正規表現再入門/introduction-to-regex

2016/11/03 PHPカンファレンス2016

Transcript

1. ɹ!shin1x1 2016//03 PHPΧϯϑΝϨϯε
    ਖ਼نදݱ࠶ೖ໳
2. ৄࡉ
   ਖ਼نදݱ ਖ਼نදݱ
   ٕज़ೖ໳
3. D
   
   .BTBTIJ
   4IJOCBSB
   !TIJOY "HFOEB w
   1)1ͷਖ਼نදݱ
   w
   Ϛονϯά
   w
   όοΫτϥοΫ
   w
   3F%P4
4. 1)1ͷਖ਼نදݱ
5. 1)1ͷਖ਼نදݱ D
   
   .BTBTIJ
   4IJOCBSB
   !TIJOY w
   1$3&

   
   
   
   QSFHܥ
   w
   104*9ਖ਼نදݱ

   
   
   
   FSFHܥʢ1)1
   
   Ͱඇਪ঑ɺ
   Ͱഇࢭʣ
   w
   َं

   
   
   
   NC@FSFHܥ
6. 1)1ͷਖ਼نදݱ D
   
   .BTBTIJ
   4IJOCBSB
   !TIJOY w
   1$3&

   
   
   
   QSFHܥ
   w
   104*9ਖ਼نදݱ

   
   
   
   FSFHܥʢ1)1
   
   Ͱඇਪ঑ɺ
   Ͱഇࢭʣ
   w
   َं

   
   
   
   NC@FSFHܥ
7. ਖ਼نදݱͷओͳར༻༻్ D
   
   .BTBTIJ
   4IJOCBSB
   !TIJOY w
   จࣈྻ͕Ϛον͢Δ͔Ͳ͏͔ͷ൑ผ
   w
   จࣈྻ͔ΒϚονͨ͠Օॴͷऔಘ
   w
   จࣈྻͷϚονͨ͠ՕॴΛஔ׵
   w
   Ϛονͨ͠ՕॴͰจࣈྻΛ෼ׂ
8. ਖ਼نදݱͷओͳར༻༻్ D
   
   .BTBTIJ
   4IJOCBSB
   !TIJOY w
   Ϛον͢Δ͔Ͳ͏͔ͷ൑ผ
   w
   Ϛονͨ͠Օॴͷऔಘ

   
   
   QSFH@NBUDI
   
   QSFH@NBUDI@BMM
   
   QSFH@HSFQ
   w
   Ϛονͨ͠Օॴͷஔ׵

   
   
   QSFH@SFQMBDF
   
   QSFH@pMUFS
   w
   Ϛονͨ͠ՕॴͰจࣈྻΛ෼ׂ

   
   
   QSFH@TQMJU
9. Ϛονϯά
10. Ϛονϯάͷಛ௃ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ਖ਼نදݱ͸ؤுΓ԰
    w
    ࠷ॳʹϚονͨ͠΋ͷ͕༏ઌ
    w
    ඪ४ͷྔࢦఆࢠ͸ཉுΓʢHSFFEZʣ
11. Ϛονϯάͷಛ௃ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ਖ਼نදݱ͸ؤுΓ԰
    w
    ࠷ॳʹϚονͨ͠΋ͷ͕༏ઌ
    w
    ඪ४ͷྔࢦఆࢠ͸ཉுΓʢHSFFEZʣ ࠷௕࠷ࠨϚονϯά
12. ਖ਼نදݱ͸ؤுΓ԰ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    Ϛον͢Δ·ͰऔΓಘΔશͯͷύλʔϯΛࢼߦ

    
    
    
    Ϛον͢Ε͹ऴྃ
    w
    औΓಘΔશͯͷύλʔϯ͕Ϛον͠ͳ͍

    
    
    
    Ϛονࣦഊ
    w
    Ϛονࣦഊͷ৔߹ɺॲཧྔ͕๲େʹͳΔՄೳੑ
13. B aE 
14. B aE  aE ΛͰϚον
15. B aE  
    ͱ
    B
    ͸Ϛον͠ͳ͍
16. B aE  aE
    Λ
    
    ͰϚον όοΫτϥοΫ
17. B aE  
    ͱ
    
    ͸Ϛον͠ͳ͍
18. B aE  จࣈྻΛਐΊͯ
 aE
    Λ
    
    ͰϚον
19. B aE  
    ͱ
    B
    ͸Ϛον͠ͳ͍
20. B aE  จࣈྻΛਐΊΔͱ
 aE
    ͕Ϛον͢Δ΋ͷ͕ແ͍ Ϛονࣦഊ
21. ࠷ॳʹϚονͨ͠΋ͷ͕༏ઌ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    จࣈྻ಺Ͱ࠷΋ࠨʹ͋ΔϚον͕༏ઌ

