This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * This program is free software; you can redistribute it and/or modify |
||
4 | * it under the terms of the GNU General Public License as published by |
||
5 | * the Free Software Foundation; either version 2 of the License, or |
||
6 | * (at your option) any later version. |
||
7 | * |
||
8 | * This program is distributed in the hope that it will be useful, |
||
9 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
10 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||
11 | * GNU General Public License for more details. |
||
12 | * |
||
13 | * You should have received a copy of the GNU General Public License along |
||
14 | * with this program; if not, write to the Free Software Foundation, Inc., |
||
15 | * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. |
||
16 | * http://www.gnu.org/copyleft/gpl.html |
||
17 | * |
||
18 | * @file |
||
19 | */ |
||
20 | |||
21 | namespace MediaWiki\Logger; |
||
22 | |||
23 | use DateTimeZone; |
||
24 | use Exception; |
||
25 | use MWDebug; |
||
26 | use MWExceptionHandler; |
||
27 | use Psr\Log\AbstractLogger; |
||
28 | use Psr\Log\LogLevel; |
||
29 | use UDPTransport; |
||
30 | |||
31 | /** |
||
32 | * PSR-3 logger that mimics the historic implementation of MediaWiki's |
||
33 | * wfErrorLog logging implementation. |
||
34 | * |
||
35 | * This logger is configured by the following global configuration variables: |
||
36 | * - `$wgDebugLogFile` |
||
37 | * - `$wgDebugLogGroups` |
||
38 | * - `$wgDBerrorLog` |
||
39 | * - `$wgDBerrorLogTZ` |
||
40 | * |
||
41 | * See documentation in DefaultSettings.php for detailed explanations of each |
||
42 | * variable. |
||
43 | * |
||
44 | * @see \MediaWiki\Logger\LoggerFactory |
||
45 | * @since 1.25 |
||
46 | * @author Bryan Davis <[email protected]> |
||
47 | * @copyright © 2014 Bryan Davis and Wikimedia Foundation. |
||
48 | */ |
||
49 | class LegacyLogger extends AbstractLogger { |
||
50 | |||
51 | /** |
||
52 | * @var string $channel |
||
53 | */ |
||
54 | protected $channel; |
||
55 | |||
56 | /** |
||
57 | * Convert \Psr\Log\LogLevel constants into int for sane comparisons |
||
58 | * These are the same values that Monlog uses |
||
59 | * |
||
60 | * @var array $levelMapping |
||
61 | */ |
||
62 | protected static $levelMapping = [ |
||
63 | LogLevel::DEBUG => 100, |
||
64 | LogLevel::INFO => 200, |
||
65 | LogLevel::NOTICE => 250, |
||
66 | LogLevel::WARNING => 300, |
||
67 | LogLevel::ERROR => 400, |
||
68 | LogLevel::CRITICAL => 500, |
||
69 | LogLevel::ALERT => 550, |
||
70 | LogLevel::EMERGENCY => 600, |
||
71 | ]; |
||
72 | |||
73 | /** |
||
74 | * @var array |
||
75 | */ |
||
76 | protected static $dbChannels = [ |
||
77 | 'DBQuery' => true, |
||
78 | 'DBConnection' => true |
||
79 | ]; |
||
80 | |||
81 | /** |
||
82 | * @param string $channel |
||
83 | */ |
||
84 | public function __construct( $channel ) { |
||
85 | $this->channel = $channel; |
||
86 | } |
||
87 | |||
88 | /** |
||
89 | * Logs with an arbitrary level. |
||
90 | * |
||
91 | * @param string|int $level |
||
92 | * @param string $message |
||
93 | * @param array $context |
||
94 | * @return null |
||
95 | */ |
||
96 | public function log( $level, $message, array $context = [] ) { |
||
97 | if ( is_string( $level ) ) { |
||
98 | $level = self::$levelMapping[$level]; |
||
99 | } |
||
