Re: Re: Hold off 5.4

From: Date: Thu, 25 Nov 2010 19:11:35 +0000
Subject: Re: Re: Hold off 5.4
References: 1 2 3 4 5 6 7 8 9 10  Groups: php.internals 
Request: Send a blank email to internals+get-50570@lists.php.net to get a copy of this message
On Thu, 2010-11-25 at 10:25 -0800, Rasmus Lerdorf wrote: > We also need that non-null zend_parse_parameters type implemented to > clean up the null-byte poisoning fixes in 5.3. Recently there was an off-list discussion about adding support for accepting non-empty strings only via zend_parse_parameters (zpp). There I raised the concern that we shouldn't add too many special validations for two main reasons: a) The more options zpp has the harder it is to use/read/maintain b) Errors from zpp usually are typically caused by program errors which in other languages for instance might be detected by a compiler not for being bad values as such errors might require different handling by the user. The null-byte thing is not only good for file operations but also for ereg and other places. But we should be sure about the error semantics caused. johannes

« previous php.internals (#50570) next »