Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:89326
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain lerdorf.com designates 209.85.160.169 as permitted sender)
Content-Type: multipart/signed;
	boundary=Apple-Mail-FCCC8A24-AFE7-4D1D-80A0-6B7D4E56059A;
	protocol="application/pkcs7-signature";
	micalg=sha1
Mime-Version: 1.0 (1.0)
In-Reply-To: <14D843AC-792B-4537-8859-023B98127E7D@zend.com>
Date: Mon, 23 Nov 2015 15:13:11 +0100
Cc: Joe Watkins <pthreads@pthreads.org>, Julien Pauli <jpauli@php.net>,
 Derick Rethans <derick@php.net>, Phil Sturgeon <pjsturgeon@gmail.com>,
 Xinchen Hui <laruence@php.net>, Anatol Belski <anatol.php@belski.net>,
 Anthony Ferrara <ircmaxell@gmail.com>,
 PHP internals <internals@lists.php.net>
Content-Transfer-Encoding: 7bit
Message-ID: <60B87C82-9218-4D24-903F-9E94D9C82A3B@lerdorf.com>
References: <CAAyV7nG9E-7STWq2Hpe=y5Uf0nWzGMhka+FUX1p1FVNtYNVTJQ@mail.gmail.com> <112FFBCD-8445-40BC-B92F-3A97D3E97C4C@zend.com> <CAAyV7nE0bQba3Wr2yi8FbtDfDA=8ZSFz9dbQG5uZ+eF9bick2A@mail.gmail.com> <56523F74.9040708@lerdorf.com> <06a601d125c0$99d5cfd0$cd816f70$@belski.net> <CAL=_i_kArsu2JGYtdZBa-mah+k6DL-cCWtiX16mVcTsxH3WDrw@mail.gmail.com> <CABBJUpdTUwvdtK+uRc386R4pceocXCsSEd9s4bu4jvH87MD-8A@mail.gmail.com> <CABDNdAG84+cW9TohGbA2r0ik5=yrHVyAd5g2wk8dKRh=LeqvPQ@mail.gmail.com> <5652D782.40601@lerdorf.com> <F037E7ED-B9B0-47DD-9B42-4EEC2B267118@php.net> <EFB1D7E4-C594-4F15-A6A0-5D8344BA8F79@lerdorf.com> <CAMUwpuQ_1Nsyj3tV_=QZBnwQ6tq-iNegRX+9xYXOsQneNVd=sg@mail.gmail.com> <CAL=_i_nfhOwQ7Nvp_JCVHuz0m448Z0K03y5EuV4VKBP2Zu5Wng@mail.gmail.com> <14D843AC-792B-4537-8859-023B98127E7D@zend.com>
To: Zeev Suraski <zeev@zend.com>
Subject: Re: [PHP-DEV] INDRECT in arrays causes count() to become unpredictable
From: rasmus@lerdorf.com (Rasmus Lerdorf)

--Apple-Mail-FCCC8A24-AFE7-4D1D-80A0-6B7D4E56059A
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

On Nov 23, 2015, at 15:05, Zeev Suraski <zeev@zend.com> wrote:
>=20
>> On 23 =D7=91=D7=A0=D7=95=D7=91=D7=B3 2015, at 14:04, Joe Watkins <pthread=
s@pthreads.org> wrote:
>>=20
>>=20
>> No one is expecting 0.0 or any version to be bug free, but the simplicity=
 of the fix says nothing about the seriousness of the bug. I think it quite s=
erious _because_ we are a few days from GA, had this been found a month ago i=
t wouldn't seem so serious.
>>=20
>=20
> No, but both the seriousness of the bug AND the simplicity of the fix sit s=
quarely outside any sort of "critical" definition.
>=20
> The bug simply has the unfortunate connotation of being associated with ar=
rays, but is not - it's only about count()ing symbol tables.  The fix itself=
 is very localized too and was peer reviewed, so I don't feel as if we'd be l=
iving on the edge of we'd be releasing without an extra RC.
>=20
> My main concern is that of we're treating this issue as a semi blocker - i=
t's almost unthinkable we won't find something of similar (small) magnitude i=
n the next seven days.  That's my only concern with releasing next week,m.  W=
ould people here again demand to delay, even if the impact is very limited -=
 as is the case with this count() issue?  If it wasn't for that concern, I'd=
 probably be in favor of delaying.

I think this was mostly a PR failure on my part actually. If I/we are a bit m=
ore careful about how we handle similar issues and the people lurking with i=
tchy Twitter trigger fingers would spend a bit more time looking into the de=
tails we should all be able to get along and get a good launch with no contr=
oversy on Dec.3.

-Rasmus=

--Apple-Mail-FCCC8A24-AFE7-4D1D-80A0-6B7D4E56059A
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Disposition: attachment;
	filename=smime.p7s
Content-Transfer-Encoding: base64
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==

--Apple-Mail-FCCC8A24-AFE7-4D1D-80A0-6B7D4E56059A--