100 | if ( $this->channel === 'DBQuery' && isset( $context['method'] ) |
||
101 | && isset( $context['master'] ) && isset( $context['runtime'] ) |
||
102 | ) { |
||
103 | MWDebug::query( $message, $context['method'], $context['master'], $context['runtime'] ); |
||
104 | return; // only send profiling data to MWDebug profiling |
||
105 | } |
||
106 | |||
107 | if ( isset( self::$dbChannels[$this->channel] ) |
||
108 | && $level >= self::$levelMapping[LogLevel::ERROR] |
||
109 | ) { |
||
110 | // Format and write DB errors to the legacy locations |
||
111 | $effectiveChannel = 'wfLogDBError'; |
||
112 | } else { |
||
113 | $effectiveChannel = $this->channel; |
||
114 | } |
||
115 | |||
116 | if ( self::shouldEmit( $effectiveChannel, $message, $level, $context ) ) { |
||
117 | $text = self::format( $effectiveChannel, $message, $context ); |
||
118 | $destination = self::destination( $effectiveChannel, $message, $context ); |
||
119 | self::emit( $text, $destination ); |
||
120 | } |
||
121 | if ( !isset( $context['private'] ) || !$context['private'] ) { |
||
122 | // Add to debug toolbar if not marked as "private" |
||
123 | MWDebug::debugMsg( $message, [ 'channel' => $this->channel ] + $context ); |
||
124 | } |
||
125 | } |
||
126 | |||
127 | /** |
||
128 | * Determine if the given message should be emitted or not. |
||
129 | * |
||
130 | * @param string $channel |
||
131 | * @param string $message |
||
132 | * @param string|int $level \Psr\Log\LogEvent constant or Monolog level int |
||
133 | * @param array $context |
||
134 | * @return bool True if message should be sent to disk/network, false |
||
135 | * otherwise |
||
136 | */ |
||
137 | public static function shouldEmit( $channel, $message, $level, $context ) { |
||
138 | global $wgDebugLogFile, $wgDBerrorLog, $wgDebugLogGroups; |
||
139 | |||
140 | if ( is_string( $level ) ) { |
||
141 | $level = self::$levelMapping[$level]; |
||
142 | } |
||
143 | |||
144 | if ( $channel === 'wfLogDBError' ) { |
||
145 | // wfLogDBError messages are emitted if a database log location is |
||
146 | // specfied. |
||
147 | $shouldEmit = (bool)$wgDBerrorLog; |
||
148 | |||
149 | } elseif ( $channel === 'wfErrorLog' ) { |
||
150 | // All messages on the wfErrorLog channel should be emitted. |
||
151 | $shouldEmit = true; |
||
152 | |||
153 | } elseif ( $channel === 'wfDebug' ) { |
||
154 | // wfDebug messages are emitted if a catch all logging file has |
||
155 | // been specified. Checked explicitly so that 'private' flagged |
||
156 | // messages are not discarded by unset $wgDebugLogGroups channel |
||
157 | // handling below. |
||
158 | $shouldEmit = $wgDebugLogFile != ''; |
||
159 | |||
160 | } elseif ( isset( $wgDebugLogGroups[$channel] ) ) { |
||
161 | $logConfig = $wgDebugLogGroups[$channel]; |
||
162 | |||
163 | if ( is_array( $logConfig ) ) { |
||
164 | $shouldEmit = true; |
||
165 | if ( isset( $logConfig['sample'] ) ) { |
||
166 | // Emit randomly with a 1 in 'sample' chance for each message. |
||
167 | $shouldEmit = mt_rand( 1, $logConfig['sample'] ) === 1; |
||
168 | } |
||
169 | |||
170 | if ( isset( $logConfig['level'] ) ) { |
||
171 | $shouldEmit = $level >= self::$levelMapping[$logConfig['level']]; |
||
172 | } |
||
173 | } else { |
||
174 | // Emit unless the config value is explictly false. |
||
175 | $shouldEmit = $logConfig !== false; |
||
176 | } |
||
177 | |||
