Re: [RFC] Reclassifying engine warnings
| From: | Stanislav Malyshev | Date: | Wed, 28 Aug 2019 19:43:29 +0000 |
| Subject: | Re: [RFC] Reclassifying engine warnings | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-106769@lists.php.net to get a copy of this message | ||
Hi!
> For example, I just recently fixed a bug, that did this: `$array['key'] +=
> $cost` - the array key was not initialised. Well, turned out that in this
> case instead of null, it actually grabbed some garbage number out of memory
This would be a serious engine bug that you should submit to
bugs.php.net (probably as security issue, because "garbage from memory"
can contain sensitive data, and such bug could leak things like SSL
private keys outside). This however should not be part of this
discussion since this is engine bug, not expected behavior.
--
Stas Malyshev
smalyshev@gmail.com