    
    
    ʢ࠷ॳʹϚονͨ͠Օॴʣ
    w
    ਖ਼نදݱʢબ୒ʣͷฒͼͰ͸ͳ͍
22. 1FO1JOFBQQMF"QQMF1FO
23. 1FO1JOFBQQMF"QQMF1FO ?1FO Ϛον͢Δ
24. 1FO1JOFBQQMF"QQMF1FO 1FO 1FO1JOFBQQMF"QQMF1FO
25. 1FO1JOFBQQMF"QQMF1FO 1FO จࣈྻͷࠨଆͰϚονͨ͠΋ͷ͕༏ઌ
    ʢ্ͷύλʔϯͰऴྃʣ 1FO1JOFBQQMF"QQMF1FO
26. 1FO1JOFBQQMF"QQMF1FO "QQMFc1FO
27. 1FO1JOFBQQMF"QQMF1FO "QQMFc1FO 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO
28. 1FO1JOFBQQMF"QQMF1FO "QQMFc1FO 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO จࣈྻͷࠨଆͰϚονͨ͠΋ͷ͕༏ઌ
29. ඪ४ͷྔࢦఆࢠ͸ཉுΓ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ඪ४ͷྔࢦఆࢠ͸ɺ࠷௕ʹϚον
    w
    σϑΥϧτͰ͸࠷େྔࢦఆࢠͱͯ͠ಈ͘
30. ྔࢦఆࢠ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ௚લͷύλʔϯͷ܁Γฦ͠Λࣔ͢
    w
    
    ɺ
    ɺ
    
    ɺ
    \O
    N^
    w
    B 
    ͳΒʮBʯʮBBCʯʮDBBBBCʯͳͲʹϚον
    
31. 1FO1JOFBQQMF"QQMF1FO 1 O ճҎ্
32. 1FO1JOFBQQMF"QQMF1FO 1 O 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO
33. 1FO1JOFBQQMF"QQMF1FO 1 O ඪ४ͷྔࢦఆࢠ͸࠷௕ͰϚον
34. 1FO1JOFBQQMF"QQMF1FO 1 O ճҎ্
35. 1FO1JOFBQQMF"QQMF1FO 1 O ΋͘͠͸ճ 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO
36. 1FO1JOFBQQMF"QQMF1FO 1 O ΋͘͠͸ճ 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO
37. 1\
    ^O ճҎ্ճҎԼ 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO
38. 1\
    ^O 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO 1FO1JOFBQQMF"QQMF1FO ճҎ্ճҎԼ
39. ྔࢦఆࢠͷϚονϯάύλʔϯ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ࠷େྔࢦఆࢠʢσϑΥϧτʣ
    w
    ࠷খྔࢦఆࢠ
    w
    ઈର࠷େྔࢦఆࢠ
40. ࠷େྔࢦఆࢠ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ྔࢦఆࢠσϑΥϧτͷಈ͖
    w
    
    
    
    
    
    
    \O
    N^
    w
    ࠷௕ʹϚονɺཉுΓͳϚον
41. ࠷খྔࢦఆࢠ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ྔࢦఆࢠʹ
    
    Λ෇͚ͯࢦఆ
    w
    
    ɺ
    ɺ
    ɺ\O
    N^
    w
    ࠷খͷϚονɺ߇͑ΊͳϚον
42. 1FO1JOFBQQMF"QQMF1FO 1 O ࠷௕ͰϚον
43. 1FO1JOFBQQMF"QQMF1FO 1 O ࠷୹ͰϚον
44. GPP
    BOE
    CBS GPP
    ΛϚον͍ͨ͠
45. ࠷େྔࢦఆࢠ GPP
    BOE
    CBS  
46. <?>  
    Ҏ֎ͷ܁Γฦ͠ GPP
    BOE
    CBS
47.   ࠷খྔࢦఆࢠ GPP
    BOE
    CBS
48. ࠷େྔࢦఆࢠͱ࠷খྔࢦఆࢠ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ࠷େྔࢦఆࢠ
    
    ࠷௕Ұக͔Βࢼߦ͍ͯ͘͠
    w
    ࠷খྔࢦఆࢠ
    
    ࠷୹Ұக͔Βࢼߦ͍ͯ͘͠
    w
    Ϛον͠ͳ͍৔߹
    
    ͲͪΒ΋ಉ͡ࢼߦΛߦ͏
49. ઈର࠷େྔࢦఆࢠ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ྔࢦఆࢠʹ
    
