Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:27100 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 38547 invoked by uid 1010); 19 Dec 2006 14:55:52 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 38531 invoked from network); 19 Dec 2006 14:55:52 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 19 Dec 2006 14:55:52 -0000 Authentication-Results: pb1.pair.com smtp.mail=kevin@oceania.net; spf=permerror; sender-id=unknown Authentication-Results: pb1.pair.com header.from=kevin@oceania.net; sender-id=unknown Received-SPF: error (pb1.pair.com: domain oceania.net from 64.251.31.245 cause and error) X-PHP-List-Original-Sender: kevin@oceania.net X-Host-Fingerprint: 64.251.31.245 unknown Received: from [64.251.31.245] ([64.251.31.245:50648] helo=swamp.oceania.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 03/69-05058-55DF7854 for ; Tue, 19 Dec 2006 09:55:52 -0500 Received: from kevin.oceania.net (198.225.221.203.dial.dynamic.acc52-kent-syd.comindico.com.au [203.221.225.198]) by swamp.oceania.net (8.13.4/8.13.4) with SMTP id kBJEsEDn016882 for ; Wed, 20 Dec 2006 01:54:15 +1100 Date: Wed, 20 Dec 2006 01:33:26 +1100 To: internals@lists.php.net Message-ID: <20061220013326.412cfe89.kevin@oceania.net> In-Reply-To: References: <20061215201448.B16D8BC1AB@spike.porcupine.org> <7AE00699-23C2-4759-A50C-3D94199DA85A@prohost.org> <45831090.1000704@zend.com> <18A7CF93-7BFD-4764-847D-6C107A62875E@prohost.org> <45831A87.6050301@zend.com> <45832B9B.2080109@zend.com> <8BC86061-CCC5-45C3-8C40-92B06ADBB117@prohost.org> <45832F71.2080503@zend.com> <7C8CB695-3E81-4009-9699-2499DBF7B366@prohost.org> <4583375C.5060302@zend.com> <2F093E93-7021-4C0F-A391-A99CBF080596@prohost.org> <45833C93.4020909@zend.com> <87774C2D-1959-459A-B892-F2F6F6A5C676@prohost.org> <45835ABE.5040909@zend.com> <6526D55D-DC87-40D4-8335-CCB0FA810646@prohost.org> <45846491.6020101@zend.com> <7FD783B9-68A7-4EC7-B6C3-8DBC44A51597@prohost.org> Organization: Oceania X-Mailer: Sylpheed version 0.9.12 (GTK+ 1.2.10; i386-vine-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] Run-time taint support proposal From: kevin@oceania.net (Kevin Waterson) This one time, at band camp, Zeev Suraski wrote: > - Consider making this a compile time option with significant > overhead and a big DO NOT ENABLE IN PRODUCTION, so that people have > an even clearer idea they shouldn't rely on it to find their bugs, > and that in fact it's just a helper tool, not unlike a strong IDE. Could it possibly wrapped up in the --enable-debug option?? > We could possibly even come up with a new name other than tainting so > that there is not prior perception as to what this feature is > supposed or not supposed to do. Fainting? K -- "Democracy is two wolves and a lamb voting on what to have for lunch. Liberty is a well-armed lamb contesting the vote."