#26051 [Opn->Bgs]: filetype() returns wrong type for device drivers - PHP Development

[sniper@php.net]

Removed by Administrator

[sniper@php.net]

Removed by Administrator

[sniper@php.net]

ID: 26051
Updated by: [email]sniperphp.net[/email]
Reported By: six at t0x dot net
-Status: Open
+Status: Bogus
Bug Type: Filesystem function related
Operating System: win2k
PHP Version: 4.3.4RC3
New Comment:

considered. Not PHP bug. Feel free to provide patch to 'fix' this
though. But as long as Windows offers the stat() libc func, we use
that. If it's not working as it should, it sure is not bug in PHP.




Previous Comments:
------------------------------------------------------------------------

[2003-10-31 10:06:30] six at t0x dot net

Please consider the security problem stated above before definetly
denying this is a bug

------------------------------------------------------------------------

[2003-10-31 10:01:30] six at t0x dot net

You seem to assume that the runtime c library is 100% compatible with
the unix ones ...

It's not that windows returns wrong types, just that windows provides
*another way* to get the file type (the GetFileType API call).

And no, filetype() doesn't work on windows ... At least as it's
described in the doentation that says "Returns the type of the file"
and not "Wrapper for the stat() libc call".

This is an important problem, because it's currently impossible to
protect an app from potential security issues regarding access to
critical device files on win32 (like CON, PRN, CLOCK$, ...). A PHP app
running on windows, receiving a file name from an untrusted input has
*no way* to tell what the file really is.

------------------------------------------------------------------------

[2003-10-31 09:39:31] [email]sniperphp.net[/email]

filetype() does work just fine on windows.
If windows returns 'wrong' types, it's not bug in PHP..


------------------------------------------------------------------------

[2003-10-31 09:27:18] six at t0x dot net

There are specific win32 API calls (GetFileType comes to my mind) to
get this kind of information.

I don't think this should be classified as "Bogus" because this is a
very confusing behavior, at least, if you don't plan to fix the bug,
the doentation should be updated to clearly state that filetype()
does not work on Win32.

------------------------------------------------------------------------

[2003-10-31 08:38:17] [email]sniperphp.net[/email]

PHP returns whatever the libc stat() function returns for the filetype.
No bug.


------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
[url]http://bugs.php.net/26051[/url]

--
Edit this bug report at [url]http://bugs.php.net/?id=26051&edit=1[/url]