    Λ෇͚ͯࢦఆ
    w
    
    ɺ
    ɺ
    ɺ\O
    N^
    w
    ڧཉͳϚονɺఘΊͳ͍Ϛον
50. 1FO1JOFBQQMF"QQMF1FO 1 O Ϛονࣦഊ
51. όοΫτϥοΫ
52. όοΫτϥοΫ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    Ϛον͕ࣦഊͨ͠৔߹ʹ

    
    
    લͷਖ਼نදݱʹ໭ΓɺผͷϚονΛߦ͏
    w
    ਖ਼͍͠ղΛಘΔ·ͰՄೳͳ૊Έ߹ΘͤΛ

    
    
    ޮ཰తʹࢼ͍ͯ͘͠ https://ja.wikipedia.org/wiki/όοΫτϥοΩϯά
53. 1FO1JOFBQQMF"QQMF1FO 1 O Ϛον͢Δ
54. 1FO1JOFBQQMF"QQMF1FO 1 O Ϛον͢Δ
55. 1FO1JOFBQQMF"QQMF1FO 1 O O
    ͱ
    ߦ຤
    ͳͷͰ
    Ϛον͠ͳ͍
56. 1FO1JOFBQQMF"QQMF1FO 1 O จࣈ୹ͯ͘͠Ϛον όοΫτϥοΫ
57. 1FO1JOFBQQMF"QQMF1FO 1 O Ϛον੒ޭ
58. 1FO1JOFBQQMF"QQMF1FO 1 O Ϛον͢Δ
59. 1FO1JOFBQQMF"QQMF1FO 1 O Ϛον͢Δ
    Ϛονͨ͠ൣғΛΞτϛοΫʹѻ͏
60. 1FO1JOFBQQMF"QQMF1FO 1 O O
    ͱ
    ߦ຤
    ͳͷͰ
    Ϛον͠ͳ͍
61. 1FO1JOFBQQMF"QQMF1FO 1 O 
    ͰϚονͨ͠Օॴͷ࠶୳ࠪ͸ߦΘͣɺ
    ਖ਼نදݱΛ
    1
    ͔ΒϚον͠௚͢
62. 1FO1JOFBQQMF"QQMF1FO 1 O Ϛον͢Δ
    Ϛονͨ͠ൣғΛΞτϛοΫʹѻ͏
63. 1FO1JOFBQQMF"QQMF1FO 1 O O
    ͱ
    ߦ຤
    ͳͷͰ
    Ϛον͠ͳ͍
64. 1FO1JOFBQQMF"QQMF1FO 1 O 
    ͰϚονͨ͠Օॴͷ࠶୳ࠪ͸ߦΘͣɺ
    ਖ਼نදݱΛ
    1
    ͔ΒϚον͠௚͢
65. 1FO1JOFBQQMF"QQMF1FO 1 O Ϛον͢Δ
    Ϛονͨ͠ൣғΛΞτϛοΫʹѻ͏
66. 1FO1JOFBQQMF"QQMF1FO 1 O O
    ͱ
    ߦ຤
    ͳͷͰ
    Ϛον͠ͳ͍
67. 1FO1JOFBQQMF"QQMF1FO 1 O Ϛονࣦഊ
68. ઈର࠷େྔࢦఆࢠ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    Ұ౓Ϛονϯάͨ͠ൣғΛΞτϛοΫʹѻ͍ɺ

    
    
    όοΫτϥοΫͰख์͞ͳ͍
    w
    ΞτϛοΫάϧʔϓͰ΋ಉ༷ͷޮՌ

    
    
     
    
    Ͱ΋ಉ༷ͷޮՌ
    w
    όοΫτϥοΫൃੜ਺Λ཈͑Δ
69. SFHVMBS
    FYQSFTTJPOT
     D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY https://regex101.com/
71. όοΫτϥοΫʹΑΔ
    %P4
72. http://stackstatus.net/post/147710624694/outage-postmortem-july-20-2016
73. w
    4UBDL
    0WFSqPX
    Ͱ
    
    ෼ؒΞΫηεෆೳ
    w
    จࣈྻલޙͷۭനΛ࡟আ͢Δਖ਼نදݱ
    w
    ?<aTaVD> c<aTaVD> 
    w
     
    ͷۭന
    
    ຤ඌ͸ۭനҎ֎
74. ݕূ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    QSFH@SFQMBDF
    
