Merge branch 'PHP-5.3' of https://git.php.net/repository/php-src into…

… PHP-5.3

* 'PHP-5.3' of https://git.php.net/repository/php-src:
  Merge PHP 5.3.27 NEWS
  add test for bug #65236

NEWS

@@ -2,12 +2,7 @@ PHP                                                                        NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 ?? ??? 2013, PHP 5.3.28
 
-?? ??? 2013, PHP 5.3.27
-
-###
-### DO NOT ADD ENTRIES HERE
-### All entries go to 5.3.28
-###
+11 Jul 2013, PHP 5.3.27
 
 - Core:
   . Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC). (Laruence)
@@ -35,6 +30,9 @@ PHP                                                                        NEWS
   . Fixed bug #64997 (Segfault while using RecursiveIteratorIterator on 
     64-bits systems). (Laruence)
 
+- XML:
+  . Fixed bug #65236 (heap corruption in xml parser). (Rob)
+
 06 Jun 2013, PHP 5.3.26
 
 - Core:

ext/xml/tests/bug65236.phpt

@@ -0,0 +1,15 @@
+--TEST--
+Bug #65236 (heap corruption in xml parser)
+--SKIPIF--
+<?php
+require_once("skipif.inc");
+?>
+--FILE--
+<?php
+xml_parse_into_struct(xml_parser_create_ns(), str_repeat("<blah>", 1000), $a);
+
+echo "Done\n";
+?>
+--EXPECTF--
+Warning: xml_parse_into_struct(): Maximum depth exceeded - Results truncated in %s on line %d
+Done