1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72
|
--TEST--
The SensitiveParameter attribute suppresses the single sensitive argument in a function called in eval().
--FILE--
<?php
function test(#[SensitiveParameter] $sensitive)
{
debug_print_backtrace();
var_dump(debug_backtrace());
var_dump((new Exception)->getTrace());
}
eval(<<<'EOT'
test('sensitive');
EOT);
?>
--EXPECTF--
#0 %ssensitive_parameter_eval_call.php(11) : eval()'d code(1): test(Object(SensitiveParameterValue))
#1 %ssensitive_parameter_eval_call.php(11): eval()
array(2) {
[0]=>
array(4) {
["file"]=>
string(%d) "%ssensitive_parameter_eval_call.php(11) : eval()'d code"
["line"]=>
int(1)
["function"]=>
string(4) "test"
["args"]=>
array(1) {
[0]=>
object(SensitiveParameterValue)#%d (0) {
}
}
}
[1]=>
array(3) {
["file"]=>
string(%d) "%ssensitive_parameter_eval_call.php"
["line"]=>
int(11)
["function"]=>
string(4) "eval"
}
}
array(2) {
[0]=>
array(4) {
["file"]=>
string(%d) "%ssensitive_parameter_eval_call.php(11) : eval()'d code"
["line"]=>
int(1)
["function"]=>
string(4) "test"
["args"]=>
array(1) {
[0]=>
object(SensitiveParameterValue)#%d (0) {
}
}
}
[1]=>
array(3) {
["file"]=>
string(%d) "%ssensitive_parameter_eval_call.php"
["line"]=>
int(11)
["function"]=>
string(4) "eval"
}
}
|