Suspekt... » Uncategorized http://www.suspekt.org A Blog About Code, Information Security, PHP And More Sat, 25 Dec 2010 07:36:33 +0000 http://wordpress.org/?v=2.6 en Suhosin 0.9.27 - The Joy of LAZY Symbol Loading http://www.suspekt.org/2008/08/23/suhosin-0927-the-joy-of-lazy-symbol-loading/ http://www.suspekt.org/2008/08/23/suhosin-0927-the-joy-of-lazy-symbol-loading/#comments Sat, 23 Aug 2008 09:34:08 +0000 Stefan Esser http://www.suspekt.org/?p=139 I had to release Suhosin 0.9.27 today, because in two places within the replacement rand() and mt_rand() functions the string ‘php_’ was not replaced by ’suhosin_’. The result of this is that version 0.9.26 of the extension will not load on systems with lazy symbol loading disabled and on the rest the PHP process will die once 624 random numbers are generated because the symbol of the reloading function is not found.

It is therefore strongly recommended to upgrade immediately to Suhosin 0.9.27

You can grab your copy as usual at

http://www.suhosin.org/

PS.: I will be happy if someone can tell me how to disable lazy symbol loading on Mac OS X, because obviously neither LD_BIND_NOW nor -bind_at_load seem to work correctly.

]]> http://www.suspekt.org/2008/08/23/suhosin-0927-the-joy-of-lazy-symbol-loading/feed/