[PHP-DEV] aggregation stability

2003-01-11 Thread Greg Beaver
Hi, How stable is aggregation considered to be for PHP 4.3.0 release? I've been getting crashes with apache 1.3.27/php 4.3.0/Win98SE in certain cases when calling a overriding method of an aggregated class. class A { function display() { } } class B extends A { function display() {

[PHP-DEV] register_prerequisite_file( $myFile ); //or cli option to generate dependency list

2003-01-11 Thread gk
I use php a lot to process php files in a makefile driven build environment I have written: xmake.org I think it would be nice to have an option to sapi/cli to generate a list of dependencies, like gcc -M get_included_files() is useful, but not sufficient since it only reports included or requi

Re: [PHP-DEV] Re: php4 /ext/standard file.c formatted_print.c

2003-01-11 Thread Andi Gutmans
At 12:38 AM 1/12/2003 +0100, Sascha Schumann wrote: On Sun, 12 Jan 2003, Moriyoshi Koizumi wrote: > On Sun, Jan 12, 2003 at 12:12:39AM +0100, Sascha Schumann wrote: > > As many past security advisories have shown, signedness > > issues are the frequent cause for severe vulnerabilities in

[PHP-DEV] What Changed ?

2003-01-11 Thread Frank M. Kromann
Hi, After checking out PHP5 from cvs I'm having some strange problems. I'm building on Mandrake 9.0 and Win32 and everything builds fine. When running scripts through Apache 1.3.27 I get core dumps. Running the same script with the CLI version works fine. Other (simpler) scripts work fine in both

Re: [PHP-DEV] Re: php4 /ext/standard file.c formatted_print.c

2003-01-11 Thread Sascha Schumann
On Sun, 12 Jan 2003, Moriyoshi Koizumi wrote: > On Sun, Jan 12, 2003 at 12:12:39AM +0100, Sascha Schumann wrote: > > As many past security advisories have shown, signedness > > issues are the frequent cause for severe vulnerabilities in > > software (recent examples include MySQL, Open

Re: [PHP-DEV] Re: php4 /ext/standard file.c formatted_print.c

2003-01-11 Thread Moriyoshi Koizumi
On Sun, Jan 12, 2003 at 12:12:39AM +0100, Sascha Schumann wrote: > As many past security advisories have shown, signedness > issues are the frequent cause for severe vulnerabilities in > software (recent examples include MySQL, OpenBSD kernel). Actually codes like below produce vulnerb

Re: [PHP-DEV] Re: php4 /ext/standard file.c formatted_print.c

2003-01-11 Thread Ilia A.
I imagine that strings greater then 2 billion characters are fairly rare, so I think it would be a good idea to revert the change as per Sascha's suggestion. This is a fairly old limitation and I think no one will miss this feature. Ilia -- PHP Development Mailing List T

Re: [PHP-DEV] Re: php4 /ext/standard file.c formatted_print.c

2003-01-11 Thread Sascha Schumann
The cause for this is that "phanto" changed the type of the string length from a signed type to zend_uint without providing any kind of justification (zvalue_value). As many past security advisories have shown, signedness issues are the frequent cause for severe vulnerabilities

Re: [PHP-DEV] Re: php4 /ext/standard file.c formatted_print.c

2003-01-11 Thread Moriyoshi Koizumi
On Sat, Jan 11, 2003 at 11:59:49PM +0100, Sascha Schumann wrote: > > Does this mean we now always need to cast the result of the > > Z_STRLEN_P/Z_STRLEN_PP macros to int? That seems pretty annoying and not to > > producing ugly code. > > Certainly not. > > What kind of warnings was the co

Re: [PHP-DEV] Re: php4 /ext/standard file.c formatted_print.c

2003-01-11 Thread Moriyoshi Koizumi
On Sat, Jan 11, 2003 at 05:56:23PM -0500, Ilia A. wrote: > On January 11, 2003 06:03 pm, Moriyoshi Koizumi wrote: > > On Sat, Jan 11, 2003 at 11:38:20PM +0100, [EMAIL PROTECTED] wrote: > > > Sorry but just a thought, in that line: > > > > > > if (argc > 1 && (int)Z_STRLEN_P(return_value) < len / 2)

