[PECL-CVS] [pecl-web_services-oauth] master: Released 2.0.11
[email protected] (Rasmus Lerdorf) Mon, 6 Apr 2026 10:56:09 +0000
| Newsgroups | php.pecl.cvs |
|---|---|
| Message-ID | <[email protected]> |
Author: Rasmus Lerdorf (rlerdorf)
Date: 2026-04-06T06:56:04-04:00
Commit: https://github.com/php/pecl-web_services-oauth/commit/f33755e223e8b6fd51ea018ab3c0460ef1806e5c
Raw diff: https://github.com/php/pecl-web_services-oauth/commit/f33755e223e8b6fd51ea018ab3c0460ef1806e5c.diff
Released 2.0.11
Changed paths:
A CHANGELOG.md
A composer.json
M package.xml
M php_oauth.h
Diff:
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..74b5e73
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,72 @@
+# Changelog
+
+## 2.0.11 - 2026-04-06
+
+* Fix segfault when OAuthProvider callback handler throws an exception (issue #27)
+* Replace deprecated cURL `curl_formadd()` API with MIME API for multipart form uploads (issue #37)
+* Fix double free in OAuth destructor for `headers_in` and `headers_out`
+* Fix dangling pointers in multipart file/param storage by copying strings
+* Fix invalid free of shifted multipart param pointers
+* Fix memory leak in OAuthProvider auth header parsing
+* Fix memory leak in OAuthProvider callback registration on invalid callback type
+* Add multipart array cleanup in destructor for exception safety
+* Add GitHub Actions CI for PHP 8.1-8.5
+
+## 2.0.10 - 2025-10-09
+
+* Fix PHP 8.5 compatibility
+
+## 2.0.9 - 2024-10-08
+
+* Fix PHP 8.3 deprecations
+* Fix PHP 8.4 compatibility
+
+## 2.0.8 - 2022-04-21
+
+* Fix sporadic segfault in checkOAuthRequest
+
+## 2.0.7 - 2020-09-18
+
+* PHP 8 compatibility
+
+## 2.0.6 - 2020-09-09
+
+* Fix github issue #14 (Fixes for 7.3/7.4 and opcache)
+* Fix PHP 7.4 compatibility of object handler
+* Fix memory leaks in OAuthProvider
+* Fix crash in OAuthProvider handler registration methods due to unconditional addref
+* Fix crash in OAuth::fetch() due to modifying hash tables with a refcount>1
+
+## 2.0.5 - 2020-02-06
+
+* Fix config.w32 (cmb)
+* Fix 7.3 segfault (rlerdorf)
+* Replace uint/uint32_t, ulong/zend_ulong (Jan-E)
+* Handle cases where a passed in array might be a const (keyurdg)
+* Fix configure for recent cURL versions (cmb)
+* Bug #76722 cURL library headers not recognized on Debian 9 (js361014)
+
+## 2.0.4 - 2019-12-02
+
+* Fix php_pcre_match_impl call in 7.4+ (Remi)
+
+## 2.0.3 - 2018-09-30
+
+* Use _ex versions to avoid SIGABRT during use of hash functions in 7.2+ (Derick Rethans)
+
+## 2.0.2 - 2018-06-28
+
+* Fix bug #74163: Segfault in oauth_compare_value
+* Fix bug #73434: Null byte at end of array keys in getLastResponseInfo
+* Fix compatibility with PHP 7.3
+
+## 2.0.1 - 2016-03-11
+
+* Fix multiple segfaults (kgovande, rlerdorf)
+
+## 2.0.0 - 2016-01-02
+
+* PHP 7 Support
+* Bug #67658: configure does not detect missing pcre.h
+* Bug #67665: update fetch to accept 20X HTTP ranges
+* Bug #67883: check SERVER[REDIRECT_HTTP_AUTHORIZATION] for the Authorization header
diff --git a/composer.json b/composer.json
new file mode 100644
index 0000000..388edba
--- /dev/null
+++ b/composer.json
@@ -0,0 +1,23 @@
+{
+ "name": "php/pecl-oauth",
+ "type": "php-ext",
+ "description": "OAuth 1.0 consumer and provider extension",
+ "license": "BSD-3-Clause",
+ "require": {
+ "php": ">=7.1.0",
+ "ext-hash": "*"
+ },
+ "php-ext": {
+ "extension-name": "oauth",
+ "configure-options": [
+ {
+ "name": "enable-oauth",
+ "description": "Include oauth support"
+ },
+ {
+ "name": "without-curl",
+ "description": "Ignore presence of cURL and disable it"
+ }
+ ]
+ }
+}
diff --git a/package.xml b/package.xml
index 6e1aae1..1077d50 100644
--- a/package.xml
+++ b/package.xml
@@ -47,9 +47,9 @@ Requirements: ext/hash (now a part of PHP core)
<email>[email protected]</email>
<active>yes</active>
</lead>
- <date>2025-10-09</date>
+ <date>2026-04-06</date>
<version>
- <release>2.0.10</release>
+ <release>2.0.11</release>
<api>2.0</api>
</version>
<stability>
@@ -59,11 +59,21 @@ Requirements: ext/hash (now a part of PHP core)
<license uri="http://www.opensource.org/licenses/bsd-license.php">BSD</license>
<notes>
<![CDATA[
- * Fix PHP-8.5 compatibility
+ * Fix segfault when OAuthProvider callback throws an exception (#27)
+ * Replace deprecated cURL curl_formadd() API with MIME API (#37)
+ * Fix double free in destructor for headers_in/headers_out
+ * Fix dangling pointers in multipart file/param storage
+ * Fix invalid free of shifted multipart param pointers
+ * Fix memory leak in provider auth header parsing
+ * Fix memory leak in provider callback registration
+ * Add GitHub Actions CI
+ * Add PIE support (composer.json)
]]>
</notes>
<contents>
<dir name="/">
+ <file name="CHANGELOG.md" role="doc" />
+ <file name="composer.json" role="src" />
<file name="config.m4" role="src" />
<file name="config.w32" role="src" />
<file name="oauth.c" role="src" />
@@ -151,6 +161,7 @@ Requirements: ext/hash (now a part of PHP core)
<file name="oauthprovider_006.phpt" role="test" />
<file name="oauthprovider_007.phpt" role="test" />
<file name="oauthprovider_008.phpt" role="test" />
+ <file name="oauthprovider_009.phpt" role="test" />
<file name="oauth_curl_debug_handler.phpt" role="test" />
<file name="oauth_reqtoken.phpt" role="test" />
<file name="oauth_sbs.phpt" role="test" />
@@ -187,6 +198,24 @@ Requirements: ext/hash (now a part of PHP core)
</extsrcrelease>
<changelog>
+ <release>
+ <date>2025-10-09</date>
+ <version>
+ <release>2.0.10</release>
+ <api>2.0</api>
+ </version>
+ <stability>
+ <release>stable</release>
+ <api>stable</api>
+ </stability>
+ <license uri="http://www.opensource.org/licenses/bsd-license.php">BSD</license>
+ <notes>
+<![CDATA[
+ * Fix PHP-8.5 compatibility
+]]>
+ </notes>
+ </release>
+
<release>
<date>2024-10-08</date>
<version>
diff --git a/php_oauth.h b/php_oauth.h
index 4203982..a73f34d 100644
--- a/php_oauth.h
+++ b/php_oauth.h
@@ -73,7 +73,7 @@
curl_formfree(f);
#endif
-#define PHP_OAUTH_VERSION 2.0.10
+#define PHP_OAUTH_VERSION 2.0.11
#define __stringify_1(x) #x
#define __stringify(x) __stringify_1(x)