#47701 [Com]: print_r sends output when $return set to true if memory limit is reached

ID: 47701 Comment by: mmcnicklebugs at googlemail dot com Reported By: paul at paulmcgarry dot com Status: Open Bug Type: Unknown/Other Function Operating System: Linux PHP Version: 5.2.9 New Comment: This has been fixed in CVS. -- Martin McNickle Previous Comments: ------------------------------------------------------------------------ [2009-03-18 02:37:31] paul at paulmcgarry dot com Description: ------------ This relates to Bug #47020 which I believe has incorrectly set to bogus. I have been using print_r() while processing $errcontext in an error handling function, ie one registered with set_error_handler() It seems that when print_r() hits the memory limit it exposes my entire error context to the user. print_r having a failure mode where it exposes potentially private data to the user is a security issue. If it can't be fixed easily then it should be documented. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=47701&edit=1