Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:60627
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.215.42 as permitted sender)
References: <5262BA67-53D2-4D19-9AD6-B1BFDABAC32E@sektioneins.de>
 <-7697815941710803116@unknownmsgid> <73F0282D-6319-47BF-A01A-629A3F905C91@sektioneins.de>
In-Reply-To: <73F0282D-6319-47BF-A01A-629A3F905C91@sektioneins.de>
Mime-Version: 1.0 (1.0)
Date: Mon, 21 May 2012 22:38:09 +0800
Message-ID: <-4539829430761956102@unknownmsgid>
To: Stefan Esser <stefan.esser@sektioneins.de>
Cc: Mailing-List php <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: [PHP-DEV] zend_execute_internal hook missing from PHP 5
From: laruence@gmail.com (Xinchen Hui)

=E5=8F=91=E8=87=AA=E6=88=91=E7=9A=84 iPad

=E5=9C=A8 2012-5-21=EF=BC=8C21:05=EF=BC=8CStefan Esser <stefan.esser@sektio=
neins.de> =E5=86=99=E9=81=93=EF=BC=9A

> Hi,
>
>>> While this has no immediate impact for average PHP users, it basically =
kills the possibility for an extension like Suhosin to catch all function s=
tarts.
>> Actually, there is one, use user opcode handler hook the fcall series
>> opcodes, that is how I did in taint extension.
>
> From what I can see your taint extension also does not catch functions ca=
lled by call_user_func() or array_map() or or or=E2=80=A6
I just want to say there is a way in theory ,   If you want a 100%
intercept that you can also use override call_user_function
additionally,  which is also what I did to mark some function's return
value in taint extension.  Of course it's a little ugly, but it works
:)

Thanks
>
> Regards,
> Stefan