178 | } elseif ( isset( $context['private'] ) && $context['private'] ) { |
||
179 | // Don't emit if the message didn't match previous checks based on |
||
180 | // the channel and the event is marked as private. This check |
||
181 | // discards messages sent via wfDebugLog() with dest == 'private' |
||
182 | // and no explicit wgDebugLogGroups configuration. |
||
183 | $shouldEmit = false; |
||
184 | } else { |
||
185 | // Default return value is the same as the historic wfDebug |
||
186 | // method: emit if $wgDebugLogFile has been set. |
||
187 | $shouldEmit = $wgDebugLogFile != ''; |
||
188 | } |
||
189 | |||
190 | return $shouldEmit; |
||
191 | } |
||
192 | |||
193 | /** |
||
194 | * Format a message. |
||
195 | * |
||
196 | * Messages to the 'wfDebug', 'wfLogDBError' and 'wfErrorLog' channels |
||
197 | * receive special fomatting to mimic the historic output of the functions |
||
198 | * of the same name. All other channel values are formatted based on the |
||
199 | * historic output of the `wfDebugLog()` global function. |
||
200 | * |
||
201 | * @param string $channel |
||
202 | * @param string $message |
||
203 | * @param array $context |
||
204 | * @return string |
||
205 | */ |
||
206 | public static function format( $channel, $message, $context ) { |
||
207 | global $wgDebugLogGroups, $wgLogExceptionBacktrace; |
||
208 | |||
209 | if ( $channel === 'wfDebug' ) { |
||
210 | $text = self::formatAsWfDebug( $channel, $message, $context ); |
||
211 | |||
212 | } elseif ( $channel === 'wfLogDBError' ) { |
||
213 | $text = self::formatAsWfLogDBError( $channel, $message, $context ); |
||
214 | |||
215 | } elseif ( $channel === 'wfErrorLog' ) { |
||
216 | $text = "{$message}\n"; |
||
217 | |||
218 | } elseif ( $channel === 'profileoutput' ) { |
||
219 | // Legacy wfLogProfilingData formatitng |
||
220 | $forward = ''; |
||
221 | if ( isset( $context['forwarded_for'] ) ) { |
||
222 | $forward = " forwarded for {$context['forwarded_for']}"; |
||
223 | } |
||
224 | if ( isset( $context['client_ip'] ) ) { |
||
225 | $forward .= " client IP {$context['client_ip']}"; |
||
226 | } |
||
227 | if ( isset( $context['from'] ) ) { |
||
228 | $forward .= " from {$context['from']}"; |
||
229 | } |
||
230 | if ( $forward ) { |
||
231 | $forward = "\t(proxied via {$context['proxy']}{$forward})"; |
||
232 | } |
||
233 | if ( $context['anon'] ) { |
||
234 | $forward .= ' anon'; |
||
235 | } |
||
236 | if ( !isset( $context['url'] ) ) { |
||
237 | $context['url'] = 'n/a'; |
||
238 | } |
||
239 | |||
240 | $log = sprintf( "%s\t%04.3f\t%s%s\n", |
||
241 | gmdate( 'YmdHis' ), $context['elapsed'], $context['url'], $forward ); |
||
242 | |||
243 | $text = self::formatAsWfDebugLog( |
||
0 ignored issues
–
show
|
|||
244 | $channel, $log . $context['output'], $context ); |
||
245 | |||
246 | } elseif ( !isset( $wgDebugLogGroups[$channel] ) ) { |
||
247 | $text = self::formatAsWfDebug( |
||
248 | $channel, "[{$channel}] {$message}", $context ); |
||
249 | |||
250 | } else { |
||
251 | // Default formatting is wfDebugLog's historic style |
||
252 | $text = self::formatAsWfDebugLog( $channel, $message, $context ); |
||
0 ignored issues
–
show
Are you sure the assignment to
$text is correct as self::formatAsWfDebugLog...el, $message, $context) (which targets MediaWiki\Logger\LegacyL...r::formatAsWfDebugLog() ) seems to always return null.
