Released 2.0.11

Author: rlerdorf

CHANGELOG.md

@@ -0,0 +1,72 @@
+# Changelog
+
+## 2.0.11 - 2026-04-06
+
+* Fix segfault when OAuthProvider callback handler throws an exception (issue #27)
+* Replace deprecated cURL `curl_formadd()` API with MIME API for multipart form uploads (issue #37)
+* Fix double free in OAuth destructor for `headers_in` and `headers_out`
+* Fix dangling pointers in multipart file/param storage by copying strings
+* Fix invalid free of shifted multipart param pointers
+* Fix memory leak in OAuthProvider auth header parsing
+* Fix memory leak in OAuthProvider callback registration on invalid callback type
+* Add multipart array cleanup in destructor for exception safety
+* Add GitHub Actions CI for PHP 8.1-8.5
+
+## 2.0.10 - 2025-10-09
+
+* Fix PHP 8.5 compatibility
+
+## 2.0.9 - 2024-10-08
+
+* Fix PHP 8.3 deprecations
+* Fix PHP 8.4 compatibility
+
+## 2.0.8 - 2022-04-21
+
+* Fix sporadic segfault in checkOAuthRequest
+
+## 2.0.7 - 2020-09-18
+
+* PHP 8 compatibility
+
+## 2.0.6 - 2020-09-09
+
+* Fix github issue #14 (Fixes for 7.3/7.4 and opcache)
+* Fix PHP 7.4 compatibility of object handler
+* Fix memory leaks in OAuthProvider
+* Fix crash in OAuthProvider handler registration methods due to unconditional addref
+* Fix crash in OAuth::fetch() due to modifying hash tables with a refcount>1
+
+## 2.0.5 - 2020-02-06
+
+* Fix config.w32 (cmb)
+* Fix 7.3 segfault (rlerdorf)
+* Replace uint/uint32_t, ulong/zend_ulong (Jan-E)
+* Handle cases where a passed in array might be a const (keyurdg)
+* Fix configure for recent cURL versions (cmb)
+* Bug #76722 cURL library headers not recognized on Debian 9 (js361014)
+
+## 2.0.4 - 2019-12-02
+
+* Fix php_pcre_match_impl call in 7.4+ (Remi)
+
+## 2.0.3 - 2018-09-30
+
+* Use _ex versions to avoid SIGABRT during use of hash functions in 7.2+ (Derick Rethans)
+
+## 2.0.2 - 2018-06-28
+
+* Fix bug #74163: Segfault in oauth_compare_value
+* Fix bug #73434: Null byte at end of array keys in getLastResponseInfo
+* Fix compatibility with PHP 7.3
+
+## 2.0.1 - 2016-03-11
+
+* Fix multiple segfaults (kgovande, rlerdorf)
+
+## 2.0.0 - 2016-01-02
+
+* PHP 7 Support
+* Bug #67658: configure does not detect missing pcre.h
+* Bug #67665: update fetch to accept 20X HTTP ranges
+* Bug #67883: check SERVER[REDIRECT_HTTP_AUTHORIZATION] for the Authorization header

composer.json

@@ -0,0 +1,23 @@
+{
+    "name": "php/pecl-oauth",
+    "type": "php-ext",
+    "description": "OAuth 1.0 consumer and provider extension",
+    "license": "BSD-3-Clause",
+    "require": {
+        "php": ">=7.1.0",
+        "ext-hash": "*"
+    },
+    "php-ext": {
+        "extension-name": "oauth",
+        "configure-options": [
+            {
+                "name": "enable-oauth",
+                "description": "Include oauth support"
+            },
+            {
+                "name": "without-curl",
+                "description": "Ignore presence of cURL and disable it"
+            }
+        ]
+    }
+}

package.xml

@@ -47,9 +47,9 @@ Requirements: ext/hash (now a part of PHP core)
     <email>mike@php.net</email>
     <active>yes</active>
   </lead>
-  <date>2025-10-09</date>
+  <date>2026-04-06</date>
   <version>
-    <release>2.0.10</release>
+    <release>2.0.11</release>
     <api>2.0</api>
   </version>
   <stability>
@@ -59,11 +59,21 @@ Requirements: ext/hash (now a part of PHP core)
   <license uri="http://www.opensource.org/licenses/bsd-license.php">BSD</license>
   <notes>
 <![CDATA[
-    * Fix PHP-8.5 compatibility
+    * Fix segfault when OAuthProvider callback throws an exception (#27)
+    * Replace deprecated cURL curl_formadd() API with MIME API (#37)
+    * Fix double free in destructor for headers_in/headers_out
+    * Fix dangling pointers in multipart file/param storage
+    * Fix invalid free of shifted multipart param pointers
+    * Fix memory leak in provider auth header parsing
+    * Fix memory leak in provider callback registration
+    * Add GitHub Actions CI
+    * Add PIE support (composer.json)
 ]]>
   </notes>
   <contents>
     <dir name="/">
+      <file name="CHANGELOG.md" role="doc" />
+      <file name="composer.json" role="src" />
       <file name="config.m4" role="src" />
       <file name="config.w32" role="src" />
       <file name="oauth.c" role="src" />
@@ -151,6 +161,7 @@ Requirements: ext/hash (now a part of PHP core)
         <file name="oauthprovider_006.phpt" role="test" />
         <file name="oauthprovider_007.phpt" role="test" />
         <file name="oauthprovider_008.phpt" role="test" />
+        <file name="oauthprovider_009.phpt" role="test" />
         <file name="oauth_curl_debug_handler.phpt" role="test" />
         <file name="oauth_reqtoken.phpt" role="test" />
         <file name="oauth_sbs.phpt" role="test" />
@@ -187,6 +198,24 @@ Requirements: ext/hash (now a part of PHP core)
   </extsrcrelease>
   <changelog>
 
+  <release>
+    <date>2025-10-09</date>
+    <version>
+      <release>2.0.10</release>
+      <api>2.0</api>
+    </version>
+    <stability>
+      <release>stable</release>
+      <api>stable</api>
+    </stability>
+    <license uri="http://www.opensource.org/licenses/bsd-license.php">BSD</license>
+    <notes>
+<![CDATA[
+    * Fix PHP-8.5 compatibility
+]]>
+    </notes>
+  </release>
+
   <release>
     <date>2024-10-08</date>
     <version>

php_oauth.h

@@ -73,7 +73,7 @@
 	curl_formfree(f);
 #endif
 
-#define PHP_OAUTH_VERSION 2.0.10
+#define PHP_OAUTH_VERSION 2.0.11
 
 #define __stringify_1(x)    #x
 #define __stringify(x)      __stringify_1(x)