Commit 235d590c authored by Riccardo Padovani's avatar Riccardo Padovani

Updated Drupal to v7.34

parent ce8917ae
Drupal 7.34, 2014-11-19
----------------------
- Fixed security issues (multiple vulnerabilities). See SA-CORE-2014-006.
Drupal 7.33, 2014-11-07 Drupal 7.33, 2014-11-07
----------------------- -----------------------
- Began storing the file modification time of each module and theme in the - Began storing the file modification time of each module and theme in the
......
...@@ -8,7 +8,7 @@ ...@@ -8,7 +8,7 @@
/** /**
* The current system version. * The current system version.
*/ */
define('VERSION', '7.33'); define('VERSION', '7.34');
/** /**
* Core API compatibility. * Core API compatibility.
......
...@@ -140,7 +140,7 @@ function _password_enforce_log2_boundaries($count_log2) { ...@@ -140,7 +140,7 @@ function _password_enforce_log2_boundaries($count_log2) {
* @param $algo * @param $algo
* The string name of a hashing algorithm usable by hash(), like 'sha256'. * The string name of a hashing algorithm usable by hash(), like 'sha256'.
* @param $password * @param $password
* The plain-text password to hash. * Plain-text password up to 512 bytes (128 to 512 UTF-8 characters) to hash.
* @param $setting * @param $setting
* An existing hash or the output of _password_generate_salt(). Must be * An existing hash or the output of _password_generate_salt(). Must be
* at least 12 characters (the settings and salt). * at least 12 characters (the settings and salt).
...@@ -150,6 +150,10 @@ function _password_enforce_log2_boundaries($count_log2) { ...@@ -150,6 +150,10 @@ function _password_enforce_log2_boundaries($count_log2) {
* The return string will be truncated at DRUPAL_HASH_LENGTH characters max. * The return string will be truncated at DRUPAL_HASH_LENGTH characters max.
*/ */
function _password_crypt($algo, $password, $setting) { function _password_crypt($algo, $password, $setting) {
// Prevent DoS attacks by refusing to hash large passwords.
if (strlen($password) > 512) {
return FALSE;
}
// The first 12 characters of an existing hash are its setting string. // The first 12 characters of an existing hash are its setting string.
$setting = substr($setting, 0, 12); $setting = substr($setting, 0, 12);
......
...@@ -79,7 +79,7 @@ function _drupal_session_read($sid) { ...@@ -79,7 +79,7 @@ function _drupal_session_read($sid) {
// Handle the case of first time visitors and clients that don't store // Handle the case of first time visitors and clients that don't store
// cookies (eg. web crawlers). // cookies (eg. web crawlers).
$insecure_session_name = substr(session_name(), 1); $insecure_session_name = substr(session_name(), 1);
if (!isset($_COOKIE[session_name()]) && !isset($_COOKIE[$insecure_session_name])) { if (empty($sid) || (!isset($_COOKIE[session_name()]) && !isset($_COOKIE[$insecure_session_name]))) {
$user = drupal_anonymous_user(); $user = drupal_anonymous_user();
return ''; return '';
} }
......
...@@ -7,8 +7,8 @@ files[] = aggregator.test ...@@ -7,8 +7,8 @@ files[] = aggregator.test
configure = admin/config/services/aggregator/settings configure = admin/config/services/aggregator/settings
stylesheets[all][] = aggregator.css stylesheets[all][] = aggregator.css
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ version = VERSION ...@@ -5,8 +5,8 @@ version = VERSION
core = 7.x core = 7.x
hidden = TRUE hidden = TRUE
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -6,8 +6,8 @@ core = 7.x ...@@ -6,8 +6,8 @@ core = 7.x
files[] = block.test files[] = block.test
configure = admin/structure/block configure = admin/structure/block
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ version = VERSION ...@@ -5,8 +5,8 @@ version = VERSION
core = 7.x core = 7.x
hidden = TRUE hidden = TRUE
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -13,8 +13,8 @@ regions[footer] = Footer ...@@ -13,8 +13,8 @@ regions[footer] = Footer
regions[highlighted] = Highlighted regions[highlighted] = Highlighted
regions[help] = Help regions[help] = Help
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ version = VERSION ...@@ -5,8 +5,8 @@ version = VERSION
core = 7.x core = 7.x
files[] = blog.test files[] = blog.test
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -7,8 +7,8 @@ files[] = book.test ...@@ -7,8 +7,8 @@ files[] = book.test
configure = admin/content/book/settings configure = admin/content/book/settings
stylesheets[all][] = book.css stylesheets[all][] = book.css
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ version = VERSION ...@@ -5,8 +5,8 @@ version = VERSION
core = 7.x core = 7.x
files[] = color.test files[] = color.test
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -9,8 +9,8 @@ files[] = comment.test ...@@ -9,8 +9,8 @@ files[] = comment.test
configure = admin/content/comment configure = admin/content/comment
stylesheets[all][] = comment.css stylesheets[all][] = comment.css
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -6,8 +6,8 @@ core = 7.x ...@@ -6,8 +6,8 @@ core = 7.x
files[] = contact.test files[] = contact.test
configure = admin/structure/contact configure = admin/structure/contact
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ version = VERSION ...@@ -5,8 +5,8 @@ version = VERSION
core = 7.x core = 7.x
files[] = contextual.test files[] = contextual.test
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -7,8 +7,8 @@ files[] = dashboard.test ...@@ -7,8 +7,8 @@ files[] = dashboard.test
dependencies[] = block dependencies[] = block
