Re: zend_execute_internal hook missing from PHP 5
| From: | Xinchen Hui | Date: | Mon, 21 May 2012 14:38:09 +0000 |
| Subject: | Re: zend_execute_internal hook missing from PHP 5 | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-60627@lists.php.net to get a copy of this message | ||
发自我的 iPad
在 2012-5-21,21:05,Stefan Esser <stefan.esser@sektioneins.de> 写道:
> Hi,
>
>>> While this has no immediate impact for average PHP users, it basically kills the
>>> possibility for an extension like Suhosin to catch all function starts.
>> Actually, there is one, use user opcode handler hook the fcall series
>> opcodes, that is how I did in taint extension.
>
> From what I can see your taint extension also does not catch functions called by
> call_user_func() or array_map() or or or…
I just want to say there is a way in theory , If you want a 100%
intercept that you can also use override call_user_function
additionally, which is also what I did to mark some function's return
value in taint extension. Of course it's a little ugly, but it works
:)
Thanks
>
> Regards,
> Stefan