This check looks for function or method calls that always return null and whose return value is assigned to a variable. class A
{
function getObject()
{
return null;
}
}
$a = new A();
$object = $a->getObject();
The method The reason is most likely that a function or method is imcomplete or has been reduced for debug purposes. ![]() |
|||
253 | } |
||
254 | |||
255 | // Append stacktrace of exception if available |
||
256 | if ( $wgLogExceptionBacktrace && isset( $context['exception'] ) ) { |
||
257 | $e = $context['exception']; |
||
258 | $backtrace = false; |
||
259 | |||
260 | if ( $e instanceof Exception ) { |
||
261 | $backtrace = MWExceptionHandler::getRedactedTrace( $e ); |
||
262 | |||
263 | } elseif ( is_array( $e ) && isset( $e['trace'] ) ) { |
||
264 | // Exception has already been unpacked as structured data |
||
265 | $backtrace = $e['trace']; |
||
266 | } |
||
267 | |||
268 | if ( $backtrace ) { |
||
269 | $text .= MWExceptionHandler::prettyPrintTrace( $backtrace ) . |
||
270 | "\n"; |
||
271 | } |
||
272 | } |
||
273 | |||
274 | return self::interpolate( $text, $context ); |
||
275 | } |
||
276 | |||
277 | /** |
||
278 | * Format a message as `wfDebug()` would have formatted it. |
||
279 | * |
||
280 | * @param string $channel |
||
281 | * @param string $message |
||
282 | * @param array $context |
||
283 | * @return string |
||
284 | */ |
||
285 | protected static function formatAsWfDebug( $channel, $message, $context ) { |
||
286 | $text = preg_replace( '![\x00-\x08\x0b\x0c\x0e-\x1f]!', ' ', $message ); |
||
287 | if ( isset( $context['seconds_elapsed'] ) ) { |
||
288 | // Prepend elapsed request time and real memory usage with two |
||
289 | // trailing spaces. |
||
290 | $text = "{$context['seconds_elapsed']} {$context['memory_used']} {$text}"; |
||
291 | } |
||
292 | if ( isset( $context['prefix'] ) ) { |
||
293 | $text = "{$context['prefix']}{$text}"; |
||
294 | } |
||
295 | return "{$text}\n"; |
||
296 | } |
||
297 | |||
298 | /** |
||
299 | * Format a message as `wfLogDBError()` would have formatted it. |
||
300 | * |
||
301 | * @param string $channel |
||
302 | * @param string $message |
||
303 | * @param array $context |
||
304 | * @return string |
||
305 | */ |
||
306 | protected static function formatAsWfLogDBError( $channel, $message, $context ) { |
||
307 | global $wgDBerrorLogTZ; |
||
308 | static $cachedTimezone = null; |
||
309 | |||
310 | if ( !$cachedTimezone ) { |
||
311 | $cachedTimezone = new DateTimeZone( $wgDBerrorLogTZ ); |
||
312 | } |
||
313 | |||
314 | $d = date_create( 'now', $cachedTimezone ); |
||
315 | $date = $d->format( 'D M j G:i:s T Y' ); |
||
316 | |||
317 | $host = wfHostname(); |
||
318 | $wiki = wfWikiID(); |
||
319 | |||
320 | $text = "{$date}\t{$host}\t{$wiki}\t{$message}\n"; |
||
321 | return $text; |
||
322 | } |
||
323 | |||
324 | /** |
||
325 | * Format a message as `wfDebugLog() would have formatted it. |
||
326 | * |
||
327 | * @param string $channel |
||
328 | * @param string $message |
||
329 | * @param array $context |
||
330 | * @return null |
||
331 | */ |
||
332 | protected static function formatAsWfDebugLog( $channel, $message, $context ) { |
||
333 | $time = wfTimestamp( TS_DB ); |
||
334 | $wiki = wfWikiID(); |
||
335 | $host = wfHostname(); |
||
336 | $text = "{$time} {$host} {$wiki}: {$message}\n"; |
||
337 | return $text; |
||
338 | } |
||
339 | |||
340 | /** |
||
341 | * Interpolate placeholders in logging message. |
||
342 | * |
||
343 | * @param string $message |
||
344 | * @param array $context |
||
345 | * @return string Interpolated message |
||
346 | */ |
||
347 | public static function interpolate( $message, array $context ) { |
||
348 | if ( strpos( $message, '{' ) !== false ) { |
||
349 | $replace = []; |
||
350 | foreach ( $context as $key => $val ) { |
||
351 | $replace['{' . $key . '}'] = self::flatten( $val ); |
||
352 | } |
||
353 | $message = strtr( $message, $replace ); |
||
354 | } |
||
355 | return $message; |
||
356 | } |
||
357 | |||
358 | /** |
||
359 | * Convert a logging context element to a string suitable for |
||
360 | * interpolation. |
||
361 | * |
||
362 | * @param mixed $item |
||
363 | * @return string |
||
364 | */ |
||
365 | protected static function flatten( $item ) { |
||
366 | if ( null === $item ) { |
||
367 | return '[Null]'; |
||
368 | } |
||
369 | |||
370 | if ( is_bool( $item ) ) { |
||
371 | return $item ? 'true' : 'false'; |
||
372 | } |
||
373 | |||
374 | if ( is_float( $item ) ) { |
||
375 | if ( is_infinite( $item ) ) { |
||
376 | return ( $item > 0 ? '' : '-' ) . 'INF'; |
||
377 | } |
||
378 | if ( is_nan( $item ) ) { |
||
379 | return 'NaN'; |
||
380 | } |
||
381 | return $item; |
||
382 | } |
||
383 | |||
384 | if ( is_scalar( $item ) ) { |
||
385 | return (string)$item; |
||
386 | } |
||
387 | |||
388 | if ( is_array( $item ) ) { |
||
389 | return '[Array(' . count( $item ) . ')]'; |
||
390 | } |
||
391 | |||
392 | if ( $item instanceof \DateTime ) { |
||
393 | return $item->format( 'c' ); |
||
394 | } |
||
395 | |||
396 | if ( $item instanceof Exception ) { |
||
397 | return '[Exception ' . get_class( $item ) . '( ' . |
||
398 | $item->getFile() . ':' . $item->getLine() . ') ' . |
||
399 | $item->getMessage() . ']'; |
||
400 | } |
||
401 | |||
402 | if ( is_object( $item ) ) { |
||
403 | if ( method_exists( $item, '__toString' ) ) { |
||
404 | return (string)$item; |
||
405 | } |
||
406 | |||
407 | return '[Object ' . get_class( $item ) . ']'; |
||
408 | } |
||
409 | |||
410 | if ( is_resource( $item ) ) { |
||
411 | return '[Resource ' . get_resource_type( $item ) . ']'; |
||
412 | } |
||
413 | |||
414 | return '[Unknown ' . gettype( $item ) . ']'; |
||
415 | } |
||
416 | |||
417 | /** |
||
418 | * Select the appropriate log output destination for the given log event. |
||
419 | * |
||
420 | * If the event context contains 'destination' |
||
421 | * |
||
422 | * @param string $channel |
||
423 | * @param string $message |
||
424 | * @param array $context |
||
425 | * @return string |
||
426 | */ |
||
427 | protected static function destination( $channel, $message, $context ) { |
||
428 | global $wgDebugLogFile, $wgDBerrorLog, $wgDebugLogGroups; |
||
429 | |||
430 | // Default destination is the debug log file as historically used by |
||
431 | // the wfDebug function. |
||
432 | $destination = $wgDebugLogFile; |
||
433 | |||
434 | if ( isset( $context['destination'] ) ) { |
||
435 | // Use destination explicitly provided in context |
||
436 | $destination = $context['destination']; |
||
437 | |||
438 | } elseif ( $channel === 'wfDebug' ) { |
||
439 | $destination = $wgDebugLogFile; |
||
440 | |||
441 | } elseif ( $channel === 'wfLogDBError' ) { |
||
442 | $destination = $wgDBerrorLog; |
||
443 | |||
444 | } elseif ( isset( $wgDebugLogGroups[$channel] ) ) { |
||
445 | $logConfig = $wgDebugLogGroups[$channel]; |
||
446 | |||
447 | if ( is_array( $logConfig ) ) { |
||
448 | $destination = $logConfig['destination']; |
||
449 | } else { |
||
450 | $destination = strval( $logConfig ); |
||
451 | } |
||
452 | } |
||
453 | |||
454 | return $destination; |
||
455 | } |
||
456 | |||
457 | /** |
||
458 | * Log to a file without getting "file size exceeded" signals. |
||
459 | * |
||
460 | * Can also log to UDP with the syntax udp://host:port/prefix. This will send |
||
461 | * lines to the specified port, prefixed by the specified prefix and a space. |
||
462 | * |
||
463 | * @param string $text |
||
464 | * @param string $file Filename |
||
465 | */ |
||
466 | public static function emit( $text, $file ) { |
||
467 | if ( substr( $file, 0, 4 ) == 'udp:' ) { |
||
468 | $transport = UDPTransport::newFromString( $file ); |
||
469 | $transport->emit( $text ); |
||
470 | } else { |
||
471 | \MediaWiki\suppressWarnings(); |
||
472 | $exists = file_exists( $file ); |
||
473 | $size = $exists ? filesize( $file ) : false; |
||
474 | if ( !$exists || |
||
475 | ( $size !== false && $size + strlen( $text ) < 0x7fffffff ) |
||
476 | ) { |
||
477 | file_put_contents( $file, $text, FILE_APPEND ); |
||
478 | } |
||
479 | \MediaWiki\restoreWarnings(); |
||
480 | } |
||
481 | } |
||
482 | |||
483 | } |
||
484 |
This check looks for function or method calls that always return null and whose return value is assigned to a variable.
The method
getObject()
can return nothing but null, so it makes no sense to assign that value to a variable.The reason is most likely that a function or method is imcomplete or has been reduced for debug purposes.