Re: Run-time taint support proposal
| From: | Kevin Waterson | Date: | Tue, 19 Dec 2006 14:33:26 +0000 |
| Subject: | Re: Run-time taint support proposal | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-27100@lists.php.net to get a copy of this message | ||
This one time, at band camp, Zeev Suraski <zeev@zend.com> wrote:
> - Consider making this a compile time option with significant
> overhead and a big DO NOT ENABLE IN PRODUCTION, so that people have
> an even clearer idea they shouldn't rely on it to find their bugs,
> and that in fact it's just a helper tool, not unlike a strong IDE.
Could it possibly wrapped up in the --enable-debug option??
> We could possibly even come up with a new name other than tainting so
> that there is not prior perception as to what this feature is
> supposed or not supposed to do.
Fainting?
K
--
"Democracy is two wolves and a lamb voting on what to have for lunch.
Liberty is a well-armed lamb contesting the vote."