mirror of
https://github.com/php/php-src.git
synced 2026-03-28 02:02:32 +01:00
5cbdd5f6de
As is, whenever `proc_open()` needs to invoke the shell, cmd.exe is looked up in the usual executable search path. That implies that any cmd.exe which is placed in the current working directory (which is not necessarily what is reported by `getcwd()` for ZTS builds), will be used. This is a known attack vector, and Microsoft recommends to always use the fully qualified path to cmd.exe. To prevent any cmd.exe in the current working directory to be used, but to still allow users to use a drop in replacement for cmd.exe, we search only the `PATH` for cmd.exe (and pass the fully qualified path to `CreateProcessW`), instead of relying on automatic executable search by passing the base name only. To be able to easily test this, we provide a minimalist C file which will be build as test_helper, and used by the new test case. [1] <https://msrc.microsoft.com/blog/2014/04/ms14-019-fixing-a-binary-hijacking-via-cmd-or-bat-file/> Closes GH-17043.
271 lines
12 KiB
Makefile
271 lines
12 KiB
Makefile
# +----------------------------------------------------------------------+
|
|
# | Copyright (c) The PHP Group |
|
|
# +----------------------------------------------------------------------+
|
|
# | This source file is subject to version 3.01 of the PHP license, |
|
|
# | that is bundled with this package in the file LICENSE, and is |
|
|
# | available through the world-wide-web at the following url: |
|
|
# | https://www.php.net/license/3_01.txt |
|
|
# | If you did not receive a copy of the PHP license and are unable to |
|
|
# | obtain it through the world-wide-web, please send a note to |
|
|
# | license@php.net so we can mail you a copy immediately. |
|
|
# +----------------------------------------------------------------------+
|
|
# | Author: Wez Furlong <wez@thebrainroom.com> |
|
|
# +----------------------------------------------------------------------+
|
|
#
|
|
# This is the makefile template for the win32 build
|
|
|
|
CC="$(PHP_CL)"
|
|
LD="$(LINK)"
|
|
MC="$(MC)"
|
|
MT="$(MT)"
|
|
RE2C="$(RE2C)"
|
|
PGOMGR="$(PGOMGR)"
|
|
PHP_BUILD=$(PHP_BUILD)
|
|
|
|
!if "$(PHP_SIMD_SCALE)" == ""
|
|
SIMD_SUFFIX=
|
|
!else
|
|
!if "$(PHP_SIMD_SCALE)" == "SSE2"
|
|
SIMD_SUFFIX=
|
|
!else
|
|
SIMD_SUFFIX=-$(PHP_SIMD_SCALE)
