Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:87352
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.192.176 as permitted sender)
To: Marco Pivetta <ocramius@gmail.com>
References: <550FA2ED.6080000@gmail.com>
 <CADR=R-gtCy7Vi7Y15jx+SYWX3aEB6TN3WGJPAqqQ4tO__SWqQw@mail.gmail.com>
 <CAF+90c8c8_Vth3vVaYF1N1u68JANTbGDq-QUTvG44X+Wr+oe0A@mail.gmail.com>
 <55B7B08E.7070700@gmail.com>
 <CADyq6s+n8z=oCMrPBzP744NCxTvMJwak71HVm50i9Z4v4A0zOg@mail.gmail.com>
Cc: Nikita Popov <nikita.ppv@gmail.com>,
 PHP Internals List <internals@lists.php.net>
Message-ID: <55B7EA22.7060504@gmail.com>
Date: Tue, 28 Jul 2015 13:46:26 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:38.0)
 Gecko/20100101 Thunderbird/38.1.0
MIME-Version: 1.0
In-Reply-To: <CADyq6s+n8z=oCMrPBzP744NCxTvMJwak71HVm50i9Z4v4A0zOg@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] Re: Serializing exceptions
From: smalyshev@gmail.com (Stanislav Malyshev)

Hi!

> This sort of change would be a major BC break for 8.x or similar. 

How is it a major BC break? You make it sound like serializing
exceptions is something no application can do without. I have yet to see
a single case where it's useful (yes, I've read the Symphony comment but
I'm not sure why they're doing it and if it's indeed something that
should be done and not an ugly hack like unserializing fake internal
objects).

> I also don't see security implications, tbh.

I don't want to discuss it in detail yet, but check out currently open
or recently fixed security issues and see how many of them relate to
serialized exceptions and consequences of that.
--
Stas Malyshev
smalyshev@gmail.com