_files for more information. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: bump version to 7.1.4Vicente Olivert Riera2017-04-182-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: add version to license stringRahul Bedarkar2017-04-011-1/+1
| | | | | | | As per LICENSE file, php uses PHP license version 3.01. Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: bump version to 7.1.3Vicente Olivert Riera2017-03-162-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* php: bump to version 7.1.2Peter Korsgaard2017-03-102-2/+2
| | | | | | | | 7.1.2 is a bugfix release, fixing a number of issues: http://www.php.net/ChangeLog-7.php#7.1.2 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* php: bump version to 7.1.1Vicente Olivert Riera2017-01-233-37/+2
| | | | | | | | 0006-Fix-php-fpm.service.in.patch already included: https://github.com/php/php-src/commit/bb19125781c0794da9a63fee62e263ff4efff661 Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* php: bump version to 7.1.0 (security)Vicente Olivert Riera2017-01-102-2/+2
| | | | | | | | | | | | | | | Fixed CVEs: - CVE-2016-9933 (imagefilltoborder stackoverflow on truecolor images) http://bugs.php.net/72696 - CVE-2016-9934 (NULL Pointer Dereference in WDDX Packet Deserialization with PDORow) http://bugs.php.net/73331 Full ChangeLog: http://php.net/ChangeLog-7.php#7.1.0 Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* php: add apache supportFabrice Fontaine2016-12-123-0/+66
| | | | | | | | | Continue work started by Bernd Kuhls in https://patchwork.ozlabs.org/patch/437544/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: fix build for AArch64Tatsuyuki Ishi2016-12-121-0/+28
| | | | | | | | | Add a patch from a PHP Github pull request that fixes the build at -O0 on AArch64. Signed-off-by: Tatsuyuki Ishi <ishitatsuyuki@gmail.com> [Thomas: improved patch commit log.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: security bump to version 7.0.14Gustavo Zacarias2016-12-092-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* php: disable FPM interface on SparcThomas Petazzoni2016-12-071-0/+2
| | | | | | | | | | | Building fails with "Sparc v8 and predecessors are not and will not be supported (see bug report 53310)", so we disable FPM on Sparc. Fixes: http://autobuild.buildroot.net/results/6a86f6cf07f6b6dccd7bfaab6d7682f9faf3527b/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Merge branch 'next'Peter Korsgaard2016-12-012-2/+2
|\ | | | | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * php: bump version to 7.0.13Vicente Olivert Riera2016-11-112-2/+2
| | | | | | | | | | | | | | Release notes: http://php.net/ChangeLog-7.php#7.0.13 Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* | php-fpm: remove config comments to fix startupFrank Hunleth2016-11-091-3/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | The comments in the Buildroot-provided php-fpm.conf would produce the following error when starting php-fpm: ERROR: [/etc/php-fpm.conf:2] value is NULL for a ZEND_INI_PARSER_ENTRY Removing the comments fixes the problem. Signed-off-by: Frank Hunleth <fhunleth@troodon-software.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* | php: fix bfin compile issueWaldemar Brodkorb2016-11-091-0/+16
|/ | | | | | | | Fixes: http://autobuild.buildroot.net/results/8326f24511d3b109d22a76660adc017bbcaca197 Signed-off-by: Waldemar Brodkorb <wbx@openadk.org> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: fix selection of interfaces depending on BR2_USE_MMUThomas Petazzoni2016-10-251-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commit c457213fbca5f3493544c8a4335b623620458b0c reworked the selection of PHP interfaces, moving from a choice..endchoice to a three independent sub-options. Thanks to how choices are handled by kconfig, an option suitable for noMMU platforms was automatically chosen by default. When the choice...endchoice got removed in c457213fbca5f3493544c8a4335b623620458b0c, we introduced a "select" for one of the interfaces, to make sure at least one interface is selected. Unfortunately, the selected interface does not build on noMMU platforms. In order to preserve the previous behavior (CGI interface is selected by default on MMU capable platforms), this commit makes the select logic a bit more complicated: - CGI is selected on MMU-capable platforms if neither CLI or FPM are selected - CLI is selected on MMU-less platforms, since this is anyway the only available interface. Fixes: http://autobuild.buildroot.net/results/85ea09188f1e996cb14b4b83a17736c096c569a8/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: rework selection of interfacesFabrice Fontaine2016-10-242-44/+10
| | | | | | | | | | | | | | | | | | Following suggestion of Yann Morin, rework selection of php interfaces: use booleans instead of choice to be able to select multiple interfaces as they are not exclusive. We make sure at least one of the options is selected. It should be noted that previously CGI and FPM could not be selected at the same time. This is now possible. Bug that prevented compilation of CGI and FPM binaries at the same time has been fixed since PHP 5.4 (https://github.com/php-build/php-build/issues/101). Legacy handling is added for the two options that are removed, and the appropriate new options are selected. Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: security bump to version 7.0.12Gustavo Zacarias2016-10-143-49/+2
| | | | | | | | | | See http://www.php.net/ChangeLog-7.php#7.0.12 since there are no CVEs out yet. And drop upstream patch. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/php: set MySQL socket pathFloris Bos2016-09-181-0/+5
| | | | | | | | Set the PHP default MySQL socket path to match what the mysql package is using. Signed-off-by: Floris Bos <bos@je-eigen-domein.nl> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: bump to 7.0.11Tatsuyuki Ishi2016-09-172-2/+2
| | | | | Signed-off-by: Tatsuyuki Ishi <ishitatsuyuki@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/php: explicitly disable phpdbgTheo Debrouwere2016-09-081-0/+1
| | | | | | | | When building php, the package will also build/install phpdbg. This patch explicitly disables this behaviour. Signed-off-by: Theo Debrouwere <t.debrouwere@televic.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/php: switch from libmysqlclient to mysqlndFloris Bos2016-09-062-16/+2
| | | | | | | | | | | | | | | The Mysql Native Driver has been the default mysql driver since PHP 5.4, but buildroot was still using libmysqlclient. Mysqlnd has several advantages such as improved memory management and the more favorable PHP licensing terms. (can combine it with proprietary PHP extensions like Ioncube loader, while libmysqlclient requires commercial licensing if you link to it and do not fall under their GPL/FOSS license exception) Signed-off-by: Floris Bos <bos@je-eigen-domein.nl> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: add patch to fix static library buildThomas Petazzoni2016-08-101-0/+47
| | | | | | | | | | | This commit adds a patch to PHP which fixes the build for BR2_STATIC_LIBS=y configurations. Fixes: http://autobuild.buildroot.net/results/885f418cc26c6832a8a9abf703aecbeea8fbe550/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: rework patches as Git formatted patchesThomas Petazzoni2016-08-107-50/+109
| | | | Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* php: bump version to 7.0.9Vicente Olivert Riera2016-07-212-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/php: move list of extensions after interface selectionYann E. MORIN2016-07-041-2/+2
| | | | | | Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/php: security bump version to 7.0.8Bernd Kuhls2016-06-262-2/+2
| | | | | | | | | | | | | | | Changelog is available here: http://php.net/ChangeLog-7.php#7.0.8 Fixes CVE-2015-8874 http://bugs.php.net/66387 Fixes CVE-2016-5766 http://bugs.php.net/72339 Fixes CVE-2016-5767 http://bugs.php.net/72446 Fixes CVE-2016-5768 http://bugs.php.net/72402 Fixes CVE-2016-5769 http://bugs.php.net/72455 Fixes CVE-2016-5772 http://bugs.php.net/72340 Fixes CVE-2016-5773 http://bugs.php.net/72434 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
OpenPOWER on IntegriCloud