#47378 [NEW]: Potential for total failure of uniqid() should be documented

From: Date: Fri, 13 Feb 2009 03:58:34 +0000
Subject: #47378 [NEW]: Potential for total failure of uniqid() should be documented
Groups: php.doc.bugs 
Request: Send a blank email to doc-bugs+get-1852@lists.php.net to get a copy of this message
From:             tstarling at wikimedia dot org
Operating system: Cygwin
PHP version:      Irrelevant
PHP Bug Type:     Documentation problem
Bug description:  Potential for total failure of uniqid() should be documented

Description:
------------
The source code indicates that uniqid() may completely fail on Cygwin and
return false:

#if HAVE_USLEEP && !defined(PHP_WIN32)
	if (!more_entropy) {
#if defined(__CYGWIN__)
		php_error_docref(NULL TSRMLS_CC, E_WARNING, "You must use 'more entropy'
under CYGWIN");
		RETURN_FALSE;
#else
		usleep(1);
#endif
	}
#endif

This needs to be documented so that unsuspecting web apps don't become
insecure when run on this platform, e.g. giving everyone the same default
password.


-- 
Edit bug report at http://bugs.php.net/?id=47378&edit=1
-- 
Try a CVS snapshot (PHP 5.2):        http://bugs.php.net/fix.php?id=47378&r=trysnapshot52
Try a CVS snapshot (PHP 5.3):        http://bugs.php.net/fix.php?id=47378&r=trysnapshot53
Try a CVS snapshot (PHP 6.0):        http://bugs.php.net/fix.php?id=47378&r=trysnapshot60
Fixed in CVS:                        http://bugs.php.net/fix.php?id=47378&r=fixedcvs
Fixed in CVS and need be documented: http://bugs.php.net/fix.php?id=47378&r=needdocs
Fixed in release:                    http://bugs.php.net/fix.php?id=47378&r=alreadyfixed
Need backtrace:                      http://bugs.php.net/fix.php?id=47378&r=needtrace
Need Reproduce Script:               http://bugs.php.net/fix.php?id=47378&r=needscript
Try newer version:                   http://bugs.php.net/fix.php?id=47378&r=oldversion
Not developer issue:                 http://bugs.php.net/fix.php?id=47378&r=support
Expected behavior:                   http://bugs.php.net/fix.php?id=47378&r=notwrong
Not enough info:                     http://bugs.php.net/fix.php?id=47378&r=notenoughinfo
Submitted twice:                     http://bugs.php.net/fix.php?id=47378&r=submittedtwice
register_globals:                    http://bugs.php.net/fix.php?id=47378&r=globals
PHP 4 support discontinued:          http://bugs.php.net/fix.php?id=47378&r=php4
Daylight Savings:                    http://bugs.php.net/fix.php?id=47378&r=dst
IIS Stability:                       http://bugs.php.net/fix.php?id=47378&r=isapi
Install GNU Sed:                     http://bugs.php.net/fix.php?id=47378&r=gnused
Floating point limitations:          http://bugs.php.net/fix.php?id=47378&r=float
No Zend Extensions:                  http://bugs.php.net/fix.php?id=47378&r=nozend
MySQL Configuration Error:           http://bugs.php.net/fix.php?id=47378&r=mysqlcfg



Thread (5 messages)

« previous php.doc.bugs (#1852) next »