mambax7 /
extgallery
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
| 1 | <?php |
||||
| 2 | /* vim: set expandtab tabstop=4 shiftwidth=4: */ |
||||
| 3 | |||||
| 4 | /** |
||||
| 5 | * |
||||
| 6 | * Copyright (c) 2001-2015, The PEAR developers |
||||
| 7 | * |
||||
| 8 | * This source file is subject to the BSD-2-Clause license, |
||||
| 9 | * that is bundled with this package in the file LICENSE, and is |
||||
| 10 | * available through the world-wide-web at the following url: |
||||
| 11 | * http://opensource.org/licenses/bsd-license.php. |
||||
| 12 | * |
||||
| 13 | * @category Console |
||||
| 14 | * @package Console_Getopt |
||||
| 15 | * @author Andrei Zmievski <[email protected]> |
||||
| 16 | * @license http://opensource.org/licenses/bsd-license.php BSD-2-Clause |
||||
| 17 | * @version CVS: $Id$ |
||||
| 18 | * @link http://pear.php.net/package/Console_Getopt |
||||
| 19 | */ |
||||
| 20 | |||||
| 21 | require_once 'PEAR.php'; |
||||
| 22 | |||||
| 23 | /** |
||||
| 24 | * Command-line options parsing class. |
||||
| 25 | * |
||||
| 26 | * @category Console |
||||
| 27 | * @package Console_Getopt |
||||
| 28 | * @author Andrei Zmievski <[email protected]> |
||||
| 29 | * @license http://opensource.org/licenses/bsd-license.php BSD-2-Clause |
||||
| 30 | * @link http://pear.php.net/package/Console_Getopt |
||||
| 31 | */ |
||||
| 32 | class Console_Getopt |
||||
| 33 | { |
||||
| 34 | /** |
||||
| 35 | * Parses the command-line options. |
||||
| 36 | * |
||||
| 37 | * The first parameter to this function should be the list of command-line |
||||
| 38 | * arguments without the leading reference to the running program. |
||||
| 39 | * |
||||
| 40 | * The second parameter is a string of allowed short options. Each of the |
||||
| 41 | * option letters can be followed by a colon ':' to specify that the option |
||||
| 42 | * requires an argument, or a double colon '::' to specify that the option |
||||
| 43 | * takes an optional argument. |
||||
| 44 | * |
||||
| 45 | * The third argument is an optional array of allowed long options. The |
||||
| 46 | * leading '--' should not be included in the option name. Options that |
||||
| 47 | * require an argument should be followed by '=', and options that take an |
||||
| 48 | * option argument should be followed by '=='. |
||||
| 49 | * |
||||
| 50 | * The return value is an array of two elements: the list of parsed |
||||
| 51 | * options and the list of non-option command-line arguments. Each entry in |
||||
| 52 | * the list of parsed options is a pair of elements - the first one |
||||
| 53 | * specifies the option, and the second one specifies the option argument, |
||||
| 54 | * if there was one. |
||||
| 55 | * |
||||
| 56 | * Long and short options can be mixed. |
||||
| 57 | * |
||||
| 58 | * Most of the semantics of this function are based on GNU getopt_long(). |
||||
| 59 | * |
||||
| 60 | * @param array $args an array of command-line arguments |
||||
| 61 | * @param string $short_options specifies the list of allowed short options |
||||
| 62 | * @param array $long_options specifies the list of allowed long options |
||||
| 63 | * @param bool $skip_unknown suppresses Console_Getopt: unrecognized option |
||||
| 64 | * |
||||
| 65 | * @return array two-element array containing the list of parsed options and |
||||
| 66 | * the non-option arguments |
||||
| 67 | */ |
||||
| 68 | public static function getopt2($args, $short_options, $long_options = null, $skip_unknown = false) |
||||
| 69 | { |
||||
| 70 | return self::doGetopt(2, $args, $short_options, $long_options, $skip_unknown); |
||||
| 71 | } |
||||
| 72 | |||||
| 73 | /** |
||||
| 74 | * This function expects $args to start with the script name (POSIX-style). |
||||
| 75 | * Preserved for backwards compatibility. |
||||
| 76 | * |
||||
| 77 | * @param array $args an array of command-line arguments |
||||
| 78 | * @param string $short_options specifies the list of allowed short options |
||||
| 79 | * @param array $long_options specifies the list of allowed long options |
||||
| 80 | * |
||||
| 81 | * @return array two-element array containing the list of parsed options and |
||||
| 82 | * the non-option arguments |
||||
| 83 | * @see getopt2() |
||||
| 84 | */ |
||||
| 85 | public static function getopt($args, $short_options, $long_options = null, $skip_unknown = false) |
||||
| 86 | { |
||||
| 87 | return self::doGetopt(1, $args, $short_options, $long_options, $skip_unknown); |
||||
| 88 | } |
||||
| 89 | |||||
| 90 | /** |
||||
| 91 | * The actual implementation of the argument parsing code. |
||||
| 92 | * |
||||
| 93 | * @param int $version Version to use |
||||
| 94 | * @param array $args an array of command-line arguments |
||||
| 95 | * @param string $short_options specifies the list of allowed short options |
||||
| 96 | * @param array $long_options specifies the list of allowed long options |
||||
| 97 | * @param bool $skip_unknown suppresses Console_Getopt: unrecognized option |
||||
| 98 | * |
||||
| 99 | * @return array |
||||
| 100 | */ |
||||
| 101 | public static function doGetopt($version, $args, $short_options, $long_options = null, $skip_unknown = false) |
||||
| 102 | { |
||||
| 103 | // in case you pass directly readPHPArgv() as the first arg |
||||
| 104 | if (PEAR::isError($args)) { |
||||
| 105 | return $args; |
||||
| 106 | } |
||||
| 107 | |||||
| 108 | if (empty($args)) { |
||||
| 109 | return [[], []]; |
||||
| 110 | } |
||||
| 111 | |||||
| 112 | $non_opts = $opts = []; |
||||
| 113 | |||||
| 114 | $args = (array)$args; |
||||
| 115 | |||||
| 116 | if ($long_options) { |
||||
| 117 | sort($long_options); |
||||
| 118 | } |
||||
| 119 | |||||
| 120 | /* |
||||
| 121 | * Preserve backwards compatibility with callers that relied on |
||||
| 122 | * erroneous POSIX fix. |
||||
| 123 | */ |
||||
| 124 | if ($version < 2) { |
||||
| 125 | if (isset($args[0][0]) && '-' != $args[0][0]) { |
||||
| 126 | array_shift($args); |
||||
| 127 | } |
||||
| 128 | } |
||||
| 129 | |||||
| 130 | for ($i = 0, $iMax = count($args); $i < $iMax; ++$i) { |
||||
| 131 | $arg = $args[$i]; |
||||
| 132 | /* The special element '--' means explicit end of |
||||
| 133 | options. Treat the rest of the arguments as non-options |
||||
| 134 | and end the loop. */ |
||||
| 135 | if ('--' == $arg) { |
||||
| 136 | $non_opts = array_merge($non_opts, array_slice($args, $i + 1)); |
||||
| 137 | break; |
||||
| 138 | } |
||||
| 139 | |||||
| 140 | if ('-' != $arg[0] || (strlen($arg) > 1 && '-' == $arg[1] && !$long_options)) { |
||||
| 141 | $non_opts = array_merge($non_opts, array_slice($args, $i)); |
||||
| 142 | break; |
||||
| 143 | } elseif (strlen($arg) > 1 && '-' == $arg[1]) { |
||||
| 144 | $error = self::_parseLongOption( |
||||
| 145 | substr($arg, 2), |
||||
| 146 | $long_options, |
||||
| 147 | $opts, |
||||
| 148 | $i, |
||||
| 149 | $args, |
||||
| 150 | $skip_unknown |
||||
| 151 | ); |
||||
| 152 | if (PEAR::isError($error)) { |
||||
| 153 | return $error; |
||||
|
0 ignored issues
–
show
Bug
Best Practice
introduced
by
Loading history...