|
|
!endif
|
|
!endif
|
|
|
|
!if "$(PKG_SUFFIX)" != ""
|
|
PKG_SUFFIX_PART=-$(PKG_SUFFIX)
|
|
!endif
|
|
|
|
MCFILE=$(BUILD_DIR)\wsyslog.rc
|
|
BUILD_DIR_DEV_NAME=php-$(PHP_VERSION_STRING)-devel-$(PHP_COMPILER_SHORT)-$(PHP_ARCHITECTURE)$(SIMD_SUFFIX)$(PKG_SUFFIX_PART)
|
|
BUILD_DIR_DEV=$(BUILD_DIR)\$(BUILD_DIR_DEV_NAME)
|
|
|
|
DIST_ZIP_SNAP=php-$(PHP_VERSION_STRING)$(PHP_ZTS_ARCHIVE_POSTFIX)-Win32-$(PHP_COMPILER_SHORT)-$(PHP_ARCHITECTURE)$(SIMD_SUFFIX)$(PKG_SUFFIX_PART).zip
|
|
DIST_ZIP_PECL=pecl-$(PHP_VERSION_STRING)$(PHP_ZTS_ARCHIVE_POSTFIX)-Win32-$(PHP_COMPILER_SHORT)-$(PHP_ARCHITECTURE)$(SIMD_SUFFIX)$(PKG_SUFFIX_PART).zip
|
|
DIST_ZIP_DEV_PACK=php-devel-pack-$(PHP_VERSION_STRING)$(PHP_ZTS_ARCHIVE_POSTFIX)-Win32-$(PHP_COMPILER_SHORT)-$(PHP_ARCHITECTURE)$(SIMD_SUFFIX)$(PKG_SUFFIX_PART).zip
|
|
DIST_ZIP_TEST_PACK=php-test-pack-$(PHP_VERSION_STRING)$(SIMD_SUFFIX)$(PKG_SUFFIX_PART).zip
|
|
DIST_ZIP_DEBUG_PACK=php-debug-pack-$(PHP_VERSION_STRING)$(PHP_ZTS_ARCHIVE_POSTFIX)-Win32-$(PHP_COMPILER_SHORT)-$(PHP_ARCHITECTURE)$(SIMD_SUFFIX)$(PKG_SUFFIX_PART).zip
|
|
|
|
!if "$(DEBUGGER)" == "1"
|
|
DEBUGGER_CMD=devenv
|
|
DEBUGGER_ARGS=/debugexe
|
|
!else
|
|
DEBUGGER_CMD=
|
|
DEBUGGER_ARGS=
|
|
!endif
|
|
|
|
all: generated_files $(EXT_TARGETS) $(PECL_TARGETS) $(SAPI_TARGETS) test_helpers
|
|
|
|
build_dirs: $(BUILD_DIR) $(BUILD_DIRS_SUB) $(BUILD_DIR_DEV)
|
|
|
|
!if $(RE2C) == ""
|
|
generated_files: build_dirs \
|
|
Zend\zend_ini_parser.c Zend\zend_ini_parser.h \
|
|
Zend\zend_language_parser.c \
|
|
sapi\phpdbg\phpdbg_parser.c \
|
|
$(PHPDEF) $(MCFILE)
|
|
!else
|
|
generated_files: build_dirs \
|
|
Zend\zend_ini_parser.c Zend\zend_ini_parser.h \
|
|
Zend\zend_language_parser.c \
|
|
Zend\zend_ini_scanner.c Zend\zend_ini_scanner_defs.h \
|
|
Zend\zend_language_scanner.c Zend\zend_language_scanner_defs.h \
|
|
sapi\phpdbg\phpdbg_parser.c sapi\phpdbg\phpdbg_lexer.c \
|
|
$(PHPDEF) $(MCFILE)
|
|
!endif
|
|
|
|
$(BUILD_DIR)\$(PHPDLL).def: $(PHP_DLL_DEF_SOURCES)
|
|
type $(PHP_DLL_DEF_SOURCES) > $(BUILD_DIR)\$(PHPDLL).def
|
|
|
|
Zend\zend_ini_parser.c Zend\zend_ini_parser.h: Zend\zend_ini_parser.y
|
|
$(BISON) --output=Zend/zend_ini_parser.c -v -d Zend/zend_ini_parser.y
|
|
|
|
Zend\zend_language_parser.c Zend\zend_language_parser.h: Zend\zend_language_parser.y
|
|
