diogo/symfony
Archived
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
This repository has been archived on 2023-08-20. You can view files and clone it, but cannot push or open issues or pull requests.
613910bc9f
symfony/src/Symfony/Component/HttpFoundation/Tests
History
Fabien Potencier 613910bc9f bug #16177 [HttpFoundation] Fixes /0 subnet handling in IpUtils (ultrafez) 
This PR was squashed before being merged into the 2.3 branch (closes #16177).

Discussion
----------

[HttpFoundation] Fixes /0 subnet handling in IpUtils

| Q             | A
| ------------- | ---
| Bug fix?      | yes
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | #16055
| License       | MIT
| Doc PR        | Not needed

Fixes bug #16055. For IP addresses with CIDR subnet length 0, the IP address must be valid - IPs with subnet masks greater than zero are implicitly validated due to the use of `ip2long` and `substr_compare` (although it's not particularly robust - there could be some future work to improve this here).

Commits
-------

d9ac571 [HttpFoundation] Fixes /0 subnet handling in IpUtils
2015-10-19 13:54:32 +02:00
..
File Windows and Intl fixes 2015-08-25 23:41:39 +02:00
Session [2.3] Cherry-pick @group time-sensitive annotations 2015-10-12 13:59:00 +02:00
AcceptHeaderItemTest.php fixed CS 2014-09-22 10:32:35 +02:00
AcceptHeaderTest.php [HttpFoundation] Fix AcceptHeader 2012-11-13 17:18:54 +01:00
ApacheRequestTest.php Remove aligned '=>' and '=' 2014-10-26 08:30:58 +01:00
BinaryFileResponseTest.php Windows and Intl fixes 2015-08-25 23:41:39 +02:00
CookieTest.php [Http*] Mock time() to fix transient tests 2015-10-13 16:19:21 +02:00
FileBagTest.php fixed CS 2014-09-22 10:32:35 +02:00
HeaderBagTest.php CS: Pre incrementation/decrementation should be used if possible 2015-04-07 19:54:22 +02:00
IpUtilsTest.php bug #16177 [HttpFoundation] Fixes /0 subnet handling in IpUtils (ultrafez) 2015-10-19 13:54:32 +02:00
JsonResponseTest.php [HttpFoundation] Fix to prevent magic bytes injection in JSONP responses (Prevents CVE-2014-4671) 2014-07-10 09:27:11 -04:00
ParameterBagTest.php CS: Pre incrementation/decrementation should be used if possible 2015-04-07 19:54:22 +02:00
RedirectResponseTest.php CS fixes 2014-12-03 20:10:26 +00:00
RequestMatcherTest.php fixed CS 2014-09-22 10:32:35 +02:00
RequestTest.php [tests] Use @requires annotation when possible 2015-10-10 10:57:40 +02:00
ResponseHeaderBagTest.php [2.3] Cherry-pick @group time-sensitive annotations 2015-10-12 13:59:00 +02:00
ResponseTest.php [Http*] Mock time() to fix transient tests 2015-10-13 16:19:21 +02:00
ResponseTestCase.php added missing license blocks 2013-04-22 06:29:54 +02:00
ServerBagTest.php Handled bearer authorization header in REDIRECT_ form 2015-02-10 11:35:13 +08:00
StreamedResponseTest.php StreamedResponseTest 2012-09-01 07:57:21 -04:00