Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:89096
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain kelunik.com from 81.169.146.162 cause and error)
MIME-Version: 1.0
In-Reply-To: <CAPwsocG6yU0sKYLaT4DM-KA1HTf6rLr=kn7G88GeduqK7pASGg@mail.gmail.com>
References: <CANUQDCh5R3dir=fzb3uGgKUrbk266BR6xWLn4Gt0-OWCOfZtAQ@mail.gmail.com>
	<563B6ED1.1030601@gmail.com>
	<CAPwsocG6yU0sKYLaT4DM-KA1HTf6rLr=kn7G88GeduqK7pASGg@mail.gmail.com>
Date: Fri, 6 Nov 2015 14:25:40 +0100
Message-ID: <CANUQDChkBEwvHq+8d1UU0d7pKy0MgTcfY38dsCQ898CF86_B6Q@mail.gmail.com>
To: Leigh <leight@gmail.com>, Bob Weinand <bobwei9@hotmail.com>
Cc: Rowan Collins <rowan.collins@gmail.com>, PHP Internals <internals@lists.php.net>, krakjoe@php.net
Content-Type: multipart/alternative; boundary=047d7b86ca7808d03d0523df2e46
Subject: Re: [PHP-DEV] Null bytes in anonymous class names
From: me@kelunik.com (Niklas Keller)

--047d7b86ca7808d03d0523df2e46
Content-Type: text/plain; charset=UTF-8

Problem is that e.g. exception to string casts do not handle it properly,
there may be other affected areas.

https://3v4l.org/e9AGZ

Regards, Niklas

2015-11-05 16:14 GMT+01:00 Leigh <leight@gmail.com>:

> On 5 November 2015 at 14:59, Rowan Collins <rowan.collins@gmail.com>
> wrote:
>
> >
> > PHP uses null bytes quite a lot to produce deliberately illegal
> > identifiers. For instance the old eval-like create_function() [e.g.
> > https://3v4l.org/hqHjh] and the serialization of private members [e.g.
> > https://3v4l.org/R6Y6k]
> >
> > In this case, I guess the "@" in "class@anonymous" makes the name
> illegal
> > anyway, but I'm not sold on the null byte being more unacceptable here
> than
> > anywhere else.
> >
> > Regards,
> >
> > --
> > Rowan Collins
> > [IMSoP]
> >
> > That doesn't mean it's a good approach (*cough* namespaces *cough*), and
> these bits of "magic" are supposed to be hidden away from users. I'm
> guessing in this particular instance, the point of the null is to make
> string operations cut off after "anonymous", however string operations that
> respect the zval string length aren't going to do this.
>
> e.g. var_dump() the class name is put through sprintf and it cuts off at
> the null, but get_class or ReflectionClass::getName() just returns the
> original string, and exposes the implementation details.
>

--047d7b86ca7808d03d0523df2e46--