News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

Greg Beaver's Blog:
Interesting, potentially critical bug in PEAR
December 20, 2006 @ 13:16:39

Following right on the heels of a different PEAR problem, Greg Beaver has posted about a similar PEAR-related issue that could cause some serious problems for you and your installation.

After investigating (which in my case meant briefly recalling from memory how PEAR actually validates dependencies), I remembered that PEAR validates dependencies twice, once prior to download, and once prior to installation. By the time the dependencies are sorted, PEAR assumes that the sort algorithm properly sorts things.

This is actually a pretty reasonable assumption considering the unit tests that are in place to test this. However, like all regression testing, the unit tests test boundaries and likely cases, but not all possible inputs.

So, to try to figure out where things might have gone wrong, Greg does a little research to find the problem. He discovers that it has to do with the order that the "subpackages" for the dependencies are installed, where the contents of those files are not removed correctly before installation, resulting in a file conflict.

0 comments voice your opinion now!
pear critical install dependency package subpackage file conflict pear critical install dependency package subpackage file conflict


blog comments powered by Disqus

Similar Posts

Pierre-Alain Joye's Blog: Build cairo on windows, step #1

David Coallier's Blog: PEAR::Validate 0.8.0 released...THE release, finally

Kevin Schroeder's Blog: My first stab at the Dependency Injection Container in Zend Framework 2

Community News: Latest PEAR Releases for 01.07.2008

Greg Beaver's Blog: Planting PEAR seeds - you can decide PEAR's future


Community Events





Don't see your event here?
Let us know!


series release language security list voicesoftheelephpant symfony community laravel opinion podcast conference introduction interview composer library artisanfiles framework version tool

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework