Req #67713 [Asn->Csd]: loosen the restrictions on ReflectionClass::newInstanceWithoutConstructor()
| From: | tyrael@php.net | Date: | Wed, 30 Jul 2014 08:52:13 +0000 |
| Subject: | Req #67713 [Asn->Csd]: loosen the restrictions on ReflectionClass::newInstanceWithoutConstructor() | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-186875@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=67713&edit=1
ID: 67713
Updated by: tyrael@php.net
Reported by: tyrael@php.net
Summary: loosen the restrictions on
ReflectionClass::newInstanceWithoutConstructor()
-Status: Assigned
+Status: Closed
Type: Feature/Change Request
Package: Reflection related
PHP Version: 5.6.0RC2
Assigned To: tyrael
Block user comment: N
Private report: N
New Comment:
The fix for this bug has been committed.
Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
For Windows:
http://windows.php.net/snapshots/
Thank you for the report, and for helping us make PHP better.
Previous Comments:
------------------------------------------------------------------------
[2014-07-30 08:39:40] tyrael@php.net
Description:
------------
with the removal of the unserialize O: bypass in https://bugs.php.net/bug.php?id=67072 now a bunch
of userland tools are broken with 5.6, as there is no easy way to instantiate internal classes
without calling their constructors.
as explained on the mailing list(http://www.serverphorums.com/read.php?7,959450,987654#msg-987654)
and in the pull request(https://github.com/php/php-src/pull/733), the current limitation in the
Reflection::newInstanceWithoutConstructor() method is rather arbitrary, so making it less rigid
would allow the affected userland libs/tools to have a clear upgrade path.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=67713&edit=1