Edit report at https://bugs.php.net/bug.php?id=65285&edit=1

 ID:                 65285
 Updated by:         cataphr...@php.net
 Reported by:        bugs dot php dot net at ss dot chernousov dot net
 Summary:            socket_sendmsg() - accept numeric file descriptors
-Status:             Open
+Status:             Wont fix
 Type:               Feature/Change Request
 Package:            Sockets related
 PHP Version:        5.5Git-2013-07-18 (Git)
 Block user comment: N
 Private report:     N

 New Comment:

Unfortunately, this kind of functionality has been strictly limited in the past 
(php://fd has been limited to the cli sapi) under the rationale that it would 
allow PHP to manipulate Apache's file descriptors (when running as module) or 
whatever other file descriptors such as logs' or the the client connection 
socket's.

I find the argument that this is a vulnerability unpersuasive, but that's the 
conclusion that prevailed.

Won't fix.


Previous Comments:
------------------------------------------------------------------------
[2013-07-18 08:21:08] bugs dot php dot net at ss dot chernousov dot net

Description:
------------
It would be pretty useful if socket_sendmsg() could work not only with sockets, 
but also with numeric file descriptors.



------------------------------------------------------------------------



-- 
Edit this bug report at https://bugs.php.net/bug.php?id=65285&edit=1

Reply via email to