    1)1
    
    
    
    w
    ୯७Խͯ͠ɺaT 
    ͱ
    aT 
    Ͱݕূ
    w
    /
    ݸͷۭന
    
    `B`
    ʹରͯ͠ॲཧ
75. /
    TQBDFT
    
    B 1)1
     1)1
      NT NT   NT NT    NT NT    NT  NT QSFH@SFQMBDF aT 
76. /
    TQBDFT
    
    B 1)1
     1)1
      NT NT   NT NT   NT NT    NT
 aT
    ൺ
      NT
    aT
    ൺ
     QSFH@SFQMBDF aT 
77. ରԠࡦ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ઈର࠷େྔࢦఆࢠͰόοΫτϥοΫΛ཈੍
    w
    จࣈྻ௕ΛόϦσʔγϣϯͰ੍ݶ
    w
    ਖ਼نදݱΛ࢖Θͳ͍

    
    
    
    4UBDL
    0WFSqPX
    ͰͷରԠ

    
    
    
    จࣈྻؔ਺Ͱஔ׵͑
78. 3F%P4
79. 3F%P4 D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ਖ਼نදݱΛѱ༻ͨ͠
    %P4
    w
    ೥͔Β໰୊ఏى͞Ε͍ͯͨ
    w
    Ϛον͠ͳ͍ύλʔϯͰ߈ܸ https://www.checkmarx.com/wp-content/uploads/2015/03/ReDoS-Attacks.pdf
80. https://www.checkmarx.com/wp-content/uploads/2015/03/ReDoS-Attacks.pdf
81. &WJM
    3FHFY
    1BUUFSOT D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    B
    w
    <B[";>
    w
    BcBB
    w
    BcB
    w
     B \Y^
    c
    GPS
    Y
    
    
82. BBBBBBBBBBBBBBBBBBB9  B 
83.  TUFQT ࢀߟ յ໓తͳόοΫτϥοΫ  B  BBBBBBBBBBBBBBBBBBB9
84. &WJM
    3FHFY
    1BUUFSOT D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    Θ͔ͣ
    
    จࣈͷจࣈྻͰ΋

    
    
    ૊Έ߹Θͤരൃ͕ى͜Δ
    w
    ྔࢦఆࢠͷೖΕࢠɺબ୒ͱྔࢦఆࢠͷೖΕࢠ
85. 1)1Ͱ࣮ߦ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY preg_match('/(a+)+$/', 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaX'); 1)1
     1)1
     QSFH@NBUDI NT NT ଎͍ʂʂʂ
86. όοΫτϥοΫ੍ݶ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ઃఆʹΑΔόοΫτϥοΫ੍ݶ

    
    
    QDSFCBDLUSBDL@MJNJUʢσϑΥϧτ͸
      ʣ
    w
    ্ݶʹୡ͢ΔͱΤϥʔͰऴྃ
    w
    QSFH@NBUDI
    ͷ໭Γ஋͕
    GBMTF

    
    
    
    ΤϥʔΛࣔ͢
    w
    QSFH@MBTU@FSSPS
    ͰΤϥʔίʔυऔಘ
87. 1)1Ͱ࣮ߦ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY <?php
 preg_match('/(a+)+$/', 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaX', $m);
 
 $error = preg_last_error();
 if ($error === PREG_BACKTRACK_LIMIT_ERROR) {
 echo 'backtrack limit error', PHP_EOL;
 } else if ($error > 0) {
 echo 'other error', PHP_EOL;
 } $ php redos.php backtrack limit error
88. 1)1Ͱ࣮ߦʢ੍ݶ֎͠ʣ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY ini_set('pcre.backtrack_limit', 10000000000); preg_match('/(a+)+$/', 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaX'); 1)1
     1)1
     QSFH@NBUDI  NT  NT ͕͔͔࣌ؒΔ
89. $47ͷύʔε D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ਖ਼نදݱͰ࣮૷
    w
    1P$
    ͳ
    $47
    Λύʔε͢Δͱ

    
    
    4FHNFOUBUJPO
    'BVMUʢ1)1
    ʣ
    w
    HPPECZDTW
    Ͱॻ͖௚ͯ͠ରԠ
90. ·ͱΊ
91. ·ͱΊ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    ϚονϯάͷྲྀΕ
    w
    ύϑΥʔϚϯε΁ͷӨڹ
    w
    ਖ਼نදݱΛ͋͑ͯ࢖Θͳ͍બ୒ࢶ
92. ࢀߟ D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY w
    4UBDL&YDIBOHF͕߈ܸ͞Εͨ3F%P4ͷޮՌ
    c
    ZPIHBLJT
    CMPH

    
    
    IUUQTCMPHPIHBLJOFUTUBDLFYDIBOHFSFEPTBUUBDL
    w
    3F%P4ͷճආ
    c
    ZPIHBLJT
    CMPH

    
    
    IUUQTCMPHPIHBLJOFUBWPJEJOHSFEPT
93. D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY !TIJOY !TIJOY D
    
    .BTBTIJ
    4IJOCBSB
    !TIJOY