Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:87471
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.160.182 as permitted sender)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
In-Reply-To: <CAGa2bXadqvrWCd+3RaSmu8DUEmRB5XARzdePLH44_sS+47Zt3w@mail.gmail.com>
References: <CALYT1Yo-ae+cemXaaXs5Jv5t2DSzdxdYuxuhEGbXyoo_863+bw@mail.gmail.com>
 <836BA21C-AE99-4E7B-AB06-EBC30E41BA0E@icicle.io> <CAKws9z2PQWT7rSsM5R9TD-O69Ovy7-eifAuF-S0BQhBh3z4h1w@mail.gmail.com>
 <0AD335F5-35F3-4D98-8F82-800A1EDF8FD8@icicle.io> <05f101d0c838$fcdab5e0$f69021a0$@belski.net>
 <CAKws9z0yjxWisObfQ323rk3fA78yqJtRG=6zYDvjuPHEKH4=ag@mail.gmail.com>
 <55B63FDF.6050100@gmail.com> <CAKws9z1nXmci53v+3xOnROo-t45hwc9QTzJgdACBgDoi1O7DnQ@mail.gmail.com>
 <55B66494.1020106@gmail.com> <CAKws9z3=xJi3MwEN6Qi7Xxaphr3KLXZcAwmiN-jq924iKUpN3w@mail.gmail.com>
 <55B6707A.3040405@gmail.com> <CAAyV7nFxJB79VtypdRUpc=diZL1HcQ_ACQ4mvE3fSb_x-9B-Vg@mail.gmail.com>
 <CAKws9z1OLJg4EVdh1GS1vnpEPy7mDJoaX_ZETtJ4v-VivCdQww@mail.gmail.com>
 <CANUQDChDbJfDLqagSmtVW4pKtau5zTmvvO9A4hFJpdJMj_i53g@mail.gmail.com>
 <CAKws9z3x-Cg4cGwrurHj6czvgY7=2JHpoXQnseSHxK8wBs56Zw@mail.gmail.com>
 <CAGa2bXaRGcC60ifxykb=Qox5VJVEPJ4X4BFTjXirk=A_Mgi_tQ@mail.gmail.com>
 <CANUQDChYke1sagpLHY=8xdft_LAQ1751=CmDzV4izzzmw4QiRQ@mail.gmail.com>
 <CAGa2bXYKBFQWfni5+gd8pL=AXN6=5DHyj+4_k0F7JVEEDD=ioQ@mail.gmail.com>
 <CANUQDCiY3WsecUx8h-5ZF-PF9=uhTB7=neRCXUbFL9JT8gA5-w@mail.gmail.com>
 <CAGa2bXZCr42ny2DDE59g_tqCMoTJdwuhNLgvqDatm-WTh+35kg@mail.gmail.com>
 <CANUQDCj9KbUMQcZGLYjCWSTo-O9rwpX3-KQR7xh2Vtmr186P-w@mail.gmail.com> <CAGa2bXadqvrWCd+3RaSmu8DUEmRB5XARzdePLH44_sS+47Zt3w@mail.gmail.com>
Date: Sat, 1 Aug 2015 08:43:19 +0900
Message-ID: <CAGa2bXZ6fdcz+wWyXkkJxn7Vu5G=e8cyxr-tqize_XiS7ZK+Sw@mail.gmail.com>
To: Niklas Keller <me@kelunik.com>
Cc: Scott Arciszewski <scott@paragonie.com>, Rowan Collins <rowan.collins@gmail.com>, 
	Anthony Ferrara <ircmaxell@gmail.com>, PHP Internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a11399576d7c7c0051c346487
Subject: Re: [PHP-DEV] Core functions throwing exceptions in PHP7
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--001a11399576d7c7c0051c346487
Content-Type: text/plain; charset=UTF-8

Hi Niklas,

On Sat, Aug 1, 2015 at 8:27 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:

> They should totally be handled. You need to catch the error and throw a
>> defined exception, otherwise your public API will break if you choose to
>> use another internal implementation.
>> Additionally, you seem to assume that the library doesn't have to do
>> things like cleanups in such a case.
>>
>
> My thought is based on Design by Contract (Contract programming).
> When parameter or environment does not satisfy contract, contract error
> should be
> resulted in program/process termination.
>
> Fixing inappropriate parameter or environment is not library/framework
> author's
> responsibility, but the developer's. i.e.
> Caller(function/programmer/system admin)
> has the responsibility that satisfies parameter/environment requirement.
> If
> requirement is not met, it's perfectly OK for library/framework to raise
> fatal
> errors/exceptions. e.g. "You need PHP 5.6 or greater" error.
>

I'll be more specific for "CSPRNG not available" error.

If a author would like to handle the error and fallback to non crypt safe
RNG,
he/she should detect environment and execute alternative code for the
environment.

Catching exception and fallback to non crypt safe RNG is not optimal way
for handling unsatisfactory environment. IMHO. If we need function that
checks
environment, we are better to provide one rather than let users to use
exception.

Regards,

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--001a11399576d7c7c0051c346487--