[PHP-DEV] run-tests.php: buggy handling of "-n -c"

2017-08-02 Thread li...@rhsoft.net
with current 7.2 HEAD runnign the tests in context of rpmbuild triggers the warnings in the global errorlog - frankly there is no point loading something from the system when with "-n -c" a explicit config which also speficifes the extension_dir is given "/usr/lib64/php/modules/phar.so" is not

[PHP-DEV] Unserialize security policy

2017-08-02 Thread Nikita Popov
Hi, https://bugs.php.net/bug.php?id=75006 has been marked as a non-security bug, with the justification that unserialize() should not be fed untrusted input. While we do document that unserialize() shouldn't be used on untrusted input, we have always treated these as security bugs in the past. Co

[PHP-DEV] Re: Unserialize security policy

2017-08-02 Thread Christoph M. Becker
On 02.08.2017 at 22:02, Nikita Popov wrote: > https://bugs.php.net/bug.php?id=75006 has been marked as a non-security > bug, with the justification that unserialize() should not be fed untrusted > input. While we do document that unserialize() shouldn't be used on > untrusted input, we have always

Re: [PHP-DEV] Unserialize security policy

2017-08-02 Thread Zeev Suraski
> On 2 Aug 2017, at 23:03, Nikita Popov wrote: > > Hi, > > https://bugs.php.net/bug.php?id=75006 has been marked as a non-security > bug, with the justification that unserialize() should not be fed untrusted > input. While we do document that unserialize() shouldn't be used on > untrusted input

[PHP-DEV] BAD Benchmark Results for PHP Master 2017-08-01

2017-08-02 Thread lp_benchmark_robot
Results for project PHP master, build date 2017-08-01 19:22:47-07:00 commit: 018f033 previous commit:7f69b2b revision date: 2017-08-02 00:11:40+02:00 environment:Haswell-EP cpu:Intel(R) Xeon(R) CPU E5-2699 v3 @ 2.30GHz 2x18 cores, stepping 2, LLC 45 MB