$(BISON) --output=Zend/zend_language_parser.c -v -d Zend/zend_language_parser.y
|
|
@if "$(SED)" neq "" $(SED) -i "s,^int zendparse\(.*\),ZEND_API int zendparse\1,g" Zend/zend_language_parser.c
|
|
@if "$(SED)" neq "" $(SED) -i "s,^int zendparse\(.*\),ZEND_API int zendparse\1,g" Zend/zend_language_parser.h
|
|
@if "$(SED)" neq "" $(SED) -i "s,^#ifndef YYTOKENTYPE,#include \"zend.h\"\n#ifndef YYTOKENTYPE,g" Zend/zend_language_parser.h
|
|
|
|
sapi\phpdbg\phpdbg_parser.c sapi\phpdbg\phpdbg_parser.h: sapi\phpdbg\phpdbg_parser.y
|
|
$(BISON) --output=sapi/phpdbg/phpdbg_parser.c -v -d sapi/phpdbg/phpdbg_parser.y
|
|
|
|
!if $(RE2C) != ""
|
|
Zend\zend_ini_scanner.c Zend\zend_ini_scanner_defs.h: Zend\zend_ini_scanner.l
|
|
$(RE2C) $(RE2C_FLAGS) --no-generation-date --case-inverted -cbdFt Zend/zend_ini_scanner_defs.h -oZend/zend_ini_scanner.c Zend/zend_ini_scanner.l
|
|
|
|
Zend\zend_language_scanner.c Zend\zend_language_scanner_defs.h: Zend\zend_language_scanner.l
|
|
$(RE2C) $(RE2C_FLAGS) --no-generation-date --case-inverted -cbdFt Zend/zend_language_scanner_defs.h -oZend/zend_language_scanner.c Zend/zend_language_scanner.l
|
|
|
|
sapi\phpdbg\phpdbg_lexer.c: sapi\phpdbg\phpdbg_lexer.l
|
|
$(RE2C) $(RE2C_FLAGS) --no-generation-date -cbdFo sapi/phpdbg/phpdbg_lexer.c sapi/phpdbg/phpdbg_lexer.l
|
|
!endif
|
|
|
|
!if "$(ZTS)" == "1"
|
|
PHP8_PGD_SUFFIX=ts
|
|
!else
|
|
PHP8_PGD_SUFFIX=
|
|
!endif
|
|
|
|
!if $(PGOMGR) != ""
|
|
PHP8_PGD_OPTION=/PGD:$(PGOPGD_DIR)\php8$(PHP8_PGD_SUFFIX).pgd
|
|
!else
|
|
PHP8_PGD_OPTION=
|
|
!endif
|
|
|
|
PHPDLL_RES=$(BUILD_DIR)\$(PHPDLL).res
|
|
|
|
$(MCFILE): win32\build\wsyslog.mc
|
|
$(MC) -h win32\ -r $(BUILD_DIR)\ -x $(BUILD_DIR)\ win32\build\wsyslog.mc
|
|
|
|
# $(RC) /fo $(MCFILE) $(BUILD_DIR)\wsyslog.rc
|
|
|
|
!if $(MT) == ""
|
|
_VC_MANIFEST_EMBED_EXE=
|
|
_VC_MANIFEST_EMBED_DLL=
|
|
!else
|
|
_VC_MANIFEST_EMBED_EXE= if exist $@.manifest $(MT) -nologo -manifest $@.manifest -outputresource:$@;1
|
|
_VC_MANIFEST_EMBED_DLL= if exist $@.manifest $(MT) -nologo -manifest $@.manifest -outputresource:$@;2
|
|
!endif
|
|
|
|
$(PHPDLL_RES): win32\build\template.rc
|
|
$(RC) /nologo /fo $(PHPDLL_RES) /d FILE_DESCRIPTION="\"PHP Script Interpreter\"" \
|
|
/d FILE_NAME="\"$(PHPDLL)\"" /d PRODUCT_NAME="\"PHP Script Interpreter\"" \
|
|
/I$(BUILD_DIR) /d MC_INCLUDE="\"$(MCFILE)\"" \
|
|
