Req #65285 [Wfx]: socket_sendmsg() - accept numeric file descriptors
| From: | bugs dot php dot net at ss dot chernousov dot net | Date: | Thu, 18 Jul 2013 23:01:09 +0000 |
| Subject: | Req #65285 [Wfx]: socket_sendmsg() - accept numeric file descriptors | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-180333@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=65285&edit=1
ID: 65285
User updated by: bugs dot php dot net at ss dot chernousov dot net
Reported by: bugs dot php dot net at ss dot chernousov dot net
Summary: socket_sendmsg() - accept numeric file descriptors
Status: Wont fix
Type: Feature/Change Request
Package: Sockets related
PHP Version: 5.5Git-2013-07-18 (Git)
Block user comment: N
Private report: N
New Comment:
I see your point, quite reasonable.
But isn't it possible to limit it to cli sapi only, like php://fd?
Previous Comments:
------------------------------------------------------------------------
[2013-07-18 22:39:00] cataphract@php.net
Unfortunately, this kind of functionality has been strictly limited in the past
(php://fd has been limited to the cli sapi) under the rationale that it would
allow PHP to manipulate Apache's file descriptors (when running as module) or
whatever other file descriptors such as logs' or the the client connection
socket's.
I find the argument that this is a vulnerability unpersuasive, but that's the
conclusion that prevailed.
Won't fix.
------------------------------------------------------------------------
[2013-07-18 08:21:08] bugs dot php dot net at ss dot chernousov dot net
Description:
------------
It would be pretty useful if socket_sendmsg() could work not only with sockets,
but also with numeric file descriptors.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=65285&edit=1