Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:89026 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 13298 invoked from network); 1 Nov 2015 17:40:05 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 1 Nov 2015 17:40:05 -0000 Authentication-Results: pb1.pair.com smtp.mail=leight@gmail.com; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=leight@gmail.com; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.82.41 as permitted sender) X-PHP-List-Original-Sender: leight@gmail.com X-Host-Fingerprint: 74.125.82.41 mail-wm0-f41.google.com Received: from [74.125.82.41] ([74.125.82.41:37479] helo=mail-wm0-f41.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id C4/18-13635-47E46365 for ; Sun, 01 Nov 2015 12:40:04 -0500 Received: by wmff134 with SMTP id f134so43934646wmf.0 for ; Sun, 01 Nov 2015 09:40:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=G0y2+Kqn3DifPxAc/rPyrvK3Efk4+cqCHtSj6Od9zsY=; b=hjCtBcLhsho8qY0KTn+Gz2tgvo3pHmPKlRNYcyZPUok1S9pfPJtxDnAPrpPt9A5Qnm Ye+5UbOc5cjHUZvnkSCRANeZ1zOUW8bh7A+s7zBB1YSvrYDxtZiHsivym7JI0L5TOE+j g0sicgoNIZvvwYSeNha4+wJuIjxuTA2sZZqWauSJkkn/w+LsHjKyb4EbVCLvB69FAOoz rFfh9Os/PXAGD038/aQSBqKuAzujshlTGx997jO42Bs6u+kzogmrD0yFt+uEotdQRfCX zMzjv5W5VPAt3ZYYIGZgezQb47D57UVppTIL0zQAa2g65n1rvRfADVITdu8aut8XLeeH 57Pw== MIME-Version: 1.0 X-Received: by 10.28.229.70 with SMTP id c67mr9799511wmh.48.1446399600624; Sun, 01 Nov 2015 09:40:00 -0800 (PST) Received: by 10.28.145.200 with HTTP; Sun, 1 Nov 2015 09:40:00 -0800 (PST) In-Reply-To: <563638C6.3010304@thefsb.org> References: <563638C6.3010304@thefsb.org> Date: Sun, 1 Nov 2015 17:40:00 +0000 Message-ID: To: Tom Worster Cc: internals@lists.php.net Content-Type: multipart/alternative; boundary=001a1145b94a6609d105237e262b Subject: Re: Make sessions use php_random_bytes in 7.1 From: leight@gmail.com (Leigh) --001a1145b94a6609d105237e262b Content-Type: text/plain; charset=UTF-8 On 1 November 2015 at 16:07, Tom Worster wrote: > > I don't have one. > > But if I may ask, I'm curious, as always: What happens in the case that > php_random_bytes() fails? > > Tom > That's a good point. session_start() would throw the exception generated by php_random_bytes() letting you know your system is incapable of generating high quality random numbers. However this is a serious issue in it's own right, the APIs used (and the way they are used) really only fail if the underlying environment is fubar. --001a1145b94a6609d105237e262b--