Re: Run-time taint support proposal

From: Date: Tue, 19 Dec 2006 14:33:26 +0000
Subject: Re: Run-time taint support proposal
References: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19  Groups: php.internals 
Request: Send a blank email to internals+get-27100@lists.php.net to get a copy of this message
This one time, at band camp, Zeev Suraski <zeev@zend.com> wrote: > - Consider making this a compile time option with significant > overhead and a big DO NOT ENABLE IN PRODUCTION, so that people have > an even clearer idea they shouldn't rely on it to find their bugs, > and that in fact it's just a helper tool, not unlike a strong IDE. Could it possibly wrapped up in the --enable-debug option?? > We could possibly even come up with a new name other than tainting so > that there is not prior perception as to what this feature is > supposed or not supposed to do. Fainting? K -- "Democracy is two wolves and a lamb voting on what to have for lunch. Liberty is a well-armed lamb contesting the vote."

« previous php.internals (#27100) next »