[PHP-DEV] Re: [External] : [RFC} Unbundle ext/imap, ext/pspell, and ext/oci8

2023-09-27 Thread Christopher Jones
On 27/9/2023 11:27 pm, Derick Rethans wrote: Hi, after the initial introduction, here is the formal RFC to unbundle the imap, pspell, and oci8 extensions and move them to PECL, for PHP 8.4. https://wiki.php.net/rfc/unbundle_imap_pspell_oci8 cheers, Derick Hi Derick, A small point: the

Re: [PHP-DEV] Security Audit Priorities

2023-09-27 Thread Stanislav Malyshev
Hi! This reminds me of something. There's an interesting paper about ReDoS resilience in different regex engines. Some programming languages, including PHP, are evaluated there and compared: https://www.usenix.org/system/files/sec22-turonova.pdf PHP has some configuration knobs for pcre

Re: [PHP-DEV] Security Audit Priorities

2023-09-27 Thread Niels Dossche
Hi On 25/09/2023 17:33, Tim Düsterhus wrote: > Hi > > On 9/25/23 10:49, Derick Rethans wrote: >> So, if you can suggest an area where doing an external review would have >> high impact, please reply to this email. > > Some things from top of my head in arbitrary order. Not all of them are >

Re: [PHP-DEV] [RFC] [Discussion] Rounding Integers as int

2023-09-27 Thread Derick Rethans
On Tue, 26 Sep 2023, Larry Garfield wrote: > ceil and floor should > always return ints, unconditionally, because that's literally what > their purpose is. But that RFC doesn't say that, which makes me quite > confused. They can't do that. ceil(2.4e102) can't be repesented as an integer. >

[PHP-DEV] [RFC} Unbundle ext/imap, ext/pspell, and ext/oci8

2023-09-27 Thread Derick Rethans
Hi, after the initial introduction, here is the formal RFC to unbundle the imap, pspell, and oci8 extensions and move them to PECL, for PHP 8.4. https://wiki.php.net/rfc/unbundle_imap_pspell_oci8 cheers, Derick -- https://derickrethans.nl | https://xdebug.org | https://dram.io Author of

Re: [PHP-DEV] Proposal to unbundle imap/pspell/oci8 extensions for PHP 8.4

2023-09-27 Thread Derick Rethans
On Fri, 15 Sep 2023, BohwaZ wrote: > > Considering the lack of updates from upstream as Derick mentioned, > > lack of OAuth support (which webklex/php-imap supports), and a > > somewhat lackluster documentation for ext-imap in php.net, I think > > unbundling ext-imap (along with the other