Req #67713 [NEW]: loosen the restrictions on ReflectionClass::newInstanceWithoutConstructor()
| From: | tyrael@php.net | Date: | Wed, 30 Jul 2014 08:39:42 +0000 |
| Subject: | Req #67713 [NEW]: loosen the restrictions on ReflectionClass::newInstanceWithoutConstructor() | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-186874@lists.php.net to get a copy of this message | ||
From: tyrael
Operating system:
PHP version: 5.6.0RC2
Package: Reflection related
Bug Type: Feature/Change Request
Bug description:loosen the restrictions on ReflectionClass::newInstanceWithoutConstructor()
Description:
------------
with the removal of the unserialize O: bypass in
https://bugs.php.net/bug.php?id=67072 now a
bunch of userland tools are
broken with 5.6, as there is no easy way to instantiate internal classes
without calling their constructors.
as explained on the mailing
list(http://www.serverphorums.com/read.php?7,959450,987654#msg-987654)
and in the pull request(https://github.com/php/php-src/pull/733), the
current limitation in the Reflection::newInstanceWithoutConstructor()
method is rather arbitrary, so making it less rigid would allow the
affected userland libs/tools to have a clear upgrade path.
--
Edit bug report at https://bugs.php.net/bug.php?id=67713&edit=1
--