fix: memory-safety bugs reachable from ordinary PHP - #12

Open

somethingwithproof wants to merge 14 commits into

somethingwithproof:fix/memory-safety

Commits on Aug 21, 2026

ci: build the test fixtures before running the suite
somethingwithproof
committed
fca1950
tests: refresh the rrd_tune and rrd_xport expectations
somethingwithproof
committed
109a553
fix: initialise the RRDCreator startTime parameter
somethingwithproof
committed
def9748
fix: validate object state before building rrd arguments
somethingwithproof
committed
c3f5957
fix: size the timestamp buffer for 64-bit time values
somethingwithproof
committed
f18be81
fix: reset the remaining creator state on re-construction
somethingwithproof
committed
d3c14d3
fix: define librrd's out-parameters before the guards read them
somethingwithproof
committed
2f12304
fix: apply open_basedir to RRDCreator::save and RRDGraph::saveVerbose
somethingwithproof
committed
bb33e61
fix: stop rewriting the caller's options array
somethingwithproof
committed
3bc872b
fix: abort argument building when a value cannot be converted
somethingwithproof
committed
2b7e58c
fix: pin the checked path and the options array across userland calls
somethingwithproof
committed
1f493e8
fix: hold a reference to the graph options while building the argument list
somethingwithproof
committed
657b1f3
fix: clear file_path on release and stop walking past the fetch result
somethingwithproof
committed
ef58376
tests: cover duplicate data source names, re-construction and unbuilt objects
somethingwithproof
committed
d9dc9cc