Re: [PHP-DEV] Re: php4 /ext/standard file.c formatted_print.c

2003-01-11 Thread Sascha Schumann
On Sat, 11 Jan 2003, Ilia A. wrote: > On January 11, 2003 06:03 pm, Moriyoshi Koizumi wrote: > > On Sat, Jan 11, 2003 at 11:38:20PM +0100, [EMAIL PROTECTED] wrote: > > > Sorry but just a thought, in that line: > > > > > > if (argc > 1 && (int)Z_STRLEN_P(return_value) < len / 2) { > > Does this mea

[PHP-DEV] Re: php4 /ext/standard file.c formatted_print.c

2003-01-11 Thread nicos
Sorry but just a thought, in that line: if (argc > 1 && (int)Z_STRLEN_P(return_value) < len / 2) { you're comparating len / 2 to an int, but len / 2 can be a float too no? Ignore me if I'm wrong... -- Regards. M.CHAILLAN Nicolas [EMAIL PROTECTED] www.WorldAKT.com Hébergement de sites internets

Re: [PHP-DEV] Apache2Filter SAPI segfaults

2003-01-11 Thread Sebastian Bergmann
Sebastian Bergmann wrote: > This is with current HEAD of both Apache 2.1-dev and PHP 5 + ZE2: Somehow the backtrace got lost: wopr-mobile:/usr/local/apache2/bin # gdb httpd GNU gdb 5.3 Copyright 2002 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License,

Re: [PHP-DEV] Non threadsafe Windows build

2003-01-11 Thread Zeev Suraski
At 19:24 11/01/2003, Andi Gutmans wrote: At 07:13 AM 1/11/2003 +0100, Sebastian Bergmann wrote: The project file(s) for the non threadsafe Windows build are out of sync with the thread safe one(s). IIRC, there was already some discussion to ditch the non threadsafe version. That way we d

Re: [PHP-DEV] Non threadsafe Windows build

2003-01-11 Thread Andi Gutmans
At 07:13 AM 1/11/2003 +0100, Sebastian Bergmann wrote: The project file(s) for the non threadsafe Windows build are out of sync with the thread safe one(s). IIRC, there was already some discussion to ditch the non threadsafe version. That way we didn't have to maintain two sets of files,

Re: [PHP-DEV] PROPOSAL: default value handling

2003-01-11 Thread Andi Gutmans
This has been discussed in the past and won't be done. PHP behaves like C where the result of the boolean "or" operation is true or false. Andi At 12:38 AM 1/11/2003 -0500, Nyk Cowham wrote: As a convert from Perl one of the 'features' I miss from Perl is the short-circuit behavior of the or op

RE: [PHP-DEV] bcmath, calendar, ftp, wddx on Win32

2003-01-11 Thread Andi Gutmans
At 12:25 PM 1/10/2003 +0100, Lukas Smith wrote: > From: Andi Gutmans [mailto:[EMAIL PROTECTED]] > Sent: Friday, January 10, 2003 12:14 PM > > At 06:36 PM 1/9/2003 +0100, Sebastian Bergmann wrote: > > For as long as I can remember, the bcmath, calendar, ftp and wddx > > extensions are enabled b

[PHP-DEV] Apache2Filter SAPI segfaults

2003-01-11 Thread Sebastian Bergmann
This is with current HEAD of both Apache 2.1-dev and PHP 5 + ZE2: wopr-mobile:/usr/local/apache2/bin # gdb httpd GNU gdb 5.3 Copyright 2002 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of

[PHP-DEV] PHP 4 Bug Summary Report

2003-01-11 Thread php-dev
PHP 4 Bug Database summary - http://bugs.php.net Num Status Summary (1083 total including feature requests) ===[*Configuration Issues] 13561 Assigned --without-pear prevent install of php-config,phpize,... 19282 Won't fix Place php4ts.dl

[PHP-DEV] Re: http://www.php.net/extra/

2003-01-11 Thread Gabor Hojtsy
> > Hi! > > > > Do the files hosted at $subj have any use now, or is there any point > > in hosting files from as far as 1997 or 1998? > > bindlib_w32.zip and win32build.zip are definitely still needed. Hm, it's quite interesting to see that packages from two or four years ago still work on Wind

[PHP-DEV] Re: http://www.php.net/extra/

2003-01-11 Thread Derick Rethans
On Sat, 11 Jan 2003, Gabor Hojtsy wrote: > Hi! > > Do the files hosted at $subj have any use now, or is there any point > in hosting files from as far as 1997 or 1998? bindlib_w32.zip and win32build.zip are definitely still needed. Derick -- --

[PHP-DEV] http://www.php.net/extra/

2003-01-11 Thread Gabor Hojtsy
Hi! Do the files hosted at $subj have any use now, or is there any point in hosting files from as far as 1997 or 1998? Thanks, Goba [php.net webmaster team] -- PHP Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] when PHP code causes crash due to bad input, is it abug?

