News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

Greg Beaver's Blog:
Interesting, potentially critical bug in PEAR
December 20, 2006 @ 13:16:39

Following right on the heels of a different PEAR problem, Greg Beaver has posted about a similar PEAR-related issue that could cause some serious problems for you and your installation.

After investigating (which in my case meant briefly recalling from memory how PEAR actually validates dependencies), I remembered that PEAR validates dependencies twice, once prior to download, and once prior to installation. By the time the dependencies are sorted, PEAR assumes that the sort algorithm properly sorts things.

This is actually a pretty reasonable assumption considering the unit tests that are in place to test this. However, like all regression testing, the unit tests test boundaries and likely cases, but not all possible inputs.

So, to try to figure out where things might have gone wrong, Greg does a little research to find the problem. He discovers that it has to do with the order that the "subpackages" for the dependencies are installed, where the contents of those files are not removed correctly before installation, resulting in a file conflict.

0 comments voice your opinion now!
pear critical install dependency package subpackage file conflict pear critical install dependency package subpackage file conflict


blog comments powered by Disqus

Similar Posts

Ken Guest's Blog: A response to "Better Postal/Zip Code Validation Method for CakePHP 1.2"

Channel 9 Forums: Installing PHP Applications on IIS7

Community News: Latest PEAR Releases for 12.31.2007

Freek Lijten: SOLID - The D is for Dependency Inversion Principle

Christopher Kunz\'s Blog: How to increase PEAR security (and give admins a fuzzy feeling)


Community Events





Don't see your event here?
Let us know!


library community list code interview threedevsandamaybe series podcast introduction unittest developer application language api configure symfony laravel wordpress release install

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework