发自我的 iPad

在 2012-5-21,21:05,Stefan Esser <stefan.es...@sektioneins.de> 写道:

> Hi,
>
>>> While this has no immediate impact for average PHP users, it basically 
>>> kills the possibility for an extension like Suhosin to catch all function 
>>> starts.
>> Actually, there is one, use user opcode handler hook the fcall series
>> opcodes, that is how I did in taint extension.
>
> From what I can see your taint extension also does not catch functions called 
> by call_user_func() or array_map() or or or…
I just want to say there is a way in theory ,   If you want a 100%
intercept that you can also use override call_user_function
additionally,  which is also what I did to mark some function's return
value in taint extension.  Of course it's a little ugly, but it works
:)

Thanks
>
> Regards,
> Stefan

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to