configure = admin/dashboard/customize configure = admin/dashboard/customize
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ version = VERSION ...@@ -5,8 +5,8 @@ version = VERSION
core = 7.x core = 7.x
files[] = dblog.test files[] = dblog.test
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -11,8 +11,8 @@ dependencies[] = field_sql_storage ...@@ -11,8 +11,8 @@ dependencies[] = field_sql_storage
required = TRUE required = TRUE
stylesheets[all][] = theme/field.css stylesheets[all][] = theme/field.css
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -7,8 +7,8 @@ dependencies[] = field ...@@ -7,8 +7,8 @@ dependencies[] = field
files[] = field_sql_storage.test files[] = field_sql_storage.test
required = TRUE required = TRUE
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -7,8 +7,8 @@ dependencies[] = field ...@@ -7,8 +7,8 @@ dependencies[] = field
dependencies[] = options dependencies[] = options
files[] = tests/list.test files[] = tests/list.test
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ package = Testing ...@@ -5,8 +5,8 @@ package = Testing
version = VERSION version = VERSION
hidden = TRUE hidden = TRUE
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -6,8 +6,8 @@ core = 7.x ...@@ -6,8 +6,8 @@ core = 7.x
dependencies[] = field dependencies[] = field
files[] = number.test files[] = number.test
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -6,8 +6,8 @@ core = 7.x ...@@ -6,8 +6,8 @@ core = 7.x
dependencies[] = field dependencies[] = field
files[] = options.test files[] = options.test
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -7,8 +7,8 @@ dependencies[] = field ...@@ -7,8 +7,8 @@ dependencies[] = field
files[] = text.test files[] = text.test
required = TRUE required = TRUE
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -6,8 +6,8 @@ files[] = field_test.entity.inc ...@@ -6,8 +6,8 @@ files[] = field_test.entity.inc
version = VERSION version = VERSION
hidden = TRUE hidden = TRUE
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -6,8 +6,8 @@ core = 7.x ...@@ -6,8 +6,8 @@ core = 7.x
dependencies[] = field dependencies[] = field
files[] = field_ui.test files[] = field_ui.test
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -6,8 +6,8 @@ core = 7.x ...@@ -6,8 +6,8 @@ core = 7.x
dependencies[] = field dependencies[] = field
files[] = tests/file.test files[] = tests/file.test
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ version = VERSION ...@@ -5,8 +5,8 @@ version = VERSION
core = 7.x core = 7.x
hidden = TRUE hidden = TRUE
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -7,8 +7,8 @@ files[] = filter.test ...@@ -7,8 +7,8 @@ files[] = filter.test
required = TRUE required = TRUE
configure = admin/config/content/formats configure = admin/config/content/formats
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -9,8 +9,8 @@ files[] = forum.test ...@@ -9,8 +9,8 @@ files[] = forum.test
configure = admin/structure/forum configure = admin/structure/forum
stylesheets[all][] = forum.css stylesheets[all][] = forum.css
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ version = VERSION ...@@ -5,8 +5,8 @@ version = VERSION
core = 7.x core = 7.x
files[] = help.test files[] = help.test
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -7,8 +7,8 @@ dependencies[] = file ...@@ -7,8 +7,8 @@ dependencies[] = file
files[] = image.test files[] = image.test
configure = admin/config/media/image-styles configure = admin/config/media/image-styles
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -6,8 +6,8 @@ core = 7.x ...@@ -6,8 +6,8 @@ core = 7.x
files[] = image_module_test.module files[] = image_module_test.module
hidden = TRUE hidden = TRUE
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -6,8 +6,8 @@ core = 7.x ...@@ -6,8 +6,8 @@ core = 7.x
files[] = locale.test files[] = locale.test
configure = admin/config/regional/language configure = admin/config/regional/language
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ package = Testing ...@@ -5,8 +5,8 @@ package = Testing
version = VERSION version = VERSION
hidden = TRUE hidden = TRUE
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -6,8 +6,8 @@ core = 7.x ...@@ -6,8 +6,8 @@ core = 7.x
files[] = menu.test files[] = menu.test
configure = admin/structure/menu configure = admin/structure/menu
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -9,8 +9,8 @@ required = TRUE ...@@ -9,8 +9,8 @@ required = TRUE
configure = admin/structure/types configure = admin/structure/types
stylesheets[all][] = node.css stylesheets[all][] = node.css
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ version = VERSION ...@@ -5,8 +5,8 @@ version = VERSION
core = 7.x core = 7.x
hidden = TRUE hidden = TRUE
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ version = VERSION ...@@ -5,8 +5,8 @@ version = VERSION
core = 7.x core = 7.x
hidden = TRUE hidden = TRUE
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ version = VERSION ...@@ -5,8 +5,8 @@ version = VERSION
core = 7.x core = 7.x
hidden = TRUE hidden = TRUE
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal" project = "drupal"
datestamp = "1415375131" datestamp = "1416429488"
...@@ -5,8 +5,8 @@ package = Core ...@@ -5,8 +5,8 @@ package = Core
core = 7.x core = 7.x
files[] = openid.test files[] = openid.test
; Information added by Drupal.org packaging script on 2014-11-07 ; Information added by Drupal.org packaging script on 2014-11-19
version = "7.33" version = "7.34"
project = "drupal"