Re: [PHP-DEV] [PATCH] make dl() DTRT under safe mode

2003-08-18 Thread nicos
"Zeev Suraski" <[EMAIL PROTECTED]> a écrit dans le message de news:[EMAIL PROTECTED] > At 01:30 18/08/2003, [EMAIL PROTECTED] wrote: > >Well sure it will be more efficient, but then anyone will be able to use a > >shared extension of someone else? > > Yes, there's nothing wrong with that. You're

Re: [PHP-DEV] [PATCH] make dl() DTRT under safe mode

2003-08-18 Thread Zeev Suraski
At 01:30 18/08/2003, [EMAIL PROTECTED] wrote: Well sure it will be more efficient, but then anyone will be able to use a shared extension of someone else? Yes, there's nothing wrong with that. You're making it sound as if it's using other people's PHP code, which in almost all cases, it isn't. I

Re: [PHP-DEV] [PATCH] make dl() DTRT under safe mode

2003-08-17 Thread nicos
"Rasmus Lerdorf" <[EMAIL PROTECTED]> a écrit dans le message de news:[EMAIL PROTECTED] > On Sun, 17 Aug 2003, Steve Langasek wrote: > > http://bugs.debian.org/131080 > > http://bugs.debian.org/131724 > > http://bugs.debian.org/165699 > > http://bugs.debian.org/165718 > > http://bugs.debian.org/165

Re: [PHP-DEV] [PATCH] make dl() DTRT under safe mode

2003-08-17 Thread Rasmus Lerdorf
On Sun, 17 Aug 2003, Steve Langasek wrote: > > One thing we should probably do is not dlclose() any shared extensions on > > shutdown. I am not sure if your list of bugs included any reports of > > crashes on shutdown, but if you ever come across one of those it is likely > > that removing the dlc

Re: [PHP-DEV] [PATCH] make dl() DTRT under safe mode

2003-08-17 Thread Steve Langasek
On Sun, Aug 17, 2003 at 09:12:57AM -0700, Rasmus Lerdorf wrote: > On Sun, 17 Aug 2003, Steve Langasek wrote: > > http://bugs.debian.org/131080 > > http://bugs.debian.org/131724 > > http://bugs.debian.org/165699 > > http://bugs.debian.org/165718 > > http://bugs.debian.org/165719 > > http://bugs.debi

Re: [PHP-DEV] [PATCH] make dl() DTRT under safe mode

2003-08-17 Thread Rasmus Lerdorf
On Sun, 17 Aug 2003, Steve Langasek wrote: > http://bugs.debian.org/131080 > http://bugs.debian.org/131724 > http://bugs.debian.org/165699 > http://bugs.debian.org/165718 > http://bugs.debian.org/165719 > http://bugs.debian.org/166414 > http://bugs.debian.org/188014 > http://bugs.debian.org/188025

Re: [PHP-DEV] [PATCH] make dl() DTRT under safe mode

2003-08-17 Thread Steve Langasek
On Sun, Aug 17, 2003 at 11:52:13AM +0200, Derick Rethans wrote: > On Sat, 16 Aug 2003, Steve Langasek wrote: > > The attached patch changes dl() so that, instead of outright refusing to > > run under safe mode, it performs additional security checks on the value > > of extension_dir and accepts a

Re: [PHP-DEV] [PATCH] make dl() DTRT under safe mode

2003-08-17 Thread Derick Rethans
On Sat, 16 Aug 2003, Steve Langasek wrote: > The attached patch changes dl() so that, instead of outright refusing to > run under safe mode, it performs additional security checks on the value > of extension_dir and accepts a filename-only argument (no directories) > from the caller. In addition,