win32\build\template.rc
|
|
|
|
$(BUILD_DIR)\$(PHPDLL): generated_files $(PHPDEF) $(PHP_GLOBAL_OBJS) $(STATIC_EXT_OBJS) $(PHPDLL_RES) $(ASM_OBJS) $(MCFILE)
|
|
@copy win32\build\default.manifest $(BUILD_DIR)\$(PHPDLL).manifest >nul
|
|
# @$(CC) $(PHP_GLOBAL_OBJS) $(STATIC_EXT_OBJS) $(STATIC_EXT_LIBS) $(LIBS) $(PHPDLL_RES) /link /out:$(BUILD_DIR)\$(PHPDLL) $(PHP8_PGD_OPTION) $(PHP_LDFLAGS) $(LDFLAGS) $(STATIC_EXT_LDFLAGS)
|
|
@"$(LINK)" $(PHP_GLOBAL_OBJS_RESP) $(STATIC_EXT_OBJS_RESP) $(STATIC_EXT_LIBS) $(LIBS) $(ASM_OBJS) $(PHPDLL_RES) /out:$(BUILD_DIR)\$(PHPDLL) $(PHP8_PGD_OPTION) $(PHP_LDFLAGS) $(LDFLAGS) $(STATIC_EXT_LDFLAGS)
|
|
-@$(_VC_MANIFEST_EMBED_DLL)
|
|
|
|
$(BUILD_DIR)\$(PHPLIB): $(BUILD_DIR)\$(PHPDLL)
|
|
|
|
$(BUILD_DIR) $(BUILD_DIRS_SUB) $(BUILD_DIR_DEV):
|
|
@echo Recreating build dirs
|
|
@if not exist $(BUILD_DIR) mkdir $(BUILD_DIR)
|
|
@cd $(BUILD_DIR)
|
|
@for %D in ($(BUILD_DIRS_SUB)) do @if not exist %D @mkdir %D > NUL
|
|
@if not exist $(BUILD_DIR_DEV) @mkdir $(BUILD_DIR_DEV) > NUL
|
|
@cd "$(PHP_SRC_DIR)"
|
|
|
|
|
|
clean-sapi:
|
|
@echo Cleaning SAPI
|
|
@for %D in (_x $(EXT_TARGETS)) do @if exist $(BUILD_DIR)\%D @del /F /Q $(BUILD_DIR)\%D > NUL
|
|
@for %D in (_x $(PECL_TARGETS)) do @if exist $(BUILD_DIR)\%D @del /F /Q $(BUILD_DIR)\%D > NUL
|
|
@for %D in (_x $(SAPI_TARGETS)) do @if exist $(BUILD_DIR)\%D @del /F /Q $(BUILD_DIR)\%D > NUL
|
|
-@del /F /Q $(BUILD_DIR)\$(PHPDLL)
|
|
|
|
clean: clean-sapi
|
|
@echo Cleaning distribution build dirs
|
|
@cd $(BUILD_DIR)
|
|
@for %D in (_x $(BUILD_DIRS_SUB)) do @if exist %D @del /F /Q %D\*.* > NUL
|
|
@cd "$(PHP_SRC_DIR)"
|
|
-@del /F /Q $(BUILD_DIR)\*.res $(BUILD_DIR)\*.manifest $(BUILD_DIR)\*.lib $(BUILD_DIR)\*.ilk $(BUILD_DIR)\*.pdb $(BUILD_DIR)\*.exp $(PHPDEF) $(BUILD_DIR)\php-$(PHP_VERSION_STRING)-Win32.zip $(BUILD_DIR)\pecl-$(PHP_VERSION_STRING)-Win32.zip > NUL
|
|
-rd /s /q $(BUILD_DIR)\php-$(PHP_VERSION_STRING)
|
|
|
|
clean-pecl:
|
|
@echo Cleaning PECL targets only
|
|
-rd /s /q $(BUILD_DIR)\pecl
|
|
|
|
clean-all:
|
|
@echo Cleaning standard build dirs
|
|
@cd $(BUILD_DIR)
|
|
@for %D in (_x $(BUILD_DIRS_SUB)) do @if exist %D @rd /s /q %D
|
|
@cd "$(PHP_SRC_DIR)"
|
|
-@del /f /q $(BUILD_DIR)\*.res $(BUILD_DIR)\*.lib $(BUILD_DIR)\*.ilk $(BUILD_DIR)\*.pdb $(BUILD_DIR)\*.exp $(PHPDEF) $(BUILD_DIR)\*.rc $(BUILD_DIR)\*.manifest $(BUILD_DIR)\*.dbg $(BUILD_DIR)\*.bin $(BUILD_DIR)\php*.dll $(BUILD_DIR)\php*.exe > NUL
