Pullup ticket #5159 - requested by taca
lang/php71: security fix

Revisions pulled up:
- lang/php71/Makefile                                          1.4
- lang/php71/distinfo                                          1.8-1.9

---
  Module Name: pkgsrc
  Committed By: jdolecek
  Date: Sat Nov  5 14:30:31 UTC 2016

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php71: Makefile distinfo

  Log Message:
  Update php71 to 7.1.0RC5.

  Changes between RC4 and RC5:

  - Core:
    . Fixed bug #73350 (Exception::__toString() cause circular references).
      (Laruence)
    . Fixed bug #73329 ((Float)"Nano" == NAN). (Anatol)

  - CLI Server:
    . Fixed bug #73360 (Unable to work in root with unicode chars). (Anatol)

  - SQLite3:
    . Fixed bug #73333 (2147483647 is fetched as string). (cmb)

  Change since RC3 and RC4:

  - Core:
    . Fixed bug #73288 (Segfault in __clone > Exception.toString > __get).
      (Laruence)
    . Fixed for #73240 (Write out of bounds at number_format). (Stas)
    . Fix pthreads detection when cross-compiling (ffontaine)
    . Fixed bug #73337 (try/catch not working with two exceptions inside a same
      operation). (Dmitry)

  - BCmath:
    . Fix bug #73190 (memcpy negative parameter _bc_new_num_ex). (Stas)

  - Date:
    . Fixed bug #45554 (Inconsistent behavior of the u format char). (Derick)
    . Fixed bug #48225 (DateTime parser doesn't set microseconds for "now").
      (Derick)
    . Fixed bug #52514 (microseconds are missing in DateTime class). (Derick)
    . Fixed bug #52519 (microseconds in DateInterval are missing). (Derick)
    . Fixed bug #60089 (DateTime::createFromFormat() U after u nukes microtime).
      (Derick)
    . Fixed bug #64887 (Allow DateTime modification with subsecond items).
      (Derick)
    . Fixed bug #68506 (General DateTime improvments needed for microseconds to
      become useful). (Derick)
    . Fixed bug #73109 (timelib_meridian doesn't parse dots correctly). (Derick)
    . Fixed bug #73247 (DateTime constructor does not initialise microseconds
      property). (Derick)
    . Fixed bug #73147 (Use After Free in PHP7 unserialize()). (Stas)
    . Fixed bug #73189 (Memcpy negative size parameter php_resolve_path). (Stas)

  - DOM:
    . Fixed bug #73150 (missing NULL check in dom_document_save_html). (Stas)

  - GD:
    . Fixed bug #73213 (Integer overflow in imageline() with antialiasing). (cmb)
    . Fixed bug #73272 (imagescale() is not affected by, but affects
      imagesetinterpolation()). (cmb)
    . Fixed bug #73279 (Integer overflow in gdImageScaleBilinearPalette()). (cmb)
    . Fixed bug #73280 (Stack Buffer Overflow in GD dynamicGetbuf). (cmb)

  - Intl:
    . Fixed bug #73007 (add locale length check). (Stas)
    . Fixed bug #73218 (add mitigation for ICU int overflow). (Stas)

  - OCI8
    . Fixed bug #71148 (Bind reference overwritten on PHP 7). (Oracle Corp.)

  - OpenSSL:
    . Fixed bug #73276 (crash in openssl_random_pseudo_bytes function). (Stas)

  - Session:
    . Fixed bug #73273 (session_unset() empties values from all variables in which
      is $_session stored). (Nikita)

  - SOAP:
    . Fixed bug #73037 (SoapServer reports Bad Request when gzipped). (Anatol)
    . Fixed bug #73237 (Nested object in "any" element overwrites other fields).
      (Keith Smiley)
    . Fixed bug #69137 (Peer verification fails when using a proxy with SoapClient)
      (Keith Smiley)

  - SimpleXML:
    . Fixed bug #73293 (NULL pointer dereference in SimpleXMLElement::asXML()).
      (Stas)

  - SQLite3:
    . Updated to SQLite3 3.15.0. (cmb)

  - Standard:
    . Fixed bug #73203 (passing additional_parameters causes mail to fail). (cmb)

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sat Nov 12 15:41:24 UTC 2016

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php71: distinfo

  Log Message:
  Update php71 to 7.1.0rc6 (PHP 7.1.0RC6), including security fix.

  10 Nov 2016, PHP 7.1.0RC6

  - Core:
    . Fixded bug #72736 (Slow performance when fetching large dataset with mysqli
      / PDO). (Dmitry)

  - Date:
    . Fixed bug #73426 (createFromFormat with 'z' format char results in
      incorrect time). (Derick)

  - JSON:
    . Introduced encoder struct instead of global which fixes bugs #66025 and
      #73254 related to pretty print indentation. (Jakub Zelenka)

  - ODBC:
    . Fixed bug #73448 (odbc_errormsg returns trash, always 513 bytes).
      (Anatol)

  - PCRE:
    . Fixed bug #73392 (A use-after-free in zend allocator management).
      (Laruence)

  - PDO_Firebird:
    . Fixed bug #73087, #61183, #71494 (Memory corruption in bindParam).
      (Dorin Marcoci)

  - SPL:
    . Fixed bug #73423 (Reproducible crash with GDB backtrace). (Laruence)

(bsiegert)