Req #75000 [Com]: getcwd() does not raise error when it fails

Edit report at https://bugs.php.net/bug.php?id=75000&edit=1 ID: 75000 Comment by: spam2 at rhsoft dot net Reported by: marco dot agnoli at me dot com Summary: getcwd() does not raise error when it fails Status: Not a bug Type: Feature/Change Request Package: *General Issues Operating System: OS X PHP Version: 7.1.7 Block user comment: N Private report: N New Comment: sorry, but when someone don't stop argue nonsense and has nothing better to do than construct examples how nobody ever should write code *because* of the result it makes me terrible angry PHP has not to spit out warnings all the time and in fact there a way too much places where it does (file_exists and freinds trying access a file outside openbasedir as example should just return false and be silent) PHP would be just unusable when it acts like the reporter want it to act Previous Comments: ------------------------------------------------------------------------ [2017-08-15 02:02:21] marco dot agnoli at me dot com I have thought about this issue once again and actually getcwd can do some serious damage if used incorrectly. I'm aware that it is unlikely for getcwd() to fail but consider the following piece of code: <?php $path = \getcwd().'/bin/'; system('rm -rf '.\escapeshellarg($path)); ?> Since PHP converts false to an empty string the folder we attempt to remove would be "/bin" and we wouldn't even know about it! ------------------------------------------------------------------------ [2017-07-28 09:33:01] marco dot agnoli at me dot com I know that it is expected behaviour, but why? Can you tell me the reasoning behind it? ------------------------------------------------------------------------ [2017-07-28 09:12:53] kalle@php.net Both these cases are expected behavior for realpath() and getcwd() to be silent and return false. There are potential other functions that mimic similar behaviors, but in the end it is up to the end user to test the return value of these functions ------------------------------------------------------------------------ [2017-07-28 06:12:40] marco dot agnoli at me dot com Same can be said for the realpath function: ``` <?php error_reporting(E_ALL); var_dump(realpath('non-existing-path')); ?> ``` realpath() expects a valid path, so why not raise an error when no valid path was specified? ------------------------------------------------------------------------ [2017-07-28 06:09:04] marco dot agnoli at me dot com Description: ------------ Some functions like chdir() raise an error when they fail, but others like getcwd() don't. I don't see why getcwd() should not raise an error. This makes catching errors more painful than it should be. Test script: --------------- <?php var_dump(getcwd()); // Remove traversal permission for the current directory system('chmod -x '.escapeshellarg(__DIR__)); /** * I would expect an error here * because getcwd() returns false here. */ var_dump(getcwd()); // Restore traversal permission system('chmod +x '.escapeshellarg(__DIR__)); ?> Expected result: ---------------- A warning from PHP that getcwd() failed. Actual result: -------------- getcwd() silently returns false. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=75000&edit=1