|
|
|
|
clean-pgo: clean-all
|
|
-rd /s /q $(BUILD_DIR)\php-$(PHP_VERSION_STRING)
|
|
-rd /s /q $(BUILD_DIR)\pecl-$(PHP_VERSION_STRING)
|
|
-rd /s /q $(BUILD_DIR)\php-test-pack-$(PHP_VERSION_STRING)
|
|
-del /f /q $(BUILD_DIR)\$(DIST_ZIP_SNAP)
|
|
-del /f /q $(BUILD_DIR)\$(DIST_ZIP_DEBUG_PACK)
|
|
-del /f /q $(BUILD_DIR)\$(DIST_ZIP_PECL)
|
|
-del /f /q $(BUILD_DIR)\$(DIST_ZIP_TEST_PACK)
|
|
|
|
test_helpers: $(PHP_SRC_DIR)\ext\standard\tests\helpers\bad_cmd.exe
|
|
|
|
!if $(PHP_TEST_INI_PATH) == ""
|
|
test: set-tmp-env
|
|
$(DEBUGGER_CMD) $(DEBUGGER_ARGS) "$(BUILD_DIR)\php.exe" -d open_basedir= -d output_buffering=0 run-tests.php $(TESTS) -p "$(BUILD_DIR)\php.exe"
|
|
|
|
run: set-tmp-env
|
|
$(DEBUGGER_CMD) $(DEBUGGER_ARGS) "$(BUILD_DIR)\php.exe" $(ARGS)
|
|
!else
|
|
test: set-tmp-env
|
|
$(DEBUGGER_CMD) $(DEBUGGER_ARGS) "$(BUILD_DIR)\php.exe" -n -d open_basedir= -d output_buffering=0 -d memory_limit=-1 run-tests.php -p "$(BUILD_DIR)\php.exe" -n -c $(PHP_TEST_INI_PATH) $(TESTS)
|
|
|
|
run: set-tmp-env
|
|
$(DEBUGGER_CMD) $(DEBUGGER_ARGS) "$(BUILD_DIR)\php.exe" -n -c $(PHP_TEST_INI_PATH) $(ARGS)
|
|
!endif
|
|
|
|
build-snap: set-tmp-env generated_files
|
|
@$(MAKE) "$(BUILD_DIR)\$(PHPDLL)"
|
|
-for %T in ($(SAPI_TARGETS)) do $(MAKE) /I /nologo "%T"
|
|
-for %T in ($(EXT_TARGETS)) do $(MAKE) /I /nologo "%T"
|
|
-for %T in ($(PECL_TARGETS)) do $(MAKE) /I /nologo "%T"
|
|
|
|
build-dist: $(BUILD_DIR)\deplister.exe
|
|
-rd /s /q $(BUILD_DIR)\php-$(PHP_VERSION_STRING)
|
|
-rd /s /q $(BUILD_DIR)\pecl-$(PHP_VERSION_STRING)
|
|
-del /f /q $(BUILD_DIR)\$(DIST_ZIP_SNAP)
|
|
-del /f /q $(BUILD_DIR)\$(DIST_ZIP_DEBUG_PACK)
|
|
-del /f /q $(BUILD_DIR)\$(DIST_ZIP_PECL)
|
|
$(PHP_SDK_PHP_CMD) -d date.timezone=UTC -n -dphar.readonly=0 win32/build/mkdist.php "$(PHP_VERSION_STRING)" "$(BUILD_DIR)" "$(PHP_BUILD)" "$(PHPDLL)" "$(SAPI_TARGETS)" "$(EXT_TARGETS) $(PHP_EXTRA_DIST_FILES)" "$(PECL_TARGETS) $(PECL_EXTRA_DIST_FILES)" "$(SNAPSHOT_TEMPLATE)"
|
|
cd $(BUILD_DIR)\php-$(PHP_VERSION_STRING)
|
|
-$(7ZA) a ..\$(DIST_ZIP_SNAP) .
|
|
cd $(BUILD_DIR)\pecl-$(PHP_VERSION_STRING)
|
|
-$(7ZA) a ..\$(DIST_ZIP_PECL) .
|
|
cd $(BUILD_DIR)\php-test-pack-$(PHP_VERSION_STRING)
|
|
-$(7ZA) a ..\$(DIST_ZIP_TEST_PACK) .
