kakserpom /
phpdaemon
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | namespace PHPDaemon\Clients\Mongo; |
||
| 3 | |||
| 4 | use PHPDaemon\Core\Daemon; |
||
| 5 | use PHPDaemon\Network\ClientConnection; |
||
| 6 | |||
| 7 | /** |
||
| 8 | * @package Applications |
||
| 9 | * @subpackage MongoClientAsync |
||
| 10 | * @author Vasily Zorin <[email protected]> |
||
| 11 | */ |
||
| 12 | class Connection extends ClientConnection |
||
| 13 | { |
||
| 14 | |||
| 15 | /** |
||
| 16 | * @TODO DESCR |
||
| 17 | */ |
||
| 18 | const STATE_PACKET = 1; |
||
| 19 | |||
| 20 | /** |
||
| 21 | * @var string Database name |
||
| 22 | */ |
||
| 23 | public $dbname; |
||
| 24 | /** |
||
| 25 | * @var array Active cursors |
||
| 26 | */ |
||
| 27 | public $cursors = []; |
||
| 28 | /** |
||
| 29 | * @var array Pending requests |
||
| 30 | */ |
||
| 31 | public $requests = []; |
||
| 32 | /** |
||
| 33 | * @var integer ID of the last request |
||
| 34 | */ |
||
| 35 | public $lastReqId = 0; |
||
| 36 | /** |
||
| 37 | * @var integer Initial value of the minimal amout of bytes in buffer |
||
| 38 | */ |
||
| 39 | protected $lowMark = 16; |
||
| 40 | /** |
||
| 41 | * @var integer Initial value of the maximum amout of bytes in buffer |
||
| 42 | */ |
||
| 43 | protected $highMark = 0xFFFFFF; |
||
| 44 | /** |
||
| 45 | * @var array |
||
| 46 | */ |
||
| 47 | protected $hdr; |
||
| 48 | protected $maxQueue = 10; |
||
| 49 | |||
| 50 | /** |
||
| 51 | * @TODO DESCR |
||
| 52 | * @return void |
||
| 53 | */ |
||
| 54 | public function onReady() |
||
| 55 | { |
||
| 56 | if ($this->user === null) { |
||
| 57 | $this->connected = true; |
||
| 58 | } |
||
| 59 | if ($this->connected) { |
||
| 60 | parent::onReady(); |
||
| 61 | return; |
||
| 62 | } |
||
| 63 | $this->dbname = $this->path; |
||
| 64 | $this->pool->saslScrumSHA1Auth( |
||
| 65 | [ |
||
| 66 | 'user' => $this->user, |
||
| 67 | 'password' => $this->password, |
||
| 68 | 'dbname' => $this->dbname, |
||
| 69 | 'conn' => $this |
||
| 70 | ], |
||
| 71 | function ($result) { |
||
| 72 | if (!isset($result['ok']) || !$result['ok']) { |
||
| 73 | Daemon::log('MongoClient: authentication error with ' . $this->url . ': ' . $result['errmsg']); |
||
| 74 | $this->finish(); |
||
| 75 | return; |
||
| 76 | } |
||
| 77 | $this->connected = true; |
||
| 78 | $this->onReady(); |
||
| 79 | }, |
||
| 80 | $this |
||
| 81 | ); |
||
| 82 | } |
||
| 83 | |||
| 84 | /** |
||
| 85 | * Called when new data received |
||
| 86 | * @return void |
||
| 87 | */ |
||
| 88 | public function onRead() |
||
| 89 | { |
||
| 90 | start: |
||
| 91 | if ($this->freed) { |
||
| 92 | return; |
||
| 93 | } |
||
| 94 | if ($this->state === self::STATE_ROOT) { |
||
| 95 | if (false === ($hdr = $this->readExact(16))) { |
||
| 96 | return; // we do not have a header |
||
| 97 | } |
||
| 98 | $this->hdr = unpack('Vlen/VreqId/VresponseTo/VopCode', $hdr); |
||
| 99 | $this->hdr['plen'] = $this->hdr['len'] - 16; |
||
| 100 | $this->setWatermark($this->hdr['plen'], $this->hdr['plen']); |
||
| 101 | $this->state = self::STATE_PACKET; |
||
| 102 | } |
||
| 103 | if ($this->state === self::STATE_PACKET) { |
||
| 104 | if (false === ($pct = $this->readExact($this->hdr['plen']))) { |
||
| 105 | return; //we do not have a whole packet |
||
| 106 | } |
||
| 107 | $this->state = self::STATE_ROOT; |
||
| 108 | $this->setWatermark(16, 0xFFFFFF); |
||
| 109 | if ($this->hdr['opCode'] === Pool::OP_REPLY) { |
||
| 110 | $r = unpack('Vflag/VcursorID1/VcursorID2/Voffset/Vlength', mb_orig_substr($pct, 0, 20)); |
||
| 111 | $r['cursorId'] = mb_orig_substr($pct, 4, 8); |
||
| 112 | $id = (int)$this->hdr['responseTo']; |
||
| 113 | if (isset($this->requests[$id])) { |
||
| 114 | $req = $this->requests[$id]; |
||
| 115 | if (sizeof($req) === 1) { // get more |
||
| 116 | $r['cursorId'] = $req[0]; |
||
| 117 | } |
