Re: [PHP-DEV] PHP taint support: first results

2007-10-03 Thread Marcus Boerger
Hello Wietse, Wednesday, October 3, 2007, 2:35:33 AM, you wrote: > Changing E_WARNING into E_ERROR causes execution to terminate, as > one would expect. These and other settings can appear in php.ini, > on the PHP command line, or they can be made with ini_set() calls > in the application itsel

Re: [PHP-DEV] PHP taint support: first results

2007-10-02 Thread Wietse Venema
David Wang: [ Charset ISO-8859-1 unsupported, converting... ] > On 10/2/07, Wietse Venema <[EMAIL PROTECTED]> wrote: > > Low-level implementation > > > > > > Taint support is implemented with some of the unused bits in the > > zval data structure. The zval is the PHP equiva

Re: [PHP-DEV] PHP taint support: first results

2007-10-02 Thread David Wang
On 10/2/07, Wietse Venema <[EMAIL PROTECTED]> wrote: > Low-level implementation > > > Taint support is implemented with some of the unused bits in the > zval data structure. The zval is the PHP equivalent of a memory > cell. Besides a type (string, number etc.) and value, e