2003-01-11 Thread Christian Stocker
On Sat, 11 Jan 2003, Sascha Schumann wrote: > > Greg, don't make that big fuss about it. I fixed the code 15 minutes > > after bogusfying your report, so it throws an error, if the input is > > bad. > > > > Maybe setting it to bogus was a little bit too unfair, but my > > additional comments shou

[PHP-DEV] Re: [PHP-CVS] cvs: php4 /ext/rpc rpc.c

2003-01-11 Thread Sebastian Bergmann
Sebastian Bergmann wrote: > sebastian Sat Jan 11 04:51:52 2003 EDT > > Modified files: > /php4/ext/rpc rpc.c > Log: > Add missing ,. Hm, now it compiles, but PHP segfaults during shutdown (scripts seem to be executed correctly). The following stacktrace is from a s

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4 /ext/overload .cvsignore CREDITS README config.m4 overload.c overload.dsp php_overload.h

2003-01-11 Thread Marcus Börger
At 10:45 11.01.2003, Sebastian Bergmann wrote: Marcus Börger wrote: > yes - but this makes building HEAD + ZE1 + overload impossible Well, ZE1 should only be build with the PHP_4_3 branch now. Otherwise we won't get the momentum needed to push PHP 5 and ZendEngine 2 development. Then we

Re: [PHP-DEV] bcmath, calendar, ftp, wddx on Win32

2003-01-11 Thread Sebastian Bergmann
Andi Gutmans wrote: > Because building this stuff on Windows is harder and it's probably > easiest for Windows users to have stuff in by default. This might have been true back when there were only small binary releases for Windows. Now (almost?) all extensions are available as binaries for

Re: [PHP-DEV] when PHP code causes crash due to bad input, is it abug?

2003-01-11 Thread Sascha Schumann
> Greg, don't make that big fuss about it. I fixed the code 15 minutes > after bogusfying your report, so it throws an error, if the input is > bad. > > Maybe setting it to bogus was a little bit too unfair, but my > additional comments should have clarified it... Looks to me like it should h

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4 /ext/com .cvsignore COM.cCREDITS TODO VARIANT.c com.h conversion.c conversion.h dispatch.c php_COM.h php_VARIANT.h variant.h

2003-01-11 Thread Sascha Schumann
On Sat, 11 Jan 2003, Sebastian Bergmann wrote: > Sascha Schumann wrote: > > You removed those files from the PHP 5 branch which you > > claimed were supposed to be used in the PHP 5 branch. > > ext/com/ are the old files, ext/rpc/com are the new files Yeah, somehow my brain told me those st

[PHP-DEV] Re: [PHP-CVS] cvs: php4 /ext/overload .cvsignore CREDITS READMEconfig.m4 overload.c overload.dsp php_overload.h

2003-01-11 Thread Sebastian Bergmann
Marcus Börger wrote: yes - but this makes building HEAD + ZE1 + overload impossible Well, ZE1 should only be build with the PHP_4_3 branch now. Otherwise we won't get the momentum needed to push PHP 5 and ZendEngine 2 development. -- Sebastian Bergmann http://sebastian-bergmann.de/

Re: [PHP-DEV] when PHP code causes crash due to bad input, is it a bug?

2003-01-11 Thread Christian Stocker
Am Freitag, 10.01.03 um 21:02 Uhr schrieb gk: I am trying to help with PHP. But this experience makes me feel like it is not worth it. Can anyone give me some clarification. Is there a common agreement on what constitutes a bug? I have worked as Sr. SQA engineer for many years and have always

[PHP-DEV] Re: [PHP-CVS] cvs: php4 /ext/com .cvsignore COM.c CREDITS TODO VARIANT.ccom.h conversion.c conversion.h dispatch.c php_COM.h php_VARIANT.h variant.h

2003-01-11 Thread Sebastian Bergmann
Sascha Schumann wrote: > You removed those files from the PHP 5 branch which you > claimed were supposed to be used in the PHP 5 branch. ext/com/ are the old files, ext/rpc/com are the new files -- Sebastian Bergmann http://sebastian-bergmann.de/ http://phpOpenTracker.de/