Hi! > Perhaps the best thing to do is to forbid rebinding a Closure to an > internal class ?
So I have checked into this further, and the good news is that we don't have too many internal classes that declare private/protected properties. Actually, the only one where you could mess stuff up was Exception, and that seems to be recently fixed by adding typechecks for (almost) unrelated unserialize issue. So for now, I do not see a lot of ways to mess things up in core PHP. Of course, third-party extensions may be different. Still, I don't like the idea of rebinding to internal classes too much (in fact, I'm not sure I like the whole rebinding thing as such in general, but that's another story) so here's a pull that forbids this: https://github.com/php/php-src/pull/1253 Please review and comment. -- Stas Malyshev smalys...@gmail.com -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php
