[PHP-DEV] PHP 7.0.23RC1 is available for testing

2017-08-17 Thread Anatol Belski
Hi, PHP 7.0.23 RC1 was just released and can be downloaded from: https://downloads.php.net/~ab/ The Windows binaries are available at http://windows.php.net/qa/ This release contains a number of bugfixes. For the list of bugfixes that you can target in your testing, please refer to th

[PHP-DEV] PHP 7.2.0 Beta 2 released

2017-08-17 Thread Remi Collet
The third and final Beta for 7.2.0 was just released and can be downloaded from: https://downloads.php.net/~remi/ Or using the git tag: php-7.2.0beta3 The Windows binaries are available at: http://windows.php.net/qa/ THIS IS A DEVELOPMENT PREVIEW - DO NOT USE IT IN PRODUCTION! Please tes

[PHP-DEV] Re: [PHP-WEBMASTER] Subscribe Function Seems to be down for several days

2017-08-17 Thread Jan Ehrhardt
Alan Feuerbacher in php.internals (Wed, 16 Aug 2017 15:33:10 -0600): >On 8/16/2017 10:25 AM, Hannes Magnusson wrote: >> If that still doesn't work, try sending empty mail to >> -subscr...@lists.php.net >> (e.g. internals-subscr...@lists.php.net) > >general-subscr...@lists.php.net Try php-general-s

Re: [PHP-DEV] PHP 7.1.0 to 7.2.0beta2 mt_rand() modulo bias bug

2017-08-17 Thread Solar Designer
On Thu, Aug 17, 2017 at 12:57:56AM +0200, Nikita Popov wrote: > On Thu, Aug 17, 2017 at 12:02 AM, Solar Designer wrote: > > One difference I didn't notice at first: the currently committed code > > does only one php_mt_rand() call per loop iteration when it's skipping > > "numbers over the limit",

[PHP-DEV] Re: [Request][Discussion] Double value as array key improvement

2017-08-17 Thread Andrew Nester
> 13 авг. 2017 г., в 21:39, Andrew Nester > написал(а): > > > >> 11 авг. 2017 г., в 15:53, Andrew Nester написал(а): >> >> >>> On Aug 11, 2017, at 2:10 PM, Andrew Nester wrote: >>> >>> Hello everyone! >>> >>> I was working on following request https://bugs.php.net/bug.php?id=75053 >>>

Re: [PHP-DEV] Unserialize security policy

2017-08-17 Thread Andrea Faulds
Hi, Stanislav Malyshev wrote: Hi! The two main points are: 1. While it's true that if you're using unserialize() on untrusted input you are most likely going to be vulnerable due to object injection, it may be quite hard for an attacker to exploit this for closed source Objects are not the p

Re: [PHP-DEV] Re: [Request][Discussion] Double value as array key improvement

2017-08-17 Thread David Rodrigues
Just reposting to internals: David wrote: > If the key is user dependent (eg. Input from form), could it causes a warning too, right? I think that it should be considered a BC. Andrew Nester wrote: > Yes, warning will be emitted in this case as well but actual index will remain the same. > I coul

[PHP-DEV] NEUTRAL Benchmark Results for PHP Master 2017-08-16

2017-08-17 Thread lp_benchmark_robot
Results for project PHP master, build date 2017-08-16 19:23:04-07:00 commit: 21cd57e previous commit:869fcce revision date: 2017-08-16 17:05:47+02:00 environment:Haswell-EP cpu:Intel(R) Xeon(R) CPU E5-2699 v3 @ 2.30GHz 2x18 cores, stepping 2, LLC 45 MB

[PHP-DEV] PHP 7.1.9RC1 available for testing

2017-08-17 Thread Joe Watkins
Morning everyone, PHP 7.1.9RC1 is available for testing and can be downloaded from: https://downloads.php.net/~krakjoe The windows binaries are available at: http://windows.php.net/qa This is a bugfix release, for a list of fixes please see: https://github.com/php/php-src/blob/php-7.1.9RC1/NE