Skip to content

Commit ada776c

Browse files
kohlernikic
authored andcommitted
Make HashContexts serializable.
* Modify php_hash_ops to contain the algorithm name and serialize and unserialize methods. * Implement __serialize and __unserialize magic methods on HashContext. Note that serialized HashContexts are not necessarily portable between PHP versions or from architecture to architecture. (Most are, though Keccak and slow SHA3s are not.) An exception is thrown when an unsupported serialization is attempted. Because of security concerns, HASH_HMAC contexts are not currently serializable; attempting to serialize one throws an exception. Serialization exposes the state of HashContext memory, so ensure that memory is zeroed before use by allocating it with a new php_hash_alloc_context function. Performance impact is negligible. Some hash internal states have logical pointers into a buffer, or sponge, that absorbs input provided in bytes rather than chunks. The unserialize functions for these hash functions must validate that the logical pointers are all within bounds, lest future hash operations cause out-of-bounds memory accesses. * Adler32, CRC32, FNV, joaat: simple state, no buffer positions * Gost, MD2, SHA3, Snefru, Tiger, Whirlpool: buffer positions must be validated * MD4, MD5, SHA1, SHA2, haval, ripemd: buffer positions encoded bitwise, forced to within bounds on use; no need to validate
1 parent dc85be5 commit ada776c

40 files changed

+1524
-56
lines changed

UPGRADING

+7-3
Original file line numberDiff line numberDiff line change
@@ -568,14 +568,18 @@ PHP 8.0 UPGRADE NOTES
568568
. Added DateTime::createFromInterface() and
569569
DateTimeImmutable::createFromInterface().
570570

571+
- Dom:
572+
. Introduce DOMParentNode and DOMChildNode with new traversal and
573+
manipulation APIs.
574+
RFC: https://wiki.php.net/rfc/dom_living_standard_api
575+
571576
- Enchant:
572577
. enchant_dict_add()
573578
. enchant_dict_is_added()
574579
. LIBENCHANT_VERSION macro
575580

576-
- dom:
577-
. Introduce DOMParentNode and DOMChildNode with new traversal and manipulation APIs
578-
RFC: https://wiki.php.net/rfc/dom_living_standard_api
581+
- Hash:
582+
. HashContext objects can now be serialized.
579583

580584
- Opcache:
581585
. If the opcache.record_warnings ini setting is enabled, opcache will record

0 commit comments

Comments
 (0)