发自我的 iPad 在 2012-5-21,21:05,Stefan Esser <stefan.es...@sektioneins.de> 写道:
> Hi, > >>> While this has no immediate impact for average PHP users, it basically >>> kills the possibility for an extension like Suhosin to catch all function >>> starts. >> Actually, there is one, use user opcode handler hook the fcall series >> opcodes, that is how I did in taint extension. > > From what I can see your taint extension also does not catch functions called > by call_user_func() or array_map() or or or… I just want to say there is a way in theory , If you want a 100% intercept that you can also use override call_user_function additionally, which is also what I did to mark some function's return value in taint extension. Of course it's a little ugly, but it works :) Thanks > > Regards, > Stefan -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php