||
| 118 | } else { |
||
| 119 | $req = false; |
||
| 120 | } |
||
| 121 | $flagBits = str_pad(strrev(decbin($r['flag'])), 8, '0', STR_PAD_LEFT); |
||
| 122 | $curId = ($r['cursorId'] !== "\x00\x00\x00\x00\x00\x00\x00\x00" ? 'c' . $r['cursorId'] : 'r' . $this->hdr['responseTo']); |
||
| 123 | |||
| 124 | if ($req && isset($req[2]) && ($req[2] === false) && !isset($this->cursors[$curId])) { |
||
| 125 | $cur = new Cursor($curId, $req[0], $this); |
||
| 126 | $this->cursors[$curId] = $cur; |
||
| 127 | $cur->failure = $flagBits[1] === '1'; |
||
| 128 | $cur->await = $flagBits[3] === '1'; |
||
| 129 | $cur->callback = $req[1]; |
||
| 130 | $cur->parseOplog = isset($req[3]) && $req[3]; |
||
| 131 | $cur->tailable = isset($req[4]) && $req[4]; |
||
| 132 | } else { |
||
| 133 | $cur = isset($this->cursors[$curId]) ? $this->cursors[$curId] : false; |
||
| 134 | } |
||
| 135 | if ($cur && (($r['length'] === 0) || (mb_orig_substr($curId, 0, 1) === 'r'))) { |
||
| 136 | if ($cur->tailable) { |
||
| 137 | if ($cur->finished = ($flagBits[0] === '1')) { |
||
| 138 | $cur->destroy(); |
||
| 139 | } |
||
| 140 | } else { |
||
| 141 | $cur->finished = true; |
||
| 142 | } |
||
| 143 | } |
||
| 144 | |||
| 145 | $p = 20; |
||
| 146 | $items = []; |
||
| 147 | while ($p < $this->hdr['plen']) { |
||
| 148 | $dl = unpack('Vlen', mb_orig_substr($pct, $p, 4)); |
||
| 149 | $doc = bson_decode(mb_orig_substr($pct, $p, $dl['len'])); |
||
| 150 | |||
| 151 | if ($cur) { |
||
| 152 | if ($cur->parseOplog && isset($doc['ts'])) { |
||
| 153 | $tsdata = unpack('Vsec/Vinc', mb_orig_substr($pct, $p + 8, 8)); |
||
| 154 | $doc['ts'] = $tsdata['sec'] . ' ' . $tsdata['inc']; |
||
| 155 | } |
||
| 156 | $cur->items[] = $doc; |
||
| 157 | ++$cur->counter; |
||
| 158 | } else { |
||
| 159 | $items[] = $doc; |
||
| 160 | } |
||
| 161 | $p += $dl['len']; |
||
| 162 | } |
||
| 163 | $this->setFree(true); |
||
| 164 | if (isset($req[2]) && $req[2] && $req[1]) { |
||
| 165 | $req[1](sizeof($items) ? $items[0] : false); |
||
| 166 | |||
| 167 | if ($cur) { |
||
| 168 | if ($cur instanceof Cursor) { |
||
| 169 | $cur->destroy(); |
||
| 170 | } else { |
||
| 171 | unset($this->cursors[$curId]); |
||
| 172 | } |
||
| 173 | } |
||
| 174 | } elseif ($cur) { |
||
| 175 | $func = $cur->callback; |
||
| 176 | $func($cur); |
||
| 177 | } |
||
| 178 | unset($this->requests[$id]); |
||
| 179 | $req = null; |
||
|
0 ignored issues
–
show
|
|||
| 180 | } |
||
| 181 | } |
||
| 182 | goto start; |
||
| 183 | } |
||
| 184 | |||
| 185 | /** |
||
| 186 | * onFinish |
||
| 187 | * @return void |
||
| 188 | */ |
||
| 189 | public function onFinish() |
||
| 190 | { |
||
| 191 | foreach ($this->cursors as $curId => $cur) { |
||
| 192 | if ($cur instanceof Cursor) { |
||
| 193 | $cur->destroy(true); |
||
| 194 | } |
||
| 195 | } |
||
| 196 | $this->cursors = null; |
||
|
0 ignored issues
–
show
It seems like
null of type null is incompatible with the declared type array of property $cursors.
Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property. Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property.. Loading history...
|
|||
| 197 | $this->requests = null; |
||
|
0 ignored issues
–
show
It seems like
null of type null is incompatible with the declared type array of property $requests.
Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property. Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property.. Loading history...
|
|||
| 198 | parent::onFinish(); |
||
| 199 | } |
||
| 200 | } |
||
| 201 |
This check looks for variable assignements that are either overwritten by other assignments or where the variable is not used subsequently.
Both the
$myVarassignment in line 1 and the$higherassignment in line 2 are dead. The first because$myVaris never used and the second because$higheris always overwritten for every possible time line.