xmlrpc_decode_request outputs non-suppressable error when given bad data

Bug #46746 xmlrpc_decode_request outputs non-suppressable error when given bad data
Submitted: 2008-12-04 00:05 UTC Modified: 2008-12-09 17:22 UTC
From: pickscrape at gmail dot com Assigned:
Status: Closed Package: XMLRPC-EPI related
PHP Version: 5CVS,6CVS (2008-12-08) OS: *
Private report: No CVE-ID: None

 [2008-12-04 00:05 UTC] pickscrape at gmail dot com

Description:
------------
When calling xmlrpc_decode_request with invalid XML data, the following error is output to STDERR:

expat reports error code 4
        description: Empty document
        line: 1
        column: 1
        byte index: 0
        total bytes: 0

        data beginning 0 before byte index: dfsdffsd

There seems to be no way to turn it off: I want to be able to handler the error myself, and do not want the error message cluttering the output needlessly.

Reproduce code:
---------------
<?php
x = '';
o = xmlrpc_decode_request('dfsdffsd', $x);
?>


Expected result:
----------------
For there to be some way to turn this error message off, or have it redirected to a variable or accessible via some library call.

Actual result:
--------------
expat reports error code 4
        description: Empty document
        line: 1
        column: 1
        byte index: 0
        total bytes: 0

        data beginning 0 before byte index: dfsdffsd

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports

 [2008-12-08 11:50 UTC] jani@php.net

ext/xmlrpc/libxmlrpc/xml_element.c:729 has fprintf() which dumps the errors to STDERR. 

 [2008-12-09 17:22 UTC] iliaa@php.net

This bug has been fixed in CVS.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
 
Thank you for the report, and for helping us make PHP better.