Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  Fixed bug #67081 DOMDocumentType->internalSubset returns entire DOCTYPE tag, not only the subset
updated NEWS
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  updated NEWS
  Fixed bug #67081 DOMDocumentType->internalSubset returns entire DOCTYPE tag, not only the subset
updated NEWS
Merge branch 'PHP-5.6'

* PHP-5.6:
  updated NEWS
  updated NEWS
  Fixed bug #67081 DOMDocumentType->internalSubset returns entire DOCTYPE tag, not only the subset
correct the bug #67081 fix
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  correct the bug #67081 fix
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  correct the bug #67081 fix
Merge branch 'PHP-5.6'

* PHP-5.6:
  correct the bug #67081 fix
updated UPGRADING
updated UPGRADING
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  updated UPGRADING
Merge branch 'PHP-5.6'

* PHP-5.6:
  updated UPGRADING
  updated UPGRADING
Also check for length to not segfault
command tokens just available at the beginning now
Commented out a few PHPDBG_IS_QUITTING checks to fix bug
If it does not work, please revert...
Fixed bug #67072 Echoing unserialized "SplFileObject" crash

The actual issue lays in the unserializer code which doesn't honor
the unserialize callback. By contrast, the serialize callback is
respected. This leads to the situation that even if a class has
disabled the serialization explicitly, user could still construct
a vulnerable string which would result bad things when trying
to unserialize.

This conserns also the classes implementing Serializable as well
as some core classes disabling serialize/unserialize callbacks
explicitly (PDO, SimpleXML, SplFileInfo and co). As of now, the
flow is first to call the unserialize callback (if available),
then call __wakeup. If the unserialize callback returns with no
success, no object is instantiated. This makes the scheme used
by internal classes effective, to disable unserialize just assign
zend_class_unserialize_deny as callback.
Merge branch 'PHP-5.4' into PHP-5.5

* PHP-5.4:
  Fixed bug #67072 Echoing unserialized "SplFileObject" crash

Conflicts:
	ext/standard/var_unserializer.c
updated NEWS
Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
  updated NEWS
  Fixed bug #67072 Echoing unserialized "SplFileObject" crash