|
|||||
| 154 | } |
||||
| 155 | } elseif ('-' == $arg) { |
||||
| 156 | // - is stdin |
||||
| 157 | $non_opts = array_merge($non_opts, array_slice($args, $i)); |
||||
| 158 | break; |
||||
| 159 | } else { |
||||
| 160 | $error = self::_parseShortOption( |
||||
|
0 ignored issues
–
show
Are you sure the assignment to
$error is correct as self::_parseShortOption(..., $args, $skip_unknown) targeting Console_Getopt::_parseShortOption() seems to always return null.
This check looks for function or method calls that always return null and whose return value is assigned to a variable. class A
{
function getObject()
{
return null;
}
}
$a = new A();
$object = $a->getObject();
The method The reason is most likely that a function or method is imcomplete or has been reduced for debug purposes. Loading history...
|
|||||
| 161 | substr($arg, 1), |
||||
| 162 | $short_options, |
||||
|
0 ignored issues
–
show
$short_options of type string is incompatible with the type string[] expected by parameter $short_options of Console_Getopt::_parseShortOption().
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
Loading history...
|
|||||
| 163 | $opts, |
||||
| 164 | $i, |
||||
| 165 | $args, |
||||
| 166 | $skip_unknown |
||||
| 167 | ); |
||||
| 168 | if (PEAR::isError($error)) { |
||||
| 169 | return $error; |
||||
|
0 ignored issues
–
show
|
|||||
| 170 | } |
||||
| 171 | } |
||||
| 172 | } |
||||
| 173 | |||||
| 174 | return [$opts, $non_opts]; |
||||
| 175 | } |
||||
| 176 | |||||
| 177 | /** |
||||
| 178 | * Parse short option |
||||
| 179 | * |
||||
| 180 | * @param string $arg Argument |
||||
| 181 | * @param string[] $short_options Available short options |
||||
| 182 | * @param string[][] &$opts |
||||
| 183 | * @param int &$argIdx |
||||
| 184 | * @param string[] $args |
||||
| 185 | * @param bool $skip_unknown suppresses Console_Getopt: unrecognized option |
||||
| 186 | * |
||||
| 187 | * @return void |
||||
| 188 | */ |
||||
| 189 | protected static function _parseShortOption($arg, $short_options, &$opts, &$argIdx, $args, $skip_unknown) |
||||
| 190 | { |
||||
| 191 | for ($i = 0, $iMax = strlen($arg); $i < $iMax; ++$i) { |
||||
| 192 | $opt = $arg[$i]; |
||||
| 193 | $opt_arg = null; |
||||
| 194 | |||||
| 195 | /* Try to find the short option in the specifier string. */ |
||||
| 196 | if (false === ($spec = strstr($short_options, $opt)) || ':' == $arg[$i]) { |
||||
|
0 ignored issues
–
show
$short_options of type string[] is incompatible with the type string expected by parameter $haystack of strstr().
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
Loading history...
|
|||||
| 197 | if (true === $skip_unknown) { |
||||
| 198 | break; |
||||
| 199 | } |
||||
| 200 | |||||
| 201 | $msg = "Console_Getopt: unrecognized option -- $opt"; |
||||
| 202 | return PEAR::raiseError($msg); |
||||
|
0 ignored issues
–
show
The method
raiseError() does not exist on PEAR. Since you implemented __callStatic, consider adding a @method annotation.