|
|
cd $(BUILD_DIR)
|
|
-$(7ZA) a $(DIST_ZIP_DEBUG_PACK) *.pdb
|
|
-$(7ZA) a $(DIST_ZIP_DEV_PACK) $(BUILD_DIR_DEV_NAME)
|
|
cd $(BUILD_DIR)
|
|
|
|
dist: all build-dist
|
|
snap: build-snap build-devel build-dist
|
|
|
|
$(BUILD_DIR)\deplister.exe: win32\build\deplister.c
|
|
$(CC) /nologo /Fo$(BUILD_DIR)\ /Fd$(BUILD_DIR)\ /Fp$(BUILD_DIR)\ /FR$(BUILD_DIR) /Fe$(BUILD_DIR)\deplister.exe win32\build\deplister.c imagehlp.lib
|
|
|
|
install: really-install install-sdk
|
|
|
|
build-lib: build-ext-libs
|
|
@if not exist $(BUILD_DIR_DEV)\lib mkdir $(BUILD_DIR_DEV)\lib >nul
|
|
@copy $(BUILD_DIR)\$(PHPLIB) $(BUILD_DIR_DEV)\lib /y >nul
|
|
|
|
build-devel: build-headers build-lib
|
|
@if not exist $(BUILD_DIR_DEV)\script mkdir $(BUILD_DIR_DEV)\script >nul
|
|
@if not exist $(BUILD_DIR_DEV)\build mkdir $(BUILD_DIR_DEV)\build >nul
|
|
@copy run-tests.php $(BUILD_DIR_DEV)\script\ /y >nul
|
|
@copy build\gen_stub.php $(BUILD_DIR_DEV)\build\ /y >nul
|
|
@copy win32\build\confutils.js $(BUILD_DIR_DEV)\script\ /y >nul
|
|
@copy win32\build\configure.tail $(BUILD_DIR_DEV)\script\ /y >nul
|
|
@copy win32\build\config.w32.phpize.in $(BUILD_DIR_DEV)\script\ /y >nul
|
|
@copy win32\build\Makefile.phpize $(BUILD_DIR_DEV)\script\ /y >nul
|
|
@copy win32\build\phpize.bat $(BUILD_DIR_DEV)\ /y >nul
|
|
@copy win32\build\template.rc $(BUILD_DIR_DEV)\build\ /y >nul
|
|
@copy win32\build\default.manifest $(BUILD_DIR_DEV)\build\ /y >nul
|
|
@copy $(BUILD_DIR)\devel\config.phpize.js $(BUILD_DIR_DEV)\script\ /y >nul
|
|
@copy $(BUILD_DIR)\devel\phpize.js $(BUILD_DIR_DEV)\script\ /y >nul
|
|
@copy $(BUILD_DIR)\devel\ext_deps.js $(BUILD_DIR_DEV)\script\ /y >nul
|
|
|
|
install-sdk: build-devel
|
|
@xcopy /Q /Y /E /I $(BUILD_DIR_DEV)\* $(PHP_PREFIX)\SDK
|
|
|
|
really-install:
|
|
@if not exist $(PHP_PREFIX) mkdir $(PHP_PREFIX)
|
|
@if not exist $(PHP_PREFIX)\ext mkdir $(PHP_PREFIX)\ext
|
|
@echo Installing files under $(PHP_PREFIX)
|
|
@if exist $(BUILD_DIR)\*.exe copy $(BUILD_DIR)\*.exe $(PHP_PREFIX) /y >nul
|
|
@type nul > $(BUILD_DIR)\extension_dlls.txt
|
|
@if exist $(BUILD_DIR)\php_*.dll copy $(BUILD_DIR)\php_*.dll $(PHP_PREFIX)\ext /y >nul & dir /b $(BUILD_DIR)\php_*.dll > $(BUILD_DIR)\extension_dlls.txt
|
|
@xcopy $(BUILD_DIR)\*.dll /exclude:$(BUILD_DIR)\extension_dlls.txt $(PHP_PREFIX) /y >nul
|
|
@echo Registering event source with syslog (requires admin rights)
|
|
@echo It's okay for this step to fail:
|
|
-$(PHP_PREFIX)\php.exe -n -dextension_dir=$(PHP_PREFIX) win32/build/registersyslog.php $(PHP_PREFIX)\$(PHPDLL)
|
|
-regedit /s win32\syslog.reg
|