Bug #54556 [Com]: array access to empty var does not trigger a notice

Edit report at https://bugs.php.net/bug.php?id=54556&edit=1 ID: 54556 Comment by: kevin dot sours at internetbrands dot com Reported by: kal dot el dot ias at gmx dot net Summary: array access to empty var does not trigger a notice Status: Verified Type: Bug Package: Scripting Engine problem Operating System: Ubuntu 10.04.2 LTS PHP Version: trunk-SVN-2011-04-18 (snap) Assigned To: dmitry Block user comment: N Private report: N New Comment: There has been a patch for this for 4 years? Any plans to land that in a release? Previous Comments: ------------------------------------------------------------------------ [2014-10-07 13:34:12] mathiasgrimm at gmail dot com I had the same a few days ago. This behaviour occurs since php 4. I have never noticed that before. https://bugs.php.net/bug.php?id=68110 ------------------------------------------------------------------------ [2013-02-12 16:45:06] gtisza at gmail dot com The same happens with every non-string scalar value, not just null: <?php error_reporting(E_ALL|E_STRICT); $arr = false; var_dump($arr['foo']['bar']['baz']); // NULL ?> This is a major problem as lots of data access functions return null or false if the key is not found (memcached for example, or may active record libraries), so this bug can easily lead to unexpected behavior. In unfortunate cases (e.g. trying to load a usergroup blacklist from database) it might even lead to authentication bypass vulnerabilities and other severe security issues. ------------------------------------------------------------------------ [2011-09-14 13:53:51] dmitry@php.net I've added a bit better patch (for trunk), but I'm not sure we need it. At least it "breaks" about 30 tests. ------------------------------------------------------------------------ [2011-09-14 13:51:04] dmitry@php.net The following patch has been added/updated: Patch Name: wrong-array-access.diff Revision: 1316008264 URL: https://bugs.php.net/patch-display.php?bug=54556&patch=wrong-array-access.diff&revision=1316008264 ------------------------------------------------------------------------ [2011-09-14 07:28:36] laruence@php.net dmitry, plz look at this, thanks ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=54556 -- Edit this bug report at https://bugs.php.net/bug.php?id=54556&edit=1