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
Loading history...
|
|||||
| 203 | } |
||||
| 204 | |||||
| 205 | if (strlen($spec) > 1 && ':' == $spec[1]) { |
||||
| 206 | if (strlen($spec) > 2 && ':' == $spec[2]) { |
||||
| 207 | if ($i + 1 < strlen($arg)) { |
||||
| 208 | /* Option takes an optional argument. Use the remainder of |
||||
| 209 | the arg string if there is anything left. */ |
||||
| 210 | $opts[] = [$opt, substr($arg, $i + 1)]; |
||||
| 211 | break; |
||||
| 212 | } |
||||
| 213 | } else { |
||||
| 214 | /* Option requires an argument. Use the remainder of the arg |
||||
| 215 | string if there is anything left. */ |
||||
| 216 | if ($i + 1 < strlen($arg)) { |
||||
| 217 | $opts[] = [$opt, substr($arg, $i + 1)]; |
||||
| 218 | break; |
||||
| 219 | } elseif (isset($args[++$argIdx])) { |
||||
| 220 | $opt_arg = $args[$argIdx];/* Else use the next argument. */; |
||||
| 221 | if (self::_isShortOpt($opt_arg) |
||||
| 222 | || self::_isLongOpt($opt_arg)) { |
||||
| 223 | $msg = "option requires an argument --$opt"; |
||||
| 224 | return PEAR::raiseError('Console_Getopt: ' . $msg); |
||||
| 225 | } |
||||
| 226 | } else { |
||||
| 227 | $msg = "option requires an argument --$opt"; |
||||
| 228 | return PEAR::raiseError('Console_Getopt: ' . $msg); |
||||
| 229 | } |
||||
| 230 | } |
||||
| 231 | } |
||||
| 232 | |||||
| 233 | $opts[] = [$opt, $opt_arg]; |
||||
| 234 | } |
||||
| 235 | } |
||||
| 236 | |||||
| 237 | /** |
||||
| 238 | * Checks if an argument is a short option |
||||
| 239 | * |
||||
| 240 | * @param string $arg Argument to check |
||||
| 241 | * |
||||
| 242 | * @return bool |
||||
| 243 | */ |
||||
| 244 | protected static function _isShortOpt($arg) |
||||
| 245 | { |
||||
| 246 | return 2 == strlen($arg) && '-' == $arg[0] |
||||
| 247 | && preg_match('/[a-zA-Z]/', $arg[1]); |
||||
| 248 | } |
||||
| 249 | |||||
| 250 | /** |
||||
| 251 | * Checks if an argument is a long option |
||||
| 252 | * |
||||
| 253 | * @param string $arg Argument to check |
||||
| 254 | * |
||||
| 255 | * @return bool |
||||
| 256 | */ |
||||
| 257 | protected static function _isLongOpt($arg) |
||||
| 258 | { |
||||
| 259 | return strlen($arg) > 2 && '-' == $arg[0] && '-' == $arg[1] |
||||
| 260 | && preg_match('/[a-zA-Z]+$/', substr($arg, 2)); |
||||
| 261 | } |
||||
| 262 | |||||
| 263 | /** |
||||
| 264 | * Parse long option |
||||
| 265 | * |
||||
| 266 | * @param string $arg Argument |
||||
| 267 | * @param string[] $long_options Available long options |
||||
| 268 | * @param string[][] &$opts |
||||
| 269 | * @param int &$argIdx |
||||
| 270 | * @param string[] $args |
||||
| 271 | * |
||||
| 272 | * @return void|PEAR_Error |
||||
| 273 | */ |
||||
| 274 | protected static function _parseLongOption($arg, $long_options, &$opts, &$argIdx, $args, $skip_unknown) |
||||
| 275 | { |
||||
| 276 | @list($opt, $opt_arg) = explode('=', $arg, 2); |
||||
| 277 | |||||
| 278 | $opt_len = strlen($opt); |
||||
| 279 | |||||
| 280 | for ($i = 0, $iMax = count($long_options); $i < $iMax; ++$i) { |
||||
| 281 | $long_opt = $long_options[$i]; |
||||
| 282 | $opt_start = substr($long_opt, 0, $opt_len); |
||||
|
0 ignored issues
–
show
|
|||||
| 283 | |||||
