Re: socket_iovec_alloc segfault && security advisory

On 26 Mar 2003 14:38:36 +0100 Martin Jansen <mj@php.net> wrote: > So you are proposing to move sockets to PECL, because the extension > will not attract that much interest there and thus the possible > security issues will not be revealed so fast? > I agree with that up to a certain point, but technically this isn't a > great solution: The issues should be fixed *before* moving it to PECL. Yes, of course. I just don't see any reasons to include experimental extensions, that will cause such "security advisories", into the core distribution. Someone can explain this to me, maybe I'm wrong? > Otherwise PECL will soon be a hazardous waste site for all sorts of > PHP extensions that have more or less severe security problems ;-). No, I'm not going to fill PECL with hazardous extentions =) In PECL we can at least tell, that this extention is not stable yet and we have only alpha/beta/gamma version. IMHO, this will warn admins of installing this extention on production environments. -- Wbr, Antony Dovgal aka tony2001 mailto:tony2001@phpclub.net http://phpclub.net --- Stand for something or you will fall for nothing.