Re: Autoboxing in PHP
| From: | Mark Skilbeck | Date: | Wed, 05 May 2010 11:26:59 +0000 |
| Subject: | Re: Autoboxing in PHP | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-48220@lists.php.net to get a copy of this message | ||
What exploits are there for __toString()? Just wondering.
On 05/05/2010 07:50, Dmitry Stogov wrote:
Hi Moriyoshi, I took just a quick look through the patch, but for me it looks like a bad idea. Introducing new magic function may bring a lot of troubles and open a new door for exploit writer (we already have problems with __toString() method). Also I afraid, this magic method will make php slower even if scripts don't use this future (at least the patch disables code specialization for ZEND_INIT_METHOD_CALL) and make some future type propagation optimizations non-applicable. At last the patch introduces 18 new grammar conflicts and I think it's not acceptable. Thanks. Dmitry.