| 284 | $long_opt_name = str_replace('=', '', $long_opt); |
||||
| 285 | |||||
| 286 | /* Option doesn't match. Go on to the next one. */ |
||||
| 287 | if ($long_opt_name != $opt) { |
||||
| 288 | continue; |
||||
| 289 | } |
||||
| 290 | |||||
| 291 | $opt_rest = substr($long_opt, $opt_len); |
||||
| 292 | |||||
| 293 | /* Check that the options uniquely matches one of the allowed |
||||
| 294 | options. */ |
||||
| 295 | if ($i + 1 < count($long_options)) { |
||||
| 296 | $next_option_rest = substr($long_options[$i + 1], $opt_len); |
||||
| 297 | } else { |
||||
| 298 | $next_option_rest = ''; |
||||
| 299 | } |
||||
| 300 | |||||
| 301 | if ('' != $opt_rest && '=' != $opt[0] |
||||
| 302 | && $i + 1 < count($long_options) |
||||
| 303 | && $opt == substr($long_options[$i + 1], 0, $opt_len) |
||||
| 304 | && '' != $next_option_rest |
||||
| 305 | && '=' != $next_option_rest[0]) { |
||||
| 306 | $msg = "Console_Getopt: option --$opt is ambiguous"; |
||||
| 307 | return PEAR::raiseError($msg); |
||||
| 308 | } |
||||
| 309 | |||||
| 310 | if ('=' == substr($long_opt, -1)) { |
||||
| 311 | if ('==' != substr($long_opt, -2)) { |
||||
| 312 | /* Long option requires an argument. |
||||
| 313 | Take the next argument if one wasn't specified. */; |
||||
| 314 | if (!strlen($opt_arg)) { |
||||
| 315 | if (!isset($args[++$argIdx])) { |
||||
| 316 | $msg = "Console_Getopt: option requires an argument --$opt"; |
||||
| 317 | return PEAR::raiseError($msg); |
||||
| 318 | } |
||||
| 319 | $opt_arg = $args[$argIdx]; |
||||
| 320 | } |
||||
| 321 | |||||
| 322 | if (self::_isShortOpt($opt_arg) |
||||
| 323 | || self::_isLongOpt($opt_arg)) { |
||||
| 324 | $msg = "Console_Getopt: option requires an argument --$opt"; |
||||
| 325 | return PEAR::raiseError($msg); |
||||
| 326 | } |
||||
| 327 | } |
||||
| 328 | } elseif ($opt_arg) { |
||||
| 329 | $msg = "Console_Getopt: option --$opt doesn't allow an argument"; |
||||
| 330 | return PEAR::raiseError($msg); |
||||
| 331 | } |
||||
| 332 | |||||
| 333 | $opts[] = ['--' . $opt, $opt_arg]; |
||||
| 334 | return; |
||||
| 335 | } |
||||
| 336 | |||||
| 337 | if (true === $skip_unknown) { |
||||
| 338 | return; |
||||
| 339 | } |
||||
| 340 | |||||
| 341 | return PEAR::raiseError("Console_Getopt: unrecognized option --$opt"); |
||||
| 342 | } |
||||
| 343 | |||||
| 344 | /** |
||||
| 345 | * Safely read the $argv PHP array across different PHP configurations. |
||||
| 346 | * Will take care on register_globals and register_argc_argv ini directives |
||||
| 347 | * |
||||
| 348 | * @return mixed the $argv PHP array or PEAR error if not registered |
||||
| 349 | */ |
||||
| 350 | public static function readPHPArgv() |
||||
| 351 | { |
||||
| 352 | global $argv; |
||||
| 353 | if (!is_array($argv)) { |
||||
| 354 | if (!@is_array($_SERVER['argv'])) { |
||||
| 355 | if (!@is_array($GLOBALS['HTTP_SERVER_VARS']['argv'])) { |
||||
| 356 | $msg = 'Could not read cmd args (register_argc_argv=Off?)'; |
||||
| 357 | return PEAR::raiseError('Console_Getopt: ' . $msg); |
||||
| 358 | } |
||||
| 359 | return $GLOBALS['HTTP_SERVER_VARS']['argv']; |
||||
| 360 | } |
||||
| 361 | return $_SERVER['argv']; |
||||
| 362 | } |
||||
| 363 | return $argv; |
||||
| 364 | } |
||||
| 365 | } |
||||
| 366 |